last executing test programs: 10.025497274s ago: executing program 4 (id=1411): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 8.166759391s ago: executing program 0 (id=1420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7.769567834s ago: executing program 0 (id=1423): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x4, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0', 0x1) 6.61266599s ago: executing program 2 (id=1425): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.284536163s ago: executing program 4 (id=1426): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x2000000) 5.703044454s ago: executing program 0 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="9000"], 0x0, 0x0, 0x0, 0x0}) 5.516841917s ago: executing program 1 (id=1428): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.29692255s ago: executing program 3 (id=1429): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x43, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 5.286178864s ago: executing program 4 (id=1430): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x6, 0xbb30abfa5dd3bc38, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='AF', @ANYRES32=r2], 0x4) 5.004828738s ago: executing program 2 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, 0x0, 0x0) 4.905513996s ago: executing program 2 (id=1432): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv2(r1, 0x0, 0x0, 0x4, 0x6a, 0x9) 4.893524864s ago: executing program 2 (id=1433): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010001", 0x7) 4.236688387s ago: executing program 0 (id=1434): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") chdir(0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) 3.680149459s ago: executing program 2 (id=1435): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="400c0100000021"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.59337811s ago: executing program 1 (id=1436): socket$can_raw(0x1d, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.444447721s ago: executing program 1 (id=1437): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x4, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0', 0x1) 2.604314507s ago: executing program 3 (id=1438): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x880, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2.567203128s ago: executing program 0 (id=1439): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 2.432650716s ago: executing program 1 (id=1440): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x310000, &(0x7f0000000600)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_path={'journal_path', 0x3d, './my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_async_commit}, {@jqfmt_vfsv0}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_ringparam={0x11, 0x1, 0x70807689, 0xfff, 0xfffffffc, 0x5, 0x81, 0xffff8001, 0xecd}}) pivot_root(&(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 2.290106045s ago: executing program 3 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) r0 = open$dir(0x0, 0x800, 0x10a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) preadv(r0, 0x0, 0x0, 0x9, 0x9) 2.04859794s ago: executing program 4 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, 0x0, 0x0) 1.917430576s ago: executing program 3 (id=1443): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.732992624s ago: executing program 4 (id=1444): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x6312, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.492004502s ago: executing program 1 (id=1445): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_read_part_table(0x107b, &(0x7f0000001080)="$eJzs0MFNAzEQBdCfON5kRRqgAtqgIM5cgS6QOFEJVxqgBWpAymHQegNUAFzeO9jyWH/GcvhX80u/SlJ3yZy2VB4Pye7i6/44ajmM9aOSU+3nn/j1lPSkqo/jrqV6VZ0ja/Fyk01S78+ZvnP7h7G1TPebZco673WbPE25OWZJ3OZt7dBatuMFp1qdGyfVf/d3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvfAYAAP//ReQdug==") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000640)={0x2, 0xce20, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) 1.416952146s ago: executing program 2 (id=1446): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x140, 0xfeffffff, 0x140, 0x0, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 658.136682ms ago: executing program 1 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x604001, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') syz_genetlink_get_family_id$wireguard(&(0x7f0000000780), r2) write$6lowpan_enable(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x0, 0x805, 0x1, 0x0, 0x7, 0xf77, 0x7, 0x2, 0x2, 0x5bf, 0x0, 0x40, 0x406, 0x3, 0xd, 0x2, {0x9, 0x1}, 0xa, 0x7}}) close_range(r0, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2", 0xc) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab", 0x1e}], 0x3}, {0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x288, 0x8000}, {0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)}], 0x2, 0x0, 0x0, 0x4000800}, {0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="7f3d71da40cd1608026c949e3b0623190bb7de8a82c51a5f54bc2032cd3ed71f54a247f63f45f01cef362b171638dc6f03291f5edc9e54ad5793f6ecd882d8c2aa5a29ac387dc0a84cdf2408ac80be6ed2e848df17629c23a3cdb2632870b2c0073ed206b112b7e0bdc952e38aa79e4632d919d7f7", 0x75}], 0x1}], 0x4, 0x40800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="03", @ANYBLOB="e38a"], 0x0) r5 = epoll_create1(0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0x9d}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r13, &(0x7f0000000100)={0x8}) shutdown(r13, 0x0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/70, 0x46}], 0x2}, 0x0) 551.449847ms ago: executing program 0 (id=1448): r0 = syz_open_dev$vim2m(0x0, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1}) 372.446647ms ago: executing program 3 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add', 0x3) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) 137.338317ms ago: executing program 3 (id=1450): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0x4, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='0', 0x1) 0s ago: executing program 4 (id=1451): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2b4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28e, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x16, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x15, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): my_hcd [ 197.724416][ T5817] usb 2-1: device descriptor read/64, error -71 [ 197.768941][ T5735] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 197.777536][ T5735] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 197.822580][ T5735] usb 4-1: USB disconnect, device number 15 [ 197.859325][ T5817] usb usb2-port1: attempt power cycle [ 197.889156][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.896391][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.896428][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.896456][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.199160][ T5817] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 198.219715][ T5817] usb 2-1: device descriptor read/8, error -71 [ 198.481661][ T5817] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 198.520886][ T5817] usb 2-1: device descriptor read/8, error -71 [ 198.639510][ T5817] usb usb2-port1: unable to enumerate USB device [ 199.548120][ T7180] loop0: detected capacity change from 0 to 32768 [ 199.711901][ T7180] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.953325][ T7204] loop1: detected capacity change from 0 to 512 [ 200.001221][ T7204] EXT4-fs (loop1): 1 truncate cleaned up [ 200.023731][ T7204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.096827][ T7180] XFS (loop0): Ending clean mount [ 200.245466][ T7180] XFS (loop0): Quotacheck needed: Please wait. [ 201.287614][ T7180] XFS (loop0): Quotacheck: Done. [ 201.363911][ T5617] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.702145][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.389710][ T25] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 202.543690][ T25] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 202.546158][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.563875][ T25] usb 3-1: config 0 descriptor?? [ 203.109265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 203.657360][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 203.679505][ T25] gp8psk: usb in 128 operation failed. [ 203.921341][ T25] gp8psk: usb in 146 operation failed. [ 203.945944][ T25] gp8psk: failed to get FW version [ 203.956394][ T25] gp8psk: FPGA Version = 81 [ 204.208045][ T25] gp8psk: usb in 138 operation failed. [ 204.217662][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.244670][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 204.497882][ T25] usb 3-1: USB disconnect, device number 11 [ 205.982658][ T5720] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.269749][ T5720] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 207.284204][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.294509][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.306201][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 207.322603][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.330985][ T5720] usb 1-1: Product: syz [ 207.335344][ T5720] usb 1-1: Manufacturer: syz [ 207.340182][ T5720] usb 1-1: SerialNumber: syz [ 207.491416][ T7296] cgroup: name respecified [ 207.776187][ T5720] ath6kl: Failed to read usb control message: -71 [ 207.783390][ T5720] ath6kl: Unable to read the bmi data from the device: -71 [ 207.783437][ T5720] ath6kl: Unable to recv target info: -71 [ 207.901227][ T5720] ath6kl: Failed to init ath6kl core: -71 [ 208.042629][ T5720] ath6kl_usb 1-1:1.0: probe with driver ath6kl_usb failed with error -71 [ 208.269284][ T5720] usb 1-1: USB disconnect, device number 6 [ 208.616710][ T7305] siw: device registration error -23 [ 210.589235][ T5817] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 210.759752][ T5817] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 210.772911][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.785635][ T5817] usb 1-1: config 0 descriptor?? [ 210.800826][ T5817] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 211.001343][ T5817] gp8psk: usb in 128 operation failed. [ 211.207475][ T5817] gp8psk: usb in 146 operation failed. [ 211.207508][ T5817] gp8psk: failed to get FW version [ 211.213901][ T5817] gp8psk: FPGA Version = 81 [ 211.432271][ T5817] gp8psk: usb in 138 operation failed. [ 211.432313][ T5817] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 211.432421][ T5817] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 211.466527][ T5817] usb 1-1: USB disconnect, device number 7 [ 211.745695][ T7354] siw: device registration error -23 [ 212.128539][ T7359] Illegal XDP return value 4294967274 on prog (id 26) dev syz_tun, expect packet loss! [ 212.616700][ T7361] syz_tun: entered allmulticast mode [ 212.623473][ T7360] syz_tun: left allmulticast mode [ 213.039787][ T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 213.126590][ T7373] loop1: detected capacity change from 0 to 32768 [ 213.149931][ T7373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.525 (7373) [ 213.179665][ T7373] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.191134][ T7373] BTRFS info (device loop1): using crc32c checksum algorithm [ 213.210657][ T25] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 213.221460][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.221500][ T25] usb 5-1: config 0 has no interfaces? [ 213.221547][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.251606][ T25] usb 5-1: config 0 descriptor?? [ 213.379688][ T7373] BTRFS info (device loop1): enabling ssd optimizations [ 213.387581][ T7373] BTRFS info (device loop1): turning on flush-on-commit [ 213.394832][ T7373] BTRFS info (device loop1): enabling free space tree [ 213.402037][ T7373] BTRFS info (device loop1): enabling auto defrag [ 213.408710][ T7373] BTRFS info (device loop1): use lzo compression, level 1 [ 213.416425][ T7373] BTRFS info (device loop1): max_inline set to 4096 [ 213.459274][ T7373] BTRFS info (device loop1 state M): max_inline set to 4096 [ 213.505818][ T5611] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.370113][ T7412] loop3: detected capacity change from 0 to 512 [ 215.560654][ T7412] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.534: corrupted in-inode xattr: invalid ea_ino [ 215.560702][ T7412] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.574604][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 215.574623][ C1] EXT4-fs (loop3): initial error at time 1786477035: ext4_iget_extra_inode:5210: inode 15 [ 215.574651][ C1] EXT4-fs (loop3): last error at time 1786477035: ext4_iget_extra_inode:5210: inode 15 [ 215.587105][ T7412] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.534: couldn't read orphan inode 15 (err -117) [ 215.587134][ T7412] loop3: lost filesystem error report for type 5 error -117 [ 215.637340][ T7412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.843792][ T9] usb 5-1: USB disconnect, device number 5 [ 215.921830][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.123963][ T7433] loop3: detected capacity change from 0 to 512 [ 216.148691][ T7433] EXT4-fs (loop3): 1 truncate cleaned up [ 216.156869][ T7433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.246941][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.019447][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.200068][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 218.216570][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 218.249313][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.260093][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.307678][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 218.317470][ T25] usb 5-1: Manufacturer: syz [ 218.505400][ T25] usb 5-1: config 0 descriptor?? [ 218.949122][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 219.110222][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.113098][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 219.113186][ T5817] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 219.127765][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.127824][ T5817] usb 1-1: Product: syz [ 219.127863][ T5817] usb 1-1: Manufacturer: syz [ 219.127902][ T5817] usb 1-1: SerialNumber: syz [ 219.371433][ T7476] loop2: detected capacity change from 0 to 128 [ 220.540781][ T7457] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.656031][ T7476] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.665415][ T7476] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.856092][ T7470] loop3: detected capacity change from 0 to 32768 [ 220.883923][ T5625] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.901752][ T5720] usb 5-1: USB disconnect, device number 6 [ 220.970033][ T7470] JBD2: