last executing test programs: 21.512309779s ago: executing program 4 (id=3040): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) 16.544085591s ago: executing program 2 (id=3049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5aa6, &(0x7f00000028c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80011, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x10004a0, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 15.666786093s ago: executing program 1 (id=3052): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) 14.900073924s ago: executing program 3 (id=3053): syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) 14.604576306s ago: executing program 1 (id=3054): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') syz_usb_connect(0x0, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b010203010902"], 0x0) fchdir(r2) mount$binder(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x810, 0x0) 14.574543961s ago: executing program 2 (id=3055): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x891d, 0x0) 14.368836161s ago: executing program 3 (id=3056): socket$netlink(0x10, 0x3, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x108) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) listen(0xffffffffffffffff, 0x19a8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13.232772974s ago: executing program 3 (id=3061): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x130, 0x0, 0x2c8, 0x230, 0x130, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x40}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x52, 0x1}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) set_mempolicy(0x3, 0x0, 0x467d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x0, 0x24}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={0x0, 0x30}) 12.084177738s ago: executing program 3 (id=3062): msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000180)=""/81) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) 12.079706875s ago: executing program 4 (id=3063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x1e, 0x1, 0x0) timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x2000, 0x0) 12.052876141s ago: executing program 1 (id=3064): rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) 10.536049957s ago: executing program 1 (id=3065): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x80) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) lseek(r4, 0x1000, 0x1) 10.534750082s ago: executing program 4 (id=3066): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 10.260086502s ago: executing program 3 (id=3067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5aa6, &(0x7f00000028c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80011, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x10004a0, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 10.197985108s ago: executing program 4 (id=3068): prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)=""/4104, 0x1008}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.844262722s ago: executing program 5 (id=3070): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9.471153801s ago: executing program 5 (id=3071): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040600) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xbd) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) 9.108198032s ago: executing program 5 (id=3072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 8.886872526s ago: executing program 3 (id=3073): socket$netlink(0x10, 0x3, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x108) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) listen(0xffffffffffffffff, 0x19a8) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0x190}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.666798383s ago: executing program 0 (id=3074): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.353126367s ago: executing program 5 (id=3075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)='aE', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000640)="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", 0x801}], 0x1, &(0x7f00000021c0)=ANY=[], 0x2b0}}], 0x2, 0x40) 8.052172873s ago: executing program 5 (id=3076): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') syz_usb_connect(0x0, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b010203010902"], 0x0) fchdir(r2) mount$binder(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x810, 0x0) 8.051856886s ago: executing program 4 (id=3077): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4050) 8.008898074s ago: executing program 0 (id=3078): syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x2, 0x3, 0xfffffff9, 0x9, 0x15, "a294e7003e805a9d1b78d681c420000700"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"45707fe6c13ec0bd03e5ecc69c764fabe1f326e479445fcb5b205f8c3b622124e794bd8e155f4d904619803fd30c7c202046abd5cd2a26aeb32d246533b18dbb112bba54737fa3db4899cfbf40d3f0c487e58766cf9c7b78842142fb94c1a1c94a4b98b0cf1fed922cdbea0b164200d9f958ecd17c75d4b852a384e41367b0298b005bb13c7050e0342de230db20f9a86fe5fff6fff420f03ec7bb88747480857ed08bd7b1c7d178945f1af284d8ca636101edf9c287491e9a33df027ba595b273a8ed5aa6e64d7d3b218b76dc3566398b63e3a8dd3de57079ca6118e08a919f343ead86112d5dea53d5318814f9ddf14081758874653d15a71d0a4b7b18910a03e474208e31ca08e010c28aaa46ecc7c466cb8a06ee6047ca4ae798dc67f6e612afb9aca11097fec86fd5f12ffc6d43e70d749ed8962f2c9d7e88c49cad8b6af5ffca7d38eecafe276f318fdc229937052dee824a11519c054b9716a45703baef71e935632522ac184812313296a6599384899e8015ca5812cd608882ed02e8bc602bb3fb28b7e2bf2128e9fbe97a1e27e074586c6ebb0449ae67c56a96a0b0fcddadb770e57ef7377fed2191d519f222f8a8ce060cbeaa0428c835884f62fca487cd834ad600a5f68c28840878f9f519238abac8ab71c985bd0cdfb5bb1448cb8bb34a59ae512f2deee1f404e0d0c603c615a09be57ef4b94005ee0ef906239d56fa9f310b1be21098ac02db6302c4950496fdbc249d8ffd7cd19e7e26464e712c3184182b57546ae65b77ce55edeae4ee690a0db16b5c26977d36a3369c58ee48588f0ba502f4b584ccfe2e0f60b861930f24db34307ccfb6bf8139b0f8dea88413afc00bcf5582f211348df402e4ae1556627ac3f07dcc77d44d9454ba8eed51139ffdcea61172920c3494ff0d222e6836f8de22d66b10e3875b9b89a48c4ae134e7d81049039d186ea8995b5a289584437c54eb5d03197a7b81e2339f633dbba878eef49eeb85ee34df7789295c5491584af81f8f53487b713becb9a285f674d4c72b188ba6f767ede8ffae64842ecb82b33e799e90f7e977556884664e978e9dc7686c5d1253d4328ac7d95c67258a4fbc267a29b515f09a27a87015756c825f3ce309a2d8b089f2aed4e560d2b154d40ec1fe9cd01ecbfe3b025ff4222891757b376a9cbf325820912f8027ddd963d1ccf549baa912c0cf4817bf1a639dd5b39e56a63d108d914169c72577bc45730e1a9e20529a9f6a8aee9c83da159467c2f77212c1b9eda16804490198a29c61efec362dfa448ffa56a8e120690222f8e56ee6a820feda4173637e34c1aab938637ff82aad4f4f352f12ff9c164a9a7ebaa7a17797764b2bacae18898c33e8c759298eb94db0b8e676b6cc7971e6bd80445472af014f7470656d2566d7ca656acd4135e61dd4545f2d587ea05e6161db82f298bd71d610e50a092b817789473f5da3d32716613a1b09bbda29d501eff30e9993271f20423e74a2a0a1662f99f73c27e855d32796bc68a769e92e2b5d659f2ebd132dc9bfffbf031cd225f7e83e321160b65e55ff38462e8a36a4c533d30302d8102bcb41bec2abab1984b06733d370c2f3363a8d5e30c08f0e74e9e876f72745f574bc80fbe25943896ebe04fe72cfa9de6ee8506ad70c3be65a86eaf4f1fb913821afc85cf985b841d8ca96321dc1a31724f0b599c2ad147713692ecde7238ac87f2f426169bc060281c460f0e1346a92f464ee1f794002d3187a84fc6757f735cbbf42c41a0bb5d99ca04ef3792276491a1232fbcc00f7caf321ac9951a6517eeabaedc207c6b4d9c8f4e5a458d7def6c08a508b66ed3ccae5b544f0b84c9871129c4f6efa804404852993483d06b9227a689cb37a605b43265ca46ebe674073fbca8f83a56856cd6d5cf6e018dea75ca325b2365527888321bc8686069a7dbdc8b22a32c20e07e79eca4f83902a7d02c641bbdbe66a1bc18ff132c770b67964cce6c3800c05a5f0e0253ebd85b825e1c692887e36e4b938ac97507979aa39459ea04070fb078c63c334eabbc1e6444ce1336f98a41045d2a576a049d07368e027b182f6038ad38c3359dd3de78544dc621f9acd4f0540e117162c22e753462c4be2065724c3429b75b4db74e89d84f2795aba986dfc2b1fdcbe98346260cb9748f454a65f4b35b874ac5910184ad0fece39f01cd50663ca2462729f4cfa4e756c0cb6fc397f77c8fdcd7c9e194705e522ca83c625c7fab6ea43aad89db0b6ba71eed901209fc7330e8bc671aff44e5e48502abddc2409b52ece3779d3b19c1832b30abd3f81a9ff0c68fce42ad9c1941f03ce33ed9d37dce98dbe5e1d23519d22087f307e870c82f028e96fef580c4c8c62a32c2776eed31c3d8bddeb43cc53ab8592478253b6de3095d6828bd960989b9ed9879f863d3128f708eebe99f7701823f232444f2ac9830da973b993679e1bb510b2b6939847751cd0d4642d7bb899e21a7c26938fae9f1b149ff19032b5149b4cde635fa99c2160a8cd6f7ad6a5a242b6b31e253e04ea72f1b6f60677ef87fd8e175373c24822a3794134a3124f2e109a59d9db08e48f845254d4b68c42da5b2b2f3c3c528f4281cae4f5117cd0a4658e9ed1dba09656393623fb13fad1cda4eaa602176aba55ba251817017338193512318390fed2a914739050b1a85ca3833f71aa7c4c8fb45158b530c24bd4316f72c9b432a1bd067cd6fc64d646cc06bfbbf990dacb32de9496a8d730cc07171ce548957d435b2f121ea4bb939f70785ebce86f0ad6d89bb71cdc1d0897284ac5d09b95a76ddbfc787a98193b9cbdb1d3ffd89d5f10b9bbb5d41a2a33f73385df351db85c83786db3da558d890f414b21615160dfcb3b46f0958d492bd6d056550c48e5f0c26dd10c1c6ab3b4c6b7d911db5ac463f8e37a8bbcc2295fe79fa109f491a126fff6a1ffe161c7787f746fc8ddea5f19bd20fabca63aa81ae2d725e0b250f27fd7c8431ef6b2827904f62b5ffefc9bfdfb7d55ef6d9883c6ab43c5214b4af237d0df67afcb3d62e80041720952e837e65a22351cb3bf8a9e271568597f79f12144495d31ef72fc36a86e9eb4359790aee88c00b05473ac1a90b8bbe0c0db99570dd9bda506469c258e145841d9c26c9f32722a678cf25657acd124831cfc6a1809e341989b46b6df9db72b18f8be39cd845669bad697bc6bd9bec531047d5fa9e201e1a525c372367f8495280c5d93a62f9fb6f890c59959dcbac7de68e3a417befcd11c722067aac4726e2fdcabce2321ea64d9fbda04ab25dedbcb441faaef2d7bf024fe765591fd0354b2bcaa243a6d741272d4458e433118568944047eeec85d3b0f5b98cbdad0f77371be15af9c1bf928eceb652c581fa638e2131c22d901e6f047a5649ffab5324054389ebeb47ff283e0f0ffe074382e520c632bc440cbeaa68770877516e101709489bcb643b187cb2715e58479074cd32d53077331453fc537d34f87a7ec5e5da686c2f304116394e2bd1e480f5da74a6b725d526b71dc869df8dda3feb44f5463f4c678b6a8be34994ecb0902b3cf269de1adf0da8b8ad340b63a6d0237df7e812b94572adbc196784dfcf33e3e97a17b71a2dad7015fb2d59d4c5838ca551984c7d8ee7bf05ab3edf89029ffd20e373fcb72523bff1e63df721416a068d7b2daa3e17fbba8e831c53e29a94dc483e289cf7406a7b2da28ecc761cf9d847d39b7daa5e34a2a0e4dd19ca5c4a1ab274c7fb9a3057109ec0644579f1af210f8b8133dd87f1abd7c71ac09cfc38699573b35e6d9c5bdaa21f16442b87860e9a7f62ff7c2458160c6a64dc218a258ee06e222e47b3b8e0cf5a5c2d9985f886f32abd129ee056fae9b2e32d0571532eab27fa8f079f9c3e378125f2020064850cfb19c53aa44ad8da6f83a5d827bcb131da9d4dde6e8bd0005ef240c4a02b17051845c35725bd8668c3b27b46355febbf2bf3e5dc5ec650499669cbfe921815396d87b3ede410d492cc73ec7f3a40409eed9358131f1f75e31f24e34af6fc7b6fe2730fd043fd69269d939772e7fef5f2e08b657038a61bc8a8d5688b16029d15aacefe6631a364769d3b9b261bbac584c5ba29b7fbda146fc2ac0f1044f89141a57292b87c7275c6ec6011e5b4b40d1ebc4fc32e7c7ac96aea170225e60c189ed09f8df0a143232bd93c6a9d0fba9783f303b3375b10dde9cd501e68df3734f6278a0389418578834e1912806f07e2fa715bfed4bc707559ee3d4966f51cb652b06b747ae2d79b56759035f01953e76a2dc14c817eb0f97332e68c1d3995dcd84b2329194299944cb2c050991c409fe447ed764a9a3a1182bc30f773b0b415c1898460150c9fec8987c24ba07f87f299d014bd89049b3e9d0c9bf1c6bf159545e52cdfcf9e799b593cb411a3db12396dc9c09ddeddfcb6165a99074e531b7ceddaf344baf2e65225203da537cf09fc073d61d92c13a1c95f93e70050b99850272d0227a89faadfbfae923501b0321984b59229b7dc3c646bf4e381534fcb31783c568deb1a36f95c873df99ccab25446c77d96de6b2c70d5baa5b27786e8027b2f70be117bfdc1b2c6d72a6ab2f9e9a9ce231443d0621448e78393142f90177e7bb52976c668583c64beca45af5ea23a060ec910c6cd89ba7cb9cbbd7627ee56dd2d4d60d994cd63e81f181642b8864afa797aecc22358eea8d059d681a333caa15a8c56918523d465e94668d6ef5f3dcc089bffb13ad76dbf79c44c14f494fda3a55f61c3ed659e20a274297360576fd3230b3e4b7e79ea5b7d78c1def22741a38d17b39c646579d8d5df4cae4eca98d1c0df9371532fe89efc2c375fe433699ee14fcd4cf84495d380663aa10a374dba851536b8159deee491ed2c0e2b920bf7c5627db54562f1ff9c56795245be220391d6b681360fa221efc91faf57d80f15b5e3d881cfa30e1145dbde325c6cc8254938a9eb906d846ec5f76f63443b8f2c50db90b6563900a8f97947c82caec3ce4ee3a5e19fc3324376e4b041b7ed82d9940f7a63f9f962f6d746cb781dbbe16a90649881a77e8ac40677e74d87beadc50df2bc624aa6a707cb50c8ee749db526903f38d706df0201bf503b759d320fa940838ec74c914d0de569ed9ffc6eb2cee026ce22cd50a884bccfadbf503892930c4c4dd7efcb3caaac1695027ed66f3f29c7a1edade721bac0599ff0c400542d31d5dc235ddca7bada9cabcf427e038e5c6a54687b955131c547155036401c7a9a44b3b0437edaa30635b84e37996bcc8594307a6b6bbd8b06daa994cf238925485cd9ace35b3fdfd72788199b6f0570eed2078a4b2f36f511a68566927389ca5ce1c854cb500c2693d7a7917cc8f1215608b7dd2ab22de43a5cc91309a4db2a4c29fdeceaec4a604d13af72a60ea50070626aa6d4cfa418b95edda37a88db5218a1e096436a3551ee712ae137217cd0e941c31e86839e3a9aef8058f5f3196a5006f5a13f3343c0cbf50f9a27c7481e62614a4c51071df6c9a2e0058e534be00c510052e03148c79cc31256359b330c0de91e6130ce741d0472a838463987b9cb80693701825d0af139207f4ff1dc5cb92187170acb8c217f26b1a0544021a8ddce3e31de19b603a5eeca75a7a6234f75d890322a2dca481bc814ba65893cf8e4492094dfe534936a4378e85f680559f4ebce2cccdbea2c0c1e776c4cf50df6b0bc2effcee0f2c76b5c478f9dd02e0eef9399ddf2ba449e03cfd5d33388b0b683c3ce0d301ca1ba4ab", 0x1000}}, 0x1006) 6.413875999s ago: executing program 2 (id=3079): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x5) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x16c, "fa02c80a3a1e38dd031dd7504fe580963900"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700"}) r2 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r2, 0x400000) finit_module(r2, 0x0, 0x0) 5.577221219s ago: executing program 4 (id=3080): syz_open_dev$loop(0x0, 0x7, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) getrusage(0x0, &(0x7f0000000080)) 5.296463444s ago: executing program 2 (id=3081): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 5.09009503s ago: executing program 1 (id=3082): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) r2 = getpid() r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r2, 0x0, 0x7fff, 'syz1\x00', 0x0}) 4.059129305s ago: executing program 2 (id=3083): creat(&(0x7f0000000040)='./bus\x00', 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020033797a30000000000800410073697700140033"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4.058583173s ago: executing program 5 (id=3084): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) 2.932073676s ago: executing program 2 (id=3085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5aa6, &(0x7f00000028c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x80011, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x10004a0, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 2.873807546s ago: executing program 0 (id=3086): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) listen(r4, 0x80000001) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.815402351s ago: executing program 1 (id=3087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 1.632870886s ago: executing program 0 (id=3088): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x5) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x16c, "fa02c80a3a1e38dd031dd7504fe580963900"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700"}) r2 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r2, 0x400000) 1.16577664s ago: executing program 0 (id=3089): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) 0s ago: executing program 0 (id=3090): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) writev(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)='D', 0x1}], 0x2) kernel console output (not intermixed with test programs): riptors, different from the interface descriptor's value: 1 [ 623.714380][T14864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.733310][ T10] usb 2-1: USB disconnect, device number 63 [ 623.790358][ T5871] Bluetooth: hci5: Malformed LE Event: 0x0d [ 623.798014][ T10] usblp0: removed [ 623.810797][ T5920] usb 5-1: string descriptor 0 read error: -71 [ 623.915905][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 623.933885][ T5920] usb-storage 5-1:0.168: USB Mass Storage device detected [ 623.993427][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.995855][ T5920] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 624.037973][ T9] usb 3-1: Product: syz [ 624.054421][ T9] usb 3-1: Manufacturer: syz [ 624.086729][ T5920] usb 5-1: USB disconnect, device number 32 [ 624.111295][ T9] usb 3-1: SerialNumber: syz [ 624.166068][ T9] usb 3-1: config 0 descriptor?? [ 