last executing test programs: 3m50.677614515s ago: executing program 1 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3e, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m49.250359701s ago: executing program 1 (id=199): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002f00)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) 3m48.193391267s ago: executing program 1 (id=203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) 3m47.833623376s ago: executing program 1 (id=209): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') open(0x0, 0x8000, 0x50) 3m47.177897352s ago: executing program 1 (id=211): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) close(0x4) 3m46.479484249s ago: executing program 1 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x11, 0x6c}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 3m46.067896399s ago: executing program 32 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x11, 0x6c}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) 7.332073544s ago: executing program 2 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x200000000000011, 0x2, 0xd) socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x29, 0x37, 0x1, {0x0, 0x2, 0x7, r0, 0xb, 'SMC_PNETID\x00'}}, 0x29) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) r6 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r6, &(0x7f0000000380)=""/68, 0x44, 0x42, &(0x7f0000000400)=@can, 0x80) 5.199331535s ago: executing program 2 (id=1297): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) 5.00076821s ago: executing program 2 (id=1301): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001380)='\x00+', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.582051274s ago: executing program 3 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.145030174s ago: executing program 0 (id=1317): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.127986205s ago: executing program 4 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x200000000000011, 0x2, 0xd) socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[], 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x29, 0x37, 0x1, {0x0, 0x2, 0x7, r0, 0xb, 'SMC_PNETID\x00'}}, 0x29) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) r6 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r6, &(0x7f0000000380)=""/68, 0x44, 0x42, &(0x7f0000000400)=@can, 0x80) 2.941797199s ago: executing program 0 (id=1309): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.760837434s ago: executing program 5 (id=1310): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="900000001000010400000000ffdbdf258149292e", @ANYRES32=r1, @ANYBLOB="262d0300b5cd0100700012800e00010069703665727370616e0000005c00028005001600020000000400120014000700fc020000000000000000000000000000060010004e24000006000e000100000005001700"], 0x90}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.49711192s ago: executing program 5 (id=1311): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES64=r0], 0xffdd) 2.449858841s ago: executing program 3 (id=1312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.219568196s ago: executing program 0 (id=1313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.804722486s ago: executing program 3 (id=1314): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.734330198s ago: executing program 2 (id=1315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.629462491s ago: executing program 4 (id=1316): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.605705311s ago: executing program 0 (id=1318): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.505821323s ago: executing program 5 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0xdb}) 1.505600293s ago: executing program 3 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.402324586s ago: executing program 2 (id=1321): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) read(r0, &(0x7f0000002fc0)=""/52, 0x34) 1.366188207s ago: executing program 3 (id=1322): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.284398249s ago: executing program 5 (id=1323): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="900000001000010400000000ffdbdf258149292e", @ANYRES32=r1, @ANYBLOB="262d0300b5cd0100700012800e00010069703665727370616e0000005c00028005001600020000000400120014000700fc020000000000000000000000000000060010004e24000006000e000100000005001700"], 0x90}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.212087201s ago: executing program 4 (id=1324): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.028671485s ago: executing program 5 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x88, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.028561275s ago: executing program 3 (id=1326): r0 = syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000002200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x80, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x9, 0x9, 0x9a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xd, 0x8, {0x8, 0x25, 0x1, 0x83, 0x3, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x49, 0x1, 0x5, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x9}}}}}}}}]}}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x18, @string={0x18, 0x3, "af631519b8f9516cc1d78c56c0d0ad78370a65c8b8d7"}}, 0x0, 0x0, 0x0}, 0x0) 956.082717ms ago: executing program 0 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x200000000000011, 0x2, 0xd) socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[], 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000180)={0x29, 0x37, 0x1, {0x0, 0x2, 0x7, r0, 0xb, 'SMC_PNETID\x00'}}, 0x29) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) r6 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r6, &(0x7f0000000380)=""/68, 0x44, 0x42, &(0x7f0000000400)=@can, 0x80) 910.899268ms ago: executing program 5 (id=1328): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001380)='\x00+', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 821.81791ms ago: executing program 4 (id=1329): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 389.73674ms ago: executing program 4 (id=1330): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0xfffffe35, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 119.050137ms ago: executing program 2 (id=1331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}, 'C\x00'}, 0x28) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, 0x0) read$FUSE(r3, 0x0, 0x0) read(r2, &(0x7f0000000080)=""/56, 0x38) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='h', 0x1}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/246, 0xf6}], 0x1}, 0x40) 94.113368ms ago: executing program 4 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 0 (id=1333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000080)={0xdb}) kernel console output (not intermixed with test programs): 56] BTRFS info (device loop4): turning on flush-on-commit [ 164.331821][ T6352] BTRFS info (device loop5): disabling tree log [ 164.377264][ T6352] BTRFS info (device loop5): enabling ssd optimizations [ 164.398883][ T6352] BTRFS info (device loop5): using spread ssd allocation scheme [ 164.426918][ T6356] BTRFS info (device loop4): enabling auto defrag [ 164.426947][ T6352] BTRFS info (device loop5): turning on sync discard [ 164.433423][ T6356] BTRFS info (device loop4): max_inline at 0 [ 164.467633][ T6356] BTRFS info (device loop4): using free space tree [ 164.473870][ T6352] BTRFS info (device loop5): turning off barriers [ 164.505103][ T6352] BTRFS info (device loop5): setting nodatacow, compression disabled [ 164.526955][ T6352] BTRFS info (device loop5): allowing degraded mounts [ 164.554218][ T6352] BTRFS info (device loop5): enabling tree log [ 164.576224][ T6352] BTRFS info (device loop5): using free space tree [ 165.896719][ T6356] BTRFS info (device loop4): enabling ssd optimizations [ 166.097934][ T6363] loop3: detected capacity change from 0 to 40427 [ 166.115063][ T6363] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 166.202031][ T6363] F2FS-fs (loop3): invalid crc value [ 166.274353][ T5032] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.296204][ T6363] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.616954][ T6363] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.690161][ T26] audit: type=1800 audit(1787739040.084:39): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 166.775520][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.828687][ T6411] loop5: detected capacity change from 0 to 256 [ 166.858408][ T6411] exfat: Deprecated parameter 'utf8' [ 166.863831][ T6411] exfat: Deprecated parameter 'namecase' [ 166.920039][ T6411] exfat: Unknown parameter 'zero_size_dir' [ 167.055030][ T4272] syz-executor: attempt to access beyond end of device [ 167.055030][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.645166][ T6422] loop2: detected capacity change from 0 to 1024 [ 168.711647][ T6418] loop4: detected capacity change from 0 to 4096 [ 168.722938][ T6422] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 168.747012][ T6422] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 168.777339][ T6422] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.507: Failed to acquire dquot type 0 [ 168.861073][ T6422] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 168.893163][ T6418] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 168.910109][ T6422] EXT4-fs (loop2): 1 truncate cleaned up [ 168.915833][ T6422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.986560][ T6422] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 169.041102][ T6422] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 169.078932][ T6422] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.507: Failed to acquire dquot type 0 [ 169.257027][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 170.499772][ T6445] loop5: detected capacity change from 0 to 2048 [ 170.606962][ T6448] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.694623][ T6447] loop2: detected capacity change from 0 to 4096 [ 170.729701][ T6447] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 170.778782][ T6448] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 170.806561][ T6448] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 170.844946][ T6448] Remounting filesystem read-only [ 170.866372][ T5032] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 171.014233][ T4275] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 171.054536][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 171.074673][ T4275] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 171.253609][ T6453] loop2: detected capacity change from 0 to 2048 [ 171.299942][ T6453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.388517][ T6443] loop4: detected capacity change from 0 to 40427 [ 171.434603][ T6443] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 171.472520][ T6443] F2FS-fs (loop4): invalid crc value [ 171.522308][ T6443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 171.616687][ T6460] loop3: detected capacity change from 0 to 8 [ 171.714977][ T6443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 171.789120][ T26] audit: type=1800 audit(1787739045.174:40): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.522" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 171.939591][ T6471] loop3: detected capacity change from 0 to 512 [ 171.956739][ T4273] syz-executor: attempt to access beyond end of device [ 171.956739][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.009682][ T6471] EXT4-fs (loop3): Test dummy encryption mode enabled [ 172.073871][ T6471] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.530: inode has both inline data and extents flags [ 172.166050][ T6471] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.530: couldn't read orphan inode 15 (err -117) [ 172.257492][ T6471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.324822][ T6478] loop2: detected capacity change from 0 to 128 [ 172.368090][ T6478] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.437178][ T6478] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.742273][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.770138][ T6471] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 172.851795][ T6495] loop2: detected capacity change from 0 to 512 [ 172.893569][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 172.909169][ T6495] EXT4-fs (loop2): Test dummy encryption mode enabled [ 172.952440][ T6495] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.537: inode has both inline data and extents flags [ 172.995324][ T6480] loop5: detected capacity change from 0 to 32768 [ 173.030463][ T6480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.534 (6480) [ 173.088207][ T6495] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.537: couldn't read orphan inode 15 (err -117) [ 173.116354][ T6480] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.132441][ T6480] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 173.143640][ T6495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.144690][ T6480] BTRFS info (device loop5): setting nodatasum [ 173.246920][ T6480] BTRFS info (device loop5): force zlib compression, level 3 [ 173.254380][ T6480] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 173.340284][ T6480] BTRFS info (device loop5): use lzo compression, level 0 [ 173.345164][ T6505] EXT4-fs: Ignoring removed oldalloc option [ 173.376961][ T6480] BTRFS info (device loop5): turning on flush-on-commit [ 173.405170][ T6505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.414312][ T6480] BTRFS info (device loop5): enabling auto defrag [ 173.414446][ T6480] BTRFS info (device loop5): max_inline at 4096 [ 173.414471][ T6480] BTRFS info (device loop5): using free space tree [ 173.661065][ T6495] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 173.723619][ T6480] BTRFS info (device loop5): enabling ssd optimizations [ 173.851215][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 173.925016][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 174.012101][ T5032] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.033489][ T6501] set_capacity_and_notify: 1 callbacks suppressed [ 174.033505][ T6501] loop3: detected capacity change from 0 to 32768 [ 174.059208][ T6541] loop4: detected capacity change from 0 to 1024 [ 174.182872][ T6541] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 174.194257][ T6501] XFS (loop3): Mounting V5 Filesystem [ 174.219655][ T6541] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.296077][ T6541] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.546: Failed to acquire dquot type 0 [ 174.362888][ T6541] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 174.383980][ T6541] EXT4-fs (loop4): 1 truncate cleaned up [ 174.416541][ T6541] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.443871][ T6501] XFS (loop3): Ending clean mount [ 174.464234][ T6541] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 174.487083][ T6541] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 174.503395][ T6541] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.546: Failed to acquire dquot type 0 [ 174.545698][ T6555] loop5: detected capacity change from 0 to 128 [ 174.596164][ T6555] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.611092][ T4272] XFS (loop3): Unmounting Filesystem [ 174.665354][ T6555] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.666041][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 174.860461][ T1113] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.882471][ T6561] loop4: detected capacity change from 0 to 256 [ 174.907064][ T14] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 174.924765][ T6561] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 175.000237][ T6565] loop2: detected capacity change from 0 to 256 [ 175.078093][ T6565] exfat: Deprecated parameter 'namecase' [ 175.114780][ T14] usb 1-1: no configurations [ 175.140292][ T14] usb 1-1: can't read configurations, error -22 [ 175.164291][ T6565] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 175.362793][ T6572] kAFS: Invalid Command on /proc/fs/afs/cells file [ 175.380861][ T14] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 175.502331][ T6576] loop2: detected capacity change from 0 to 512 [ 175.539069][ T6576] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.565813][ T6576] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.555: corrupted in-inode xattr [ 175.588132][ T14] usb 1-1: no configurations [ 175.592791][ T14] usb 1-1: can't read configurations, error -22 [ 175.607512][ T14] usb usb1-port1: attempt power cycle [ 175.638867][ T6576] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.555: couldn't read orphan inode 15 (err -117) [ 175.651627][ T6576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.682251][ T6576] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 175.763543][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 175.982262][ T6574] loop3: detected capacity change from 0 to 32768 [ 176.011181][ T6574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.553 (6574) [ 176.046910][ T14] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 176.063931][ T6589] loop5: detected capacity change from 0 to 128 [ 176.083356][ T6574] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.095457][ T6589] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.114024][ T14] usb 1-1: no configurations [ 176.123126][ T14] usb 1-1: can't read configurations, error -22 [ 176.133945][ T6574] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 176.150126][ T6589] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.196920][ T6574] BTRFS info (device loop3): setting nodatasum [ 176.203387][ T6574] BTRFS info (device loop3): force zlib compression, level 3 [ 176.240947][ T6574] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 176.267106][ T6574] BTRFS info (device loop3): use lzo compression, level 0 [ 176.275811][ T6574] BTRFS info (device loop3): turning on flush-on-commit [ 176.287060][ T14] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 176.293758][ T6574] BTRFS info (device loop3): enabling auto defrag [ 176.295922][ T4333] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.334377][ T6574] BTRFS info (device loop3): max_inline at 4096 [ 176.351942][ T6574] BTRFS info (device loop3): using free space tree [ 176.357393][ T14] usb 1-1: no configurations [ 176.370403][ T14] usb 1-1: can't read configurations, error -22 [ 176.417018][ T14] usb usb1-port1: unable to enumerate USB device [ 176.540560][ T6574] BTRFS info (device loop3): enabling ssd optimizations [ 176.594446][ T6585] loop4: detected capacity change from 0 to 32768 [ 176.714507][ T6585] XFS (loop4): Mounting V5 Filesystem [ 176.749320][ T4272] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.755852][ T6587] loop2: detected capacity change from 0 to 32768 [ 176.826068][ T6585] XFS (loop4): Ending clean mount [ 176.946458][ T6587] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 177.065703][ T4273] XFS (loop4): Unmounting Filesystem [ 177.166408][ T4265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4265) [ 177.248124][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 177.818574][ T6634] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 177.982753][ T6628] exfat: Deprecated parameter 'namecase' [ 178.027028][ T6628] exfat: Bad value for 'uid' [ 178.352098][ T6643] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.386306][ T6643] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.458697][ T6643] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 178.468095][ T6643] FAT-fs (loop2): Filesystem has been set read-only [ 178.501327][ T6625] XFS (loop3): Mounting V5 Filesystem [ 178.576302][ T6630] JBD2: Ignoring recovery information on journal [ 178.637536][ T6630] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 178.646805][ T6625] XFS (loop3): Ending clean mount [ 178.748273][ T6630] (syz.5.567,6630,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 178.785949][ T4272] XFS (loop3): Unmounting Filesystem [ 178.875370][ T5032] ocfs2: Unmounting device (7,5) on (node local) [ 179.069315][ T6662] set_capacity_and_notify: 5 callbacks suppressed [ 179.069332][ T6662] loop5: detected capacity change from 0 to 256 [ 179.318229][ T6668] loop5: detected capacity change from 0 to 256 [ 179.365400][ T6668] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 180.559454][ T4321] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 180.767810][ T4321] usb 3-1: no configurations [ 180.772507][ T4321] usb 3-1: can't read configurations, error -22 [ 180.956958][ T4321] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 181.006439][ T6681] loop5: detected capacity change from 0 to 128 [ 181.042440][ T6681] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.126557][ T6681] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.155970][ T4321] usb 3-1: no configurations [ 181.162275][ T4321] usb 3-1: can't read configurations, error -22 [ 181.176988][ T4321] usb usb3-port1: attempt power cycle [ 181.208989][ T6681] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 181.237096][ T6681] FAT-fs (loop5): Filesystem has been set read-only [ 181.613582][ T4321] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 181.688135][ T4321] usb 3-1: no configurations [ 181.693025][ T4321] usb 3-1: can't read configurations, error -22 [ 182.948600][ T4321] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 182.997819][ T4321] usb 3-1: device descriptor read/8, error -71 [ 183.132648][ T4321] usb usb3-port1: unable to enumerate USB device [ 183.175622][ T6687] loop5: detected capacity change from 0 to 32768 [ 183.191671][ T6706] loop3: detected capacity change from 0 to 4096 [ 183.236243][ T6706] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 183.400696][ T6706] gfs2: path_lookup on c::: returned error -2 [ 183.805657][ T6721] loop3: detected capacity change from 0 to 256 [ 184.179418][ T6726] loop3: detected capacity change from 0 to 512 [ 184.252298][ T6726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.324215][ T6726] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.605: invalid indirect mapped block 9 (level 0) [ 184.346502][ T6716] loop5: detected capacity change from 0 to 32768 [ 184.379990][ T6716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.601 (6716) [ 184.402238][ T6716] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.416582][ T6726] EXT4-fs (loop3): 1 truncate cleaned up [ 184.447080][ T6726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.457437][ T6716] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 184.466129][ T6716] BTRFS info (device loop5): using free space tree [ 184.596173][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 184.773377][ T6716] BTRFS info (device loop5): enabling ssd optimizations [ 184.820076][ T6716] BTRFS warning (device loop5): get dev_stats failed, device not found [ 184.836970][ T4885] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 184.842036][ T6756] loop3: detected capacity change from 0 to 1024 [ 184.883878][ T6756] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 184.927022][ T6756] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 184.936483][ T6756] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.609: Failed to acquire dquot type 0 [ 184.954638][ T5032] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.981816][ T6756] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 185.002477][ T6759] loop4: detected capacity change from 0 to 164 [ 185.027850][ T4885] usb 3-1: no configurations [ 185.032544][ T4885] usb 3-1: can't read configurations, error -22 [ 185.049247][ T6756] EXT4-fs (loop3): 1 truncate cleaned up [ 185.108800][ T6756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.206510][ T6756] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 185.237151][ T6756] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 185.246654][ T6756] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.609: Failed to acquire dquot type 0 [ 185.262780][ T4885] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 185.436666][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 185.487759][ T4885] usb 3-1: no configurations [ 185.492877][ T4885] usb 3-1: can't read configurations, error -22 [ 185.524601][ T4885] usb usb3-port1: attempt power cycle [ 185.684085][ T6777] loop5: detected capacity change from 0 to 512 [ 185.812943][ T6772] loop3: detected capacity change from 0 to 4096 [ 185.856115][ T6777] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 185.865985][ T6772] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 185.876651][ T6777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 185.887886][ T6777] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.895286][ T6777] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.618: iget: bad i_size value: 12154761577498 [ 185.987444][ T4885] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 185.992210][ T6777] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.618: couldn't read orphan inode 13 (err -117) [ 186.027944][ T4885] usb 3-1: no configurations [ 186.032792][ T4885] usb 3-1: can't read configurations, error -22 [ 186.078152][ T6777] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.102977][ T6777] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.618: dx entry: limit 65535 != root limit 120 [ 186.144068][ T6777] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.618: Corrupt directory, running e2fsck is recommended [ 186.174034][ T6777] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.618: dx entry: limit 65535 != root limit 120 [ 186.197256][ T4885] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 186.205378][ T6777] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.618: Corrupt directory, running e2fsck is recommended [ 186.236406][ T6777] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.618: path /65/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 186.257842][ T4885] usb 3-1: no configurations [ 186.262576][ T4885] usb 3-1: can't read configurations, error -22 [ 186.275454][ T4885] usb usb3-port1: unable to enumerate USB device [ 186.387899][ T5032] EXT4-fs (loop5): unmounting filesystem. [ 186.585045][ T6795] loop5: detected capacity change from 0 to 128 [ 187.667979][ T6795] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.707384][ T6795] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.795947][ T6799] loop4: detected capacity change from 0 to 2048 [ 187.838971][ T5497] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.867418][ T6803] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.268547][ T6812] loop2: detected capacity change from 0 to 512 [ 188.276402][ T6812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.303536][ T6812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 188.318486][ T6812] System zones: 1-12 [ 188.331438][ T6812] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.632: bad orphan inode 131072 [ 188.346655][ T6812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.405439][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 188.658506][ T6790] loop3: detected capacity change from 0 to 32768 [ 190.335808][ T6839] MTD: Couldn't look up './dev/mtdblock0': -13 [ 190.386040][ T6842] loop5: detected capacity change from 0 to 512 [ 190.425106][ T6842] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.494942][ T6842] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.643: invalid indirect mapped block 32768 (level 2) [ 190.604946][ T6842] EXT4-fs (loop5): Remounting filesystem read-only [ 190.636531][ T6842] EXT4-fs (loop5): 1 orphan inode deleted [ 190.646672][ T6829] loop2: detected capacity change from 0 to 40427 [ 190.669815][ T6842] EXT4-fs (loop5): 1 truncate cleaned up [ 190.678816][ T6842] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.680361][ T6829] F2FS-fs (loop2): invalid crc value [ 190.745235][ T6829] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.795290][ T6842] EXT4-fs (loop5): shut down requested (2) [ 190.897079][ T6829] F2FS-fs (loop2): Start checkpoint disabled! [ 190.897780][ T5032] EXT4-fs (loop5): unmounting filesystem. [ 190.983725][ T6829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 191.075083][ T6851] loop5: detected capacity change from 0 to 256 [ 191.309038][ T57] kworker/u4:4: attempt to access beyond end of device [ 191.309038][ T57] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.327560][ T6855] loop3: detected capacity change from 0 to 512 [ 191.376056][ T6855] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.438317][ T6855] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.648: corrupted in-inode xattr [ 191.457401][ T6855] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.648: couldn't read orphan inode 15 (err -117) [ 191.487238][ T6855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.595130][ T6855] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 191.710464][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 191.907612][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 191.913741][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 191.930369][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 192.033508][ T6871] loop4: detected capacity change from 0 to 4096 [ 192.041338][ T6871] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 192.067774][ T6873] loop2: detected capacity change from 0 to 2048 [ 192.094669][ T6873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.117709][ T6871] ntfs3: loop4: ino=5, "/" directory corrupted [ 192.168290][ T6875] loop3: detected capacity change from 0 to 512 [ 192.229884][ T6875] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.264519][ T6875] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.655: invalid indirect mapped block 9 (level 0) [ 192.411928][ T6875] EXT4-fs (loop3): 1 truncate cleaned up [ 192.418551][ T6875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.629083][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 192.916788][ T6892] loop4: detected capacity change from 0 to 512 [ 192.938406][ T6892] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.994075][ T6892] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.663: corrupted in-inode xattr [ 193.047907][ T6892] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.663: couldn't read orphan inode 15 (err -117) [ 193.112467][ T6892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.117775][ T6884] loop2: detected capacity change from 0 to 32768 [ 193.147001][ T6884] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.658 (6884) [ 193.184235][ T6884] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 193.194378][ T6892] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 193.198620][ T6884] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 193.220728][ T6884] BTRFS info (device loop2): using free space tree [ 193.371296][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 193.642346][ T6884] BTRFS info (device loop2): enabling ssd