Ignoring recovery information on journal [ 221.047420][ T7470] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 221.162476][ T7457] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 221.395134][ T5817] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 221.395200][ T5817] cdc_ncm 1-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 221.395259][ T5817] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 221.420731][ T7492] siw: device registration error -23 [ 222.138568][ T5618] ocfs2: Unmounting device (7,3) on (node local) [ 222.273358][ T5817] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 222.288861][ T5817] usb 1-1: USB disconnect, device number 8 [ 222.321777][ T5817] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 223.589395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 223.965343][ T7519] loop0: detected capacity change from 0 to 128 [ 224.024914][ T7519] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.046484][ T7519] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.252035][ T5617] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.589415][ T7528] loop0: detected capacity change from 0 to 4096 [ 224.719810][ T7528] ntfs3(loop0): Failed to load $Extend (-22). [ 224.727444][ T7528] ntfs3(loop0): Failed to initialize $Extend. [ 224.760422][ T5817] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 224.934435][ T5817] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.944751][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.955883][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.967208][ T5817] usb 4-1: config 0 descriptor?? [ 225.384784][ T5817] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 225.398832][ T5817] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 225.538059][ T7548] siw: device registration error -23 [ 227.237484][ T5817] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 227.273023][ T5817] usb 4-1: USB disconnect, device number 16 [ 227.430358][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.577343][ T7556] fido_id[7556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 227.592895][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 227.599596][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 227.611148][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 227.622447][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.632220][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.643030][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 227.657327][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 227.657405][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.685542][ T9] usb 3-1: config 0 descriptor?? [ 227.694830][ T7555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.918674][ T9] usb 3-1: USB disconnect, device number 12 [ 227.923622][ T5616] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 227.985150][ T7568] loop3: detected capacity change from 0 to 4096 [ 228.066110][ T7568] ntfs3(loop3): Failed to load $Extend (-22). [ 228.077232][ T7568] ntfs3(loop3): Failed to initialize $Extend. [ 228.570955][ T7593] loop1: detected capacity change from 0 to 128 [ 229.809182][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.830220][ T7615] loop4: detected capacity change from 0 to 128 [ 229.846209][ T7615] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 229.858385][ T7615] hpfs: filesystem error: improperly stopped [ 229.864810][ T7615] hpfs: You really don't want any checks? You are crazy... [ 229.872940][ T7615] hpfs: hpfs_map_sector(): read error [ 229.878602][ T7615] hpfs: code page support is disabled [ 229.885527][ T7615] hpfs: hpfs_map_4sectors(): unaligned read [ 229.885613][ T7615] hpfs: hpfs_map_4sectors(): unaligned read [ 229.885628][ T7615] hpfs: filesystem error: unable to find root dir [ 229.960152][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.970922][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 229.970985][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 229.994832][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.994872][ T9] usb 3-1: Product: syz [ 229.994897][ T9] usb 3-1: Manufacturer: syz [ 229.994914][ T9] usb 3-1: SerialNumber: syz [ 230.246187][ T7609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.860994][ T7609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.868046][ T9] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 231.868088][ T9] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 231.868122][ T9] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 231.886876][ T9] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 231.916556][ T9] usb 3-1: USB disconnect, device number 13 [ 232.874288][ T9] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 233.078287][ T7646] capability: warning: `syz.2.609' uses 32-bit capabilities (legacy support in use) [ 233.292974][ T7650] loop2: detected capacity change from 0 to 128 [ 233.305625][ T7650] EXT4-fs: Ignoring removed i_version option [ 233.342468][ T7650] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.364822][ T7650] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.606643][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.662829][ T5625] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.048173][ T7673] syz_tun: entered allmulticast mode [ 234.070615][ T7672] syz_tun: left allmulticast mode [ 234.143974][ T7679] cgroup: name respecified [ 234.159917][ T7677] loop0: detected capacity change from 0 to 2048 [ 234.168773][ T7677] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.237045][ T7680] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.250299][ T7677] syz.0.619: attempt to access beyond end of device [ 234.250299][ T7677] loop0: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 234.348257][ T5817] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 234.543661][ T5817] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.565787][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.578864][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.903838][ T5817] usb 3-1: config 0 descriptor?? [ 235.346315][ T5817] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 235.383497][ T5817] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input7 [ 235.554492][ T5817] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 235.664009][ T7709] fuse: Bad value for 'group_id' [ 235.664054][ T7709] fuse: Bad value for 'group_id' [ 235.820518][ T7711] syz_tun: entered allmulticast mode [ 235.846341][ T7710] syz_tun: left allmulticast mode [ 235.899635][ T25] usb 3-1: USB disconnect, device number 14 [ 237.778496][ T7734] loop2: detected capacity change from 0 to 1024 [ 237.779489][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.053910][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 238.058595][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.058684][ T25] usb 2-1: config 0 has no interfaces? [ 238.058866][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.730219][ T25] usb 2-1: config 0 descriptor?? [ 239.016393][ T7744] syz_tun: entered allmulticast mode [ 239.024851][ T7743] syz_tun: left allmulticast mode [ 239.401333][ T7754] cgroup: name respecified [ 239.596631][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.199095][ T5721] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 240.379118][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 240.379930][ T5721] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.385279][ T5721] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.385329][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.385357][ T5721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.390879][ T5721] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.390912][ T5721] usb 3-1: Manufacturer: syz [ 240.522251][ T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.600253][ T5721] usb 3-1: config 0 descriptor?? [ 240.666195][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.666264][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.871366][ T9] usb 2-1: USB disconnect, device number 12 [ 241.067546][ T25] usb 5-1: config 0 descriptor?? [ 241.195786][ T7764] syz_tun: entered allmulticast mode [ 241.208256][ T7763] syz_tun: left allmulticast mode [ 241.480433][ T7776] syz_tun: entered allmulticast mode [ 241.487186][ T7775] syz_tun: left allmulticast mode [ 241.521349][ T25] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 241.547363][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input8 [ 241.723847][ T25] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 241.863962][ T7777] loop1: detected capacity change from 0 to 32768 [ 241.905693][ T7777] JBD2: Ignoring recovery information on journal [ 241.986689][ T7777] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 242.067580][ T25] usb 5-1: USB disconnect, device number 7 [ 242.222054][ T7786] cgroup: name respecified [ 242.351431][ T5721] usb 3-1: USB disconnect, device number 15 [ 242.425136][ T5611] ocfs2: Unmounting device (7,1) on (node local) [ 243.911872][ T7791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.912116][ T7791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.912317][ T7791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.912467][ T7791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.912575][ T7791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.261526][ T7803] syz_tun: entered allmulticast mode [ 244.285092][ T7800] syz_tun: left allmulticast mode [ 244.589345][ T7815] loop2: detected capacity change from 0 to 2048 [ 244.605781][ T7815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.769810][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 244.879081][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 244.919722][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.931567][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.931613][ T25] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.931660][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.955487][ T5721] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 244.957428][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.957452][ T25] usb 4-1: Product: syz [ 244.957466][ T25] usb 4-1: Manufacturer: syz [ 244.957480][ T25] usb 4-1: SerialNumber: syz [ 245.008118][ T25] hub 4-1:1.0: bad descriptor, ignoring hub [ 245.014336][ T25] hub 4-1:1.0: probe with driver hub failed with error -5 [ 245.050013][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.060489][ T9] usb 3-1: config 1 has an invalid interface number: 58 but max is 1 [ 245.060548][ T9] usb 3-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 245.060587][ T9] usb 3-1: config 1 has no interface number 0 [ 245.060709][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.060789][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 245.060861][ T9] usb 3-1: too many endpoints for config 1 interface 58 altsetting 59: 57, using maximum allowed: 30 [ 245.060953][ T9] usb 3-1: config 1 interface 58 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 57 [ 245.061032][ T9] usb 3-1: config 1 interface 58 has no altsetting 0 [ 245.099113][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 245.110064][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.110087][ T9] usb 3-1: Product: syz [ 245.110102][ T9] usb 3-1: Manufacturer: syz [ 245.110116][ T9] usb 3-1: SerialNumber: syz [ 245.122680][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.151146][ T7815] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.152678][ T7817] loop4: detected capacity change from 0 to 32768 [ 245.168046][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.168088][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.168139][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 245.176328][ T9] usb 3-1: selecting invalid altsetting 1 [ 245.197228][ T5721] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.197277][ T5721] usb 2-1: Manufacturer: syz [ 245.266323][ T5721] usb 2-1: config 0 descriptor?? [ 245.280701][ T7817] JBD2: Ignoring recovery information on journal [ 245.296396][ T25] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 245.329294][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.354744][ T7815] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 245.413498][ T7817] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 245.494629][ T5610] ocfs2: Unmounting device (7,4) on (node local) [ 245.565577][ T9] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 245.565830][ T9] cdc_ncm 3-1:1.1: bind() failure [ 245.636801][ T9] usb 3-1: USB disconnect, device number 16 [ 245.792840][ T7812] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 245.969781][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.969846][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.969891][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.976690][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.198139][ T7812] usb 4-1: device firmware changed [ 246.293560][ T25] usb 4-1: USB disconnect, device number 17 [ 246.702643][ T25] usblp0: removed [ 246.869156][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 246.892185][ T7843] syz_tun: entered allmulticast mode [ 246.900615][ T7842] syz_tun: left allmulticast mode [ 247.020349][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.023483][ T25] usb 4-1: config 0 has no interfaces? [ 247.035703][ T25] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 247.035740][ T25] usb 4-1: Product: syz [ 247.035758][ T25] usb 4-1: Manufacturer: syz [ 247.035776][ T25] usb 4-1: SerialNumber: syz [ 247.057943][ T25] usb 4-1: config 0 descriptor?? [ 248.279049][ T9] usb 2-1: USB disconnect, device number 13 [ 248.280060][ T25] usb 4-1: USB disconnect, device number 18 [ 250.099249][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 250.329854][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 250.331031][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.333922][ T25] usb 4-1: config 0 descriptor?? [ 250.337646][ T25] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 250.592851][ T7890] cgroup: name respecified [ 251.330033][ T25] usb 4-1: USB disconnect, device number 19 [ 251.610462][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.109793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 255.333735][ T7939] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.717'. [ 255.389113][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.544006][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.554804][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.554841][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.554892][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.589287][ T25] usb 2-1: config 0 descriptor?? [ 255.651544][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.658057][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.060242][ T7961] loop3: detected capacity change from 0 to 2048 [ 256.076522][ T7961] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 256.110205][ T7961] syz.3.728: attempt to access beyond end of device [ 256.110205][ T7961] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 256.111530][ T7962] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.469061][ T7959] loop0: detected capacity change from 0 to 32768 [ 256.498393][ T7959] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 256.501499][ T7959] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.548811][ T7959] XFS (loop0): Ending clean mount [ 256.565065][ T7959] XFS (loop0): Quotacheck needed: Please wait. [ 256.704285][ T7959] XFS (loop0): Quotacheck: Done. [ 256.933315][ T9] usb 2-1: USB disconnect, device number 14 [ 257.005201][ T5617] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.122682][ T7989] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.733'. [ 257.226204][ T7969] loop3: detected capacity change from 0 to 32768 [ 257.338244][ T7969] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.740740][ T7985] loop2: detected capacity change from 0 to 32768 [ 257.765309][ T7985] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 257.776612][ T7985] JBD2: Ignoring recovery information on journal [ 257.819099][ T7985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 258.104342][ T5625] ocfs2: Unmounting device (7,2) on (node local) [ 258.140757][ T5618] ocfs2: Unmounting device (7,3) on (node local) [ 259.717344][ T8022] loop3: detected capacity change from 0 to 2048 [ 259.800530][ T8022] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 259.879443][ T8025] loop1: detected capacity change from 0 to 2048 [ 259.920855][ T8025] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 259.920956][ T8025] NILFS (loop1): mounting unchecked fs [ 260.013117][ T8030] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.040870][ T8022] syz.3.739: attempt to access beyond end of device [ 260.040870][ T8022] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 260.100853][ T8025] NILFS (loop1): recovery complete [ 260.178656][ T8031] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.390529][ T8016] loop4: detected capacity change from 0 to 32768 [ 260.400121][ T8016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.744 (8016) [ 260.425532][ T8016] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.436032][ T8016] BTRFS info (device loop4): using sha256 checksum algorithm [ 260.598483][ T8016] BTRFS info (device loop4): enabling ssd optimizations [ 260.598533][ T8016] BTRFS info (device loop4): turning on sync discard [ 260.605564][ T8016] BTRFS info (device loop4): enabling free space tree [ 260.605588][ T8016] BTRFS info (device loop4): use zlib compression, level 3 [ 260.729490][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 260.808958][ T8051] loop0: detected capacity change from 0 to 32768 [ 260.880618][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 260.894919][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.903427][ T25] usb 2-1: Product: syz [ 260.907701][ T25] usb 2-1: Manufacturer: syz [ 260.912498][ T25] usb 2-1: SerialNumber: syz [ 260.920129][ T25] usb 2-1: config 0 descriptor?? [ 260.933951][ T8051] JBD2: Ignoring recovery information on journal [ 260.986084][ T25] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 261.098024][ T8051] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 261.245011][ T5610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.339578][ T25] sonixb 2-1:0.0: Error writing register 01: -71 [ 261.346260][ T25] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 261.356070][ T25] usb 2-1: USB disconnect, device number 15 [ 261.699851][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 262.776160][ T8076] loop1: detected capacity change from 0 to 256 [ 262.959288][ T1556] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 263.119390][ T1556] usb 3-1: Using ep0 maxpacket: 32 [ 263.127344][ T1556] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 263.143580][ T1556] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.175636][ T1556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.184000][ T1556] usb 3-1: Product: syz [ 263.188610][ T1556] usb 3-1: Manufacturer: syz [ 263.193642][ T1556] usb 3-1: SerialNumber: syz [ 263.258072][ T1556] usb 3-1: config 0 descriptor?? [ 263.325793][ T1556] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 263.899131][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 263.917158][ T1556] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 263.917246][ T1556] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 263.938577][ T1556] usb 3-1: USB disconnect, device number 17 [ 264.061476][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.063860][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.063937][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.068743][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.068810][ T9] usb 1-1: SerialNumber: syz [ 264.163820][ T8091] loop3: detected capacity change from 0 to 32768 [ 264.202050][ T8091] JBD2: Ignoring recovery information on journal [ 264.291513][ T8091] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 264.351790][ T9] usb 1-1: 0:2 : does not exist [ 264.351963][ T9] usb 1-1: unit 5 not found! [ 264.387434][ T8100] cgroup: name respecified [ 264.534867][ T9] usb 1-1: USB disconnect, device number 9 [ 264.585403][ T5618] ocfs2: Unmounting device (7,3) on (node local) [ 265.430816][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.513494][ T5735] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 266.560064][ T5735] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 266.575758][ T5735] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 266.584427][ T5735] usb 2-1: Product: syz [ 266.589097][ T5735] usb 2-1: Manufacturer: syz [ 266.606368][ T5735] usb 2-1: SerialNumber: syz [ 266.618108][ T5735] usb 2-1: config 0 descriptor?? [ 266.854222][ T5735] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 267.055744][ T5735] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 267.055804][ T5735] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 267.055858][ T5735] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 267.849086][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 267.865563][ T8137] loop4: detected capacity change from 0 to 1024 [ 267.884119][ T8137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 267.884353][ T8137] System zones: 0-1, 3-8 [ 267.907406][ T8137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.907508][ T8137] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.970201][ T8137] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.783: lblock 0 mapped to illegal pblock 0 (length 1) [ 267.984934][ T8137] EXT4-fs (loop4): Remounting filesystem read-only [ 268.003854][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.016276][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 268.027742][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 268.046799][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.046853][ T9] usb 3-1: Product: syz [ 268.046874][ T9] usb 3-1: Manufacturer: syz [ 268.046894][ T9] usb 3-1: SerialNumber: syz [ 268.141800][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.142771][ T5735] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 268.168224][ T5735] usb 2-1: USB disconnect, device number 16 [ 268.248666][ T8148] cgroup: name respecified [ 268.308206][ T8135] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.559583][ T1556] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 268.731970][ T1556] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.746108][ T1556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.772910][ T1556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.880807][ T1556] usb 1-1: config 0 descriptor?? [ 269.072604][ T8165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.556667][ T9] cdc_ncm 3-1:1.0: failed to get mac address [ 269.570806][ T9] cdc_ncm 3-1:1.0: bind() failure [ 269.597086][ T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 269.614903][ T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 269.639346][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 269.699966][ T9] usb 3-1: USB disconnect, device number 18 [ 271.871094][ T1556] usbhid 1-1:0.0: can't add hid device: -71 [ 271.871338][ T1556] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 271.928235][ T1556] usb 1-1: USB disconnect, device number 10 [ 272.545035][ T8205] cgroup: name respecified [ 273.110910][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 273.646778][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 274.025512][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.063661][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.079534][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.330732][ T9] usb 3-1: config 0 descriptor?? [ 274.550027][ T52] Bluetooth: hci3: Invalid handle: 0x6c6c > 0x0eff [ 274.677025][ T8242] loop3: detected capacity change from 0 to 1024 [ 274.685667][ T8242] EXT4-fs: Ignoring removed bh option [ 274.699142][ T8242] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 274.732806][ T8242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.901412][ T5735] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 275.113214][ T5735] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 275.131654][ T5735] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 275.132061][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.460102][ T5735] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 275.636949][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.686601][ T8253] cgroup: name respecified [ 276.708277][ T5735] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 276.716696][ T5735] stv0680 1-1:4.0: Could not get descriptor 0200 [ 276.770829][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 276.777103][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.803041][ T9] usb 3-1: USB disconnect, device number 19 [ 276.901498][ T5735] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 276.901540][ T5735] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 276.925017][ T5735] usb 1-1: USB disconnect, device number 11 [ 277.005034][ T52] Bluetooth: hci4: Invalid handle: 0x6c6c > 0x0eff [ 277.279101][ T5817] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 277.440234][ T5817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.452630][ T5817] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 277.452688][ T5817] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 277.480708][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.480747][ T5817] usb 4-1: Product: syz [ 277.480775][ T5817] usb 4-1: Manufacturer: syz [ 277.480792][ T5817] usb 4-1: SerialNumber: syz [ 277.719278][ T8276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.845207][ T8297] cgroup: name respecified [ 278.262504][ T8299] siw: device registration error -23 [ 278.303205][ T5817] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 278.316390][ T5817] cdc_ncm 4-1:1.0: bind() failure [ 278.362777][ T5817] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 278.370106][ T5817] cdc_ncm 4-1:1.1: bind() failure [ 278.534478][ T52] Bluetooth: hci1: Invalid handle: 0x6c6c > 0x0eff [ 278.818998][ T8310] cgroup: name respecified [ 281.002659][ T25] usb 4-1: USB disconnect, device number 20 [ 281.247138][ T8337] siw: device registration error -23 [ 281.395206][ T8338] cgroup: name respecified [ 282.089589][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'. [ 283.957215][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'. [ 284.040222][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 284.190084][ T25] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.194350][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.194655][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.221997][ T25] usb 1-1: config 0 descriptor?? [ 284.339489][ T1556] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.490065][ T1556] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.491578][ T1556] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 284.491965][ T1556] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 284.494796][ T1556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.495176][ T1556] usb 3-1: Product: syz [ 284.495210][ T1556] usb 3-1: Manufacturer: syz [ 284.495230][ T1556] usb 3-1: SerialNumber: syz [ 284.753314][ T8370] cgroup: name respecified [ 284.932012][ T8364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 285.342756][ T1556] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 285.342869][ T1556] cdc_ncm 3-1:1.0: bind() failure [ 285.370916][ T1556] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 285.378044][ T1556] cdc_ncm 3-1:1.1: bind() failure [ 287.604736][ T25] usb 3-1: USB disconnect, device number 20 [ 288.351630][ T1556] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 288.491121][ T5817] usb 1-1: USB disconnect, device number 12 [ 288.559398][ T1556] usb 4-1: device descriptor read/64, error -71 [ 288.662301][ T8404] Bluetooth: MGMT ver 1.23 [ 289.438789][ T8407] loop0: detected capacity change from 0 to 131072 [ 289.452622][ T1556] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 289.480862][ T8407] F2FS-fs (loop0): invalid crc value [ 289.539889][ T8407] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 289.552996][ T8407] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 289.589846][ T1556] usb 4-1: device descriptor read/64, error -71 [ 289.699425][ T1556] usb usb4-port1: attempt power cycle [ 290.396208][ T8423] loop2: detected capacity change from 0 to 1024 [ 290.412764][ T8423] EXT4-fs: Ignoring removed bh option [ 290.423743][ T8423] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 290.432538][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 290.475539][ T8423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.333402][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.440490][ T8433] cgroup: name respecified [ 291.914290][ T8439] loop2: detected capacity change from 0 to 128 [ 291.936540][ T8439] EXT4-fs: Ignoring removed i_version option [ 292.854242][ T8439] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.874071][ T8439] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 293.531260][ T8444] loop4: detected capacity change from 0 to 131072 [ 293.540099][ T8444] F2FS-fs (loop4): invalid crc value [ 293.605926][ T8444] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 293.623939][ T8444] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 293.864746][ T5625] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.509044][ T1556] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 294.639493][ T1556] usb 3-1: device descriptor read/64, error -71 [ 294.730793][ T5735] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 294.817551][ T8464] loop3: detected capacity change from 0 to 1024 [ 294.828631][ T8464] EXT4-fs: Ignoring removed bh option [ 294.849248][ T8464] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 294.879074][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 294.879074][ T1556] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 294.895359][ T5735] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 294.910161][ T5735] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 294.910210][ T5735] usb 5-1: config 0 has no interface number 0 [ 294.936969][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.937008][ T5735] usb 5-1: Product: syz [ 294.937035][ T5735] usb 5-1: Manufacturer: syz [ 294.937053][ T5735] usb 5-1: SerialNumber: syz [ 294.940687][ T8464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.976442][ T5735] usb 5-1: config 0 descriptor?? [ 295.113242][ T1556] usb 3-1: device descriptor read/64, error -71 [ 295.653463][ T1556] usb usb3-port1: attempt power cycle [ 295.798368][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.019683][ T1556] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 296.039928][ T1556] usb 3-1: device descriptor read/8, error -71 [ 296.279058][ T1556] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 296.304801][ T1556] usb 3-1: device descriptor read/8, error -71 [ 296.409529][ T1556] usb usb3-port1: unable to enumerate USB device [ 296.588278][ T5735] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 296.588342][ T5735] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 296.611146][ T5735] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 296.611433][ T5735] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 296.664460][ T5735] usb 5-1: USB disconnect, device number 8 [ 296.720095][ T8478] cgroup: name respecified [ 296.878312][ T8462] loop1: detected capacity change from 0 to 32768 [ 296.891512][ T8462] xfs: Deprecated parameter 'ikeep' [ 296.891561][ T8462] XFS: ikeep mount option is deprecated. [ 297.162597][ T8462] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.236477][ T8462] XFS (loop1): Ending clean mount [ 297.257052][ T8462] XFS (loop1): Quotacheck needed: Please wait. [ 297.415950][ T8462] XFS (loop1): Quotacheck: Done. [ 297.618353][ T8494] loop3: detected capacity change from 0 to 128 [ 297.631883][ T8494] EXT4-fs: Ignoring removed i_version option [ 297.669654][ T8494] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.685241][ T8494] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.763796][ T5611] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 298.307663][ T5618] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.044636][ T8508] loop3: detected capacity change from 0 to 1024 [ 299.052400][ T8508] EXT4-fs: Ignoring removed bh option [ 299.062512][ T8508] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 299.143225][ T8508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.217076][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.300978][ T8517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.316604][ T8517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.316779][ T8517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.360623][ T8517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.759288][ T1556] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 300.889134][ T1556] usb 5-1: device descriptor read/64, error -71 [ 301.129099][ T1556] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 301.276684][ T8532] cgroup: name respecified [ 301.339092][ T1556] usb 5-1: device descriptor read/64, error -71 [ 301.429951][ T8537] loop3: detected capacity change from 0 to 128 [ 301.524201][ T8537] EXT4-fs: Ignoring removed i_version option [ 301.530408][ T1556] usb usb5-port1: attempt power cycle [ 302.539400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 303.204805][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 303.204849][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.204861][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.204878][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.351830][ T8537] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.392798][ T8537] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.471036][ T1556] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 303.492344][ T1556] usb 5-1: device descriptor read/8, error -71 [ 303.519285][ T5618] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.632186][ T8551] loop4: detected capacity change from 0 to 1024 [ 303.645264][ T8551] EXT4-fs: Ignoring removed bh option [ 303.656578][ T8551] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 303.687289][ T8551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.543640][ T8559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.543817][ T8559] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.543974][ T8559] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.544071][ T8559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.949087][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.079057][ T9] usb 3-1: device descriptor read/64, error -71 [ 305.339181][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 305.479137][ T9] usb 3-1: device descriptor read/64, error -71 [ 305.590081][ T9] usb usb3-port1: attempt power cycle [ 307.274452][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.274514][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.274556][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.274585][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.318500][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 307.349796][ T9] usb 3-1: device descriptor read/8, error -71 [ 307.460354][ T5735] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 307.500162][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.590271][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 307.799140][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 307.808946][ T5735] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.824031][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.837695][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.837838][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.837979][ T5735] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.849820][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.922565][ T5735] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.922706][ T5735] usb 1-1: Manufacturer: syz [ 307.994583][ T5735] usb 1-1: config 0 descriptor?? [ 308.763512][ T9] usb 3-1: device descriptor read/8, error -71 [ 308.882029][ T9] usb usb3-port1: unable to enumerate USB device [ 308.974058][ T8595] loop2: detected capacity change from 0 to 128 [ 308.988417][ T8595] EXT4-fs: Ignoring removed i_version option [ 309.018335][ T8595] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.035127][ T8595] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.190697][ T8599] overlayfs: missing 'workdir' [ 309.211872][ T5625] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.675642][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 309.684843][ T5735] rc_core: IR keymap rc-hauppauge not found [ 309.684870][ T5735] Registered IR keymap rc-empty [ 309.685011][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.703355][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.720140][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 309.736037][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 309.758645][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.779964][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.799511][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.820662][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.839569][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.859135][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.879099][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.899738][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.919146][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.939080][ T5735] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 309.965642][ T5735] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 309.965679][ T5735] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.991240][ T5735] usb 1-1: USB disconnect, device number 13 [ 310.350207][ T5735] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 310.367910][ T8628] loop2: detected capacity change from 0 to 2048 [ 310.403980][ T8628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.442966][ T8630] overlayfs: missing 'workdir' [ 310.522378][ T5735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.535465][ T5735] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 310.535527][ T5735] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 310.561733][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.561776][ T5735] usb 1-1: Product: syz [ 310.561820][ T5735] usb 1-1: Manufacturer: syz [ 310.561842][ T5735] usb 1-1: SerialNumber: syz [ 310.669366][ T5709] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 310.800190][ T8616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.820969][ T5709] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.823834][ T5709] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.823900][ T5709] usb 3-1: config 1 has no interface number 0 [ 310.824005][ T5709] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.824078][ T5709] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 310.824160][ T5709] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 310.824265][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 310.824323][ T5709] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 310.824387][ T5709] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x89 has invalid maxpacket 17243, setting to 64 [ 310.842858][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.842913][ T5709] usb 3-1: Product: syz [ 310.842948][ T5709] usb 3-1: Manufacturer: syz [ 310.842977][ T5709] usb 3-1: SerialNumber: syz [ 310.889811][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 310.934504][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 311.095879][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.096044][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.112390][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 311.124047][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.124086][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 311.124175][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.212355][ T5735] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 311.212433][ T5735] cdc_ncm 1-1:1.0: bind() failure [ 311.232832][ T5735] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 311.244388][ T5735] cdc_ncm 1-1:1.1: bind() failure [ 311.269397][ T8648] loop4: detected capacity change from 0 to 512 [ 311.270088][ T8648] EXT4-fs: Ignoring removed orlov option [ 311.298657][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.309338][ T8648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 311.309695][ T8648] System zones: 1-12 [ 311.323448][ T8648] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.963: error while reading EA inode 32 err=-116 [ 311.323506][ T8648] loop4: lost filesystem error report for type 5 error -117 [ 311.336235][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 311.336259][ C0] EXT4-fs (loop4): initial error at time 1786673738: ext4_xattr_inode_iget:442 [ 311.336281][ C0] EXT4-fs (loop4): last error at time 1786673738: ext4_xattr_inode_iget:442 [ 311.336339][ T8648] EXT4-fs (loop4): Remounting filesystem read-only [ 311.336418][ T8648] EXT4-fs (loop4): 1 orphan inode deleted [ 311.337748][ T8648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.430333][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.708803][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.709438][ T8628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.732184][ T5709] cdc_ncm 3-1:1.1: bind() failure [ 311.926412][ T5735] usb 3-1: USB disconnect, device number 29 [ 313.000170][ T9] usb 1-1: USB disconnect, device number 14 [ 313.139058][ T5735] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 313.303987][ T5735] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 313.315525][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.326957][ T5735] usb 3-1: config 0 descriptor?? [ 313.335315][ T5735] cp210x 3-1:0.0: cp210x converter detected [ 313.541185][ T5735] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 313.541235][ T5735] cp210x 3-1:0.0: querying part number failed [ 313.572161][ T5735] usb 3-1: cp210x converter now attached to ttyUSB0 [ 313.712720][ T8697] loop3: detected capacity change from 0 to 8192 [ 313.742737][ T5735] usb 2-1: USB disconnect, device number 17 [ 314.909061][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 314.944524][ T8713] tipc: Failed to remove unknown binding: 66,0,0/0:1278243447/1278243448 [ 314.946040][ T8713] tipc: Failed to remove unknown binding: 66,0,0/0:1278243447/1278243448 [ 315.059781][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 315.069884][ T9] usb 5-1: no configurations [ 315.074636][ T9] usb 5-1: can't read configurations, error -22 [ 315.209050][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 315.360657][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 315.360720][ T9] usb 5-1: no configurations [ 315.360754][ T9] usb 5-1: can't read configurations, error -22 [ 315.361193][ T9] usb usb5-port1: attempt power cycle [ 315.699076][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 315.720351][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 315.720407][ T9] usb 5-1: no configurations [ 315.720441][ T9] usb 5-1: can't read configurations, error -22 [ 315.799051][ T5709] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 315.869061][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 315.893326][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 315.902656][ T9] usb 5-1: no configurations [ 315.907406][ T9] usb 5-1: can't read configurations, error -22 [ 315.915335][ T9] usb usb5-port1: unable to enumerate USB device [ 315.938261][ T1556] usb 3-1: USB disconnect, device number 30 [ 315.945248][ T1556] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.947476][ T1556] cp210x 3-1:0.0: device disconnected [ 315.960308][ T5709] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.963502][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.963560][ T5709] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.966006][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.966069][ T5709] usb 2-1: SerialNumber: syz [ 316.263542][ T5709] usb 2-1: 0:2 : does not exist [ 316.432107][ T5709] usb 2-1: USB disconnect, device number 18 [ 