624.604497][ T9] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 624.630479][ T9] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 625.808840][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 625.942299][T14877] loop3: detected capacity change from 0 to 32768 [ 625.966714][T14877] btrfs: Deprecated parameter 'usebackuproot' [ 625.994293][T14877] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 626.049155][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 626.067502][ T10] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 626.088156][T14877] btrfs: Deprecated parameter 'usebackuproot' [ 626.113062][ T10] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 626.136560][T14877] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 626.212526][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 626.227266][T14877] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2590 (14877) [ 626.243813][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.287173][ T10] usb 2-1: Product: syz [ 626.298061][ T10] usb 2-1: Manufacturer: syz [ 626.315993][ T10] usb 2-1: SerialNumber: syz [ 626.436589][T14877] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 626.491113][ T5920] usb 3-1: USB disconnect, device number 50 [ 626.556437][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'. [ 626.557623][T14877] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 626.660787][T14877] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 626.764913][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 626.765090][T14877] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 626.841973][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 626.842347][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 626.878421][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 626.897512][ T10] usb 2-1: USB disconnect, device number 64 [ 626.929705][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 626.929803][T14877] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 627.035961][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 627.036091][T14877] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 627.111385][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 627.112424][T14877] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 627.176223][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 627.176358][T14877] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 627.223137][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 627.223258][T14877] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 627.272301][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 627.272650][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 627.286313][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 627.296559][T14877] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 627.388786][T14877] BTRFS error (device loop3): open_ctree failed: -12 [ 628.017431][ T5959] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 628.977571][T14933] NILFS (loop3): couldn't find nilfs on the device [ 629.201118][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 629.244388][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 629.966967][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 630.330098][ T5959] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 630.466311][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 630.576335][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.762352][ T10] usb 4-1: config 0 has no interfaces? [ 630.844078][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 631.632238][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.045647][ T5959] usb 6-1: can't read configurations, error -61 [ 632.097502][ T10] usb 4-1: config 0 descriptor?? [ 632.175318][ T5959] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 632.296860][ T10] usb 4-1: USB disconnect, device number 37 [ 633.544762][T14980] vivid-000: disconnect [ 633.566931][ T6029] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 633.959829][ T6029] usb 2-1: unable to get BOS descriptor or descriptor too short [ 634.058925][T14976] vivid-000: reconnect [ 634.131429][ T6029] usb 2-1: not running at top speed; connect to a high speed hub [ 634.163102][ T6029] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 634.222490][ T6029] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 634.273825][ T6029] usb 2-1: config 4 has no interface number 0 [ 634.303863][T14962] loop4: detected capacity change from 0 to 32768 [ 634.322774][ T6029] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 634.352574][ T6029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.363393][T14962] btrfs: Deprecated parameter 'usebackuproot' [ 634.375137][ T6029] usb 2-1: Product: syz [ 634.379302][ T6029] usb 2-1: Manufacturer: syz [ 634.385910][T14962] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 634.396232][ T6029] usb 2-1: SerialNumber: syz [ 634.419183][T14962] btrfs: Deprecated parameter 'usebackuproot' [ 634.437711][T14962] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 634.480126][T14962] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2613 (14962) [ 634.510182][T14962] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 634.531785][T14962] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 634.561181][T14962] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 634.575487][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 634.592097][T14962] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 634.627360][ T6029] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 634.638173][T14962] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 634.649676][ T6029] usb 2-1: No streaming interface found for terminal 6. [ 634.662791][T14962] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 634.676114][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 634.678332][ T6029] usb 2-1: USB disconnect, device number 65 [ 634.701692][T14962] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 634.756425][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 634.763784][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.834254][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 634.841878][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.866468][T14962] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 634.942785][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 635.014426][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 635.039866][ T10] usb 1-1: can't read configurations, error -61 [ 635.044869][T14962] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 635.145741][T14962] BTRFS info (device loop4): rebuilding free space tree [ 635.152805][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 635.191022][T14962] BTRFS info (device loop4): setting nodatasum [ 635.224641][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 635.245910][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 635.269882][T14962] BTRFS info (device loop4): enabling ssd optimizations [ 635.279703][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.315919][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 635.333359][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.350362][T14962] BTRFS info (device loop4): enabling free space tree [ 635.374546][ T9] usb 4-1: Product: syz [ 635.392738][ T9] usb 4-1: Manufacturer: syz [ 635.415406][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 635.429238][ T9] usb 4-1: SerialNumber: syz [ 635.429692][T14962] BTRFS info (device loop4): force clearing of disk cache [ 635.451990][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 635.470747][T14962] BTRFS info (device loop4): doing ref verification [ 635.486690][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 635.495663][T14962] BTRFS info (device loop4): trying to use backup root at mount time [ 635.518685][ T9] usb 4-1: config 0 descriptor?? [ 635.553999][ T10] usb 1-1: can't read configurations, error -61 [ 635.640492][ T10] usb usb1-port1: attempt power cycle [ 635.650712][ T5862] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 635.786156][ T9] appledisplay: Apple Cinema Display connected [ 636.021381][ T9] usb 4-1: USB disconnect, device number 38 [ 636.021450][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 636.057093][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 636.094099][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 636.115858][ T9] appledisplay: Apple Cinema Display disconnected [ 636.130821][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 636.190576][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 636.219537][ T10] usb 1-1: can't read configurations, error -61 [ 636.393286][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 636.466274][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 636.509960][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 636.599090][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 636.743564][ T10] usb 1-1: can't read configurations, error -61 [ 636.795212][ T10] usb usb1-port1: unable to enumerate USB device [ 637.914496][ T5872] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 638.091043][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 638.094178][ T5872] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 638.094207][ T5872] usb 1-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 638.097297][ T5872] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 638.097329][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.097354][ T5872] usb 1-1: Product: syz [ 638.097373][ T5872] usb 1-1: Manufacturer: syz [ 638.097393][ T5872] usb 1-1: SerialNumber: syz [ 638.305885][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 638.903063][ T5872] usb 1-1: USB disconnect, device number 45 [ 641.798016][T15075] tipc: Enabling of bearer rejected, failed to enable media [ 642.121363][ T5920] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 642.282782][T15062] loop4: detected capacity change from 0 to 32768 [ 642.307410][T15062] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2642 (15062) [ 642.309534][T15060] loop0: detected capacity change from 0 to 32768 [ 642.337115][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 642.355418][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 642.365235][T15060] btrfs: Deprecated parameter 'usebackuproot' [ 642.373176][T15062] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 642.381782][ T5920] usb 3-1: config 7 has an invalid descriptor of length 130, skipping remainder of the config [ 642.423639][T15062] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 642.426703][T15060] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 642.460856][T15060] btrfs: Deprecated parameter 'usebackuproot' [ 642.467424][ T5920] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 642.479626][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.500177][T15060] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 642.510388][ T5920] usb 3-1: Product: syz [ 642.514584][ T5920] usb 3-1: Manufacturer: syz [ 642.519177][ T5920] usb 3-1: SerialNumber: syz [ 642.531616][T15060] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 7cae27a6-011e-404c-a11c-5d720c35f101 [ 642.545968][T15060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2641 (15060) [ 642.670229][T15060] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 642.740283][T15062] BTRFS info (device loop4): rebuilding free space tree [ 642.757575][T15060] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 642.780138][ T5920] usb 3-1: Cannot retrieve CPort count: -71 [ 642.810022][ T5920] usb 3-1: Cannot retrieve CPort count: -71 [ 642.816152][T15060] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 642.827614][ T5920] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 642.859672][T15062] BTRFS info (device loop4): enabling ssd optimizations [ 642.864555][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 642.866772][T15060] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 642.898602][T15062] BTRFS info (device loop4): turning on sync discard [ 642.912097][ T5920] usb 3-1: USB disconnect, device number 51 [ 642.934518][T15062] BTRFS info (device loop4): enabling free space tree [ 642.979022][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 642.980060][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 642.984583][T15062] BTRFS info (device loop4): force clearing of disk cache [ 643.038826][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 643.039165][T15060] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 643.080263][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 643.080372][T15060] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 643.106628][T15062] BTRFS info (device loop4): enabling auto defrag [ 643.131343][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 643.131958][T15060] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 643.161044][T15062] BTRFS info (device loop4): max_inline set to 0 [ 643.196012][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 643.196132][T15060] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 643.330666][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 643.330803][T15060] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 643.384215][ T5862] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 643.394497][ T5872] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 643.455497][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 643.455857][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 643.536582][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 643.550858][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 643.598088][ T5872] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 643.616845][T15060] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 643.620951][T15060] BTRFS error (device loop0): open_ctree failed: -12 [ 643.641839][ T5872] usb 6-1: config 0 has no interface number 0 [ 643.690345][ T5872] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 643.734777][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.814549][ T5872] usb 6-1: Product: syz [ 643.898874][T15130] vivid-006: disconnect [ 644.388308][T15120] vivid-006: reconnect [ 644.534375][ T5872] usb 6-1: Manufacturer: syz [ 644.543168][ T5872] usb 6-1: SerialNumber: syz [ 644.630437][ T5872] usb 6-1: config 0 descriptor?? [ 644.691722][ T5872] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 644.744321][ T5872] usb 6-1: selecting invalid altsetting 1 [ 645.215749][ T5872] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 645.263235][ T5872] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 645.273607][T12778] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 645.509928][ T5872] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 645.599108][ T5872] usb 6-1: media controller created [ 645.632279][T12778] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.666917][T15144] loop3: detected capacity change from 0 to 1024 [ 645.673814][T12778] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.684238][T12778] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 645.735373][T12778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 645.762833][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.788459][T12778] usb 3-1: SerialNumber: syz [ 646.001859][ T5872] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 646.042637][T12778] usb 3-1: 0:2 : does not exist [ 646.078461][ T5872] zl10353_read_register: readreg error (reg=127, ret==-71) [ 646.106724][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 646.131667][ T5872] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 646.220135][T12778] usb 3-1: USB disconnect, device number 52 [ 646.411397][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.465285][ T5872] usb 6-1: USB disconnect, device number 56 [ 646.808300][ T5872] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 646.914191][T15166] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2668'. [ 646.981474][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 646.993687][ T5959] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 647.041238][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.850805][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 