optimizations [ 193.704009][ T6926] loop5: detected capacity change from 0 to 128 [ 193.791588][ T4275] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 194.234875][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.241274][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.330400][ T6936] jffs2: notice: (6936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.331172][ T4265] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop2 scanned by udevd (4265) [ 194.577299][ T5497] read_mapping_page failed! [ 194.582268][ T5497] ERROR: (device loop3): txCommit: [ 194.582268][ T5497] [ 194.606617][ T5497] jfs_write_inode: jfs_commit_inode failed! [ 194.774347][ T6949] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.841221][ T6947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.894562][ T6949] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.679: corrupted in-inode xattr [ 194.991446][ T6949] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.679: couldn't read orphan inode 15 (err -117) [ 195.097701][ T6949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.217525][ T6949] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 195.377512][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 195.432522][ T6938] set_capacity_and_notify: 4 callbacks suppressed [ 195.432538][ T6938] loop5: detected capacity change from 0 to 32768 [ 195.452596][ T6934] XFS (loop2): Mounting V5 Filesystem [ 195.565230][ T6938] XFS (loop5): Mounting V5 Filesystem [ 195.574207][ T6934] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 195.599326][ T6934] XFS (loop2): Starting recovery (logdev: internal) [ 195.615883][ T6934] XFS (loop2): Ending recovery (logdev: internal) [ 195.628076][ T6977] loop3: detected capacity change from 0 to 256 [ 195.715551][ T6977] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 195.750292][ T6938] XFS (loop5): Ending clean mount [ 195.817470][ T4275] XFS (loop2): Unmounting Filesystem [ 195.914979][ T5032] XFS (loop5): Unmounting Filesystem [ 196.469390][ T6989] jffs2: notice: (6989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 196.718908][ T6979] loop4: detected capacity change from 0 to 40427 [ 196.757555][ T6979] F2FS-fs (loop4): invalid crc value [ 196.774663][ T6979] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.904248][ T6979] F2FS-fs (loop4): Start checkpoint disabled! [ 196.970318][ T7005] loop2: detected capacity change from 0 to 512 [ 197.017012][ T6979] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 197.053237][ T7005] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.132119][ T7005] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.695: corrupted in-inode xattr [ 197.170665][ T7005] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.695: couldn't read orphan inode 15 (err -117) [ 197.236929][ T7005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.407693][ T11] kworker/u4:1: attempt to access beyond end of device [ 197.407693][ T11] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 197.414507][ T7005] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 197.594961][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 197.654626][ T6995] loop5: detected capacity change from 0 to 40427 [ 197.720475][ T6995] F2FS-fs (loop5): invalid crc value [ 197.804353][ T6995] F2FS-fs (loop5): Found nat_bits in checkpoint [ 198.014176][ T6995] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 198.199538][ T5032] syz-executor: attempt to access beyond end of device [ 198.199538][ T5032] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.250326][ T7032] loop4: detected capacity change from 0 to 4096 [ 198.297298][ T7032] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 198.523287][ T7037] loop2: detected capacity change from 0 to 512 [ 198.650656][ T7037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.667068][ T7037] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.707134][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 199.700389][ T7040] loop3: detected capacity change from 0 to 40427 [ 199.738438][ T7040] F2FS-fs (loop3): invalid crc value [ 199.764064][ T7040] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.867993][ T7040] F2FS-fs (loop3): Start checkpoint disabled! [ 199.909561][ T7040] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 200.274852][ T4347] kworker/u4:8: attempt to access beyond end of device [ 200.274852][ T4347] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 200.681835][ T5299] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 200.794661][ T7084] loop4: detected capacity change from 0 to 32768 [ 200.881228][ T5299] usb 3-1: Using ep0 maxpacket: 32 [ 200.892686][ T5299] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.921362][ T5299] usb 3-1: config 0 has no interface number 0 [ 200.951777][ T5299] usb 3-1: config 0 interface 184 has no altsetting 0 [ 200.974519][ T5299] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 201.014784][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.054691][ T5299] usb 3-1: Product: syz [ 201.060230][ T5299] usb 3-1: Manufacturer: syz [ 201.064878][ T5299] usb 3-1: SerialNumber: syz [ 201.077140][ T7086] loop5: detected capacity change from 0 to 32768 [ 201.124652][ T5299] usb 3-1: config 0 descriptor?? [ 201.150774][ T5299] smsc75xx v1.0.0 [ 201.366999][ T4317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.497224][ T7103] device syzkaller1 entered promiscuous mode [ 201.700561][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.714337][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.724548][ T4317] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 201.787385][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.805502][ T4317] usb 4-1: config 0 descriptor?? [ 201.957853][ T5299] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 201.974306][ T5299] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.188352][ T5299] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 202.207023][ T5299] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 202.223215][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.226943][ T5299] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 202.243583][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.261369][ T5299] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 202.264655][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.284378][ T5299] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 202.305219][ T5299] usb 3-1: USB disconnect, device number 13 [ 202.311325][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.325065][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.332406][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.347177][ T4317] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 202.372360][ T4317] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 202.498316][ T4317] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 202.901583][ T4317] cp2112 0003:10C4:EA90.0009: error setting SMBus config [ 202.920538][ T4317] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71 [ 202.982988][ T4317] usb 4-1: USB disconnect, device number 9 [ 203.315082][ T7138] fido_id[7138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 203.449217][ T7128] loop4: detected capacity change from 0 to 32768 [ 203.486953][ T5296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.506062][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.746'. [ 203.555268][ T7128] XFS (loop4): Mounting V5 Filesystem [ 203.649418][ T7128] XFS (loop4): Ending clean mount [ 203.683428][ T5296] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.727444][ T5296] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 203.736786][ T4273] XFS (loop4): Unmounting Filesystem [ 203.758344][ T5296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.766615][ T5296] usb 1-1: Product: syz [ 203.775784][ T5296] usb 1-1: Manufacturer: syz [ 203.786177][ T5296] usb 1-1: SerialNumber: syz [ 203.929736][ T5296] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 203.935785][ T5296] cdc_wdm 1-1:1.0: Unknown control protocol [ 204.037093][ T5296] usb 1-1: USB disconnect, device number 10 [ 204.141801][ T7168] loop3: detected capacity change from 0 to 4096 [ 204.168716][ T7168] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 204.697035][ T4761] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 205.038629][ T4761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.048972][ T4761] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.059060][ T4761] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 205.068669][ T4761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.162917][ T4761] usb 4-1: config 0 descriptor?? [ 205.220284][ T7178] loop2: detected capacity change from 0 to 32768 [ 205.311599][ T7178] XFS (loop2): Mounting V5 Filesystem [ 205.351954][ T7178] XFS (loop2): Ending clean mount [ 205.386695][ T14] usb 4-1: USB disconnect, device number 10 [ 205.504412][ T4275] XFS (loop2): Unmounting Filesystem [ 205.820432][ T7207] jffs2: notice: (7207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.947043][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.158596][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.181594][ T14] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.199755][ T14] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 206.212554][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.225809][ T14] usb 4-1: config 0 descriptor?? [ 206.436088][ T7211] loop2: detected capacity change from 0 to 32768 [ 206.524702][ T7211] XFS (loop2): Mounting V5 Filesystem [ 206.547145][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 206.612975][ T7211] XFS (loop2): Ending clean mount [ 206.750590][ T4275] XFS (loop2): Unmounting Filesystem [ 208.204075][ T5296] usb 4-1: USB disconnect, device number 11 [ 208.344296][ T7256] device syzkaller1 entered promiscuous mode [ 208.577082][ T4886] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 208.758732][ T4886] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.780002][ T4886] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.810579][ T4886] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.854219][ T4886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 208.864344][ T4886] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 208.894716][ T4886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.927199][ T4886] usb 6-1: config 0 descriptor?? [ 209.126608][ T7259] loop3: detected capacity change from 0 to 32768 [ 209.188999][ T7271] netlink: 112 bytes leftover after parsing attributes in process `syz.2.788'. [ 209.204565][ T7271] netlink: 112 bytes leftover after parsing attributes in process `syz.2.788'. [ 209.231425][ T7259] XFS (loop3): Mounting V5 Filesystem [ 209.352967][ T4886] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0 [ 209.362017][ T4886] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0 [ 209.370230][ T4886] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0 [ 209.377861][ T4886] hid-rmi 0003:1532:011D.000A: unexpected long global item [ 209.378820][ T7259] XFS (loop3): Ending clean mount [ 209.385642][ T4886] hid-rmi 0003:1532:011D.000A: parse failed [ 209.411954][ T4886] hid-rmi: probe of 0003:1532:011D.000A failed with error -22 [ 209.496579][ T7265] loop4: detected capacity change from 0 to 40427 [ 209.584356][ T4886] usb 6-1: USB disconnect, device number 8 [ 209.616019][ T7265] F2FS-fs (loop4): invalid crc value [ 209.635747][ T4272] XFS (loop3): Unmounting Filesystem [ 209.647044][ T7265] F2FS-fs (loop4): Found nat_bits in checkpoint [ 209.791696][ T7265] F2FS-fs (loop4): Start checkpoint disabled! [ 209.859305][ T7265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 210.108137][ T47] kworker/u4:3: attempt to access beyond end of device [ 210.108137][ T47] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 210.657146][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 210.864722][ T7315] loop4: detected capacity change from 0 to 512 [ 210.873715][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.888482][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.908184][ T14] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.927031][ T14] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 210.957589][ T14] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 210.984255][ T7315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.997050][ T7315] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.006930][ T4761] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 211.046909][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 211.141575][ T14] usb 1-1: config 1 interface 1 has no altsetting 0 [ 212.300194][ T4761] usb 6-1: unable to get BOS descriptor or descriptor too short [ 212.305425][ T14] usb 1-1: string descriptor 0 read error: -22 [ 212.322599][ T14] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 212.333768][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.354792][ T4761] usb 6-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 212.394866][ T4761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.425833][ T4761] usb 6-1: Product: syz [ 212.430587][ T4761] usb 6-1: Manufacturer: syz [ 212.435271][ T4761] usb 6-1: SerialNumber: syz [ 212.478353][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 212.574247][ T14] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 212.625577][ T7306] loop2: detected capacity change from 0 to 32768 [ 212.794495][ T14] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 212.925320][ T14] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 212.952031][ T14] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 212.965625][ T4761] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 212.978160][ T4761] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 213.013212][ T14] usb 1-1: USB disconnect, device number 11 [ 213.030279][ T7306] XFS (loop2): Mounting V5 Filesystem [ 213.076155][ T7306] XFS (loop2): Ending clean mount [ 213.090961][ T4761] usb 6-1: USB disconnect, device number 9 [ 213.227858][ T4275] XFS (loop2): Unmounting Filesystem [ 213.413658][ T5221] udevd[5221]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 213.807028][ T4886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 214.000469][ T4886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.023494][ T4886] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.056948][ T4886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.078007][ T4886] usb 5-1: config 0 descriptor?? [ 215.348207][ T4886] usbhid 5-1:0.0: can't add hid device: -71 [ 215.372215][ T4886] usbhid: probe of 5-1:0.0 failed with error -71 [ 215.388594][ T4886] usb 5-1: USB disconnect, device number 5 [ 215.956973][ T4886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 216.148673][ T4886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.160517][ T7370] device syzkaller1 entered promiscuous mode [ 216.168935][ T4886] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 216.206281][ T4886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.237330][ T4886] usb 5-1: config 0 descriptor?? [ 216.353092][ T7373] loop2: detected capacity change from 0 to 512 [ 216.435334][ T7373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.478006][ T7373] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.596623][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 216.862603][ T7386] loop3: detected capacity change from 0 to 64 [ 218.064882][ T7386] hfs: unable to locate alternate MDB [ 