316.492084][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.117418][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117509][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.355353][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 317.819329][ T5709] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 317.980945][ T5709] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.984099][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.999917][ T5709] usb 2-1: config 0 descriptor?? [ 318.010814][ T5709] cp210x 2-1:0.0: cp210x converter detected [ 318.109310][ T5720] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 318.271438][ T5709] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 318.271491][ T5709] cp210x 2-1:0.0: querying part number failed [ 318.283775][ T5709] usb 2-1: cp210x converter now attached to ttyUSB0 [ 318.329205][ T5720] usb 5-1: device descriptor read/64, error -71 [ 318.384440][ T8756] syzkaller0: entered promiscuous mode [ 318.384484][ T8756] syzkaller0: entered allmulticast mode [ 318.649104][ T5720] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 318.799081][ T5720] usb 5-1: device descriptor read/64, error -71 [ 318.910614][ T5720] usb usb5-port1: attempt power cycle [ 319.259060][ T5720] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 319.279780][ T5720] usb 5-1: device descriptor read/8, error -71 [ 319.319141][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 319.469633][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 319.473224][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.473286][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.477549][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 319.477605][ T9] usb 1-1: SerialNumber: syz [ 319.519080][ T5720] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 319.584026][ T5720] usb 5-1: device descriptor read/8, error -71 [ 319.690050][ T5720] usb usb5-port1: unable to enumerate USB device [ 319.791726][ T9] usb 1-1: 0:2 : does not exist [ 319.854169][ T9] usb 1-1: USB disconnect, device number 15 [ 319.910898][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.423045][ T8774] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 320.616769][ T9] usb 2-1: USB disconnect, device number 19 [ 320.640793][ T8776] loop2: detected capacity change from 0 to 1024 [ 320.653971][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.660344][ T9] cp210x 2-1:0.0: device disconnected [ 320.849784][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 322.571563][ T8802] cgroup: name respecified [ 322.739414][ T8806] loop2: detected capacity change from 0 to 512 [ 322.744109][ T8806] EXT4-fs: Ignoring removed orlov option [ 322.922085][ T8806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 322.931051][ T8806] System zones: 1-12 [ 322.938899][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 322.959936][ T8806] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1021: error while reading EA inode 32 err=-116 [ 322.972391][ T8806] loop2: lost filesystem error report for type 5 error -117 [ 322.974192][ T8806] EXT4-fs (loop2): Remounting filesystem read-only [ 322.981603][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 322.981623][ C1] EXT4-fs (loop2): initial error at time 1786673750: ext4_xattr_inode_iget:442 [ 322.981647][ C1] EXT4-fs (loop2): last error at time 1786673750: ext4_xattr_inode_iget:442 [ 322.983075][ T8806] EXT4-fs (loop2): 1 orphan inode deleted [ 323.171012][ T8806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.486929][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.539581][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.550143][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.567112][ T9] usb 2-1: config 0 descriptor?? [ 323.578821][ T9] cp210x 2-1:0.0: cp210x converter detected [ 323.792122][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 323.792186][ T9] cp210x 2-1:0.0: querying part number failed [ 323.812969][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 324.064170][ T8790] loop4: detected capacity change from 0 to 32768 [ 324.079112][ T8790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1019 (8790) [ 324.175875][ T8790] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.175948][ T8790] BTRFS info (device loop4): using sha256 checksum algorithm [ 324.199136][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.252745][ T8790] BTRFS info (device loop4): enabling ssd optimizations [ 324.252787][ T8790] BTRFS info (device loop4): turning on sync discard [ 324.252804][ T8790] BTRFS info (device loop4): enabling free space tree [ 324.252853][ T8790] BTRFS info (device loop4): use zlib compression, level 3 [ 324.355122][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 324.365899][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 324.365962][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.402584][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 324.545370][ T5610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.790802][ T8838] loop3: detected capacity change from 0 to 1024 [ 325.444950][ T8855] loop2: detected capacity change from 0 to 512 [ 325.458712][ T8855] EXT4-fs: Ignoring removed orlov option [ 325.537282][ T8855] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 325.539377][ T8855] System zones: 1-12 [ 325.594187][ T8855] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1037: error while reading EA inode 32 err=-116 [ 325.594312][ T8855] loop2: lost filesystem error report for type 5 error -117 [ 325.597878][ T8855] EXT4-fs (loop2): Remounting filesystem read-only [ 325.610335][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 325.610354][ C1] EXT4-fs (loop2): initial error at time 1786673753: ext4_xattr_inode_iget:442 [ 325.610376][ C1] EXT4-fs (loop2): last error at time 1786673753: ext4_xattr_inode_iget:442 [ 325.610699][ T8855] EXT4-fs (loop2): 1 orphan inode deleted [ 325.629649][ T8855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.997539][ T9] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 325.997583][ T9] stv0680 1-1:4.0: Could not get descriptor 0200 [ 326.020611][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 326.020655][ T9] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 326.125693][ T9] usb 1-1: USB disconnect, device number 16 [ 326.147886][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.173069][ T5735] usb 2-1: USB disconnect, device number 20 [ 326.184484][ T5735] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 326.203001][ T5735] cp210x 2-1:0.0: device disconnected [ 327.507262][ T8873] loop3: detected capacity change from 0 to 8192 [ 327.619085][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 327.771439][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 327.777361][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 327.777435][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 327.777534][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.814989][ T9] usb 1-1: config 0 descriptor?? [ 327.827885][ T8869] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 327.981603][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.124548][ T8887] loop3: detected capacity change from 0 to 512 [ 328.125086][ T8887] EXT4-fs: Ignoring removed orlov option [ 328.147858][ T8887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 328.147979][ T8887] System zones: 1-12 [ 328.152970][ T8887] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1051: error while reading EA inode 32 err=-116 [ 328.153033][ T8887] loop3: lost filesystem error report for type 5 error -117 [ 328.154064][ T8887] EXT4-fs (loop3): Remounting filesystem read-only [ 328.154249][ T8887] EXT4-fs (loop3): 1 orphan inode deleted [ 328.162426][ T8887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.252407][ T5618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.537757][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 328.552479][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.575929][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.655156][ T8895] loop2: detected capacity change from 0 to 64 [ 328.934511][ T9] ath6kl: Failed to submit usb control message: -110 [ 328.934574][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 328.934618][ T9] ath6kl: Unable to send get target info: -110 [ 328.991344][ T9] ath6kl: Failed to init ath6kl core: -110 [ 329.005043][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 329.215531][ T8899] loop4: detected capacity change from 0 to 1024 [ 329.388132][ T5720] usb 1-1: USB disconnect, device number 17 [ 329.920551][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.920616][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.920673][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.939235][ T6100] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.340678][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 330.500306][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 330.506497][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 330.512929][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 330.512984][ T10] usb 4-1: config 0 has no interface number 0 [ 330.522243][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.522269][ T10] usb 4-1: Product: syz [ 330.522285][ T10] usb 4-1: Manufacturer: syz [ 330.522300][ T10] usb 4-1: SerialNumber: syz [ 330.534293][ T10] usb 4-1: config 0 descriptor?? [ 333.593641][ T8919] loop4: detected capacity change from 0 to 1024 [ 333.667162][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 333.667393][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 333.752044][ T10] usb 4-1: USB disconnect, device number 24 [ 333.786936][ T8926] loop1: detected capacity change from 0 to 1024 [ 333.875723][ T8928] loop3: detected capacity change from 0 to 64 [ 334.033967][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 334.344216][ T8943] loop4: detected capacity change from 0 to 512 [ 334.344868][ T8943] EXT4-fs: Ignoring removed orlov option [ 334.355268][ T8943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 334.355377][ T8943] System zones: 1-12 [ 334.356418][ T8943] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1071: error while reading EA inode 32 err=-116 [ 334.356445][ T8943] loop4: lost filesystem error report for type 5 error -117 [ 334.356803][ T8943] EXT4-fs (loop4): Remounting filesystem read-only [ 334.356872][ T8943] EXT4-fs (loop4): 1 orphan inode deleted [ 334.358534][ T8943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.425108][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.289735][ T8962] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.289913][ T8962] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.290019][ T8962] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.290110][ T8962] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.317953][ T8971] fuse: Bad value for 'fd' [ 337.531642][ T8973] loop3: detected capacity change from 0 to 1024 [ 337.892276][ T8984] syzkaller0: entered promiscuous mode [ 337.898817][ T8984] syzkaller0: entered allmulticast mode [ 338.093112][ T8993] siw: device registration error -23 [ 338.389157][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 338.627728][ T9014] loop3: detected capacity change from 0 to 1024 [ 338.658845][ T9010] loop2: detected capacity change from 0 to 4096 [ 338.759051][ T5709] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 338.796587][ T9010] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 338.925202][ T5709] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.933992][ T9010] ntfs3(loop2): Failed to load $Extend (-22). [ 338.934052][ T9010] ntfs3(loop2): Failed to initialize $Extend. [ 338.947877][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.960495][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.970468][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.978634][ T5709] usb 5-1: SerialNumber: syz [ 339.204522][ T5709] usb 5-1: 0:2 : does not exist [ 339.204613][ T5709] usb 5-1: unit 5 not found! [ 339.261765][ T5709] usb 5-1: USB disconnect, device number 21 [ 339.329048][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.339077][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.345200][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.345233][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.459162][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.398180][ T9048] loop1: detected capacity change from 0 to 8192 [ 341.909782][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 342.060760][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 342.072304][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.082764][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.099836][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 342.108021][ T10] usb 4-1: SerialNumber: syz [ 342.257329][ T9071] loop1: detected capacity change from 0 to 32768 [ 342.282174][ T9071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1115 (9071) [ 342.308641][ T9082] loop0: detected capacity change from 0 to 128 [ 342.315426][ T9082] EXT4-fs: Ignoring removed i_version option [ 342.334462][ T9071] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.344936][ T9071] BTRFS info (device loop1): using sha256 checksum algorithm [ 342.357846][ T9082] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.376553][ T10] usb 4-1: 0:2 : does not exist [ 342.376706][ T10] usb 4-1: unit 5 not found! [ 342.390011][ T9082] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.512732][ T9071] BTRFS info (device loop1): enabling ssd optimizations [ 342.512782][ T9071] BTRFS info (device loop1): turning on sync discard [ 342.512799][ T9071] BTRFS info (device loop1): enabling free space tree [ 342.512816][ T9071] BTRFS info (device loop1): use zlib compression, level 3 [ 342.556589][ T5617] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.606259][ T10] usb 4-1: USB disconnect, device number 25 [ 342.851521][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.021789][ T9105] loop0: detected capacity change from 0 to 8192 [ 343.066301][ T5611] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.365011][ T9121] fuse: Unknown parameter 'use00000000000000000000' [ 343.481523][ T9125] loop3: detected capacity change from 0 to 128 [ 343.482645][ T9125] EXT4-fs: Ignoring removed i_version option [ 343.534317][ T9125] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.537356][ T9125] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 343.712142][ T5618] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.919187][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 344.629021][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 344.629690][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.630897][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.630964][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.631007][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.631034][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 