647.867418][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.875509][ T5872] usb 6-1: Product: syz [ 647.884598][ T5872] usb 6-1: Manufacturer: syz [ 647.889501][ T5872] usb 6-1: SerialNumber: syz [ 647.913112][ T5872] usb 6-1: config 0 descriptor?? [ 647.922753][ T5872] usb 6-1: Found UVC 0.00 device syz (046d:0721) [ 647.940397][ T5872] usb 6-1: No valid video chain found. [ 648.039605][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 648.087555][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 648.198992][T12778] usb 6-1: USB disconnect, device number 57 [ 648.334461][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 648.348258][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 648.359544][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 648.371251][ T5959] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.387247][ T5959] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 648.396278][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.609606][T15182] vivid-004: disconnect [ 648.848979][ T5959] usb 4-1: Product: syz [ 648.998325][T15175] vivid-004: reconnect [ 649.226821][ T5959] usb 4-1: Manufacturer: syz [ 649.231792][ T5959] usb 4-1: SerialNumber: syz [ 649.255221][T15188] loop5: detected capacity change from 0 to 1024 [ 649.264348][ T5959] usb 4-1: config 0 descriptor?? [ 649.413298][ T5959] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 649.495196][ C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 649.593489][T12778] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 650.051643][ T5959] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 650.086079][ T5991] hfsplus: b-tree write err: -5, ino 4 [ 650.106586][T12778] usb 5-1: Using ep0 maxpacket: 32 [ 650.121750][T12778] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.170199][T12778] usb 5-1: config 0 has no interface number 0 [ 650.177585][ T5959] usb 4-1: USB disconnect, device number 39 [ 650.211348][T12778] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 650.276839][T12778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.309302][T12778] usb 5-1: Product: syz [ 650.333525][T12778] usb 5-1: Manufacturer: syz [ 650.345902][T12778] usb 5-1: SerialNumber: syz [ 650.461634][T12778] usb 5-1: config 0 descriptor?? [ 650.518335][T12778] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 650.565128][T12778] usb 5-1: selecting invalid altsetting 1 [ 650.599398][T12778] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 650.623472][T12778] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 650.645399][T12778] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 650.678764][T12778] usb 5-1: media controller created [ 650.771921][ T5872] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 650.822195][T12778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.971365][ T5872] usb 6-1: config 0 has no interfaces? [ 651.007902][ T5872] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 651.099023][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.111624][ T5872] usb 6-1: Product: syz [ 651.127741][ T5872] usb 6-1: Manufacturer: syz [ 651.159537][ T5872] usb 6-1: SerialNumber: syz [ 651.228699][ T5872] usb 6-1: config 0 descriptor?? [ 651.488387][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2678'. [ 651.557994][T15202] veth0_macvtap: left promiscuous mode [ 651.606593][ T5962] usb 6-1: USB disconnect, device number 58 [ 651.756102][T15190] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 651.788542][T12778] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 651.805142][T12778] zl10353_read_register: readreg error (reg=127, ret==-71) [ 651.829527][T12778] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 651.885434][ T5872] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 651.933700][T12778] usb 5-1: USB disconnect, device number 33 [ 651.943541][T15222] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2684'. [ 652.067965][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 652.083144][ T5872] usb 1-1: config 1 has no interface number 0 [ 652.094727][ T5872] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.111913][ T5872] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 652.122752][ T5872] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 652.265388][ T5959] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 652.374078][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.398188][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.409528][ T5872] usb 1-1: Product: syz [ 652.413694][ T5872] usb 1-1: Manufacturer: syz [ 652.418864][ T5872] usb 1-1: SerialNumber: syz [ 652.485783][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 652.514720][ T5959] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 652.522722][T15233] loop5: detected capacity change from 0 to 1024 [ 652.554147][ T5959] usb 4-1: config 0 has no interface number 0 [ 652.579683][ T5959] usb 4-1: config 0 interface 89 has no altsetting 0 [ 652.616888][ T5959] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 652.624473][T15235] tipc: Enabled bearer , priority 0 [ 652.641536][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.652262][ T1099] hfsplus: b-tree write err: -5, ino 4 [ 652.667398][T15235] tipc: Resetting bearer [ 652.678605][ T5959] usb 4-1: Product: syz [ 652.684132][ T5959] usb 4-1: Manufacturer: syz [ 652.693497][ T5959] usb 4-1: SerialNumber: syz [ 652.721884][T15234] tipc: Disabling bearer [ 652.730725][ T5959] usb 4-1: config 0 descriptor?? [ 652.764011][ T5959] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 652.773940][ T5920] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 652.783802][ T5959] em28xx 4-1:0.89: Video interface 89 found: bulk [ 653.085592][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 653.096522][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 653.107412][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 653.121229][ T5962] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 653.130713][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 653.152477][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 653.175236][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.192691][ T5920] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 653.208743][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.217034][ T5920] usb 2-1: Product: syz [ 653.221621][ T5920] usb 2-1: Manufacturer: syz [ 653.234834][ T5920] usb 2-1: SerialNumber: syz [ 653.249174][ T5920] usb 2-1: config 0 descriptor?? [ 653.285030][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 653.286268][ T5872] cdc_ncm 1-1:1.1: bind() failure [ 653.304116][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.339970][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.366617][ T5962] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 653.384644][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.402659][ T5959] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 653.411690][ T5962] usb 6-1: config 0 descriptor?? [ 653.472456][ T5920] appledisplay: Apple Cinema Display connected [ 653.492136][ T5872] usb 1-1: USB disconnect, device number 46 [ 653.678607][T12778] usb 2-1: USB disconnect, device number 66 [ 653.678713][ C1] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 653.702143][T12778] appledisplay: Apple Cinema Display disconnected [ 653.738954][T15252] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2698'. [ 653.829186][ T5959] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 653.846759][ T5959] em28xx 4-1:0.89: board has no eeprom [ 653.862970][ T5962] glorious 0003:258A:0033.000B: unknown main item tag 0x1 [ 653.873202][ T5962] glorious 0003:258A:0033.000B: unknown main item tag 0x2 [ 653.892048][ T5962] glorious 0003:258A:0033.000B: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.5-1/input0 [ 653.956730][T15246] loop4: detected capacity change from 0 to 32768 [ 653.976558][T15246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2695 (15246) [ 654.034764][T15246] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 654.061486][ T5962] usb 6-1: USB disconnect, device number 59 [ 654.104941][T15246] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 654.126405][ T5959] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 654.147879][ T5959] em28xx 4-1:0.89: analog set to bulk mode. [ 654.159714][ T5920] em28xx 4-1:0.89: Registering V4L2 extension [ 654.179439][ T5959] usb 4-1: USB disconnect, device number 40 [ 654.229560][ T5959] em28xx 4-1:0.89: Disconnecting em28xx [ 654.325943][ T5920] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 654.333084][ T5920] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 654.342244][ T5920] em28xx 4-1:0.89: No AC97 audio processor [ 654.353535][ T5920] usb 4-1: Decoder not found [ 654.362905][T15246] BTRFS info (device loop4): enabling ssd optimizations [ 654.373914][ T5920] em28xx 4-1:0.89: failed to create media graph [ 654.380379][ T5920] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 654.388153][T15246] BTRFS info (device loop4): enabling free space tree [ 654.395107][ T5920] em28xx 4-1:0.89: Registering snapshot button... [ 654.396701][ T5920] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input16 [ 654.424897][T12778] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 654.439489][ T5920] em28xx 4-1:0.89: Remote control support is not available for this card. [ 654.448264][ T5959] em28xx 4-1:0.89: Closing input extension [ 654.454161][ T5959] em28xx 4-1:0.89: Deregistering snapshot button [ 654.634433][T12778] usb 1-1: Using ep0 maxpacket: 32 [ 654.676541][T12778] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.735548][T12778] usb 1-1: config 0 has no interface number 0 [ 654.753061][ T5862] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 654.778514][T12778] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 654.799315][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.833348][T12778] usb 1-1: Product: syz [ 654.838599][T15279] loop3: detected capacity change from 0 to 1024 [ 654.859407][T12778] usb 1-1: Manufacturer: syz [ 654.876088][ T5959] em28xx 4-1:0.89: Freeing device [ 654.877894][T12778] usb 1-1: SerialNumber: syz [ 655.009197][T12778] usb 1-1: config 0 descriptor?? [ 655.057574][T12778] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 655.121581][T12778] usb 1-1: selecting invalid altsetting 1 [ 655.154700][T12778] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 655.194805][T12778] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 655.236870][T12778] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 655.241937][ T5991] hfsplus: b-tree write err: -5, ino 4 [ 655.293012][T12778] usb 1-1: media controller created [ 655.478300][T12778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.358220][T15259] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 656.505564][T12778] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 656.512567][T12778] zl10353_read_register: readreg error (reg=127, ret==-71) [ 656.553553][T12778] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 656.657904][T15306] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2711'. [ 656.684049][T12778] usb 1-1: USB disconnect, device number 47 [ 657.218265][T15319] loop3: detected capacity change from 0 to 1024 [ 657.352936][T12778] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 657.388512][ T61] hfsplus: b-tree write err: -5, ino 4 [ 657.513160][ T5920] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 657.545326][T12778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.567490][T12778] usb 1-1: not running at top speed; connect to a high speed hub [ 657.612308][T12778] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 657.654697][T12778] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 657.732569][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 658.464821][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.493137][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 658.504174][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.522862][ T5920] usb 2-1: Product: syz [ 658.527119][ T5920] usb 2-1: Manufacturer: syz [ 658.531707][ T5920] usb 2-1: SerialNumber: syz [ 658.532092][T12778] usb 1-1: config 4 has no interface number 0 [ 658.587000][T12778] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 658.596631][T12778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.625207][T12778] usb 1-1: Product: syz [ 658.633780][T12778] usb 1-1: Manufacturer: syz [ 658.638574][T12778] usb 1-1: SerialNumber: syz [ 658.647441][ T5920] usb 2-1: config 0 descriptor?? [ 658.875656][T12778] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 658.886945][T12778] usb 1-1: No streaming interface found for terminal 6. [ 658.887706][ T5920] usb 2-1: Found UVC 0.00 device syz (046d:0721) [ 658.912903][T12778] usb 1-1: USB disconnect, device number 48 [ 658.916681][ T5920] usb 2-1: No valid video chain found. [ 658.972069][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 659.112911][ T5920] usb 2-1: USB disconnect, device number 67 [ 659.145349][ T9] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 659.161839][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.192679][ T9] usb 5-1: config 0 has no interface number 0 [ 659.200799][ T9] usb 5-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.232038][ T9] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 659.251420][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.265657][ T9] usb 5-1: Product: syz [ 659.269821][ T9] usb 5-1: Manufacturer: syz [ 659.275516][ T9] usb 5-1: SerialNumber: syz [ 659.283938][ T9] usb 5-1: config 0 descriptor?? [ 660.573619][T15339] loop0: detected capacity change from 0 to 32768 [ 660.587033][T15343] fuse: Unknown parameter 'group_id00000000000000000000' [ 660.602420][T15339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2724 (15339) [ 660.648075][T15339] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 660.658281][T15339] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 660.835386][T15339] BTRFS info (device loop0): enabling ssd optimizations [ 660.844873][T15339] BTRFS info (device loop0): enabling free space tree [ 660.900793][T15365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2732'. [ 660.950068][ T5859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 661.520953][ T5920] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 661.701505][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 661.721754][ T5962] usb 5-1: USB disconnect, device number 34 [ 661.761633][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 661.826608][T12778] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 661.833718][ T5920] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 661.856794][ T5920] usb 2-1: config 0 has no interface number 0 [ 661.880016][ T5920] usb 2-1: config 0 interface 89 has no altsetting 0 [ 661.906064][ T9] usb 3-1: config 0 has no interfaces? [ 661.915596][ T5920] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 661.929703][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 661.937228][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.950375][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.964148][ T5920] usb 2-1: Product: syz [ 661.968309][ T5920] usb 2-1: Manufacturer: syz [ 661.969914][ T9] usb 3-1: Product: syz [ 662.150158][ T9] usb 3-1: Manufacturer: syz [ 662.160285][T12778] usb 1-1: Using ep0 maxpacket: 16 [ 662.165515][ T9] usb 3-1: SerialNumber: syz [ 662.172044][ T5920] usb 2-1: SerialNumber: syz [ 662.173143][T12778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.202814][T12778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.219460][ T9] usb 3-1: config 0 descriptor?? [ 662.226135][ T5920] usb 2-1: config 0 descriptor?? [ 662.262376][T12778] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 662.268482][ T5920] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 662.309116][T12778] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 662.328261][T12778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.374537][T12778] usb 1-1: config 0 descriptor?? [ 662.570920][ T5920] em28xx 2-1:0.89: Video interface 89 found: bulk [ 663.028312][ T5920] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 