218.086986][ T7386] hfs: continuing without an alternate MDB [ 218.153472][ T4886] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 218.163864][ T4886] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 218.297365][ T4886] usb 5-1: USB disconnect, device number 6 [ 218.297426][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 218.473534][ T7396] loop2: detected capacity change from 0 to 2048 [ 218.548128][ T7396] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.563948][ T7400] loop4: detected capacity change from 0 to 512 [ 218.645884][ T7400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.700141][ T7400] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.941839][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 220.202167][ T4886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.418844][ T4886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.443046][ T4886] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 220.459386][ T4886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.476042][ T4886] usb 5-1: config 0 descriptor?? [ 220.694231][ T4886] usbhid 5-1:0.0: can't add hid device: -71 [ 220.708903][ T4886] usbhid: probe of 5-1:0.0 failed with error -71 [ 220.735958][ T4886] usb 5-1: USB disconnect, device number 7 [ 221.316997][ T4886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.419670][ T7462] loop3: detected capacity change from 0 to 512 [ 221.436482][ T7462] EXT4-fs: Ignoring removed oldalloc option [ 221.459968][ T7462] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 221.513063][ T7462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 221.534873][ T4886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.538924][ T7462] EXT4-fs (loop3): orphan cleanup on readonly fs [ 221.553875][ T7441] loop2: detected capacity change from 0 to 40427 [ 221.561428][ T4886] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 221.571470][ T4886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.581201][ T4886] usb 5-1: config 0 descriptor?? [ 221.590091][ T7441] F2FS-fs (loop2): invalid crc value [ 221.598515][ T7462] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.848: bad orphan inode 267 [ 221.609272][ T7462] EXT4-fs (loop3): Remounting filesystem read-only [ 221.615874][ T7462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.656235][ T7441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.703029][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 221.813244][ T7441] F2FS-fs (loop2): Start checkpoint disabled! [ 221.885431][ T7441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 222.934991][ T4886] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 222.968998][ T4886] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 223.018352][ T7458] loop5: detected capacity change from 0 to 40427 [ 223.073381][ T7458] F2FS-fs (loop5): invalid crc value [ 223.112807][ T7475] loop3: detected capacity change from 0 to 64 [ 223.125678][ T7458] F2FS-fs (loop5): Found nat_bits in checkpoint [ 223.157107][ T7475] hfs: unable to locate alternate MDB [ 223.194337][ T7475] hfs: continuing without an alternate MDB [ 223.251102][ T47] kworker/u4:3: attempt to access beyond end of device [ 223.251102][ T47] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 223.288586][ T4761] usb 5-1: USB disconnect, device number 8 [ 223.288597][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 223.371518][ T7458] F2FS-fs (loop5): Start checkpoint disabled! [ 223.443347][ T7458] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 224.155435][ T7492] netlink: 104 bytes leftover after parsing attributes in process `syz.3.859'. [ 224.326945][ T4886] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 224.516999][ T4886] usb 6-1: Using ep0 maxpacket: 32 [ 224.524270][ T4886] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 224.543102][ T4886] usb 6-1: config 0 has no interface number 0 [ 224.555255][ T4886] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 224.574332][ T4886] usb 6-1: config 0 interface 196 has no altsetting 0 [ 224.590712][ T4886] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 224.621407][ T4886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.636393][ T4886] usb 6-1: Product: syz [ 224.641491][ T4886] usb 6-1: Manufacturer: syz [ 224.646423][ T4886] usb 6-1: SerialNumber: syz [ 224.656940][ T5299] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.674313][ T4886] usb 6-1: config 0 descriptor?? [ 224.684238][ T7490] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 224.859285][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.879322][ T5299] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.902295][ T5299] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 224.918582][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.119928][ T4886] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 226.147955][ T5299] usb 5-1: config 0 descriptor?? [ 226.169194][ T5299] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 226.176990][ T4877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 226.401974][ T4877] usb 1-1: Using ep0 maxpacket: 32 [ 226.428237][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.457044][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.484561][ T4877] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.493975][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.523535][ T4877] usb 1-1: config 0 descriptor?? [ 226.532774][ T4877] hub 1-1:0.0: USB hub found [ 226.734845][ T4877] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 226.956431][ T7522] loop2: detected capacity change from 0 to 2048 [ 226.994102][ T7522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.131769][ T7513] loop3: detected capacity change from 0 to 32768 [ 227.147579][ T4877] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 227.204877][ T4877] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 227.280159][ T7513] XFS (loop3): Mounting V5 Filesystem [ 227.324424][ T7513] XFS (loop3): Ending clean mount [ 227.494308][ T4877] usb 6-1: USB disconnect, device number 10 [ 227.514995][ T4272] XFS (loop3): Unmounting Filesystem [ 227.699410][ T4877] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 227.856266][ T7502] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 228.072225][ T7502] usb 1-1: device firmware changed [ 228.118297][ T4761] usb 1-1: USB disconnect, device number 12 [ 228.147981][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 228.170812][ T14] usb 5-1: USB disconnect, device number 9 [ 228.307618][ T4761] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 228.499822][ T7569] input: syz1 as /devices/virtual/input/input12 [ 228.507297][ T4761] usb 1-1: Using ep0 maxpacket: 32 [ 228.515888][ T4761] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.543046][ T4761] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.571626][ T4761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.623735][ T4761] hub 1-1:1.0: bad descriptor, ignoring hub [ 228.639011][ T4761] hub: probe of 1-1:1.0 failed with error -5 [ 228.732709][ T4761] usb 1-1: USB disconnect, device number 13 [ 228.892674][ T7583] loop5: detected capacity change from 0 to 2048 [ 228.926459][ T7583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.495543][ T7598] using random self ethernet address [ 230.511232][ T7598] using random host ethernet address [ 230.726952][ T5034] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 230.918900][ T5034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.939584][ T5034] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.978685][ T5034] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 231.005929][ T5034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.014261][ T5034] usb 3-1: Product: syz [ 231.018528][ T5034] usb 3-1: Manufacturer: syz [ 231.023141][ T5034] usb 3-1: SerialNumber: syz [ 231.156450][ T7590] loop5: detected capacity change from 0 to 32768 [ 231.218294][ T4877] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 231.267655][ T5034] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 231.310181][ T7590] XFS (loop5): Mounting V5 Filesystem [ 231.406526][ T7590] XFS (loop5): Ending clean mount [ 231.429022][ T4877] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.438443][ T4877] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 231.449862][ T4877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.472839][ T4877] usb 5-1: config 0 descriptor?? [ 231.504590][ T4877] usb 3-1: USB disconnect, device number 14 [ 231.520626][ T4877] usblp0: removed [ 231.607358][ T5032] XFS (loop5): Unmounting Filesystem [ 231.686000][ T4317] usb 5-1: USB disconnect, device number 10 [ 231.936060][ T7630] loop5: detected capacity change from 0 to 16 [ 231.963663][ T7630] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 233.357117][ T4317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 233.577346][ T4317] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.586390][ T4317] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 233.606270][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.627269][ T4317] usb 5-1: config 0 descriptor?? [ 233.747107][ T5034] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 233.946950][ T5034] usb 6-1: Using ep0 maxpacket: 32 [ 233.954162][ T5034] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 233.985771][ T5034] usb 6-1: config 2 has no interface number 0 [ 233.999121][ T5034] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 234.024603][ T5034] usb 6-1: config 2 interface 88 has no altsetting 0 [ 234.046676][ T5034] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 234.073883][ T5034] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 234.096190][ T5034] usb 6-1: Product: syz [ 234.103430][ T5034] usb 6-1: Manufacturer: syz [ 234.115486][ T5034] usb 6-1: SerialNumber: syz [ 234.136517][ T7643] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 234.366682][ T7643] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 234.417173][ T5299] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 234.439099][ T7660] loop3: detected capacity change from 0 to 8 [ 234.598299][ T5299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.609097][ T5299] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.639275][ T5299] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 234.682000][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.692785][ T5299] usb 3-1: config 0 descriptor?? [ 234.725430][ T5299] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 234.893422][ T5358] usb 5-1: USB disconnect, device number 11 [ 235.088745][ T7664] loop3: detected capacity change from 0 to 40427 [ 235.125117][ T7664] F2FS-fs (loop3): invalid crc value [ 235.165703][ T7664] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.192903][ T5034] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 235.204909][ T5034] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 235.244384][ T5034] asix: probe of 6-1:2.88 failed with error -71 [ 235.279553][ T7664] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 235.288494][ T5034] usb 6-1: USB disconnect, device number 11 [ 235.360667][ T26] audit: type=1800 audit(1787739108.754:41): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.902" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 235.378431][ T7664] syz.3.902: attempt to access beyond end of device [ 235.378431][ T7664] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 235.405190][ T5358] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 235.442677][ T4272] syz-executor: attempt to access beyond end of device [ 235.442677][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.609024][ T5358] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 235.646001][ T5358] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.775993][ T5358] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 236.790882][ T5358] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 236.805053][ T5358] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.812395][ T5358] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 236.821763][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.846165][ T5358] usb 5-1: config 0 descriptor?? [ 236.867119][ T7666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.161497][ T4317] usb 3-1: USB disconnect, device number 15 [ 237.327783][ T5358] waltop 0003:172F:0500.000C: item fetching failed at offset 6/7 [ 237.342827][ T5358] waltop: probe of 0003:172F:0500.000C failed with error -22 [ 237.528365][ T4317] usb 5-1: USB disconnect, device number 12 [ 237.849392][ T5299] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 237.924156][ T5299] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.999524][ T7695] loop2: detected capacity change from 0 to 32768 [ 238.155904][ T7695] XFS (loop2): Mounting V5 Filesystem [ 238.268165][ T7695] XFS (loop2): Ending clean mount [ 239.569529][ T4275] XFS (loop2): Unmounting Filesystem [ 240.048470][ T7710] loop5: detected capacity change from 0 to 40427 [ 240.115331][ T7710] F2FS-fs (loop5): invalid crc value [ 240.144787][ T7710] F2FS-fs (loop5): Found nat_bits in checkpoint [ 240.277125][ T4317] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.292014][ T7710] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 240.363937][ T26] audit: type=1800 audit(1787739113.754:42): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.916" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 240.392900][ T7710] syz.5.916: attempt to access beyond end of device [ 240.392900][ T7710] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 240.489108][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.512002][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.541169][ T4317] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 240.566707][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.596375][ T4317] usb 4-1: config 0 descriptor?? [ 240.611721][ T5032] syz-executor: attempt to access beyond end of device [ 240.611721][ T5032] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.650374][ T4317] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 240.806962][ T5299] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 240.990305][ T5299] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 241.013181][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.026534][ T7753] loop5: detected capacity change from 0 to 8 [ 241.039517][ T5299] usb 3-1: config 0 descriptor?? [ 241.052857][ T5299] pwc: Samsung MPC-C10 USB webcam detected. [ 241.243068][ T7758] loop5: detected capacity change from 0 to 16 [ 241.255006][ T5299] pwc: send_video_command error -71 [ 241.267164][ T5299] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 241.285058][ T7758] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 241.295103][ T5299] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 241.317890][ T5299] usb 3-1: USB disconnect, device number 16 [ 243.050765][ T5296] usb 4-1: USB disconnect, device number 12 [ 243.149818][ T7783] netlink: 104 bytes leftover after parsing attributes in process `syz.0.937'. [ 243.359045][ T7791] netlink: 104 bytes leftover after parsing attributes in process `syz.0.941'. [ 243.553736][ T5034] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 244.667169][ T5296] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.715655][ T7799] loop4: detected capacity change from 0 to 8 [ 244.797075][ T5034] usb 3-1: Using ep0 maxpacket: 32 [ 244.804725][ T5034] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 