344.631060][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.632527][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.632552][ T10] usb 2-1: Manufacturer: syz [ 344.648839][ T10] usb 2-1: config 0 descriptor?? [ 344.749127][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 344.812924][ T9135] loop3: detected capacity change from 0 to 32768 [ 344.825522][ T9135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1135 (9135) [ 344.849468][ T9135] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.860177][ T9135] BTRFS info (device loop3): using sha256 checksum algorithm [ 344.899708][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 344.910998][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.911039][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.946646][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 344.946690][ T9] usb 1-1: SerialNumber: syz [ 345.067082][ T9135] BTRFS info (device loop3): enabling ssd optimizations [ 345.076813][ T9135] BTRFS info (device loop3): turning on sync discard [ 345.076887][ T9135] BTRFS info (device loop3): enabling free space tree [ 345.076911][ T9135] BTRFS info (device loop3): use zlib compression, level 3 [ 345.148158][ T10] rc_core: IR keymap rc-hauppauge not found [ 345.148183][ T10] Registered IR keymap rc-empty [ 345.148312][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.170570][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.191802][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 345.194606][ T9] usb 1-1: 0:2 : does not exist [ 345.194683][ T9] usb 1-1: unit 5 not found! [ 345.241113][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 345.314768][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.345205][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.360511][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.380752][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.399836][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.429098][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.451476][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.470242][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.490477][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.509125][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.530584][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 345.530628][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 345.532703][ T9] usb 1-1: USB disconnect, device number 18 [ 345.592374][ T989] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 345.616573][ T10] usb 2-1: USB disconnect, device number 21 [ 345.625666][ T5618] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 345.672668][ T9169] fuse: Unknown parameter 'use00000000000000000000' [ 345.739519][ T989] usb 5-1: Using ep0 maxpacket: 8 [ 345.741069][ T989] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 345.764493][ T989] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 345.764555][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 345.764601][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.764626][ T989] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.764651][ T989] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.764693][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.866083][ T989] usb 5-1: config 0 descriptor?? [ 345.967900][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.363530][ T9184] loop0: detected capacity change from 0 to 512 [ 346.364004][ T9184] EXT4-fs: Ignoring removed orlov option [ 346.398729][ T9184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 346.398896][ T9184] System zones: 1-12 [ 346.411842][ T9184] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1148: error while reading EA inode 32 err=-116 [ 346.411864][ T9184] loop0: lost filesystem error report for type 5 error -117 [ 346.424408][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 346.424424][ C1] EXT4-fs (loop0): initial error at time 1786673773: ext4_xattr_inode_iget:442 [ 346.424444][ C1] EXT4-fs (loop0): last error at time 1786673773: ext4_xattr_inode_iget:442 [ 346.458454][ T9184] EXT4-fs (loop0): Remounting filesystem read-only [ 346.458547][ T9184] EXT4-fs (loop0): 1 orphan inode deleted [ 346.459869][ T9184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.506010][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.647473][ T9189] loop1: detected capacity change from 0 to 128 [ 346.665901][ T9189] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 346.692627][ T9189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.047435][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1153'. [ 347.967009][ T9206] fuse: Unknown parameter 'use00000000000000000000' [ 348.310994][ T9216] siw: device registration error -23 [ 348.356673][ T10] usb 5-1: USB disconnect, device number 22 [ 348.459267][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 348.620034][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 348.625801][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 348.636753][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.636793][ T9] usb 1-1: config 0 has no interface number 0 [ 348.636895][ T9] usb 1-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.636925][ T9] usb 1-1: config 0 interface 1 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.636970][ T9] usb 1-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.637000][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 348.637059][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.704533][ T9] usb 1-1: config 0 descriptor?? [ 348.875823][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 349.031154][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 349.041951][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 349.041999][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 349.042083][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.097787][ T10] usb 5-1: config 0 descriptor?? [ 349.103584][ T9219] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 349.241320][ T9] uclogic 0003:28BD:1903.0005: interface is invalid, ignoring [ 349.407379][ T9] usb 1-1: USB disconnect, device number 19 [ 349.686979][ T9235] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1164'. [ 350.240648][ T10] ath6kl: Failed to submit usb control message: -110 [ 350.241062][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 350.241143][ T10] ath6kl: Unable to send get target info: -110 [ 350.364694][ T10] ath6kl: Failed to init ath6kl core: -110 [ 350.417806][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 351.163158][ T9242] fuse: Unknown parameter 'user_i00000000000000000000' [ 351.534084][ T9250] siw: device registration error -23 [ 351.607676][ T5709] usb 5-1: USB disconnect, device number 23 [ 352.795548][ T9272] fuse: Unknown parameter 'user_i00000000000000000000' [ 353.154101][ T9278] siw: device registration error -23 [ 353.716060][ T9287] loop4: detected capacity change from 0 to 512 [ 353.716582][ T9287] EXT4-fs: Ignoring removed orlov option [ 353.735113][ T9287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 353.735228][ T9287] System zones: 1-12 [ 353.749403][ T9287] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1186: error while reading EA inode 32 err=-116 [ 353.749432][ T9287] loop4: lost filesystem error report for type 5 error -117 [ 353.749799][ T9287] EXT4-fs (loop4): Remounting filesystem read-only [ 353.749868][ T9287] EXT4-fs (loop4): 1 orphan inode deleted [ 353.756871][ T9287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.792004][ T5709] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 353.904768][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.945296][ T5709] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 353.954816][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 353.954879][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 353.954975][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.999838][ T5709] usb 1-1: config 0 descriptor?? [ 354.009161][ T9284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.661237][ T1556] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 354.809718][ T1556] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 354.813282][ T1556] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 354.813471][ T1556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.872081][ T1556] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 355.090217][ T5709] ath6kl: Failed to submit usb control message: -110 [ 355.090295][ T5709] ath6kl: unable to send the bmi data to the device: -110 [ 355.090311][ T5709] ath6kl: Unable to send get target info: -110 [ 355.123779][ T5709] ath6kl: Failed to init ath6kl core: -110 [ 355.127274][ T5709] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 355.698330][ T9305] fuse: Unknown parameter 'user_i00000000000000000000' [ 355.896777][ T1556] stv0680 5-1:4.0: Could not get descriptor 0200 [ 356.106123][ T1556] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 356.106169][ T1556] stv0680 5-1:4.0: last error: 33, command = 0x22 [ 356.134994][ T1556] usb 5-1: USB disconnect, device number 24 [ 356.576659][ T5709] usb 1-1: USB disconnect, device number 20 [ 356.689144][ T1556] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 356.842829][ T1556] usb 2-1: Using ep0 maxpacket: 32 [ 356.845218][ T1556] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.856182][ T1556] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.856244][ T1556] usb 2-1: config 0 has no interface number 0 [ 356.896567][ T1556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.896615][ T1556] usb 2-1: Product: syz [ 356.896630][ T1556] usb 2-1: Manufacturer: syz [ 356.896644][ T1556] usb 2-1: SerialNumber: syz [ 356.931294][ T1556] usb 2-1: config 0 descriptor?? [ 357.939209][ T1556] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 357.939257][ T1556] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 358.401291][ T9334] loop4: detected capacity change from 0 to 512 [ 358.401914][ T9334] EXT4-fs: Ignoring removed orlov option [ 358.424744][ T9334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 358.424884][ T9334] System zones: 1-12 [ 358.438069][ T9334] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1202: error while reading EA inode 32 err=-116 [ 358.438134][ T9334] loop4: lost filesystem error report for type 5 error -117 [ 358.439047][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 358.439096][ C1] EXT4-fs (loop4): initial error at time 1786673786: ext4_xattr_inode_iget:442 [ 358.439154][ C1] EXT4-fs (loop4): last error at time 1786673786: ext4_xattr_inode_iget:442 [ 358.440126][ T9334] EXT4-fs (loop4): Remounting filesystem read-only [ 358.440326][ T9334] EXT4-fs (loop4): 1 orphan inode deleted [ 358.451366][ T9334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.497739][ T1556] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 358.497971][ T1556] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 358.535579][ T1556] usb 2-1: USB disconnect, device number 22 [ 358.617426][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.192864][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 362.369938][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 362.381086][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 362.381138][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 362.381189][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.423044][ T10] usb 3-1: config 0 descriptor?? [ 362.437949][ T9346] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.086833][ T148] IPVS: starting estimator thread 0... [ 363.199716][ T9361] IPVS: using max 30 ests per chain, 72000 per kthread [ 363.500904][ T10] ath6kl: Failed to submit usb control message: -110 [ 363.500997][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 363.501034][ T10] ath6kl: Unable to send get target info: -110 [ 363.550804][ T10] ath6kl: Failed to init ath6kl core: -110 [ 363.558350][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 363.580364][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 363.749792][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 363.760514][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.760589][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.760634][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.795720][ T9] usb 2-1: config 0 descriptor?? [ 363.810856][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 364.195616][ T9369] loop4: detected capacity change from 0 to 4096 [ 366.066746][ T9] usb 3-1: USB disconnect, device number 31 [ 366.365176][ T9] usb 2-1: USB disconnect, device number 23 [ 366.993669][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1219'. [ 368.249441][ T5709] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 368.368853][ T9422] siw: device registration error -23 [ 368.410001][ T5709] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 368.413123][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 368.413198][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 368.413307][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.421164][ T5709] usb 1-1: config 0 descriptor?? [ 368.423498][ T9410] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 368.609087][ T1556] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 368.878850][ T1556] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 368.883054][ T1556] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.883220][ T1556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.928073][ T1556] usb 4-1: config 0 descriptor?? [ 369.497784][ T5709] ath6kl: Failed to submit usb control message: -110 [ 369.500281][ T5709] ath6kl: unable to send the bmi data to the device: -110 [ 369.500333][ T5709] ath6kl: Unable to send get target info: -110 [ 369.606306][ T5709] ath6kl: Failed to init ath6kl core: -110 [ 369.663394][ T5709] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 370.363566][ T9446] syzkaller0: entered promiscuous mode [ 370.370093][ T9446] syzkaller0: entered allmulticast mode [ 371.001752][ T9] usb 1-1: USB disconnect, device number 21 [ 371.452898][ T5709] usb 4-1: USB disconnect, device number 26 [ 371.802750][ T9480] syzkaller0: entered promiscuous mode [ 371.803017][ T9480] syzkaller0: entered allmulticast mode [ 371.942214][ T9484] siw: device registration error -23 [ 372.729023][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 372.943312][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.951954][ T5624] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 373.331920][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 373.474878][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.474935][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.514994][ T9] usb 4-1: config 0 descriptor?? [ 373.596002][ T5855] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.596486][ T5855] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.596645][ T5855] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.596804][ T5855] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.596959][ T5855] Bluetooth: hci5: Frame reassembly failed (-84) [ 373.813513][ T52] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 373.821630][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 374.504923][ T9519] loop4: detected capacity change from 0 to 4096 [ 374.990386][ T9527] loop4: detected capacity change from 0 to 1024 [ 375.000391][ T9525] syzkaller0: entered promiscuous mode [ 375.007088][ T9527] hfsplus: failed to load extents file [ 375.012806][ T9525] syzkaller0: entered allmulticast mode [ 375.575952][ T5709] usb 4-1: USB disconnect, device number 27 [ 375.651632][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 375.809921][ T4931] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 375.819138][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.842947][ T9570] loop2: detected capacity change from 0 to 1024 [ 378.083614][ T9566] kexec: Could not allocate control_code_buffer [ 378.503311][ T9537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.531465][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.537921][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.389755][ T9600] fuse: Unknown parameter '0x0000000000000003' [ 379.856985][ T9607] loop3: detected capacity change from 0 to 256 [ 379.866576][ T9607] exfat: Deprecated parameter 'utf8' [ 379.884468][ T9608] jffs2: notice: (9608) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 379.922378][ T9607] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 381.149993][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 381.829434][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 381.831247][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 381.834624][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.834736][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.834778][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.835947][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 381.836003][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.841571][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 381.841977][ T9] usb 1-1: Manufacturer: syz [ 381.855876][ T9] usb 1-1: config 0 descriptor?? [ 382.233453][ T9] rc_core: IR keymap rc-hauppauge not found [ 382.235145][ T9] Registered IR keymap rc-empty [ 382.235658][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.259125][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.280044][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 382.322817][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 382.342178][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.360854][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.380015][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.412348][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.429391][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.451716][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.469285][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.489322][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.509299][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.529375][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 382.550773][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 382.550824][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 382.593295][ T9] usb 1-1: USB disconnect, device number 22 [ 382.679360][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 382.909485][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.912250][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 382.912355][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 382.917380][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.917436][ T10] usb 3-1: Product: syz [ 382.917473][ T10] usb 3-1: Manufacturer: syz [ 382.917517][ T10] usb 3-1: SerialNumber: syz [ 383.191407][ T9640] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 383.376569][ T9618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.043921][ T9640] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 384.323375][ T10] cdc_ncm 3-1:1.0: failed to get mac address [ 384.524979][ T10] cdc_ncm 3-1:1.0: bind() failure [ 384.557336][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 384.569344][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 384.581621][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 384.622800][ T10] usb 3-1: USB disconnect, device number 32 [ 385.128140][ T9675] loop0: detected capacity change from 0 to 2048 [ 385.129119][ T9675] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.129144][ T9675] EXT4-fs: Ignoring removed i_version option [ 385.854701][ T9675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.932025][ T9689] siw: device registration error -23 [ 386.401285][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.929083][ T9707] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 387.929125][ T9707] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 389.377941][ T9723] siw: device registration error -23 [ 390.483238][ T9718] loop3: detected capacity change from 0 to 32768 [ 391.926050][ T9718] JBD2: Ignoring recovery information on journal [ 392.087372][ T9718] JBD2: journal reset failed [ 392.092184][ T9718] (syz.3.1341,9718,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 392.101729][ T9718] (syz.3.1341,9718,0):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4 [ 392.126219][ T9744] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 392.126267][ T9744] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 392.211939][ T9747] cgroup: name respecified [ 392.680076][ T9755] loop2: detected capacity change from 0 to 2048 [ 392.687784][ T9755] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.695720][ T9755] EXT4-fs: Ignoring removed i_version option [ 392.737668][ T9755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.822291][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.422173][ T9754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.422516][ T9754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.422630][ T9754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.422728][ T9754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 394.624791][ T9749] kexec: Could not allocate control_code_buffer [ 394.693468][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 396.768879][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.768996][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.781275][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 397.141321][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 397.300565][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.312623][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.312681][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 397.312734][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.312821][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.344300][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.344351][ T9] usb 4-1: Product: syz [ 397.344387][ T9] usb 4-1: Manufacturer: syz [ 397.344423][ T9] usb 4-1: SerialNumber: syz [ 397.394494][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 397.394569][ T9] cdc_ncm 4-1:1.0: bind() failure [ 397.493986][ T9782] loop1: detected capacity change from 0 to 32768 [ 397.519998][ T9782] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 397.532454][ T9782] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 397.680416][ T9782] XFS (loop1): Ending clean mount [ 397.723253][ T9782] XFS (loop1): Quotacheck needed: Please wait. [ 397.997884][ T9782] XFS (loop1): Quotacheck: Done. [ 398.031738][ T5611] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 398.233402][ T9788] loop0: detected capacity change from 0 to 32768 [ 398.273166][ T9788] JBD2: Ignoring recovery information on journal [ 398.403169][ T9788] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 398.633935][ T5617] ocfs2: Unmounting device (7,0) on (node local) [ 399.579815][ T1556] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 399.740508][ T1556] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 399.753970][ T1556] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 399.754236][ T1556] usb 1-1: Product: syz [ 399.754257][ T1556] usb 1-1: SerialNumber: syz [ 399.778212][ T1556] usb 1-1: config 0 descriptor?? [ 399.822204][ T9819] cgroup: name respecified [ 399.857693][ T5709] usb 4-1: USB disconnect, device number 28 [ 400.004060][ T1556] hso 1-1:0.0: Failed to find BULK eps [ 400.113004][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 400.205650][ T1556] usb 1-1: USB disconnect, device number 23 [ 400.402859][ T9817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 400.403073][ T9817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 400.403199][ T9817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 400.403331][ T9817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.141568][ T9835] loop0: detected capacity change from 0 to 512 [ 401.146631][ T9835] EXT4-fs: Ignoring removed orlov option [ 401.253223][ T9835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 401.266366][ T9835] System zones: 1-12 [ 401.288763][ T9835] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.1377: error while reading EA inode 32 err=-116 [ 401.288984][ T9835] loop0: lost filesystem error report for type 5 error -117 [ 401.289993][ T9835] EXT4-fs (loop0): Remounting filesystem read-only [ 401.302558][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 401.302577][ C0] EXT4-fs (loop0): initial error at time 1786673828: ext4_xattr_inode_iget:442 [ 401.302601][ C0] EXT4-fs (loop0): last error at time 1786673828: ext4_xattr_inode_iget:442 [ 401.303075][ T9835] EXT4-fs (loop0): 1 orphan inode deleted [ 401.397603][ T9835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.729022][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.830816][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.934942][ T9839] cgroup: name respecified [ 402.549346][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 402.549406][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 402.549453][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 404.963887][ T9826] kexec: Could not allocate control_code_buffer [ 405.507143][ T9848] loop0: detected capacity change from 0 to 32768 [ 405.538724][ T9848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1381 (9848) [ 405.603905][ T9848] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.604008][ T9848] BTRFS info (device loop0): using sha256 checksum algorithm [ 405.769614][ T9848] BTRFS info (device loop0): enabling ssd optimizations [ 405.769684][ T9848] BTRFS info (device loop0): turning on sync discard [ 405.769719][ T9848] BTRFS info (device loop0): enabling free space tree [ 405.769882][ T9848] BTRFS info (device loop0): use zlib compression, level 3 [ 406.043966][ T9856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.044192][ T9856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.044322][ T9856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.044420][ T9856] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.133235][ T5617] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.795149][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 407.204065][ T9893] loop2: detected capacity change from 0 to 512 [ 407.209094][ T9893] EXT4-fs: Ignoring removed orlov option [ 407.329055][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.419875][ T9893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 407.428838][ T9893] System zones: 1-12 [ 407.489407][ T9893] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1395: error while reading EA inode 32 err=-116 [ 407.502462][ T9893] loop2: lost filesystem error report for type 5 error -117 [ 407.508952][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 407.510784][ C1] EXT4-fs (loop2): initial error at time 1786673835: ext4_xattr_inode_iget:442 [ 407.510831][ C1] EXT4-fs (loop2): last error at time 1786673835: ext4_xattr_inode_iget:442 [ 407.571419][ T9893] EXT4-fs (loop2): Remounting filesystem read-only [ 407.580153][ T9893] EXT4-fs (loop2): 1 orphan inode deleted [ 407.643127][ T9893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.943056][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.103786][ T1556] kernel write not supported for file /dsp (pid: 1556 comm: kworker/1:2) [ 408.129023][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 408.129069][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 408.129097][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 408.253229][ T9904] ªªªªªª: renamed from vlan0 (while UP) [ 408.859088][ T4931] Bluetooth: hci5: command 0x1003 tx timeout [ 408.861176][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 409.335291][ T9906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.335503][ T9906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.335647][ T9906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.335741][ T9906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.629321][ T1556] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 409.791810][ T1556] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 409.803650][ T1556] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.816460][ T1556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.816539][ T1556] usb 4-1: Product: syz [ 409.816571][ T1556] usb 4-1: Manufacturer: syz [ 409.816598][ T1556] usb 4-1: SerialNumber: syz [ 409.860294][ T1556] usb 4-1: config 0 descriptor?? [ 409.899650][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 410.049573][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 410.057368][ T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 410.057428][ T10] usb 2-1: Product: syz [ 410.057463][ T10] usb 2-1: SerialNumber: syz [ 410.075821][ T10] usb 2-1: config 0 descriptor?? [ 410.288149][ T10] hso 2-1:0.0: Failed to find BULK eps [ 410.369013][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.486139][ T1556] usb 2-1: USB disconnect, device number 24 [ 411.698410][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 411.698470][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 411.698514][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.820813][ T10] usb 4-1: USB disconnect, device number 29 [ 415.423643][ T10] kernel write not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 415.559458][ T1556] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 415.719885][ T1556] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 415.733624][ T1556] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 415.744883][ T1556] usb 3-1: Product: syz [ 415.747007][ T1556] usb 