664.499224][ T5920] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 664.516816][ T5920] em28xx 2-1:0.89: board has no eeprom [ 664.752331][T12778] usbhid 1-1:0.0: can't add hid device: -71 [ 664.758345][T12778] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 664.778973][ T5920] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 664.819303][ T5920] em28xx 2-1:0.89: analog set to bulk mode. [ 664.845201][ T5962] em28xx 2-1:0.89: Registering V4L2 extension [ 664.878157][ T5920] usb 2-1: USB disconnect, device number 68 [ 664.898889][T12778] usb 1-1: USB disconnect, device number 49 [ 665.062370][ T5920] em28xx 2-1:0.89: Disconnecting em28xx [ 665.382101][ T5962] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 665.392279][ T5962] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 665.418238][ T5962] em28xx 2-1:0.89: No AC97 audio processor [ 665.479334][ T5962] usb 2-1: Decoder not found [ 665.498631][ T5962] em28xx 2-1:0.89: failed to create media graph [ 665.504891][ T5962] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 665.549733][ T5962] em28xx 2-1:0.89: Registering snapshot button... [ 665.632006][ T5962] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input17 [ 665.718680][ T5962] em28xx 2-1:0.89: Remote control support is not available for this card. [ 665.794398][ T5920] em28xx 2-1:0.89: Closing input extension [ 665.859623][ T5920] em28xx 2-1:0.89: Deregistering snapshot button [ 665.939404][T15409] fuse: Unknown parameter 'group_id00000000000000000000' [ 666.005076][ T5920] em28xx 2-1:0.89: Freeing device [ 666.398060][T15411] loop0: detected capacity change from 0 to 32768 [ 666.457848][T15411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2745 (15411) [ 666.483508][T15411] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.494016][T15411] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 666.691167][T15397] loop3: detected capacity change from 0 to 32768 [ 666.749708][T15397] BTRFS warning: excessive commit interval 2147483647, use with care [ 666.784229][T15411] BTRFS info (device loop0): enabling ssd optimizations [ 666.791648][T15411] BTRFS info (device loop0): enabling free space tree [ 666.818498][T15397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2739 (15397) [ 666.891709][ T5859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.998124][T15397] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 667.031297][ T5872] usb 3-1: USB disconnect, device number 53 [ 667.087958][T15397] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 667.143305][T15397] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 667.432940][T15397] BTRFS info (device loop3): rebuilding free space tree [ 667.447857][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 667.542512][T15397] BTRFS info (device loop3): disabling free space tree [ 667.558463][ T5872] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 667.576114][T15397] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 667.604934][T15397] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 667.649245][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 667.673151][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 667.683333][T15397] BTRFS info (device loop3): setting nodatasum [ 667.705165][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.717769][T15397] BTRFS info (device loop3): enabling ssd optimizations [ 667.739080][T15397] BTRFS info (device loop3): turning off barriers [ 667.747096][ T9] usb 2-1: Product: syz [ 667.763357][ T9] usb 2-1: Manufacturer: syz [ 667.771289][T15397] BTRFS info (device loop3): turning on flush-on-commit [ 667.795579][ T9] usb 2-1: SerialNumber: syz [ 667.811444][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.824070][T15397] BTRFS info (device loop3): turning on sync discard [ 667.850500][T15397] BTRFS info (device loop3): enabling disk space caching [ 667.852907][ T5872] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 667.868767][ T9] usb 2-1: config 0 descriptor?? [ 667.880281][T15397] BTRFS info (device loop3): force clearing of disk cache [ 667.881366][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 667.901830][ T9] usb 2-1: Detected FT-X [ 667.906435][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.912155][T15397] BTRFS info (device loop3): doing ref verification [ 667.923434][T15397] BTRFS info (device loop3): max_inline set to 0 [ 667.934365][ T5872] usb 3-1: config 0 descriptor?? [ 668.003393][ T5861] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 668.087807][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 668.162051][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 668.178867][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 668.229395][ T5872] usb 3-1: USB disconnect, device number 54 [ 668.570575][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 668.762794][ T9] usb 2-1: USB disconnect, device number 69 [ 668.768861][ T5872] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 668.985491][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.646742][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 669.843367][T15489] loop0: detected capacity change from 0 to 32768 [ 669.871574][T15489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2761 (15489) [ 669.931665][ T5872] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.014009][ T9] ftdi_sio 2-1:0.0: device disconnected [ 670.026324][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.045127][T15489] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.056150][T15489] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 670.099089][ T5872] usb 3-1: config 0 descriptor?? [ 670.446293][T15489] BTRFS info (device loop0): enabling ssd optimizations [ 670.453291][T15489] BTRFS info (device loop0): enabling free space tree [ 670.555383][ T5872] usb 3-1: can't set config #0, error -71 [ 670.572611][ T5859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.626859][ T5872] usb 3-1: USB disconnect, device number 55 [ 670.996169][T12778] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 671.633016][T15523] vivid-000: disconnect [ 672.011296][T15517] vivid-000: reconnect [ 672.105427][T12778] usb 2-1: config 0 has no interfaces? [ 672.249735][T12778] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 672.267745][T12778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.336427][T12778] usb 2-1: Product: syz [ 672.346590][T12778] usb 2-1: Manufacturer: syz [ 672.358546][T12778] usb 2-1: SerialNumber: syz [ 672.374332][T12778] usb 2-1: config 0 descriptor?? [ 675.176346][ T1206] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 675.336344][ T1206] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 675.367961][ T1206] usb 4-1: config 0 has no interface number 0 [ 675.393696][ T5962] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 675.401971][ T1206] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 675.421950][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.492787][ T1206] usb 4-1: config 0 descriptor?? [ 675.573946][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 675.582069][ T5962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 675.604963][ T5962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 675.710549][ T5920] usb 2-1: USB disconnect, device number 70 [ 675.716666][ T5962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.977937][T15551] loop0: detected capacity change from 0 to 32768 [ 675.986132][T15551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2776 (15551) [ 676.004348][ T5962] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.022587][ T5962] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 676.032278][T15551] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 676.042797][T15551] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 676.052640][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.066829][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.101375][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.114466][ T1206] usb 4-1: string descriptor 0 read error: -71 [ 676.122334][ T1206] usb-storage 4-1:0.168: USB Mass Storage device detected [ 676.160391][ T1206] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 676.198625][T15551] BTRFS info (device loop0): enabling ssd optimizations [ 676.205772][T15551] BTRFS info (device loop0): enabling free space tree [ 676.270623][ T5859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 676.289616][ T1206] usb 4-1: USB disconnect, device number 41 [ 676.305264][ T5962] usb 6-1: GET_CAPABILITIES returned 0 [ 676.318557][ T5962] usbtmc 6-1:16.0: can't read capabilities [ 676.359152][T15572] syzkaller0: entered promiscuous mode [ 676.399190][T15572] syzkaller0: entered allmulticast mode [ 676.435948][T12778] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 676.540603][T15577] fuse: Bad value for 'user_id' [ 676.735370][T15577] fuse: Bad value for 'user_id' [ 676.745457][T12778] usb 3-1: Using ep0 maxpacket: 16 [ 676.968672][T15585] vivid-000: disconnect [ 677.405939][T15575] vivid-000: reconnect [ 677.492903][T12778] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 677.501958][T12778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.556990][T12778] usb 3-1: Product: syz [ 677.561771][T12778] usb 3-1: Manufacturer: syz [ 677.569314][T12778] usb 3-1: SerialNumber: syz [ 677.585955][T12778] usb 3-1: config 0 descriptor?? [ 677.609172][T12778] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 677.626174][T12778] usb 3-1: Detected FT-X [ 677.813478][T12778] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 678.263572][ T5920] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 678.394693][T12778] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 678.432877][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 678.502497][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.517332][T15606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.719138][ T5962] usb 3-1: USB disconnect, device number 56 [ 678.848066][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.035917][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 679.098256][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.204455][T12778] usb 6-1: USB disconnect, device number 60 [ 679.374785][ T5920] usb 4-1: config 0 descriptor?? [ 679.399099][ T5962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 679.420097][ T5920] hub 4-1:0.0: USB hub found [ 679.694566][ T5920] hub 4-1:0.0: 2 ports detected [ 679.708613][ T5962] ftdi_sio 3-1:0.0: device disconnected [ 680.937260][ T5962] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 681.021897][ T5920] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 681.037738][ T5920] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 681.072640][ T5920] usbhid 4-1:0.0: can't add hid device: -32 [ 681.108907][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 681.118392][ T5871] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 681.148695][ T5962] usb 5-1: config 0 has no interfaces? [ 681.161632][ T5962] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 681.171433][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.179502][ T5962] usb 5-1: Product: syz [ 681.184204][ T5962] usb 5-1: Manufacturer: syz [ 681.188862][ T5962] usb 5-1: SerialNumber: syz [ 681.200569][ T5962] usb 5-1: config 0 descriptor?? [ 682.894881][T15637] fuse: Bad value for 'user_id' [ 682.920306][T15637] fuse: Bad value for 'user_id' [ 682.930458][ T5920] usb 4-1: USB disconnect, device number 42 [ 683.170693][ T5872] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 683.330580][ T5872] usb 1-1: device descriptor read/64, error -71 [ 683.849597][ T5872] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 683.934518][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.940865][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.165984][ T5872] usb 1-1: device descriptor read/64, error -71 [ 684.830077][ T5872] usb usb1-port1: attempt power cycle [ 685.189209][ T5872] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 685.354184][ T5872] usb 1-1: device descriptor read/8, error -71 [ 685.415295][T15661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.338541][ T5872] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 686.360230][ T5920] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 686.549422][ T5962] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 686.578893][ T5872] usb 1-1: device not accepting address 53, error -71 [ 686.586763][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.613843][ T5959] usb 5-1: USB disconnect, device number 35 [ 686.620072][ T5872] usb usb1-port1: unable to enumerate USB device [ 686.653948][ T5920] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 686.675841][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.692208][ T5920] usb 3-1: config 0 descriptor?? [ 686.979303][T15668] loop0: detected capacity change from 0 to 32768 [ 686.993810][ T5962] usb 6-1: Using ep0 maxpacket: 16 [ 687.000727][T15668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2804 (15668) [ 687.038403][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 687.659811][T15668] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 687.670085][T15668] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 687.704027][ T5962] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 687.714814][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 687.757480][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.768825][ T5920] usb 3-1: USB disconnect, device number 57 [ 687.790977][ T5962] usb 6-1: Product: syz [ 687.795146][ T5962] usb 6-1: Manufacturer: syz [ 687.888217][ T5962] usb 6-1: SerialNumber: syz [ 687.912861][ T5962] usb 6-1: config 0 descriptor?? [ 687.947957][T15668] BTRFS info (device loop0): enabling ssd optimizations [ 687.954956][T15668] BTRFS info (device loop0): enabling free space tree [ 687.972409][ T5962] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 688.011476][ T5859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 688.042908][ T5962] usb 6-1: Detected FT-X [ 688.127335][ T5962] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 688.143892][ T5920] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 688.339884][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.399561][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 688.404249][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 688.442975][T15702] fuse: Bad value for 'user_id' [ 688.467253][T15702] fuse: Bad value for 'user_id' [ 688.472311][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.531410][ T5920] usb 3-1: config 0 descriptor?? [ 688.584194][ T5962] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 688.618171][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 688.648614][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.667019][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.687407][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 688.735094][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.775617][ T9] usb 5-1: config 0 descriptor?? [ 688.778793][ T5962] usb 6-1: USB disconnect, device number 61 [ 688.799145][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 688.805141][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 688.825600][ T9] hub 5-1:0.0: USB hub found [ 688.968940][ T5920] usb 3-1: USB disconnect, device number 58 [ 689.061699][ T9] hub 5-1:0.0: 2 ports detected [ 689.109607][ T5962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 689.144852][ T5962] ftdi_sio 6-1:0.0: device disconnected [ 689.438292][T15715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.316548][ T9] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 690.322939][ T9] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 690.357900][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 690.363885][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 690.793698][T15727] netlink: 'syz.3.2819': attribute type 2 has an invalid length. [ 690.896366][ T5872] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 691.077557][ T5872] usb 2-1: device descriptor read/64, error -71 [ 691.306914][T15732] loop3: detected capacity change from 0 to 32768 [ 691.326094][ T5962] usb 5-1: USB disconnect, device number 