244.835825][ T5034] usb 3-1: config 0 has no interface number 0 [ 244.871051][ T5034] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 244.895694][ T5034] usb 3-1: config 0 interface 196 has no altsetting 0 [ 244.902905][ T5296] usb 4-1: Using ep0 maxpacket: 16 [ 244.921017][ T5034] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 244.931416][ T5296] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.950832][ T5034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.965328][ T5296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.972484][ T5296] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 244.987267][ T5034] usb 3-1: Product: syz [ 244.991489][ T5034] usb 3-1: Manufacturer: syz [ 244.996131][ T5034] usb 3-1: SerialNumber: syz [ 245.001493][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.041671][ T5034] usb 3-1: config 0 descriptor?? [ 245.047638][ T7785] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.060202][ T5296] usb 4-1: config 0 descriptor?? [ 245.532709][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.550218][ T5034] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 245.566983][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.589550][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.606660][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.623845][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.636389][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.643847][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.653839][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.674051][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.684163][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.713814][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.721803][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.735096][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.743360][ T5296] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 245.750528][ T5296] pyra 0003:1E7D:2CF6.000E: unbalanced collection at end of report description [ 245.760461][ T5296] pyra 0003:1E7D:2CF6.000E: parse failed [ 245.766156][ T5296] pyra: probe of 0003:1E7D:2CF6.000E failed with error -22 [ 245.784856][ T5296] usb 4-1: USB disconnect, device number 13 [ 245.837337][ T5358] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 245.857002][ T4317] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.030596][ T5358] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 246.040437][ T5358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.052091][ T5358] usb 6-1: config 0 descriptor?? [ 246.118930][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.129590][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.145766][ T5358] pwc: Samsung MPC-C10 USB webcam detected. [ 246.152218][ T4317] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 246.161758][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.172185][ T4317] usb 1-1: config 0 descriptor?? [ 246.181851][ T4317] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 246.234284][ T7833] loop4: detected capacity change from 0 to 2048 [ 246.275719][ T7833] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.357497][ T5358] pwc: send_video_command error -71 [ 246.362807][ T5358] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 246.404972][ T5358] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 246.437226][ T5358] usb 6-1: USB disconnect, device number 12 [ 246.493107][ C1] ipheth 3-1:0.196: ipheth_rcvbulk_callback: urb status: -75 [ 246.703722][ T5358] usb 3-1: USB disconnect, device number 17 [ 248.009202][ T7836] loop3: detected capacity change from 0 to 32768 [ 248.063702][ T5358] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 248.111432][ T7836] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 248.329933][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 248.555009][ T7864] loop5: detected capacity change from 0 to 8 [ 249.049237][ T4276] usb 1-1: USB disconnect, device number 14 [ 249.223816][ T7854] loop2: detected capacity change from 0 to 40427 [ 249.262242][ T7854] F2FS-fs (loop2): invalid crc value [ 249.280272][ T7854] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.395927][ T7854] F2FS-fs (loop2): Start checkpoint disabled! [ 249.607031][ T7854] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 249.663711][ T7875] loop5: detected capacity change from 0 to 32768 [ 251.045264][ T7875] XFS (loop5): Mounting V5 Filesystem [ 251.113121][ T4541] kworker/u4:9: attempt to access beyond end of device [ 251.113121][ T4541] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 251.139913][ T7875] XFS (loop5): Ending clean mount [ 251.397123][ T5032] XFS (loop5): Unmounting Filesystem [ 251.876977][ T5034] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.208670][ T5034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.227029][ T5034] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.309187][ T5034] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 252.318882][ T5034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.338947][ T5034] usb 5-1: config 0 descriptor?? [ 252.347816][ T5034] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 252.377511][ T5296] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 252.423413][ T7931] netlink: 104 bytes leftover after parsing attributes in process `syz.3.966'. [ 252.556505][ T7920] loop5: detected capacity change from 0 to 32768 [ 252.558658][ T5296] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 252.572361][ T7920] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 252.671170][ T5032] ocfs2: Unmounting device (7,5) on (node local) [ 252.681649][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.704267][ T5296] usb 3-1: config 0 descriptor?? [ 252.752675][ T5296] pwc: Samsung MPC-C10 USB webcam detected. [ 252.936655][ T5296] pwc: send_video_command error -71 [ 252.950006][ T5296] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 252.988629][ T5296] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 253.030031][ T5296] usb 3-1: USB disconnect, device number 18 [ 254.096946][ T5296] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 254.297197][ T5296] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 254.308387][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.335935][ T5296] usb 3-1: config 0 descriptor?? [ 254.368275][ T5296] pwc: Samsung MPC-C10 USB webcam detected. [ 254.646931][ T4276] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 254.753252][ T5296] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.763486][ T5296] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.785219][ T5296] pwc: recv_control_msg error -32 req 04 val 1700 [ 254.801396][ T5296] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.816420][ T5296] pwc: recv_control_msg error -32 req 04 val 1000 [ 254.837546][ T5296] pwc: recv_control_msg error -32 req 04 val 1300 [ 254.852687][ T5296] pwc: recv_control_msg error -32 req 04 val 1400 [ 254.870775][ T4276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.882664][ T5296] pwc: recv_control_msg error -32 req 02 val 2000 [ 254.904008][ T5296] pwc: recv_control_msg error -32 req 02 val 2100 [ 254.910845][ T4276] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.910890][ T4276] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 254.983792][ T5296] pwc: recv_control_msg error -32 req 02 val 2200 [ 255.007627][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.010781][ T5296] pwc: recv_control_msg error -71 req 06 val 0600 [ 255.052507][ T4276] usb 1-1: config 0 descriptor?? [ 255.057383][ T5296] pwc: recv_control_msg error -71 req 04 val 1500 [ 255.076982][ T5296] pwc: recv_control_msg error -71 req 02 val 2500 [ 255.083503][ T5358] usb 5-1: USB disconnect, device number 13 [ 255.087870][ T4276] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 255.120359][ T5296] pwc: recv_control_msg error -71 req 02 val 2400 [ 255.156231][ T5296] pwc: recv_control_msg error -71 req 02 val 2600 [ 255.177106][ T5296] pwc: recv_control_msg error -71 req 02 val 2900 [ 255.196349][ T5296] pwc: recv_control_msg error -71 req 02 val 2800 [ 255.217378][ T5296] pwc: recv_control_msg error -71 req 04 val 1100 [ 255.247025][ T5296] pwc: recv_control_msg error -71 req 04 val 1200 [ 255.259828][ T5296] pwc: Registered as video103. [ 255.278486][ T5296] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 255.332392][ T5296] usb 3-1: USB disconnect, device number 19 [ 255.455349][ T7967] loop5: detected capacity change from 0 to 32768 [ 255.624857][ T7967] XFS (loop5): Mounting V5 Filesystem [ 255.669094][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.675449][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.702281][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 255.734411][ T7994] device ip6erspan0 entered promiscuous mode [ 255.743498][ T7967] XFS (loop5): Ending clean mount [ 255.761035][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.986'. [ 255.948161][ T5032] XFS (loop5): Unmounting Filesystem [ 256.147103][ T7987] loop2: detected capacity change from 0 to 32768 [ 256.328656][ T7987] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 256.352212][ T7989] loop3: detected capacity change from 0 to 40427 [ 256.394475][ T7989] F2FS-fs (loop3): invalid crc value [ 256.433511][ T7989] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.487809][ T7989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 256.540398][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 256.738253][ T4272] syz-executor: attempt to access beyond end of device [ 256.738253][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.126375][ T4276] usb 1-1: USB disconnect, device number 15 [ 258.507121][ T4761] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 258.543855][ T8027] netlink: 104 bytes leftover after parsing attributes in process `syz.3.991'. [ 258.701205][ T4761] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.717083][ T5296] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 258.725280][ T4761] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.741102][ T4761] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 258.751145][ T4761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.762249][ T4761] usb 6-1: config 0 descriptor?? [ 258.779352][ T4761] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 258.917088][ T5296] usb 1-1: Using ep0 maxpacket: 16 [ 258.925936][ T5296] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 258.927008][ T4276] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 258.941663][ T5296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.952971][ T5296] usb 1-1: Product: syz [ 258.953595][ T8033] loop4: detected capacity change from 0 to 32768 [ 258.962456][ T5296] usb 1-1: Manufacturer: syz [ 258.981936][ T5296] usb 1-1: SerialNumber: syz [ 258.988650][ T5296] usb 1-1: config 0 descriptor?? [ 258.991254][ T8033] XFS (loop4): Mounting V5 Filesystem [ 258.998169][ T5296] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 259.022847][ T5296] usb 1-1: Detected FT-X [ 259.093713][ T8033] XFS (loop4): Ending clean mount [ 259.141694][ T4276] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 259.166592][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.207081][ T4276] usb 4-1: config 0 descriptor?? [ 259.223013][ T4276] pwc: Samsung MPC-C10 USB webcam detected. [ 259.249546][ T4273] XFS (loop4): Unmounting Filesystem [ 259.401179][ T5296] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 259.418746][ T4276] pwc: send_video_command error -71 [ 259.427136][ T4276] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 259.434207][ T5296] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 259.444962][ T4276] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 259.456024][ T5296] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 259.478449][ T4276] usb 4-1: USB disconnect, device number 14 [ 259.500401][ T5296] usb 1-1: USB disconnect, device number 16 [ 259.545529][ T5296] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 259.563386][ T8043] loop2: detected capacity change from 0 to 32768 [ 259.566815][ T5296] ftdi_sio 1-1:0.0: device disconnected [ 259.651858][ T8043] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 259.755064][ T4275] ocfs2: Unmounting device (7,2) on (node local) [ 261.002686][ T4276] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 261.024783][ T8048] loop4: detected capacity change from 0 to 40427 [ 261.055113][ T8048] F2FS-fs (loop4): invalid crc value [ 261.134460][ T8048] F2FS-fs (loop4): Found nat_bits in checkpoint [ 261.208439][ T4276] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 261.226388][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.253974][ T5296] usb 6-1: USB disconnect, device number 13 [ 261.254356][ T4276] usb 4-1: config 0 descriptor?? [ 261.299857][ T8048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 261.307648][ T4276] pwc: Samsung MPC-C10 USB webcam detected. [ 261.409141][ T26] audit: type=1800 audit(1787739134.804:43): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1001" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 261.412510][ T8048] syz.4.1001: attempt to access beyond end of device [ 261.412510][ T8048] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 261.534531][ T4273] syz-executor: attempt to access beyond end of device [ 261.534531][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.678409][ T4276] pwc: recv_control_msg error -32 req 02 val 2b00 [ 261.690221][ T4276] pwc: recv_control_msg error -32 req 02 val 2700 [ 261.695657][ T8071] loop2: detected capacity change from 0 to 16 [ 261.711579][ T4276] pwc: recv_control_msg error -32 req 04 val 1700 [ 261.739509][ T8071] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 261.749183][ T4276] pwc: recv_control_msg error -32 req 02 val 2c00 [ 261.768027][ T4276] pwc: recv_control_msg error -32 req 04 val 1000 [ 261.777116][ T5296] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 261.790521][ T4276] pwc: recv_control_msg error -32 req 04 val 1300 [ 261.821075][ T4276] pwc: recv_control_msg error -32 req 04 val 1400 [ 261.857012][ T4276] pwc: recv_control_msg error -32 req 02 val 2000 [ 261.876327][ T4276] pwc: recv_control_msg error -32 req 02 val 2100 [ 261.898479][ T4276] pwc: recv_control_msg error -32 req 02 val 2200 [ 261.907292][ T4276] pwc: recv_control_msg error -71 req 06 val 0600 [ 261.936928][ T4276] pwc: recv_control_msg error -71 req 04 val 1500 [ 261.943792][ T4276] pwc: recv_control_msg error -71 req 02 val 2500 [ 261.958019][ T4276] pwc: recv_control_msg error -71 req 02 val 2400 [ 261.976999][ T4276] pwc: recv_control_msg error -71 req 02 val 2600 [ 261.997195][ T4276] pwc: recv_control_msg error -71 req 02 val 2900 [ 261.997326][ T5296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.014067][ T4276] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.014436][ T4276] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.051294][ T5296] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.058760][ T4276] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.091068][ T4276] pwc: Registered as video103. [ 262.117569][ T4276] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 262.133530][ T5296] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 262.183862][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.200525][ T4276] usb 4-1: USB disconnect, device number 15 [ 262.226101][ T5296] usb 6-1: config 0 descriptor?? [ 262.253611][ T5296] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 264.149899][ T8086] loop4: detected capacity change from 0 to 32768 [ 264.272628][ T8086] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 264.534796][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 264.726545][ T5358] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 264.920795][ T5358] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.942282][ T5358] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 264.962172][ T5358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.981466][ T5358] usb 3-1: config 0 descriptor?? [ 264.996558][ T5358] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 265.111138][ T8115] loop4: detected capacity change from 0 to 32768 [ 265.114634][ T8111] loop3: detected capacity change from 0 to 40427 [ 265.139348][ T8111] F2FS-fs (loop3): invalid crc value [ 265.181025][ T8111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.194254][ T8115] XFS (loop4): Mounting V5 Filesystem [ 265.226575][ T5358] usb 6-1: USB disconnect, device number 14 [ 265.297884][ T8115] XFS (loop4): Ending clean mount [ 265.385563][ T8130] loop5: detected capacity change from 0 to 16 [ 265.421328][ T8130] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 265.437087][ T8111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.517834][ T26] audit: type=1800 audit(1787739138.914:44): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1018" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 265.519232][ T8111] syz.3.1018: attempt to access beyond end of device [ 265.519232][ T8111] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 265.552991][ T4273] XFS (loop4): Unmounting Filesystem [ 265.690676][ T4272] syz-executor: attempt to access beyond end of device [ 265.690676][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.895767][ T8137] capability: warning: `syz.4.1023' uses deprecated v2 capabilities in a way that may be insecure [ 267.191771][ T8137] netlink: 'syz.4.1023': attribute type 27 has an invalid length. [ 267.285507][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.340854][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.402075][ T4276] usb 3-1: USB disconnect, device number 20 [ 267.435758][ T8137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.937100][ T5299] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 267.957384][ T5296] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 268.128730][ T5299] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 268.148905][ T5296] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 268.166255][ T5299] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 268.176180][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.197408][ T5299] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 17 [ 268.216724][ T5296] usb 4-1: config 0 descriptor?? [ 268.224865][ T5296] pwc: Samsung MPC-C10 USB webcam detected. [ 268.238400][ T5299] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.257093][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.286015][ T5299] usb 3-1: SerialNumber: syz [ 268.306921][ T8148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.314237][ T8148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.466079][ T5296] pwc: send_video_command error -71 [ 268.471575][ T5296] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 268.483618][ T5296] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 268.492813][ T5296] usb 4-1: USB disconnect, device number 16 [ 268.671969][ T8148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.683649][ T8148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.897419][ T4761] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 268.981581][ T8174] loop5: detected capacity change from 0 to 40427 [ 268.997015][ T5296] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 269.002587][ T8174] F2FS-fs (loop5): invalid crc value [ 269.024726][ T8174] F2FS-fs (loop5): Found nat_bits in checkpoint [ 269.070664][ T8174] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 269.088512][ T4761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.105609][ T4761] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.108655][ T26] audit: type=1800 audit(1787739142.494:45): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1034" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 269.133938][ T5299] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 269.161605][ T4761] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 269.175090][ T4761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.196355][ T5296] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 269.210741][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.224405][ T8174] syz.5.1034: attempt to access beyond end of device [ 269.224405][ T8174] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 269.225256][ T4761] usb 1-1: config 0 descriptor?? [ 269.264343][ T5296] usb 4-1: config 0 descriptor?? [ 269.293309][ T8181] loop4: detected capacity change from 0 to 16 [ 269.303094][ T5296] pwc: Samsung MPC-C10 USB webcam detected. [ 269.318883][ T4761] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 269.364113][ T8181] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 269.388746][ T5032] syz-executor: attempt to access beyond end of device [ 269.388746][ T5032] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.537521][ T4761] usb 3-1: USB disconnect, device number 21 [ 269.545338][ T4761] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 269.702719][ T5296] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.725374][ T5296] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.738212][ T5296] pwc: recv_control_msg error -32 req 04 val 1700 [ 269.751571][ T5296] pwc: recv_control_msg error -32 req 02 val 2c00 [ 269.768189][ T5296] pwc: recv_control_msg error -32 req 04 val 1000 [ 269.780605][ T5296] pwc: recv_control_msg error -32 req 04 val 1300 [ 270.992598][ T5296] pwc: recv_control_msg error -71 req 04 val 1400 [ 271.016134][ T5296] pwc: recv_control_msg error -71 req 02 val 2000 [ 271.044971][ T5296] pwc: recv_control_msg error -71 req 02 val 2100 [ 271.067509][ T5296] pwc: recv_control_msg error -71 req 02 val 2200 [ 271.117350][ T5296] pwc: recv_control_msg error -71 req 06 val 0600 [ 271.146331][ T5296] pwc: recv_control_msg error -71 req 04 val 1500 [ 271.177368][ T5296] pwc: recv_control_msg error -71 req 02 val 2500 [ 271.195194][ T5296] pwc: recv_control_msg error -71 req 02 val 2400 [ 271.217155][ T5296] pwc: recv_control_msg error -71 req 02 val 2600 [ 271.236398][ T5296] pwc: recv_control_msg error -71 req 02 val 2900 [ 271.266185][ T5296] pwc: recv_control_msg error -71 req 02 val 2800 [ 271.283432][ T5296] pwc: recv_control_msg error -71 req 04 val 1100 [ 271.297916][ T5296] pwc: recv_control_msg error -71 req 04 val 1200 [ 271.319613][ T5296] pwc: Registered as video103. [ 271.338629][ T5296] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 271.353854][ T5296] usb 4-1: USB disconnect, device number 17 [ 271.633543][ T4761] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 271.817067][ T4761] usb 6-1: Using ep0 maxpacket: 16 [ 271.824264][ T4761] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 271.832694][ T4761] usb 6-1: config 0 has no interface number 0 [ 271.839329][ T4761] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 271.849716][ T4761] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 271.862798][ T4761] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 271.872208][ T4761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.881052][ T4761] usb 6-1: Product: syz [ 271.885405][ T4761] usb 6-1: Manufacturer: syz [ 271.890224][ T4761] usb 6-1: SerialNumber: syz [ 271.904615][ T4761] usb 6-1: config 0 descriptor?? [ 271.911425][ T8203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 271.919937][ T8203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 272.007096][ T5296] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 272.151020][ T8203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 272.180096][ T8203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 272.198974][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.234153][ T5296] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 272.253811][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.289766][ T5296] usb 5-1: config 0 descriptor?? [ 272.340942][ T5296] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 272.387392][ T5296] usb 1-1: USB disconnect, device number 17 [ 272.424103][ T4761] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 272.437265][ T5299] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 272.809113][ T5299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.824059][ T5299] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 272.840865][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.857596][ T5299] usb 3-1: Product: syz [ 272.866206][ T5299] usb 3-1: Manufacturer: syz [ 272.876524][ T5299] usb 3-1: SerialNumber: syz [ 272.905845][ T5299] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 272.920641][ T5299] cdc_wdm 3-1:1.0: Unknown control protocol [ 272.990694][ T8245] loop3: detected capacity change from 0 to 16 [ 272.998762][ T8245] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 274.327226][ T5358] usb 3-1: USB disconnect, device number 22 [ 274.409566][ T4761] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 274.441364][ T4761] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 274.472942][ T4761] asix: probe of 6-1:0.34 failed with error -71 [ 274.509982][ T4761] usb 6-1: USB disconnect, device number 15 [ 274.979559][ T8264] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1053'. [ 275.425124][ T4877] usb 5-1: USB disconnect, device number 14 [ 275.616992][ T5358] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 275.781720][ T8279] loop4: detected capacity change from 0 to 16 [ 275.797511][ T8279] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 275.819301][ T5358] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 275.837617][ T5358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.877087][ T5358] usb 4-1: config 0 descriptor?? [ 275.931522][ T5358] pwc: Samsung MPC-C10 USB webcam detected. [ 276.109917][ T5358] pwc: send_video_command error -71 [ 276.115855][ T5358] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 276.153665][ T5358] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 276.444927][ T5358] usb 4-1: USB disconnect, device number 18 [ 277.222298][ T5358] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 277.278977][ T8289] loop2: detected capacity change from 0 to 4096 [ 277.332710][ T8289] ntfs3: Unknown parameter 'u•¿&?äÍ¥P¡Rkmask' [ 277.449036][ T5358] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 277.468616][ T5358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.504755][ T5358] usb 4-1: config 0 descriptor?? [ 277.541415][ T5358] pwc: Samsung MPC-C10 USB webcam detected. [ 277.835554][ T8305] overlayfs: missing 'lowerdir' [ 277.857521][ T4877] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.880696][ T5299] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 277.934246][ T5358] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.946905][ T5358] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.957670][ T5358] pwc: recv_control_msg error -32 req 04 val 1700 [ 277.975758][ T5358] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.985860][ T5358] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.006077][ T5358] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.022852][ T5358] pwc: recv_control_msg error -32 req 04 val 1400 [ 278.037603][ T5358] pwc: recv_control_msg error -32 req 02 val 2000 [ 278.047974][ T5358] pwc: recv_control_msg error -32 req 02 val 2100 [ 278.056912][ T4877] usb 6-1: Using ep0 maxpacket: 32 [ 278.064097][ T4877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.077713][ T5358] pwc: recv_control_msg error -32 req 02 val 2200 [ 278.106984][ T5299] usb 3-1: Using ep0 maxpacket: 16 [ 278.114947][ T5299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.116621][ T4877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.136334][ T5358] pwc: recv_control_msg error -71 req 06 val 0600 [ 278.143247][ T5299] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 278.149133][ T5358] pwc: recv_control_msg error -71 req 04 val 1500 [ 278.176989][ T4877] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.186684][ T5358] pwc: recv_control_msg error -71 req 02 val 2500 [ 278.197144][ T5358] pwc: recv_control_msg error -71 req 02 val 2400 [ 278.203743][ T4877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.211474][ T5299] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 278.224513][ T5299] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 278.224559][ T5358] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.247519][ T5299] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.255374][ T4877] usb 6-1: config 0 descriptor?? [ 278.265656][ T4877] hub 6-1:0.0: USB hub found [ 278.275166][ T5358] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.275997][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.413796][ T5299] usb 3-1: SerialNumber: syz [ 278.431979][ T8299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.447138][ T8299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.454664][ T5358] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.467964][ T5358] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.475269][ T4877] hub 6-1:0.0: 1 port detected [ 278.475841][ T5299] hub 3-1:1.0: bad descriptor, ignoring hub [ 278.484969][ T5358] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.492233][ T5299] hub: probe of 3-1:1.0 failed with error -5 [ 278.505240][ T5358] pwc: Registered as video103. [ 278.518088][ T5358] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 278.596426][ T5358] usb 4-1: USB disconnect, device number 19 [ 278.686075][ T8299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.697234][ T8299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 278.707202][ T4761] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 280.046940][ T4761] usb 1-1: Using ep0 maxpacket: 8 [ 280.054012][ T4761] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.085770][ T4761] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 280.117702][ T4761] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.175242][ T4761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 280.204345][ T4761] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 280.229280][ T5299] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 280.244429][ T5358] hub 6-1:0.0: activate --> -90 [ 280.257499][ T4761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.296635][ T4761] usb 1-1: config 0 descriptor?? [ 280.312753][ T8310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.648994][ T5358] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 280.656520][ T5358] usb 6-1-port1: connect-debounce failed [ 280.661096][ T5299] usb 6-1: USB disconnect, device number 16 [ 280.734304][ T8324] loop4: detected capacity change from 0 to 4096 [ 280.745266][ T4761] ntrig 0003:1B96:000A.000F: unknown main item tag 0x3 [ 280.764964][ T4761] ntrig 0003:1B96:000A.000F: item fetching failed at offset 23/24 [ 280.784745][ T4761] ntrig 0003:1B96:000A.000F: parse failed [ 280.808094][ T4761] ntrig: probe of 0003:1B96:000A.000F failed with error -22 [ 280.824073][ T8324] ntfs3: Unknown parameter 'u•¿&?