3-1: SerialNumber: syz [ 415.769367][ T1556] usb 3-1: config 0 descriptor?? [ 415.991561][ T1556] hso 3-1:0.0: Failed to find BULK eps [ 416.193450][ T10] usb 3-1: USB disconnect, device number 33 [ 416.529013][ T1556] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 416.679989][ T1556] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 416.682897][ T1556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.682986][ T1556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.683106][ T1556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.696197][ T1556] usb 2-1: config 0 descriptor?? [ 416.729123][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 416.892336][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 416.898421][ T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 416.910132][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 416.910238][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.910282][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 416.910312][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 416.910347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.965753][ T10] usb 4-1: config 0 descriptor?? [ 417.214710][ T1556] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 417.503865][ T1556] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input12 [ 418.067253][ T10] input: HID 044f:b323 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:044F:B323.0007/input/input13 [ 418.132720][ T1556] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 418.159731][ T1556] usb 2-1: USB disconnect, device number 25 [ 418.276462][T10008] loop0: detected capacity change from 0 to 2048 [ 418.287056][ T10] thrustmaster 0003:044F:B323.0007: input,hidraw1: USB HID v80.00 Joystick [HID 044f:b323] on usb-dummy_hcd.3-1/input0 [ 418.287131][ T10] thrustmaster 0003:044F:B323.0007: can't find FF field in output reports [ 418.288570][T10008] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.288620][T10008] EXT4-fs: Ignoring removed i_version option [ 418.362576][ T10] usb 4-1: USB disconnect, device number 30 [ 418.439017][ T5709] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 418.459843][T10008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.604315][ T5709] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 418.627146][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.990335][ T5709] usb 3-1: config 0 descriptor?? [ 419.104459][ T5709] cp210x 3-1:0.0: cp210x converter detected [ 419.197324][T10017] fido_id[10017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 419.236500][T10020] fido_id[10020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 419.289656][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.380420][T10025] loop1: detected capacity change from 0 to 1024 [ 419.489775][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 419.508827][ T9994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.729105][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 419.729172][ T5709] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 419.750513][ T5709] usb 3-1: cp210x converter now attached to ttyUSB0 [ 419.805094][ T5709] usb 3-1: USB disconnect, device number 34 [ 419.882136][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 419.891983][ T5709] cp210x 3-1:0.0: device disconnected [ 420.209397][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 420.360526][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 420.367472][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 420.367535][ T10] usb 4-1: Product: syz [ 420.367576][ T10] usb 4-1: SerialNumber: syz [ 420.391219][ T10] usb 4-1: config 0 descriptor?? [ 420.626018][ T10] hso 4-1:0.0: Failed to find BULK eps [ 420.739476][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 420.806413][ T10] usb 4-1: USB disconnect, device number 31 [ 420.901432][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 420.902976][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 420.907245][ T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 420.907300][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.907343][ T9] usb 3-1: config 0 has no interface number 0 [ 420.918546][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.918616][ T9] usb 3-1: Product: syz [ 420.918677][ T9] usb 3-1: Manufacturer: syz [ 420.918718][ T9] usb 3-1: SerialNumber: syz [ 420.924590][T10041] loop1: detected capacity change from 0 to 8192 [ 420.946438][ T9] usb 3-1: config 0 descriptor?? [ 420.995821][ T9] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 421.184389][ T9] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 421.184494][ T9] uvcvideo 3-1:0.105: No valid video chain found. [ 421.250125][T10037] loop4: detected capacity change from 0 to 32768 [ 421.339994][T10037] [ 421.339994][T10037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 421.339994][T10037] [ 421.396100][ T10] usb 3-1: USB disconnect, device number 35 [ 421.417258][ T30] audit: type=1800 audit(1786673848.988:9): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1444" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 421.529051][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 421.680413][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 421.683692][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 421.683775][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 138, setting to 64 [ 421.683880][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.702893][ T9] usb 2-1: config 0 descriptor?? [ 421.704996][T10044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.771544][ T157] [ 421.771544][ T157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 421.771544][ T157] [ 421.782813][ T157] [ 421.782813][ T157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 421.782813][ T157] [ 421.782844][ T157] [ 421.782844][ T157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 421.782844][ T157] [ 421.817348][ T5610] [ 421.817348][ T5610] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 421.817348][ T5610] [ 422.192144][ T5610] [ 422.192144][ T5610] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 422.192144][ T5610] [ 422.306435][ T121] ================================================================== [ 422.306528][ T121] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7d4/0x1550 [ 422.306596][ T121] Read of size 8 at addr ffff8880341ce908 by task jfsCommit/121 [ 422.306638][ T121] [ 422.306690][ T121] CPU: 1 UID: 0 PID: 121 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 422.306743][ T121] Tainted: [L]=SOFTLOCKUP [ 422.306750][ T121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.306769][ T121] Call Trace: [ 422.306803][ T121] [ 422.306863][ T121] dump_stack_lvl+0xe8/0x150 [ 422.306942][ T121] print_address_description+0x55/0x1e0 [ 422.306977][ T121] ? __mutex_lock+0x7d4/0x1550 [ 422.307009][ T121] print_report+0x58/0x70 [ 422.307038][ T121] kasan_report+0x117/0x150 [ 422.307089][ T121] ? __mutex_lock+0x7d4/0x1550 [ 422.307122][ T121] __mutex_lock+0x7d4/0x1550 [ 422.307154][ T121] ? __mutex_lock+0x5d4/0x1550 [ 422.307185][ T121] ? jfs_syncpt+0x25/0x90 [ 422.307247][ T121] ? __pfx___mutex_lock+0x10/0x10 [ 422.307306][ T121] jfs_syncpt+0x25/0x90 [ 422.307337][ T121] txEnd+0x2e5/0x530 [ 422.307359][ T121] jfs_lazycommit+0x5d6/0xac0 [ 422.307385][ T121] ? __pfx_jfs_lazycommit+0x10/0x10 [ 422.307407][ T121] ? __pfx_default_wake_function+0x10/0x10 [ 422.307444][ T121] ? __kthread_parkme+0x71/0x1f0 [ 422.307475][ T121] ? __kthread_parkme+0x196/0x1f0 [ 422.307506][ T121] kthread+0x388/0x470 [ 422.307524][ T121] ? __pfx_jfs_lazycommit+0x10/0x10 [ 422.307546][ T121] ? __pfx_kthread+0x10/0x10 [ 422.307565][ T121] ret_from_fork+0x514/0xb70 [ 422.307600][ T121] ? __pfx_ret_from_fork+0x10/0x10 [ 422.307642][ T121] ? __switch_to+0xc89/0x1420 [ 422.307668][ T121] ? __pfx_kthread+0x10/0x10 [ 422.307687][ T121] ret_from_fork_asm+0x1a/0x30 [ 422.307723][ T121] [ 422.307754][ T121] [ 422.307760][ T121] Allocated by task 10037: [ 422.307798][ T121] kasan_save_track+0x3e/0x80 [ 422.307821][ T121] __kasan_kmalloc+0x93/0xb0 [ 422.307844][ T121] __kmalloc_cache_noprof+0x31d/0x600 [ 422.307866][ T121] lmLogOpen+0x2d1/0xf90 [ 422.307892][ T121] jfs_mount_rw+0xf3/0x670 [ 422.307944][ T121] jfs_fill_super+0x769/0xda0 [ 422.307964][ T121] get_tree_bdev_flags+0x430/0x4f0 [ 422.307990][ T121] vfs_get_tree+0x92/0x2a0 [ 422.308009][ T121] do_new_mount+0x319/0xdc0 [ 422.308043][ T121] __se_sys_mount+0x31d/0x420 [ 422.308058][ T121] do_syscall_64+0x166/0x510 [ 422.308085][ T121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.308103][ T121] [ 422.308108][ T121] Freed by task 5610: [ 422.308117][ T121] kasan_save_track+0x3e/0x80 [ 422.308138][ T121] kasan_save_free_info+0x40/0x50 [ 422.308155][ T121] __kasan_slab_free+0x5c/0x80 [ 422.308178][ T121] kfree+0x1c5/0x650 [ 422.308194][ T121] lmLogClose+0x296/0x530 [ 422.308210][ T121] jfs_umount+0x2da/0x3b0 [ 422.308235][ T121] jfs_put_super+0x8c/0x190 [ 422.308255][ T121] generic_shutdown_super+0x13d/0x2d0 [ 422.308284][ T121] kill_block_super+0x44/0xa0 [ 422.308304][ T121] deactivate_locked_super+0xbc/0x110 [ 422.308330][ T121] cleanup_mnt+0x3d3/0x460 [ 422.308350][ T121] task_work_run+0x1d9/0x270 [ 422.308367][ T121] exit_to_user_mode_loop+0x1fa/0x750 [ 422.308399][ T121] do_syscall_64+0x328/0x510 [ 422.308425][ T121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.308444][ T121] [ 422.308449][ T121] The buggy address belongs to the object at ffff8880341ce800 [ 422.308449][ T121] which belongs to the cache kmalloc-1k of size 1024 [ 422.308488][ T121] The buggy address is located 264 bytes inside of [ 422.308488][ T121] freed 1024-byte region [ffff8880341ce800, ffff8880341cec00) [ 422.308509][ T121] [ 422.308514][ T121] The buggy address belongs to the physical page: [ 422.308528][ T121] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x341c8 [ 422.308547][ T121] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 422.308563][ T121] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 422.308596][ T121] page_type: f5(slab) [ 422.308613][ T121] raw: 00fff00000000040 ffff88801b005dc0 dead000000000100 dead000000000122 [ 422.308629][ T121] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 422.308645][ T121] head: 00fff00000000040 ffff88801b005dc0 dead000000000100 dead000000000122 [ 422.308661][ T121] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 422.308677][ T121] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 422.308693][ T121] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 422.308702][ T121] page dumped because: kasan: bad access detected [ 422.308716][ T121] page_owner tracks the page as allocated [ 422.308722][ T121] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5607, tgid 5607 (syz-executor), ts 80464231356 [ 422.308752][ T121] post_alloc_hook+0x1f9/0x250 [ 422.308769][ T121] get_page_from_freelist+0x2205/0x2280 [ 422.308791][ T121] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 422.308812][ T121] allocate_slab+0x7d/0x620 [ 422.308836][ T121] refill_objects+0x2d5/0x350 [ 422.308862][ T121] __pcs_replace_empty_main+0x2c4/0x6b0 [ 422.308886][ T121] __kmalloc_noprof+0x477/0x710 [ 422.308905][ T121] tomoyo_init_log+0x1aae/0x1fa0 [ 422.308961][ T121] tomoyo_supervisor+0x35f/0x1560 [ 422.308981][ T121] tomoyo_path_number_perm+0x463/0x5f0 [ 422.309035][ T121] security_path_chmod+0x132/0x330 [ 422.309077][ T121] chmod_common+0x1a7/0x470 [ 422.309098][ T121] do_fchmodat+0x12d/0x230 [ 422.309112][ T121] __x64_sys_chmod+0x62/0x70 [ 422.309133][ T121] do_syscall_64+0x166/0x510 [ 422.309158][ T121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.309175][ T121] page last free pid 5605 tgid 5605 ts 80407821366 stack trace: [ 422.309188][ T121] __free_frozen_pages+0xc8f/0xd80 [ 422.309205][ T121] __slab_free+0x274/0x2c0 [ 422.309224][ T121] qlist_free_all+0x99/0x100 [ 422.309243][ T121] kasan_quarantine_reduce+0x148/0x160 [ 422.309263][ T121] __kasan_slab_alloc+0x22/0x80 [ 422.309285][ T121] __kmalloc_noprof+0x303/0x710 [ 422.309304][ T121] load_elf_binary+0x2c6/0x28d0 [ 422.309328][ T121] bprm_execve+0x930/0x1590 [ 422.309346][ T121] do_execveat_common+0x4f4/0x670 [ 422.309365][ T121] __x64_sys_execve+0x97/0xc0 [ 422.309382][ T121] do_syscall_64+0x166/0x510 [ 422.309407][ T121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.309423][ T121] [ 422.309428][ T121] Memory state around the buggy address: [ 422.309462][ T121] ffff8880341ce800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.309476][ T121] ffff8880341ce880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.309488][ T121] >ffff8880341ce900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.309498][ T121] ^ [ 422.309507][ T121] ffff8880341ce980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.309519][ T121] ffff8880341cea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 422.309529][ T121] ================================================================== [ 422.309619][ T121] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 422.994861][ T121] CPU: 1 UID: 0 PID: 121 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 423.005660][ T121] Tainted: [L]=SOFTLOCKUP [ 423.010008][ T121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.020067][ T121] Call Trace: [ 423.023352][ T121] [ 423.026289][ T121] vpanic+0x56c/0xa60 [ 423.030293][ T121] ? __pfx_vpanic+0x10/0x10 [ 423.034820][ T121] panic+0xc5/0xd0 [ 423.038560][ T121] ? __pfx_panic+0x10/0x10 [ 423.042998][ T121] ? __mutex_lock+0x7d4/0x1550 [ 423.047789][ T121] ? __mutex_lock+0x7d4/0x1550 [ 423.052578][ T121] check_panic_on_warn+0x89/0xb0 [ 423.057524][ T121] ? __mutex_lock+0x7d4/0x1550 [ 423.062302][ T121] end_report+0x73/0x170 [ 423.066563][ T121] ? __mutex_lock+0x7d4/0x1550 [ 423.071350][ T121] kasan_report+0x128/0x150 [ 423.075885][ T121] ? __mutex_lock+0x7d4/0x1550 [ 423.080671][ T121] __mutex_lock+0x7d4/0x1550 [ 423.085272][ T121] ? __mutex_lock+0x5d4/0x1550 [ 423.090049][ T121] ? jfs_syncpt+0x25/0x90 [ 423.094399][ T121] ? __pfx___mutex_lock+0x10/0x10 [ 423.099482][ T121] jfs_syncpt+0x25/0x90 [ 423.103751][ T121] txEnd+0x2e5/0x530 [ 423.107659][ T121] jfs_lazycommit+0x5d6/0xac0 [ 423.112363][ T121] ? __pfx_jfs_lazycommit+0x10/0x10 [ 423.117596][ T121] ? __pfx_default_wake_function+0x10/0x10 [ 423.123419][ T121] ? __kthread_parkme+0x71/0x1f0 [ 423.128383][ T121] ? __kthread_parkme+0x196/0x1f0 [ 423.133439][ T121] kthread+0x388/0x470 [ 423.137522][ T121] ? __pfx_jfs_lazycommit+0x10/0x10 [ 423.142747][ T121] ? __pfx_kthread+0x10/0x10 [ 423.147351][ T121] ret_from_fork+0x514/0xb70 [ 423.151970][ T121] ? __pfx_ret_from_fork+0x10/0x10 [ 423.157106][ T121] ? __switch_to+0xc89/0x1420 [ 423.161798][ T121] ? __pfx_kthread+0x10/0x10 [ 423.166412][ T121] ret_from_fork_asm+0x1a/0x30 [ 423.171221][ T121] [ 423.174863][ T121] Kernel Offset: disabled [ 423.179210][ T121] Rebooting in 86400 seconds..