36 [ 691.339468][T15732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2821 (15732) [ 692.083635][T15732] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.094837][T15732] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 692.195668][ T5872] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 692.229072][T15732] BTRFS info (device loop3): enabling ssd optimizations [ 692.236137][T15732] BTRFS info (device loop3): enabling free space tree [ 692.454001][ T5861] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.489939][ T5872] usb 2-1: device descriptor read/64, error -71 [ 692.626237][ T5872] usb usb2-port1: attempt power cycle [ 693.025659][ T5872] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 693.346762][ T5872] usb 2-1: device descriptor read/8, error -71 [ 693.427654][ T5962] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 693.718398][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.734772][ T5872] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 694.541820][ T5962] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 694.578856][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.607700][ T5872] usb 2-1: device descriptor read/8, error -71 [ 694.655357][ T5962] usb 6-1: config 0 descriptor?? [ 694.755922][ T5872] usb usb2-port1: unable to enumerate USB device [ 694.926765][ T5962] usbhid 6-1:0.0: can't add hid device: -71 [ 695.117770][ T5962] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 695.194085][ T5962] usb 6-1: USB disconnect, device number 62 [ 695.523691][ T5962] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 695.729936][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.787514][ T5962] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.822736][ T5962] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.875630][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.928368][ T5962] usb 6-1: config 0 descriptor?? [ 696.460680][ T5962] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 697.320928][ C1] usb 6-1: input irq status -75 received [ 697.545443][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 697.601731][ T5962] usb 6-1: USB disconnect, device number 63 [ 697.666585][T15800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 699.802818][T15819] NILFS (loop0): device size too small [ 700.518198][ T5962] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 700.791076][ T5962] usb 4-1: Using ep0 maxpacket: 32 [ 700.809333][ T5962] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 700.860750][ T5962] usb 4-1: config 0 has no interface number 0 [ 700.984337][ T5962] usb 4-1: config 0 interface 89 has no altsetting 0 [ 701.056591][ T5962] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 701.090224][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.149346][ T5962] usb 4-1: Product: syz [ 701.157105][ T5962] usb 4-1: Manufacturer: syz [ 701.185752][ T5962] usb 4-1: SerialNumber: syz [ 701.227773][ T5962] usb 4-1: config 0 descriptor?? [ 701.256297][ T5962] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 701.303495][ T5962] em28xx 4-1:0.89: Video interface 89 found: bulk [ 701.900861][ T5962] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 702.528207][ T5962] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 702.710005][ T5962] em28xx 4-1:0.89: board has no eeprom [ 702.711559][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2850'. [ 702.810228][ T5962] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 702.827694][ T5962] em28xx 4-1:0.89: analog set to bulk mode. [ 702.859128][ T1206] em28xx 4-1:0.89: Registering V4L2 extension [ 702.890439][ T5962] usb 4-1: USB disconnect, device number 43 [ 702.908193][ T5962] em28xx 4-1:0.89: Disconnecting em28xx [ 703.386067][ T1206] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 703.393187][ T1206] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 703.400960][ T1206] em28xx 4-1:0.89: No AC97 audio processor [ 703.421078][ T1206] usb 4-1: Decoder not found [ 703.425677][ T1206] em28xx 4-1:0.89: failed to create media graph [ 703.440140][ T1206] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 703.819966][ T1206] em28xx 4-1:0.89: Registering snapshot button... [ 703.923372][ T1206] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input18 [ 703.940235][T15862] syzkaller0: entered promiscuous mode [ 703.960544][T15862] syzkaller0: entered allmulticast mode [ 704.510560][ T1206] em28xx 4-1:0.89: Remote control support is not available for this card. [ 704.534157][ T5962] em28xx 4-1:0.89: Closing input extension [ 704.582696][ T5962] em28xx 4-1:0.89: Deregistering snapshot button [ 704.707215][ T5962] em28xx 4-1:0.89: Freeing device [ 704.865794][ T6088] udevd[6088]: 'v4l_id /dev/video103' [15875] terminated by signal 33 (Unknown signal 33) [ 705.078874][ T5962] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 705.269010][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 705.309059][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.632522][ T5962] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 705.651973][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.663922][ T5962] usb 4-1: Product: syz [ 705.668096][ T5962] usb 4-1: Manufacturer: syz [ 705.678487][ T5962] usb 4-1: SerialNumber: syz [ 705.689483][ T5962] usb 4-1: config 0 descriptor?? [ 705.721271][ T5962] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 705.923790][T12778] usb 4-1: USB disconnect, device number 44 [ 712.065500][ T5872] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 712.700287][ T5872] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 712.968071][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.105922][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.186727][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 713.260516][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.294760][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.354926][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 713.382722][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.405127][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.474016][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 713.522692][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 713.734874][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 713.867315][T15953] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 714.318938][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.333616][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.437508][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.464511][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.475258][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.492135][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.524184][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.563859][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.603617][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.652661][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.712144][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 714.734765][ T5872] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 714.773980][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 714.805734][ T5872] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 714.826460][ T5872] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 714.868591][ T5872] usb 5-1: Product: syz [ 714.872756][ T5872] usb 5-1: Manufacturer: syz [ 714.934036][ T5872] usb 5-1: SerialNumber: syz [ 714.989809][ T5872] usb 5-1: config 0 descriptor?? [ 715.036251][ T5872] usb 5-1: can't set config #0, error -71 [ 715.070734][ T5872] usb 5-1: USB disconnect, device number 37 [ 715.251052][T15947] loop5: detected capacity change from 0 to 32768 [ 715.276676][T15947] BTRFS warning: excessive commit interval 2147483647, use with care [ 715.304625][T15947] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2882 (15947) [ 715.355001][T15947] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 715.396107][T15947] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 715.410515][T15947] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 715.593757][T15947] BTRFS info (device loop5): rebuilding free space tree [ 715.604053][ T5962] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 715.673679][T15947] BTRFS info (device loop5): disabling free space tree [ 715.703563][T15947] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 715.728889][T15947] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 715.773905][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 715.790529][ T5962] usb 5-1: config 0 has no interfaces? [ 715.808790][ T5962] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 715.812398][T15947] BTRFS info (device loop5): setting nodatasum [ 715.828094][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.848448][T15947] BTRFS info (device loop5): enabling ssd optimizations [ 715.850064][ T5962] usb 5-1: Product: syz [ 715.863841][T15947] BTRFS info (device loop5): turning off barriers [ 715.884546][T15947] BTRFS info (device loop5): turning on flush-on-commit [ 715.892263][T15947] BTRFS info (device loop5): turning on sync discard [ 715.894207][ T5962] usb 5-1: Manufacturer: syz [ 715.913530][T15947] BTRFS info (device loop5): enabling disk space caching [ 715.921631][T15947] BTRFS info (device loop5): force clearing of disk cache [ 715.929700][ T5962] usb 5-1: SerialNumber: syz [ 715.959978][ T5962] usb 5-1: config 0 descriptor?? [ 715.963798][T15947] BTRFS info (device loop5): doing ref verification [ 716.007722][T15947] BTRFS info (device loop5): max_inline set to 0 [ 716.238645][ T5872] usb 5-1: USB disconnect, device number 38 [ 716.321384][ T5858] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 717.602726][ T1206] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 717.904647][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 717.920421][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.971964][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.997632][ T1206] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 718.015879][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.045959][ T1206] usb 3-1: config 0 descriptor?? [ 718.364172][ T5962] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 718.555552][ T5962] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 718.565121][ T1206] glorious 0003:258A:0033.000D: unknown main item tag 0x1 [ 718.615403][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.731876][ T1206] glorious 0003:258A:0033.000D: unknown main item tag 0x2 [ 718.742178][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.765443][ T1206] glorious 0003:258A:0033.000D: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 718.778348][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.794090][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.811307][ T1206] usb 3-1: USB disconnect, device number 59 [ 718.818458][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.931650][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.948531][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 718.958100][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 718.990665][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.006602][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.026370][T16027] syzkaller0: entered promiscuous mode [ 719.032183][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.049718][T16028] fido_id[16028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 719.064398][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.072556][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.087205][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.131479][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.138233][T16027] syzkaller0: entered allmulticast mode [ 719.187156][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.215426][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.375087][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.416865][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.472911][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.519941][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.648968][ T5962] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 719.722121][ T5962] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 719.894891][ T5962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 719.913118][ T5962] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 719.923044][ T5962] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 719.940028][ T5962] usb 5-1: Product: syz [ 719.948161][ T5962] usb 5-1: Manufacturer: syz [ 720.000676][ T5962] usb 5-1: SerialNumber: syz [ 720.089763][ T5962] usb 5-1: config 0 descriptor?? [ 720.114111][ T5962] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 720.548109][ T9] usb 5-1: USB disconnect, device number 39 [ 720.562953][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 720.950893][ T1206] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 721.163036][ T1206] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.211817][ T1206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.272900][ T1206] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 721.324505][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 721.390683][ T1206] usb 2-1: SerialNumber: syz [ 721.669951][ T1206] usb 2-1: cannot find UAC_HEADER [ 721.753638][ T1206] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 721.856698][ T1206] usb 2-1: USB disconnect, device number 75 [ 721.861019][ T5872] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 721.928649][ T6088] udevd[6088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.070347][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 722.171322][ T5872] usb 1-1: config 0 has no interfaces? [ 722.184580][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 722.210752][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.310385][ T5872] usb 1-1: Product: syz [ 722.314600][ T5872] usb 1-1: Manufacturer: syz [ 722.349603][ T5872] usb 1-1: SerialNumber: syz [ 722.381319][ T5872] usb 1-1: config 0 descriptor?? [ 722.614384][ T5872] usb 1-1: USB disconnect, device number 54 [ 723.076391][T16076] Invalid ELF header magic: != ELF [ 723.849762][T16093] fuse: Bad value for 'fd' [ 727.909847][ T6029] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 728.096453][ T6029] usb 6-1: Using ep0 maxpacket: 8 [ 728.116680][ T6029] usb 6-1: config 0 has no interfaces? [ 728.134426][ T6029] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 728.164129][ T6029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.193694][ T6029] usb 6-1: Product: syz [ 728.209097][ T6029] usb 6-1: Manufacturer: syz [ 728.221195][ T6029] usb 6-1: SerialNumber: syz [ 728.247643][ T6029] usb 6-1: config 0 descriptor?? [ 728.581385][ T6029] usb 6-1: USB disconnect, device number 64 [ 729.926442][ T6029] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 730.319251][ T6029] usb 3-1: Using ep0 maxpacket: 8 [ 730.345155][ T6029] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.376136][ T6029] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 730.397163][ T6029] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 730.442756][ T6029] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.442816][ T6029] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 730.442845][ T6029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.666097][ T6029] usb 3-1: GET_CAPABILITIES returned 0 [ 730.666140][ T6029] usbtmc 3-1:16.0: can't read capabilities [ 731.909418][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 732.685945][ T6029] usb 3-1: USB disconnect, device number 60 [ 734.214699][ T5962] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 734.449393][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 734.573492][ T5962] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.684116][T12778] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 734.709773][ T5962] usb 6-1: config 0 has no interfaces? [ 734.792332][ T5962] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 734.933696][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.606134][ T5962] usb 6-1: config 0 descriptor?? [ 736.727198][ T5962] usb 6-1: can't set config #0, error -71 [ 736.753026][T12778] usb 1-1: Using ep0 maxpacket: 8 [ 736.789859][T12778] usb 1-1: device descriptor read/all, error -71 [ 736.871367][ T5962] usb 6-1: USB disconnect, device number 65 [ 737.702483][T12778] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 738.968672][T12778] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 739.030294][T12778] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 739.121958][T12778] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 739.171756][T12778] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.224774][T12778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.252326][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 739.292272][T16218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 739.349725][T12778] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.474171][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 739.524976][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 739.556179][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 739.621842][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 739.671476][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.755738][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.805603][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.872019][T16231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.277928][T16231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.286073][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 740.319927][ T9] usbtmc 5-1:16.0: can't read capabilities [ 740.336711][ T5959] usb 1-1: USB disconnect, device number 56 [ 740.775502][ T5177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 740.779451][T16240] syzkaller0: entered promiscuous mode [ 740.791139][ T5177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 740.799901][T16240] syzkaller0: entered allmulticast mode [ 740.799948][ T5177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 740.812105][T16240] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 740.821079][ T9] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 740.846370][ T5177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 740.856272][ T5177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 741.005530][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.025169][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.038147][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 741.055563][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.090861][ T5959] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 741.272639][ T9] hub 6-1:4.0: USB hub found [ 741.392277][T12778] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 741.690870][T12778] usb 2-1: Using ep0 maxpacket: 32 [ 741.797262][T12778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.850043][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 741.877436][ T9] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 742.012628][T12778] usb 2-1: config 0 has no interfaces? [ 742.117815][T12778] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 742.239419][ T9] usb 6-1: USB disconnect, device number 66 [ 742.247069][T12778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.549328][T12778] usb 2-1: config 0 descriptor?? [ 742.869884][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 742.911929][ T5871] Bluetooth: hci2: command tx timeout [ 742.931426][ T9] usb 5-1: USB disconnect, device number 40 [ 744.266422][T16241] chnl_net:caif_netlink_parms(): no params data found [ 744.380649][T12778] usb 2-1: USB disconnect, device number 76 [ 744.412882][ T5959] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 744.429154][ T5959] usb 4-1: can't read configurations, error -71 [ 745.150816][ T5871] Bluetooth: hci2: command tx timeout [ 745.234563][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.240991][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.712898][ T1206] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 746.565047][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 747.113156][ T1206] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 747.239721][ T5871] Bluetooth: hci2: command tx timeout [ 747.263320][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.273414][ T1206] usb 6-1: Product: syz [ 747.277903][ T1206] usb 6-1: Manufacturer: syz [ 747.287878][ T1206] usb 6-1: SerialNumber: syz [ 747.306958][ T1206] usb 6-1: config 0 descriptor?? [ 747.326547][ T1206] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 747.486807][ T1206] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 747.534128][ T1206] usb 6-1: USB disconnect, device number 67 [ 749.311659][T16241] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.316802][ T5871] Bluetooth: hci2: command tx timeout [ 749.390126][T16241] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.469887][T16241] bridge_slave_0: entered allmulticast mode [ 749.529551][T16241] bridge_slave_0: entered promiscuous mode [ 749.623321][T16241] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.661411][T16241] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.694763][T16241] bridge_slave_1: entered allmulticast mode [ 749.743273][T16241] bridge_slave_1: entered promiscuous mode [ 750.078233][ T5962] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 750.114195][T16241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.877600][T16241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.925863][ T5962] usb 5-1: Using ep0 maxpacket: 8 [ 750.955055][ T5962] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.966526][ T5962] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.976556][ T5962] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 751.006692][ T5962] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.074333][ T5962] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.104724][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.442404][T16312] NILFS (loop5): device size too small [ 752.053645][ T5962] usb 5-1: GET_CAPABILITIES returned 0 [ 752.065820][ T5962] usbtmc 5-1:16.0: can't read capabilities [ 752.235591][T16241] team0: Port device team_slave_0 added [ 752.282251][T16241] team0: Port device team_slave_1 added [ 752.378252][T16241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.389849][T16241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.446618][T16241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.459529][T16241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.466570][T16241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.492958][T12778] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 752.509067][T16241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.555183][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 752.664003][T12778] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 752.681337][T16241] hsr_slave_0: entered promiscuous mode [ 752.683424][T12778] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.706445][T12778] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 752.708701][T16241] hsr_slave_1: entered promiscuous mode [ 752.715764][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 752.726788][T12778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.732787][T12778] hub 1-1:4.0: USB hub found [ 752.740409][T16241] debugfs: 'hsr0' already exists in 'hsr' [ 752.745677][ T9] usb 6-1: config 0 has no interfaces? [ 752.760610][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 752.770522][T16241] Cannot create hsr debugfs directory [ 752.776979][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.025457][ T9] usb 6-1: Product: syz [ 753.164994][ T9] usb 6-1: Manufacturer: syz [ 753.342833][ T10] usb 5-1: USB disconnect, device number 41 [ 753.354803][ T9] usb 6-1: SerialNumber: syz [ 753.368406][T12778] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 753.402473][ T9] usb 6-1: config 0 descriptor?? [ 753.682734][ T5872] usb 6-1: USB disconnect, device number 68 [ 753.705485][T12778] usb 1-1: USB disconnect, device number 57 [ 754.629911][ T5962] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 754.933891][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 754.960185][ T5962] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 755.122400][T16353] loop5: detected capacity change from 0 to 32768 [ 755.156276][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.218684][ T5962] usb 4-1: Product: syz [ 755.237431][ T5962] usb 4-1: Manufacturer: syz [ 755.297567][ T5962] usb 4-1: SerialNumber: syz [ 755.341387][T16353] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 755.341411][T16353] allowing incompatible features above 0.0: (unknown version) [ 755.341422][T16353] features: [ 755.375615][T16353] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 755.384032][T16353] bcachefs (loop5): initializing new filesystem [ 755.396472][T16353] bcachefs (loop5): going read-write [ 755.444305][T16353] bcachefs (loop5): marking superblocks [ 755.456027][T16353] bcachefs (loop5): initializing freespace [ 755.465617][T16353] bcachefs (loop5): done initializing freespace [ 755.473823][T16353] bcachefs (loop5): reading snapshots table [ 755.479751][T16353] bcachefs (loop5): reading snapshots done [ 755.514982][T16353] bcachefs (loop5): done starting filesystem [ 755.570073][T16353] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 755.579094][T16353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 755.593125][ T5962] usb 4-1: config 0 descriptor?? [ 755.704922][ T5962] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 755.715062][ T5858] bcachefs (loop5): shutting down [ 755.720105][ T5858] bcachefs (loop5): going read-only [ 755.737013][ T5962] usb 4-1: Detected FT-X [ 755.771007][ T5858] bcachefs (loop5): finished waiting for writes to stop [ 755.819504][ T5858] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 755.914879][ T5962] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 755.980486][ T5858] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 756.010719][ T5858] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 756.059388][ T5858] bcachefs (loop5): marking filesystem clean [ 756.238714][ T5858] bcachefs (loop5): shutdown complete [ 756.332130][T16368] /dev/loop1: Can't open blockdev [ 756.631412][ T5962] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 756.661629][ T5962] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 756.797418][ T5962] usb 4-1: USB disconnect, device number 47 [ 756.928925][ T5962] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 757.002981][ T5962] ftdi_sio 4-1:0.0: device disconnected [ 757.248475][T16241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 757.264913][T16241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 757.328545][T16241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 757.350767][T16373] fuse: Bad value for 'fd' [ 757.446682][T16241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 758.876228][T16241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.016761][T16241] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.101238][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.108466][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.203721][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.210847][T14302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.261902][ T5959] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 759.479412][ T5959] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.533014][ T5959] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.573047][ T5959] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 759.606920][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.656959][ T5959] hub 1-1:4.0: USB hub found [ 759.821830][ T5872] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 759.971423][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 759.989220][ T5872] usb 5-1: config 0 has no interfaces? [ 760.006495][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 760.018864][T16241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.039367][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.088471][ T5872] usb 5-1: Product: syz [ 760.108715][ T5872] usb 5-1: Manufacturer: syz [ 760.129288][ T5959] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 760.134963][ T5872] usb 5-1: SerialNumber: syz [ 760.164267][ T5959] usb 1-1: USB disconnect, device number 58 [ 760.803914][T16241] veth0_vlan: entered promiscuous mode [ 760.879497][T16241] veth1_vlan: entered promiscuous mode [ 760.947353][ T5872] usb 5-1: config 0 descriptor?? [ 761.054765][T16241] veth0_macvtap: entered promiscuous mode [ 761.115606][T16241] veth1_macvtap: entered promiscuous mode [ 761.159295][T16241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.187298][ T9] usb 5-1: USB disconnect, device number 42 [ 761.251299][ T5872] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 761.263079][T16241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.329320][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.359276][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.415351][T16412] fuse: Bad value for 'user_id' [ 761.420913][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.427994][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 761.449940][T16412] fuse: Bad value for 'user_id' [ 761.450458][ T5872] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 761.455724][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.474771][ T5872] usb 2-1: config 0 has no interface number 0 [ 761.494140][ T5872] usb 2-1: config 0 interface 89 has no altsetting 0 [ 761.521609][T16414] syzkaller0: entered promiscuous mode [ 761.527075][T16414] syzkaller0: entered allmulticast mode [ 761.535514][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 761.545854][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.615156][ T5872] usb 2-1: Product: syz [ 761.624841][T16411] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 761.648053][ T5872] usb 2-1: Manufacturer: syz [ 761.674737][ T5872] usb 2-1: SerialNumber: syz [ 761.695629][ T5872] usb 2-1: config 0 descriptor?? [ 761.740343][ T5872] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 761.794386][ T5872] em28xx 2-1:0.89: Video interface 89 found: bulk [ 762.194105][T16417] loop0: detected capacity change from 0 to 32768 [ 762.345393][ T5872] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 762.348029][T16417] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 762.374364][T16417] allowing incompatible features above 0.0: (unknown version) [ 762.382044][T16417] features: [ 762.385426][T16417] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 762.394153][T16417] bcachefs (loop0): initializing new filesystem [ 762.408051][T16417] bcachefs (loop0): going read-write [ 762.478521][T16417] bcachefs (loop0): marking superblocks [ 762.492562][T16417] bcachefs (loop0): initializing freespace [ 762.502235][T16417] bcachefs (loop0): done initializing freespace [ 762.510987][T16417] bcachefs (loop0): reading snapshots table [ 762.516913][T16417] bcachefs (loop0): reading snapshots done [ 762.563459][T16417] bcachefs (loop0): done starting filesystem [ 762.622696][T16417] overlayfs: missing 'lowerdir' [ 762.737157][T14302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.783617][ T5859] bcachefs (loop0): shutting down [ 762.794201][T14302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.820779][ T5859] bcachefs (loop0): going read-only [ 762.826020][ T5859] bcachefs (loop0): finished waiting for writes to stop [ 762.895904][ T30] audit: type=1326 audit(1756852461.747:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 762.925977][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.935396][ T5859] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 762.958849][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.976845][ T5872] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 762.993778][ T5872] em28xx 2-1:0.89: board has no eeprom [ 762.999410][ T30] audit: type=1326 audit(1756852461.747:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.023579][ T30] audit: type=1326 audit(1756852461.747:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.047735][ T30] audit: type=1326 audit(1756852461.747:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.073901][ T30] audit: type=1326 audit(1756852461.797:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.079217][ T5859] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 763.096861][ T30] audit: type=1326 audit(1756852461.797:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.169832][ T30] audit: type=1326 audit(1756852461.797:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.179843][ T1206] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 763.227213][ T5859] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 763.243281][ T30] audit: type=1326 audit(1756852461.797:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.265794][ T30] audit: type=1326 audit(1756852461.797:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd0f8ebe9 code=0x7ffc0000 [ 763.267131][ T5859] bcachefs (loop0): marking filesystem clean [ 763.288275][ T30] audit: type=1326 audit(1756852461.797:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.5.