äÍ¥P¡Rkmask' [ 280.944002][ T5299] usb 1-1: USB disconnect, device number 18 [ 283.196177][ T8347] loop3: detected capacity change from 0 to 40427 [ 283.202779][ T4877] usb 3-1: USB disconnect, device number 23 [ 283.239108][ T4877] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 283.253384][ T8347] F2FS-fs (loop3): invalid crc value [ 283.285618][ T8347] F2FS-fs (loop3): Found nat_bits in checkpoint [ 283.472973][ T8347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 283.618917][ T26] audit: type=1800 audit(1787739157.014:46): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1079" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 283.643057][ T8347] syz.3.1079: attempt to access beyond end of device [ 283.643057][ T8347] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 283.805431][ T4272] syz-executor: attempt to access beyond end of device [ 283.805431][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.931175][ T4877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 286.073623][ T4877] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.136469][ T4877] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 286.210610][ T4877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.253165][ T4877] usb 5-1: config 0 descriptor?? [ 286.294797][ T4877] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 286.338571][ T8428] loop2: detected capacity change from 0 to 2048 [ 286.421534][ T8428] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 286.504423][ T8433] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1102'. [ 286.567901][ T8428] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 286.626972][ T8428] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 286.634769][ T8428] UDF-fs: Scanning with blocksize 512 failed [ 286.737047][ T8428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.383245][ T4877] usb 5-1: USB disconnect, device number 15 [ 288.447138][ T5358] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 288.648686][ T5358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.676518][ T5358] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 288.696228][ T5358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.725656][ T5358] usb 3-1: config 0 descriptor?? [ 288.754098][ T5358] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 288.867298][ T4877] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 289.080433][ T4877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.091805][ T4877] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 289.110622][ T4877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.146043][ T4877] usb 5-1: config 0 descriptor?? [ 289.371292][ T4877] usbhid 5-1:0.0: can't add hid device: -71 [ 289.377441][ T4877] usbhid: probe of 5-1:0.0 failed with error -71 [ 289.393616][ T4877] usb 5-1: USB disconnect, device number 16 [ 289.740814][ T8475] loop5: detected capacity change from 0 to 8 [ 289.987063][ T4877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 291.177779][ T5034] usb 3-1: USB disconnect, device number 24 [ 291.249313][ T4877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.272899][ T4877] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 291.327919][ T4877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.353635][ T4877] usb 5-1: config 0 descriptor?? [ 291.383497][ T8490] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1121'. [ 291.571657][ T4877] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 291.603556][ T4877] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 291.686154][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 291.694691][ T4877] usb 5-1: USB disconnect, device number 17 [ 291.992552][ T5358] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 292.225490][ T8495] loop2: detected capacity change from 0 to 32768 [ 292.284199][ T26] audit: type=1800 audit(1787739165.674:47): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1125" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 292.318087][ T5358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 292.349733][ T5358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1138, setting to 1024 [ 292.395824][ T5358] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice=d6.af [ 292.421580][ T5358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.455760][ T5358] usb 4-1: config 0 descriptor?? [ 292.461626][ T8499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.898754][ T5358] sony 0003:054C:1000.0010: unknown main item tag 0x0 [ 294.035552][ T5358] sony 0003:054C:1000.0010: unknown main item tag 0x0 [ 294.043532][ T5358] sony 0003:054C:1000.0010: unknown main item tag 0x0 [ 294.064811][ T5358] sony 0003:054C:1000.0010: unknown main item tag 0x0 [ 294.072000][ T5358] sony 0003:054C:1000.0010: unknown main item tag 0x0 [ 294.081649][ T5358] sony 0003:054C:1000.0010: hidraw0: USB HID v1.01 Device [HID 054c:1000] on usb-dummy_hcd.3-1/input0 [ 294.116929][ T5358] sony 0003:054C:1000.0010: failed to claim input [ 294.168616][ T5358] usb 4-1: USB disconnect, device number 20 [ 294.353078][ T8521] fido_id[8521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 294.485748][ T8528] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1135'. [ 294.494989][ T4877] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 294.691193][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.721334][ T4877] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 294.731027][ T8532] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 294.739506][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.764543][ T4877] usb 1-1: config 0 descriptor?? [ 294.781979][ T4877] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 294.968210][ T8541] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1132'. [ 295.013459][ T8541] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1132'. [ 295.415914][ T8539] loop3: detected capacity change from 0 to 32768 [ 295.465703][ T8539] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 295.540693][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 295.604974][ T8537] loop5: detected capacity change from 0 to 40427 [ 295.647112][ T8537] F2FS-fs (loop5): invalid crc value [ 295.704569][ T8537] F2FS-fs (loop5): Found nat_bits in checkpoint [ 295.826796][ T8537] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 295.871162][ T26] audit: type=1800 audit(1787739169.264:48): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1139" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 295.895327][ T8537] syz.5.1139: attempt to access beyond end of device [ 295.895327][ T8537] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 295.985463][ T5032] syz-executor: attempt to access beyond end of device [ 295.985463][ T5032] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.073485][ T8567] 9pnet: p9_errstr2errno: server reported unknown error  [ 296.396889][ T5358] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 296.587163][ T5358] usb 5-1: Using ep0 maxpacket: 8 [ 296.594810][ T5358] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.597228][ T8590] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1147'. [ 296.606885][ T5358] usb 5-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.629188][ T5358] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.635995][ T5358] usb 5-1: New USB device found, idVendor=1784, idProduct=0004, bcdDevice= 0.00 [ 296.645381][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.661764][ T5358] usb 5-1: config 0 descriptor?? [ 297.077613][ T5358] input: HID 1784:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1784:0004.0011/input/input26 [ 297.101005][ T5034] usb 1-1: USB disconnect, device number 19 [ 297.181668][ T5358] topseed 0003:1784:0004.0011: input,hidraw0: USB HID v0.00 Joystick [HID 1784:0004] on usb-dummy_hcd.4-1/input0 [ 297.218356][ T8599] loop3: detected capacity change from 0 to 8 [ 297.297030][ T5358] usb 5-1: USB disconnect, device number 18 [ 297.483854][ T8600] fido_id[8600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 297.937119][ T4877] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 298.143727][ T4877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.161425][ T4877] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 298.181298][ T4877] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 37753, setting to 1024 [ 298.193956][ T4877] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 298.215129][ T4877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.231441][ T4877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.241894][ T4877] usb 4-1: Product: syz [ 298.246448][ T4877] usb 4-1: Manufacturer: syz [ 298.256688][ T4877] usb 4-1: SerialNumber: syz [ 298.266076][ T4877] cdc_mbim 4-1:1.0: skipping garbage [ 298.382035][ T8628] loop2: detected capacity change from 0 to 8 [ 298.407012][ T5358] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 298.471967][ T5299] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 298.473579][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.496395][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.589058][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.602723][ T5358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.613142][ T5358] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 298.629065][ T5358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.645213][ T5358] usb 6-1: config 0 descriptor?? [ 298.678741][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.696900][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.706746][ T5299] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 298.736889][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.757338][ T5299] usb 1-1: config 0 descriptor?? [ 298.866079][ T8632] loop2: detected capacity change from 0 to 32768 [ 298.893149][ T26] audit: type=1800 audit(1787739172.284:49): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1169" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 299.064336][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.087346][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.103900][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.120433][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.131816][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.142667][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.162661][ T5358] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 299.174212][ T5299] usbhid 1-1:0.0: can't add hid device: -71 [ 299.183587][ T5358] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 299.195218][ T5299] usbhid: probe of 1-1:0.0 failed with error -71 [ 299.257013][ T5299] usb 1-1: USB disconnect, device number 20 [ 299.315811][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.326673][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.347559][ T4877] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 299.357654][ T4877] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 299.465170][ T5358] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 299.472808][ T5358] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 299.488927][ T5358] pyra: probe of 0003:1E7D:2CF6.0012 failed with error -71 [ 299.505462][ T5358] usb 6-1: USB disconnect, device number 17 [ 299.549296][ T4877] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 299.578327][ T4877] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 299.603816][ T4877] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 36:92:6f:ee:8d:58 [ 299.624071][ T4877] usb 4-1: USB disconnect, device number 21 [ 299.660065][ T4877] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 299.714369][ T8640] fido_id[8640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 299.837080][ T4761] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 300.029117][ T4761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.066529][ T4761] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 300.086365][ T4761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.104013][ T4761] usb 5-1: config 0 descriptor?? [ 300.121275][ T4761] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 300.799739][ T8666] loop3: detected capacity change from 0 to 32768 [ 300.835613][ T26] audit: type=1800 audit(1787739174.224:50): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1183" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 300.926910][ T5358] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 301.123359][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.148504][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.159460][ T5358] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 301.169249][ T5358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.189062][ T5358] usb 1-1: config 0 descriptor?? [ 301.606235][ T5358] usbhid 1-1:0.0: can't add hid device: -71 [ 301.615768][ T5358] usbhid: probe of 1-1:0.0 failed with error -71 [ 301.635141][ T5358] usb 1-1: USB disconnect, device number 21 [ 301.761071][ T8685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1188'. [ 302.612187][ T8696] loop2: detected capacity change from 0 to 40427 [ 302.641453][ T5358] usb 5-1: USB disconnect, device number 19 [ 302.650915][ T8696] F2FS-fs (loop2): invalid crc value [ 302.699007][ T8696] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.867129][ T8696] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 303.269083][ T8718] loop4: detected capacity change from 0 to 32768 [ 303.676621][ T8738] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1205'. [ 303.688167][ T8738] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1205'. [ 303.857113][ T5034] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 304.118538][ T5034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.131823][ T5034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.141732][ T5034] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 304.151235][ T5034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.159422][ T5299] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 304.179598][ T5034] usb 6-1: config 0 descriptor?? [ 304.237267][ T4761] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 304.348827][ T5299] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.370194][ T5299] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.389972][ T5299] usb 1-1: config 0 interface 0 has no altsetting 0 [ 304.397352][ T5299] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 304.406732][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.417380][ T5299] usb 1-1: config 0 descriptor?? [ 304.428552][ T4761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.441652][ T4761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.451539][ T4761] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 304.460697][ T4761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.471457][ T4761] usb 4-1: config 0 descriptor?? [ 304.602720][ T5034] usbhid 6-1:0.0: can't add hid device: -71 [ 304.613560][ T5034] usbhid: probe of 6-1:0.0 failed with error -71 [ 304.622650][ T5034] usb 6-1: USB disconnect, device number 18 [ 304.852370][ T5299] smartjoyplus 0003:0B43:0003.0013: unbalanced collection at end of report description [ 304.879505][ T5299] smartjoyplus 0003:0B43:0003.0013: parse failed [ 304.886384][ T5299] smartjoyplus: probe of 0003:0B43:0003.0013 failed with error -22 [ 304.897755][ T4761] usbhid 4-1:0.0: can't add hid device: -71 [ 304.903875][ T4761] usbhid: probe of 4-1:0.0 failed with error -71 [ 304.917907][ T4761] usb 4-1: USB disconnect, device number 22 [ 305.051829][ T5358] usb 1-1: USB disconnect, device number 22 [ 305.155414][ T8761] loop2: detected capacity change from 0 to 40427 [ 305.164098][ T8761] F2FS-fs (loop2): invalid crc value [ 305.191936][ T8761] F2FS-fs (loop2): Found nat_bits in checkpoint [ 305.284501][ T8761] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 305.410501][ T8772] Unsupported ieee802154 address type: 0 [ 305.570925][ T20] MTRR: CPU 1: Writing MSR 202 to d0000002:0 failed [ 305.577721][ T17] MTRR: CPU 0: Writing MSR 202 to d0000002:0 failed [ 305.738746][ T8782] binder: 8781:8782 ioctl c0306201 0 returned -14 [ 305.773615][ T8782] binder: 8781:8782 ioctl c038586a 2000000002c0 returned -22 [ 305.826992][ T4761] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 306.086962][ T4761] usb 5-1: Using ep0 maxpacket: 32 [ 306.094324][ T4761] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.116712][ T8778] loop2: detected capacity change from 0 to 32768 [ 306.125103][ T4761] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 306.209258][ T4761] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 306.218823][ T4761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.229000][ T4761] usb 5-1: Product: syz [ 306.233472][ T4761] usb 5-1: Manufacturer: syz [ 306.240950][ T4761] usb 5-1: SerialNumber: syz [ 306.516951][ T5299] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 306.660961][ T4761] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 306.696727][ T4761] usb 5-1: USB disconnect, device number 20 [ 306.715041][ T5299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.745511][ T5299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.827723][ T5299] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 306.839134][ T5299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.850469][ T5299] usb 6-1: config 0 descriptor?? [ 308.154932][ T8800] loop2: detected capacity change from 0 to 40427 [ 308.174034][ T8608] udevd[8608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.211082][ T8800] F2FS-fs (loop2): invalid crc value [ 308.250151][ T5299] usbhid 6-1:0.0: can't add hid device: -71 [ 308.258434][ T5299] usbhid: probe of 6-1:0.0 failed with error -71 [ 308.283590][ T8800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.284759][ T5299] usb 6-1: USB disconnect, device number 19 [ 308.495078][ T8800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 308.652418][ T8821] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1235'. [ 308.995968][ T8831] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1230'. [ 309.006564][ T8831] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1230'. [ 310.385183][ T8856] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1247'. [ 310.716936][ T4877] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 310.765946][ T8867] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1251'. [ 310.812019][ T8867] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1251'. [ 310.973948][ T8857] loop4: detected capacity change from 0 to 40427 [ 311.035676][ T8857] F2FS-fs (loop4): invalid crc value [ 311.068848][ T4877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.083440][ T8857] F2FS-fs (loop4): Found nat_bits in checkpoint [ 311.165746][ T4877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.363354][ T4877] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 312.377254][ T4877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.421910][ T4877] usb 3-1: config 0 descriptor?? [ 312.472244][ T8857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 312.553303][ T26] audit: type=1800 audit(1787739185.944:51): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1246" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 312.698947][ T4273] syz-executor: attempt to access beyond end of device [ 312.698947][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 312.839761][ T4877] usbhid 3-1:0.0: can't add hid device: -71 [ 312.857324][ T4877] usbhid: probe of 3-1:0.0 failed with error -71 [ 312.879836][ T4877] usb 3-1: USB disconnect, device number 25 [ 313.477374][ T5299] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 313.500212][ T8909] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1263'. [ 313.533461][ T8909] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1263'. [ 314.779106][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.816934][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.857030][ T5299] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 314.894055][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.921948][ T5299] usb 1-1: config 0 descriptor?? [ 315.343018][ T5299] usbhid 1-1:0.0: can't add hid device: -71 [ 315.354038][ T5299] usbhid: probe of 1-1:0.0 failed with error -71 [ 315.700840][ T5299] usb 1-1: USB disconnect, device number 23 [ 316.327835][ T8917] loop2: detected capacity change from 0 to 40427 [ 316.344477][ T8917] F2FS-fs (loop2): invalid crc value [ 316.420808][ T8917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 316.436262][ T8941] syz.0.1275[8941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.436509][ T8941] syz.0.1275[8941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.570684][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.601665][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.597157][ T4877] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 322.656403][ T8999] loop4: detected capacity change from 0 to 40427 [ 322.685938][ T8999] F2FS-fs (loop4): invalid crc value [ 322.724348][ T8999] F2FS-fs (loop4): Found nat_bits in checkpoint [ 322.843047][ T4877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.878372][ T4877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.900908][ T8999] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 322.914140][ T4877] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 322.935546][ T26] audit: type=1800 audit(1787739196.324:52): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1294" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 322.967113][ T4877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.983739][ T4877] usb 3-1: config 0 descriptor?? [ 323.020207][ T4273] syz-executor: attempt to access beyond end of device [ 323.020207][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.418319][ T4877] usbhid 3-1:0.0: can't add hid device: -71 [ 323.424373][ T4877] usbhid: probe of 3-1:0.0 failed with error -71 [ 323.471972][ T4877] usb 3-1: USB disconnect, device number 26 [ 323.536736][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1310'. [ 323.568532][ T9041] device ip6erspan0 entered promiscuous mode [ 324.972568][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1323'. [ 325.556966][ T5296] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 325.778672][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.888935][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.976681][ T4877] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 326.001546][ T5296] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 326.036946][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.073404][ T5296] usb 6-1: config 0 descriptor?? [ 326.166986][ T4877] usb 4-1: Using ep0 maxpacket: 32 [ 326.180872][ T4877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.197772][ T4877] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 73, changing to 7 [ 326.202832][ T9101] ------------[ cut here ]------------ [ 326.214516][ T9101] WARNING: CPU: 1 PID: 9101 at net/tls/tls_strp.c:493 tls_strp_msg_load+0x6ff/0xa00 [ 326.224025][ T9101] Modules linked in: [ 326.228013][ T9101] CPU: 1 PID: 9101 Comm: syz.2.1331 Not tainted syzkaller #0 [ 326.233426][ T4877] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 326.235431][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.235463][ T9101] RIP: 0010:tls_strp_msg_load+0x6ff/0xa00 [ 326.260462][ T9101] Code: 00 00 00 00 00 fc ff df e9 5f fc ff ff e8 49 e0 9e f8 0f 0b e9 ca f9 ff ff e8 3d e0 9e f8 0f 0b e9 f9 f9 ff ff e8 31 e0 9e f8 <0f> 0b e9 49 ff ff ff e8 25 e0 9e f8 0f 0b e9 5e fe ff ff 44 89 e9 [ 326.280179][ T9101] RSP: 0018:ffffc9000c8074e0 EFLAGS: 00010283 [ 326.286279][ T9101] RAX: ffffffff88e3515f RBX: ffff8880581f14dc RCX: 0000000000080000 [ 326.287051][ T4877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.294344][ T9101] RDX: ffffc9000cd99000 RSI: 0000000000000061 RDI: 0000000000000062 [ 326.294366][ T9101] RBP: ffffc9000c8075b0 R08: ffff888028833da7 R09: 1ffff110051067b4 [ 326.294380][ T9101] R10: dffffc0000000000 R11: ffffed10051067b5 R12: ffff8880581f14d0 [ 326.294396][ T9101] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000001e [ 326.294409][ T9101] FS: 00007efea0d226c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 326.294430][ T9101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.294444][ T9101] CR2: 0000001b2fe18ff8 CR3: 000000007b450000 CR4: 00000000003506e0 [ 326.294462][ T9101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 326.294475][ T9101] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 326.294491][ T9101] Call Trace: [ 326.294498][ T9101] [ 326.294514][ T9101] ? tls_strp_msg_hold+0x5d0/0x5d0 [ 326.294559][ T9101] tls_rx_rec_wait+0x918/0xa60 [ 326.294595][ T9101] ? sk_psock_get+0x77/0x440 [ 326.294620][ T9101] ? sk_psock_get+0x77/0x440 [ 326.294646][ T9101] ? process_rx_list+0xea0/0xea0 [ 326.294670][ T9101] ? sk_psock_get+0x38f/0x440 [ 326.294695][ T9101] ? wait_woken+0x1c0/0x1c0 [ 326.294724][ T9101] ? __lock_acquire+0x1465/0x7c40 [ 326.344270][ T4877] usb 4-1: Product: syz [ 326.344293][ T4877] usb 4-1: Manufacturer: syz [ 326.344309][ T4877] usb 4-1: SerialNumber: syz [ 326.350958][ T9101] tls_sw_recvmsg+0x761/0x1d30 [ 326.351021][ T9101] ? tls_decrypt_sg+0x2dd0/0x2dd0 [ 326.351049][ T9101] ? sock_rps_record_flow+0x19/0x3f0 [ 326.351074][ T9101] inet_recvmsg+0x13c/0x1f0 [ 326.351097][ T9101] ? inet_sendpage+0x2e0/0x2e0 [ 326.351120][ T9101] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 326.462888][ T9101] ? security_socket_recvmsg+0x85/0xb0 [ 326.468455][ T9101] ? inet_sendpage+0x2e0/0x2e0 [ 326.473248][ T9101] ____sys_recvmsg+0x2c8/0x5b0 [ 326.478107][ T9101] ? __sys_recvmsg_sock+0x40/0x40 [ 326.483186][ T9101] ? import_iovec+0x6f/0xa0 [ 326.487782][ T9101] ___sys_recvmsg+0x210/0x590 [ 326.492496][ T9101] ? __sys_recvmsg+0x2a0/0x2a0 [ 326.497330][ T9101] ? sched_clock_cpu+0x6e/0x260 [ 326.502223][ T9101] ? __fget_files+0x3fc/0x460 [ 326.507002][ T9101] __x64_sys_recvmsg+0x20d/0x2e0 [ 326.511970][ T9101] ? ___sys_recvmsg+0x590/0x590 [ 326.516911][ T9101] ? lockdep_hardirqs_on+0x94/0x140 [ 326.522143][ T9101] do_syscall_64+0x4c/0xa0 [ 326.526669][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 326.531432][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 326.536142][ T9101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.542115][ T9101] RIP: 0033:0x7efe9fd9e0d9 [ 326.546572][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.566288][ T9101] RSP: 002b:00007efea0d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 326.574788][ T9101] RAX: ffffffffffffffda RBX: 00007efea0025fa0 RCX: 00007efe9fd9e0d9 [ 326.582850][ T9101] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000005 [ 326.590899][ T9101] RBP: 00007efe9fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 326.598958][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.607002][ T9101] R13: 00007efea0026038 R14: 00007efea0025fa0 R15: 00007ffc8546cfb8 [ 326.615023][ T9101] [ 326.618125][ T9101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 326.625429][ T9101] CPU: 1 PID: 9101 Comm: syz.2.1331 Not tainted syzkaller #0 [ 326.632823][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.642910][ T9101] Call Trace: [ 326.646209][ T9101] [ 326.649162][ T9101] dump_stack_lvl+0x188/0x24e [ 326.653868][ T9101] ? memcpy+0x3c/0x60 [ 326.657871][ T9101] ? show_regs_print_info+0x12/0x12 [ 326.663091][ T9101] ? load_image+0x410/0x410 [ 326.667624][ T9101] panic+0x2d3/0x710 [ 326.671529][ T9101] ? bpf_jit_dump+0xd0/0xd0 [ 326.676052][ T9101] __warn+0x2f8/0x4f0 [ 326.680038][ T9101] ? tls_strp_msg_load+0x6ff/0xa00 [ 326.685162][ T9101] ? tls_strp_msg_load+0x6ff/0xa00 [ 326.690293][ T9101] report_bug+0x2ba/0x4f0 [ 326.694651][ T9101] ? tls_strp_msg_load+0x6ff/0xa00 [ 326.699785][ T9101] handle_bug+0x3a/0x70 [ 326.703960][ T9101] exc_invalid_op+0x16/0x40 [ 326.708472][ T9101] asm_exc_invalid_op+0x16/0x20 [ 326.713327][ T9101] RIP: 0010:tls_strp_msg_load+0x6ff/0xa00 [ 326.719054][ T9101] Code: 00 00 00 00 00 fc ff df e9 5f fc ff ff e8 49 e0 9e f8 0f 0b e9 ca f9 ff ff e8 3d e0 9e f8 0f 0b e9 f9 f9 ff ff e8 31 e0 9e f8 <0f> 0b e9 49 ff ff ff e8 25 e0 9e f8 0f 0b e9 5e fe ff ff 44 89 e9 [ 326.738658][ T9101] RSP: 0018:ffffc9000c8074e0 EFLAGS: 00010283 [ 326.744732][ T9101] RAX: ffffffff88e3515f RBX: ffff8880581f14dc RCX: 0000000000080000 [ 326.752711][ T9101] RDX: ffffc9000cd99000 RSI: 0000000000000061 RDI: 0000000000000062 [ 326.760680][ T9101] RBP: ffffc9000c8075b0 R08: ffff888028833da7 R09: 1ffff110051067b4 [ 326.768649][ T9101] R10: dffffc0000000000 R11: ffffed10051067b5 R12: ffff8880581f14d0 [ 326.776624][ T9101] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000001e [ 326.784603][ T9101] ? tls_strp_msg_load+0x6ff/0xa00 [ 326.789739][ T9101] ? tls_strp_msg_hold+0x5d0/0x5d0 [ 326.794863][ T9101] tls_rx_rec_wait+0x918/0xa60 [ 326.799637][ T9101] ? sk_psock_get+0x77/0x440 [ 326.804234][ T9101] ? sk_psock_get+0x77/0x440 [ 326.808828][ T9101] ? process_rx_list+0xea0/0xea0 [ 326.813792][ T9101] ? sk_psock_get+0x38f/0x440 [ 326.818478][ T9101] ? wait_woken+0x1c0/0x1c0 [ 326.822986][ T9101] ? __lock_acquire+0x1465/0x7c40 [ 326.828027][ T9101] tls_sw_recvmsg+0x761/0x1d30 [ 326.832816][ T9101] ? tls_decrypt_sg+0x2dd0/0x2dd0 [ 326.837850][ T9101] ? sock_rps_record_flow+0x19/0x3f0 [ 326.843138][ T9101] inet_recvmsg+0x13c/0x1f0 [ 326.847648][ T9101] ? inet_sendpage+0x2e0/0x2e0 [ 326.852412][ T9101] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 326.857694][ T9101] ? security_socket_recvmsg+0x85/0xb0 [ 326.863159][ T9101] ? inet_sendpage+0x2e0/0x2e0 [ 326.867921][ T9101] ____sys_recvmsg+0x2c8/0x5b0 [ 326.872700][ T9101] ? __sys_recvmsg_sock+0x40/0x40 [ 326.877743][ T9101] ? import_iovec+0x6f/0xa0 [ 326.882254][ T9101] ___sys_recvmsg+0x210/0x590 [ 326.886946][ T9101] ? __sys_recvmsg+0x2a0/0x2a0 [ 326.891711][ T9101] ? sched_clock_cpu+0x6e/0x260 [ 326.896573][ T9101] ? __fget_files+0x3fc/0x460 [ 326.901268][ T9101] __x64_sys_recvmsg+0x20d/0x2e0 [ 326.906220][ T9101] ? ___sys_recvmsg+0x590/0x590 [ 326.911080][ T9101] ? lockdep_hardirqs_on+0x94/0x140 [ 326.916307][ T9101] do_syscall_64+0x4c/0xa0 [ 326.920731][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 326.925433][ T9101] ? clear_bhb_loop+0x60/0xb0 [ 326.930116][ T9101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.936017][ T9101] RIP: 0033:0x7efe9fd9e0d9 [ 326.940431][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.961166][ T9101] RSP: 002b:00007efea0d22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 326.969581][ T9101] RAX: ffffffffffffffda RBX: 00007efea0025fa0 RCX: 00007efe9fd9e0d9 [ 326.977553][ T9101] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000005 [ 326.985519][ T9101] RBP: 00007efe9fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 326.993490][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.001459][ T9101] R13: 00007efea0026038 R14: 00007efea0025fa0 R15: 00007ffc8546cfb8 [ 327.009449][ T9101] [ 327.012738][ T9101] Kernel Offset: disabled [ 327.017131][ T9101] Rebooting in 86400 seconds..