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cd0f8d550 code=0x7ffc0000 [ 763.379307][ T5859] bcachefs (loop0): shutdown complete [ 763.429482][T16438] NILFS (loop4): device size too small [ 763.449746][ T5872] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 763.457164][ T5872] em28xx 2-1:0.89: analog set to bulk mode. [ 763.487632][T13135] em28xx 2-1:0.89: Registering V4L2 extension [ 763.563608][ T5872] usb 2-1: USB disconnect, device number 77 [ 763.615065][ T5872] em28xx 2-1:0.89: Disconnecting em28xx [ 763.738985][T13135] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 763.758826][T13135] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 763.776463][T13135] em28xx 2-1:0.89: No AC97 audio processor [ 763.808672][T13135] usb 2-1: Decoder not found [ 763.823132][T13135] em28xx 2-1:0.89: failed to create media graph [ 763.842894][T13135] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 763.865921][T13135] em28xx 2-1:0.89: Registering snapshot button... [ 763.880686][ T1206] usb 6-1: config 0 has an invalid interface number: 163 but max is 0 [ 763.888859][ T1206] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.902765][ T1206] usb 6-1: config 0 has no interface number 0 [ 763.908854][ T1206] usb 6-1: too many endpoints for config 0 interface 163 altsetting 29: 52, using maximum allowed: 30 [ 763.925906][T13135] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input19 [ 763.926268][ T1206] usb 6-1: config 0 interface 163 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 763.951223][ T1206] usb 6-1: config 0 interface 163 has no altsetting 0 [ 763.958008][ T1206] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 764.001100][ T1206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.009412][ T6029] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 764.021847][ T1206] usb 6-1: config 0 descriptor?? [ 764.030851][T13135] em28xx 2-1:0.89: Remote control support is not available for this card. [ 764.114451][T16447] fuse: Bad value for 'fd' [ 764.200047][ T6029] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 764.208165][ T5872] em28xx 2-1:0.89: Closing input extension [ 764.214070][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 764.214126][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 764.214158][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 764.215846][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 764.278477][ T1206] ath6kl: Failed to submit usb control message: -71 [ 764.284508][ T5872] em28xx 2-1:0.89: Deregistering snapshot button [ 764.286878][ T1206] ath6kl: unable to send the bmi data to the device: -71 [ 764.338857][ T1206] ath6kl: Unable to send get target info: -71 [ 764.349397][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 764.361237][ T1206] ath6kl: Failed to init ath6kl core: -71 [ 764.406623][ T1206] ath6kl_usb 6-1:0.163: probe with driver ath6kl_usb failed with error -71 [ 764.467748][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 764.530138][ T5872] em28xx 2-1:0.89: Freeing device [ 764.549937][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 764.644821][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 764.674682][ T1206] usb 6-1: USB disconnect, device number 69 [ 764.695736][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 764.808133][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 764.838729][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 764.978287][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 765.023103][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.042749][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.344881][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 765.396185][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.477795][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.590981][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 765.614517][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.628186][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.648886][ T5872] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 765.728902][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 765.794520][ T6029] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.810009][ T5872] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 765.829435][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.839972][ T6029] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.887601][ T5872] usb 6-1: config 0 has no interface number 0 [ 765.903567][ T6029] usb 3-1: config 0 interface 0 has no altsetting 0 [ 765.931744][ T5872] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 765.965934][ T5872] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.966133][ T6029] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 766.023064][ T5872] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 766.046885][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.087014][ T6029] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 766.105189][ T6029] usb 3-1: Product: syz [ 766.113322][ T6029] usb 3-1: Manufacturer: syz [ 766.122830][ T6029] usb 3-1: SerialNumber: syz [ 766.142691][ T6029] usb 3-1: config 0 descriptor?? [ 766.158995][ T6029] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 766.205437][ T5872] usb 6-1: Product: syz [ 766.225453][ T5872] usb 6-1: Manufacturer: syz [ 766.261226][ T5872] usb 6-1: SerialNumber: syz [ 766.304021][ T5872] usb 6-1: config 0 descriptor?? [ 766.407811][ T10] usb 3-1: USB disconnect, device number 61 [ 766.430448][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 766.538874][ T5872] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 766.567863][ T5872] usb 6-1: USB disconnect, device number 70 [ 767.794019][T16461] netlink: 'syz.2.3029': attribute type 1 has an invalid length. [ 768.530263][ T1206] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 768.648801][T16470] loop5: detected capacity change from 0 to 32768 [ 768.781681][T16470] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 768.781716][T16470] allowing incompatible features above 0.0: (unknown version) [ 768.781732][T16470] features: [ 768.815697][T16470] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 768.824019][T16470] bcachefs (loop5): initializing new filesystem [ 768.836651][T16470] bcachefs (loop5): going read-write [ 768.867972][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 768.895353][T16470] bcachefs (loop5): marking superblocks [ 768.909711][T16470] bcachefs (loop5): initializing freespace [ 768.919402][T16470] bcachefs (loop5): done initializing freespace [ 768.928791][T16470] bcachefs (loop5): reading snapshots table [ 768.936332][T16470] bcachefs (loop5): reading snapshots done [ 768.981121][ T1206] usb 4-1: config 0 has no interfaces? [ 769.567579][T16470] bcachefs (loop5): done starting filesystem [ 769.941818][T16470] overlayfs: missing 'lowerdir' [ 769.949568][ T1206] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 770.018913][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.082622][ T1206] usb 4-1: Product: syz [ 770.101534][ T5858] bcachefs (loop5): shutting down [ 770.106483][ T1206] usb 4-1: Manufacturer: syz [ 770.121623][ T5858] bcachefs (loop5): going read-only [ 770.128111][T16498] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 770.149402][ T5858] bcachefs (loop5): finished waiting for writes to stop [ 770.214302][ T1206] usb 4-1: SerialNumber: syz [ 770.356278][ T1206] usb 4-1: config 0 descriptor?? [ 770.382897][ T5858] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4 [ 770.417779][ T5872] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 770.764314][ T1206] usb 4-1: USB disconnect, device number 48 [ 770.826235][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 770.865319][ T5858] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4 [ 770.875015][ T5872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.885172][ T5872] usb 1-1: config 0 has no interface number 0 [ 770.895266][ T5858] bcachefs (loop5): clean shutdown complete, journal seq 5 [ 770.919606][ T5872] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 770.937053][ T5858] bcachefs (loop5): marking filesystem clean [ 770.946076][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.984470][ T5872] usb 1-1: Product: syz [ 770.994580][ T5872] usb 1-1: Manufacturer: syz [ 771.024290][ T5872] usb 1-1: SerialNumber: syz [ 771.058192][ T5872] usb 1-1: config 0 descriptor?? [ 771.239530][ T5858] bcachefs (loop5): shutdown complete [ 771.262069][ T5872] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 771.998518][T16510] syz.2.3038 (16510): drop_caches: 2 [ 772.120051][ T5872] usb 1-1: selecting invalid altsetting 1 [ 772.171021][ T5872] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 773.184101][ T5872] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 773.205393][ T5872] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 773.341791][ T5872] usb 1-1: media controller created [ 773.350392][T16519] fuse: Bad value for 'fd' [ 773.378296][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.490315][ T5872] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 773.514762][ T5872] zl10353_read_register: readreg error (reg=127, ret==-71) [ 773.611998][ T5872] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 773.988669][T16529] lo speed is unknown, defaulting to 1000 [ 773.995903][T16529] lo speed is unknown, defaulting to 1000 [ 774.027411][T16529] lo speed is unknown, defaulting to 1000 [ 774.085210][T16529] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 774.194237][T16529] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 774.532076][T16529] lo speed is unknown, defaulting to 1000 [ 774.539475][T16529] lo speed is unknown, defaulting to 1000 [ 774.546588][T16529] lo speed is unknown, defaulting to 1000 [ 774.554175][T16529] lo speed is unknown, defaulting to 1000 [ 774.561412][T16529] lo speed is unknown, defaulting to 1000 [ 774.568681][T16529] lo speed is unknown, defaulting to 1000 [ 774.575956][T16529] lo speed is unknown, defaulting to 1000 [ 774.800173][ T5872] usb 1-1: USB disconnect, device number 59 [ 776.703453][T16547] loop2: detected capacity change from 0 to 32768 [ 777.785408][T16547] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 777.785445][T16547] allowing incompatible features above 0.0: (unknown version) [ 777.785460][T16547] features: [ 777.819124][T16547] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 777.827314][T16547] bcachefs (loop2): initializing new filesystem [ 777.839700][T16547] bcachefs (loop2): going read-write [ 777.952490][T16547] bcachefs (loop2): marking superblocks [ 777.966024][T16547] bcachefs (loop2): initializing freespace [ 777.975310][T16547] bcachefs (loop2): done initializing freespace [ 777.983798][T16547] bcachefs (loop2): reading snapshots table [ 777.989736][T16547] bcachefs (loop2): reading snapshots done [ 778.092816][T16547] bcachefs (loop2): done starting filesystem [ 778.134171][T16547] overlayfs: missing 'lowerdir' [ 778.299620][T16241] bcachefs (loop2): shutting down [ 778.340185][T16241] bcachefs (loop2): going read-only [ 778.362129][T16241] bcachefs (loop2): finished waiting for writes to stop [ 778.472723][T16241] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 778.626266][T16241] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 778.721797][T16241] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 778.762041][ T5962] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 778.795854][T16241] bcachefs (loop2): marking filesystem clean [ 778.826922][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 778.937991][T16589] lo: entered promiscuous mode [ 778.956860][T16589] lo: entered allmulticast mode [ 779.010695][T16589] tunl0: entered promiscuous mode [ 779.188687][T16589] tunl0: entered allmulticast mode [ 779.194007][ T5962] usb 2-1: Using ep0 maxpacket: 8 [ 779.207442][T16241] bcachefs (loop2): shutdown complete [ 779.222485][ T5962] usb 2-1: config 0 has no interfaces? [ 779.256700][T16589] gre0: entered promiscuous mode [ 779.262251][T16589] gre0: entered allmulticast mode [ 779.272428][ T5962] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 779.277074][T16589] gretap0: entered promiscuous mode [ 779.310651][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.348925][ T5962] usb 2-1: Product: syz [ 779.348973][T16589] gretap0: entered allmulticast mode [ 779.373588][ T5962] usb 2-1: Manufacturer: syz [ 779.387909][ T5962] usb 2-1: SerialNumber: syz [ 779.416559][T16589] erspan0: entered promiscuous mode [ 779.442206][T16589] erspan0: entered allmulticast mode [ 779.501736][ T5962] usb 2-1: config 0 descriptor?? [ 779.522653][T16589] ip_vti0: entered promiscuous mode [ 779.581165][T16589] ip_vti0: entered allmulticast mode [ 779.602408][T16589] ip6_vti0: entered promiscuous mode [ 779.641964][T16589] ip6_vti0: entered allmulticast mode [ 779.708951][T16589] sit0: entered promiscuous mode [ 779.736285][ T5962] usb 2-1: USB disconnect, device number 78 [ 779.751787][T16589] sit0: entered allmulticast mode [ 779.932311][T16589] ip6tnl0: entered promiscuous mode [ 779.937803][T16589] ip6tnl0: entered allmulticast mode [ 779.960588][T16589] ip6gre0: entered promiscuous mode [ 780.661387][T16589] ip6gre0: entered allmulticast mode [ 780.731735][T16589] syz_tun: entered promiscuous mode [ 780.736980][T16589] syz_tun: entered allmulticast mode [ 780.787487][T16589] ip6gretap0: entered promiscuous mode [ 780.850950][T16589] ip6gretap0: entered allmulticast mode [ 780.857286][T16589] vcan0: entered promiscuous mode [ 781.097215][T16589] vcan0: entered allmulticast mode [ 781.110186][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 781.110204][ T30] audit: type=1326 audit(1756852479.976:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6b8ebe9 code=0x7ffc0000 [ 781.113154][T16589] bond0: entered promiscuous mode [ 781.116774][ T30] audit: type=1326 audit(1756852479.976:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6b8ebe9 code=0x7ffc0000 [ 782.070312][T16589] bond_slave_0: entered promiscuous mode [ 782.076223][T16589] bond_slave_1: entered promiscuous mode [ 782.125583][ T30] audit: type=1326 audit(1756852480.037:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f4ef6b8ebe9 code=0x7ffc0000 [ 782.130666][T16589] bond0: entered allmulticast mode [ 782.147997][ T30] audit: type=1326 audit(1756852480.037:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6b8ebe9 code=0x7ffc0000 [ 782.148054][ T30] audit: type=1326 audit(1756852480.047:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.1.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6b8ebe9 code=0x7ffc0000 [ 782.238733][T16589] bond_slave_0: entered allmulticast mode [ 782.252157][T16589] bond_slave_1: entered allmulticast mode [ 782.268833][T16589] team0: entered promiscuous mode [ 782.298598][T16589] team_slave_0: entered promiscuous mode [ 782.323532][T16589] team_slave_1: entered promiscuous mode [ 782.355398][T16589] team0: entered allmulticast mode [ 782.370703][T16589] team_slave_0: entered allmulticast mode [ 782.406946][T16589] team_slave_1: entered allmulticast mode [ 782.444711][T16589] dummy0: entered promiscuous mode [ 782.494250][T16589] dummy0: entered allmulticast mode [ 782.521030][T16589] nlmon0: entered promiscuous mode [ 782.548850][T16589] nlmon0: entered allmulticast mode [ 782.661133][T16589] caif0: entered promiscuous mode [ 782.692155][T16589] caif0: entered allmulticast mode [ 782.711787][T16589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 782.859191][T16624] loop3: detected capacity change from 0 to 32768 [ 782.882813][T13135] lo speed is unknown, defaulting to 1000 [ 783.558912][T16624] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 783.558950][T16624] allowing incompatible features above 0.0: (unknown version) [ 783.558966][T16624] features: [ 783.593261][T16624] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 783.601480][T16624] bcachefs (loop3): initializing new filesystem [ 783.616157][T16624] bcachefs (loop3): going read-write [ 783.636418][T16624] bcachefs (loop3): marking superblocks [ 783.651139][T16624] bcachefs (loop3): initializing freespace [ 783.661496][T16624] bcachefs (loop3): done initializing freespace [ 783.670600][T16624] bcachefs (loop3): reading snapshots table [ 783.676541][T16624] bcachefs (loop3): reading snapshots done [ 783.729076][T16624] bcachefs (loop3): done starting filesystem [ 783.821972][T16624] overlayfs: missing 'workdir' [ 783.896467][ T5861] bcachefs (loop3): shutting down [ 783.981251][ T5861] bcachefs (loop3): going read-only [ 783.998252][ T5861] bcachefs (loop3): finished waiting for writes to stop [ 784.158826][ T5861] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 784.502217][ T5861] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 784.582496][T16662] Illegal XDP return value 4294967282 on prog (id 257) dev N/A, expect packet loss! [ 784.611720][ T5861] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 784.639964][ T5861] bcachefs (loop3): marking filesystem clean [ 784.851795][ T5861] bcachefs (loop3): shutdown complete [ 785.158825][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 785.993914][T16682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.341324][T16683] [U]  [ 786.344295][T16683] [U] K{ [ 786.347493][T16683] [U] T 1ŠFFˊ`GJǘGO/MC [ 786.365519][T16683] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 786.381465][T16683] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 786.408094][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 786.478735][ T10] usb 6-1: config 0 has no interfaces? [ 786.529639][T16683] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 786.738096][T16683] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 786.758688][T16687] Invalid ELF header magic: != ELF [ 786.897983][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 786.907135][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.948325][ T10] usb 6-1: Product: syz [ 787.028503][ T10] usb 6-1: Manufacturer: syz [ 787.038991][T16683] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 787.054566][T16683] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 787.075415][T16683] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 787.515932][ T10] usb 6-1: USB disconnect, device number 71 [ 787.540200][T16683] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 787.555883][T16683] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 787.571032][T16683] [U] 22Ʃ۩X?0;3U [ 787.576000][T16683] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 787.602298][T16683] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 787.612238][T16683] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 787.621196][T16683] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 787.640020][T16683] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 787.656490][T16683] [U] EC [ 787.667767][T16683] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 788.016556][T16695] 9pnet_fd: Insufficient options for proto=fd [ 788.720101][T16674] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 790.284310][T16708] loop2: detected capacity change from 0 to 32768 [ 792.848070][T16708] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 792.848106][T16708] allowing incompatible features above 0.0: (unknown version) [ 792.848122][T16708] features: [ 792.881810][T16708] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 792.890121][T16708] bcachefs (loop2): initializing new filesystem [ 792.904852][T16708] bcachefs (loop2): going read-write [ 792.953502][T16708] bcachefs (loop2): bch2_rebalance_start(): error creating rebalance thread EINTR [ 792.962812][T16708] bcachefs (loop2): __bch2_fs_read_write(): error error starting rebalance thread EINTR [ 792.972621][T16708] bcachefs (loop2): going read-only [ 792.977927][T16708] bcachefs (loop2): finished waiting for writes to stop [ 792.986390][T16708] bcachefs (loop2): flushing journal and stopping allocators, journal seq 0 [ 792.995219][T16708] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 0 [ 793.049303][T16708] bcachefs (loop2): unclean shutdown complete, journal seq 1 [ 793.057817][T16708] bcachefs (loop2): done going read-only, filesystem not clean [ 793.065503][T16708] bcachefs (loop2): bch2_fs_initialize(): error EINTR [ 793.072266][T16708] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 793.080391][T16708] bcachefs (loop2): shutting down [ 793.102434][T16708] bcachefs (loop2): shutdown complete [ 793.108579][ T5871] ================================================================== [ 793.116641][ T5871] BUG: KASAN: slab-use-after-free in bch2_get_next_dev+0x371/0x4c0 [ 793.124550][ T5871] Write of size 8 at addr ffff88807c33c040 by task kworker/u9:3/5871 [ 793.132611][ T5871] [ 793.134931][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 793.134960][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 793.134979][ T5871] Workqueue: bcachefs_journal journal_write_done [ 793.135008][ T5871] Call Trace: [ 793.135018][ T5871] [ 793.135029][ T5871] dump_stack_lvl+0x189/0x250 [ 793.135060][ T5871] ? __kasan_check_byte+0x12/0x40 [ 793.135097][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.135126][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.135156][ T5871] ? lock_release+0x4b/0x3e0 [ 793.135196][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.135225][ T5871] ? __virt_addr_valid+0x4a5/0x5c0 [ 793.135258][ T5871] print_report+0xca/0x240 [ 793.135283][ T5871] ? bch2_get_next_dev+0x371/0x4c0 [ 793.135316][ T5871] kasan_report+0x118/0x150 [ 793.135352][ T5871] ? bch2_get_next_dev+0x371/0x4c0 [ 793.135393][ T5871] kasan_check_range+0x2b0/0x2c0 [ 793.135430][ T5871] bch2_get_next_dev+0x371/0x4c0 [ 793.135464][ T5871] ? bch2_get_next_dev+0x27/0x4c0 [ 793.135501][ T5871] bch2_do_discards+0x20/0x160 [ 793.135537][ T5871] journal_write_done+0x119a/0x13d0 [ 793.135575][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.135605][ T5871] ? __pfx_journal_write_done+0x10/0x10 [ 793.135635][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.135666][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.135697][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.135730][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 793.135754][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 793.135779][ T5871] process_scheduled_works+0xae1/0x17b0 [ 793.135827][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.135856][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.135889][ T5871] worker_thread+0x8a0/0xda0 [ 793.135930][ T5871] kthread+0x711/0x8a0 [ 793.135963][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 793.135988][ T5871] ? __pfx_kthread+0x10/0x10 [ 793.136016][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.136047][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 793.136078][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 793.136106][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.136141][ T5871] ? __pfx_kthread+0x10/0x10 [ 793.136171][ T5871] ret_from_fork+0x3fc/0x770 [ 793.136198][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 793.136227][ T5871] ? __switch_to_asm+0x39/0x70 [ 793.136258][ T5871] ? __switch_to_asm+0x33/0x70 [ 793.136289][ T5871] ? __pfx_kthread+0x10/0x10 [ 793.136320][ T5871] ret_from_fork_asm+0x1a/0x30 [ 793.136362][ T5871] [ 793.136371][ T5871] [ 793.381838][ T5871] Allocated by task 16708: [ 793.386235][ T5871] kasan_save_track+0x3e/0x80 [ 793.390905][ T5871] __kasan_kmalloc+0x93/0xb0 [ 793.395486][ T5871] __kmalloc_cache_noprof+0x230/0x3d0 [ 793.400851][ T5871] __bch2_dev_alloc+0xa7/0xc30 [ 793.405611][ T5871] bch2_dev_alloc+0xcd/0x180 [ 793.410193][ T5871] bch2_fs_open+0x2472/0x2600 [ 793.414863][ T5871] bch2_fs_get_tree+0x44f/0x1520 [ 793.419794][ T5871] vfs_get_tree+0x92/0x2b0 [ 793.424211][ T5871] do_new_mount+0x2a2/0x9e0 [ 793.428708][ T5871] __se_sys_mount+0x317/0x410 [ 793.433379][ T5871] do_syscall_64+0xfa/0x3b0 [ 793.437869][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.443832][ T5871] [ 793.446136][ T5871] Freed by task 16708: [ 793.450184][ T5871] kasan_save_track+0x3e/0x80 [ 793.455024][ T5871] kasan_save_free_info+0x46/0x50 [ 793.460466][ T5871] __kasan_slab_free+0x5b/0x80 [ 793.465219][ T5871] kfree+0x18e/0x440 [ 793.469104][ T5871] kobject_put+0x22b/0x480 [ 793.473502][ T5871] bch2_fs_free+0x440/0x5a0 [ 793.477992][ T5871] bch2_fs_get_tree+0xb6e/0x1520 [ 793.482914][ T5871] vfs_get_tree+0x92/0x2b0 [ 793.487319][ T5871] do_new_mount+0x2a2/0x9e0 [ 793.491828][ T5871] __se_sys_mount+0x317/0x410 [ 793.496525][ T5871] do_syscall_64+0xfa/0x3b0 [ 793.501015][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.506899][ T5871] [ 793.509203][ T5871] The buggy address belongs to the object at ffff88807c33c000 [ 793.509203][ T5871] which belongs to the cache kmalloc-4k of size 4096 [ 793.523238][ T5871] The buggy address is located 64 bytes inside of [ 793.523238][ T5871] freed 4096-byte region [ffff88807c33c000, ffff88807c33d000) [ 793.537023][ T5871] [ 793.539329][ T5871] The buggy address belongs to the physical page: [ 793.545716][ T5871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c338 [ 793.554458][ T5871] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 793.562943][ T5871] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 793.570904][ T5871] page_type: f5(slab) [ 793.574871][ T5871] raw: 00fff00000000040 ffff88801a442140 0000000000000000 0000000000000001 [ 793.583439][ T5871] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 793.592009][ T5871] head: 00fff00000000040 ffff88801a442140 0000000000000000 0000000000000001 [ 793.600691][ T5871] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 793.609345][ T5871] head: 00fff00000000003 ffffea0001f0ce01 00000000ffffffff 00000000ffffffff [ 793.618094][ T5871] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 793.626754][ T5871] page dumped because: kasan: bad access detected [ 793.633143][ T5871] page_owner tracks the page as allocated [ 793.638837][ T5871] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1099, tgid 1099 (kworker/u8:5), ts 770751830225, free_ts 769907369440 [ 793.659754][ T5871] post_alloc_hook+0x240/0x2a0 [ 793.664516][ T5871] get_page_from_freelist+0x21e4/0x22c0 [ 793.670053][ T5871] __alloc_frozen_pages_noprof+0x181/0x370 [ 793.675843][ T5871] alloc_pages_mpol+0x232/0x4a0 [ 793.680690][ T5871] allocate_slab+0x8a/0x370 [ 793.685190][ T5871] ___slab_alloc+0xbeb/0x1410 [ 793.689863][ T5871] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 793.696266][ T5871] kmalloc_reserve+0x136/0x290 [ 793.701013][ T5871] __alloc_skb+0x142/0x2d0 [ 793.705407][ T5871] nsim_dev_trap_report_work+0x29a/0xb80 [ 793.711040][ T5871] process_scheduled_works+0xae1/0x17b0 [ 793.716569][ T5871] worker_thread+0x8a0/0xda0 [ 793.721143][ T5871] kthread+0x711/0x8a0 [ 793.725198][ T5871] ret_from_fork+0x3fc/0x770 [ 793.729796][ T5871] ret_from_fork_asm+0x1a/0x30 [ 793.734552][ T5871] page last free pid 16241 tgid 16241 stack trace: [ 793.741029][ T5871] __free_frozen_pages+0xbc4/0xd30 [ 793.746132][ T5871] __slab_free+0x303/0x3c0 [ 793.750536][ T5871] qlist_free_all+0x97/0x140 [ 793.755116][ T5871] kasan_quarantine_reduce+0x148/0x160 [ 793.760560][ T5871] __kasan_slab_alloc+0x22/0x80 [ 793.765399][ T5871] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 793.770856][ T5871] getname_flags+0xb8/0x540 [ 793.775342][ T5871] do_sys_openat2+0xbc/0x1c0 [ 793.779935][ T5871] __x64_sys_openat+0x138/0x170 [ 793.784766][ T5871] do_syscall_64+0xfa/0x3b0 [ 793.789252][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.795130][ T5871] [ 793.797432][ T5871] Memory state around the buggy address: [ 793.803039][ T5871] ffff88807c33bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 793.811081][ T5871] ffff88807c33bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 793.819125][ T5871] >ffff88807c33c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 793.827164][ T5871] ^ [ 793.833292][ T5871] ffff88807c33c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 793.841332][ T5871] ffff88807c33c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 793.849368][ T5871] ================================================================== [ 793.974410][ T5871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 793.981638][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 793.991095][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 794.001146][ T5871] Workqueue: bcachefs_journal journal_write_done [ 794.007484][ T5871] Call Trace: [ 794.010752][ T5871] [ 794.013668][ T5871] dump_stack_lvl+0x99/0x250 [ 794.018260][ T5871] ? __asan_memcpy+0x40/0x70 [ 794.022838][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.028027][ T5871] ? __pfx__printk+0x10/0x10 [ 794.032624][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.038246][ T5871] vpanic+0x281/0x750 [ 794.042221][ T5871] ? preempt_schedule+0xae/0xc0 [ 794.047078][ T5871] ? __pfx_vpanic+0x10/0x10 [ 794.051566][ T5871] ? preempt_schedule_common+0x83/0xd0 [ 794.057017][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.062636][ T5871] ? preempt_schedule+0xae/0xc0 [ 794.067479][ T5871] ? __pfx_preempt_schedule+0x10/0x10 [ 794.072846][ T5871] panic+0xb9/0xc0 [ 794.076555][ T5871] ? __pfx_panic+0x10/0x10 [ 794.081311][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.086928][ T5871] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 794.092828][ T5871] ? bch2_get_next_dev+0x371/0x4c0 [ 794.097932][ T5871] check_panic_on_warn+0x89/0xb0 [ 794.102863][ T5871] ? bch2_get_next_dev+0x371/0x4c0 [ 794.107965][ T5871] end_report+0x78/0x160 [ 794.112200][ T5871] kasan_report+0x129/0x150 [ 794.116696][ T5871] ? bch2_get_next_dev+0x371/0x4c0 [ 794.121803][ T5871] kasan_check_range+0x2b0/0x2c0 [ 794.126765][ T5871] bch2_get_next_dev+0x371/0x4c0 [ 794.131693][ T5871] ? bch2_get_next_dev+0x27/0x4c0 [ 794.136709][ T5871] bch2_do_discards+0x20/0x160 [ 794.141464][ T5871] journal_write_done+0x119a/0x13d0 [ 794.146660][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.152279][ T5871] ? __pfx_journal_write_done+0x10/0x10 [ 794.157814][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.163438][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.169057][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 794.174246][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 794.179948][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 794.185648][ T5871] process_scheduled_works+0xae1/0x17b0 [ 794.191191][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 794.197156][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.202780][ T5871] worker_thread+0x8a0/0xda0 [ 794.207374][ T5871] kthread+0x711/0x8a0 [ 794.211435][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 794.216538][ T5871] ? __pfx_kthread+0x10/0x10 [ 794.221114][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.226742][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 794.231929][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.237545][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.242733][ T5871] ? __pfx_kthread+0x10/0x10 [ 794.247316][ T5871] ret_from_fork+0x3fc/0x770 [ 794.251907][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 794.257008][ T5871] ? __switch_to_asm+0x39/0x70 [ 794.261763][ T5871] ? __switch_to_asm+0x33/0x70 [ 794.266524][ T5871] ? __pfx_kthread+0x10/0x10 [ 794.271101][ T5871] ret_from_fork_asm+0x1a/0x30 [ 794.275863][ T5871] [ 794.279093][ T5871] Kernel Offset: disabled [ 794.283402][ T5871] Rebooting in 86400 seconds..