last executing test programs:

5.310264927s ago: executing program 3 (id=26029):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_procfs(0x0, &(0x7f0000004380)='smaps\x00')
readv(r0, &(0x7f0000000840)=[{&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/126, 0x96}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000780)=""/150, 0xffffff69}], 0x7)

4.452177374s ago: executing program 3 (id=26044):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x276, &(0x7f0000000840)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000005c0)=""/188, 0xbc)

4.076470994s ago: executing program 3 (id=26048):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0})

3.237599168s ago: executing program 0 (id=26073):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x1fd3, 0x6, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x17, r0}, 0x38)

3.181487101s ago: executing program 0 (id=26075):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0xfffffffe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.073848207s ago: executing program 0 (id=26077):
r0 = inotify_init1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x60002011})

2.668717769s ago: executing program 0 (id=26084):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000))

2.601749672s ago: executing program 0 (id=26086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800)

2.491676818s ago: executing program 0 (id=26088):
unshare(0x62000000)
syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000001200)='./file0\x00', 0x8c24c0, &(0x7f00000001c0)=ANY=[], 0x1, 0x11aa, &(0x7f0000001240)="$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")
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)

2.098229569s ago: executing program 4 (id=26093):
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x2, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)

2.07644034s ago: executing program 1 (id=26094):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{}], 0x8, 0xd, &(0x7f0000001f00), &(0x7f0000002080), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2.007164344s ago: executing program 4 (id=26095):
socket$kcm(0x29, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0)

1.874152891s ago: executing program 1 (id=26096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfc}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000)

1.869669451s ago: executing program 4 (id=26097):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1391ccd1beab952f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}}, 0x0)

1.747326728s ago: executing program 1 (id=26098):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002040, 0x0)

1.70794873s ago: executing program 4 (id=26099):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
fallocate(r0, 0x10, 0x2005, 0x2)

1.70656342s ago: executing program 3 (id=26100):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file2\x00', 0x1000400, &(0x7f0000000280)={[{@uid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@nodiscard}, {@uid}, {@usrquota}, {@errors_continue}, {@grpquota}, {@discard_size={'discard', 0x3d, 0x6}}]}, 0x22, 0x61b6, &(0x7f00000075c0)="$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")
r0 = open(&(0x7f0000000100)='.\x00', 0x8000, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.495074902s ago: executing program 1 (id=26102):
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000240)=0x7, 0x4, 0x0)

1.362043898s ago: executing program 1 (id=26104):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40406f06, 0x0)

981.392888ms ago: executing program 2 (id=26108):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
set_mempolicy(0x2, &(0x7f0000000040)=0x1003, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

843.765146ms ago: executing program 2 (id=26109):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
unshare(0x20000400)

698.222214ms ago: executing program 2 (id=26110):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

620.274118ms ago: executing program 2 (id=26111):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r1, r0})

538.890202ms ago: executing program 3 (id=26112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000140)}, 0x20)
ioctl$sock_proto_private(r0, 0x8927, &(0x7f0000000140))

366.005381ms ago: executing program 2 (id=26113):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)

268.388866ms ago: executing program 2 (id=26114):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, 0x0, 0xfdef)

196.32083ms ago: executing program 4 (id=26115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x54, r1, 0x5, 0x70bd2d, 0x1040, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

98.188246ms ago: executing program 3 (id=26116):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

97.866346ms ago: executing program 1 (id=26117):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@barrier}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
lremovexattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)=@known='user.incfs.size\x00')

0s ago: executing program 4 (id=26118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)

kernel console output (not intermixed with test programs):

le Units with ID 1
[ 1474.726066][ T5248] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[ 1474.746390][ T5247] usb 2-1: Found UVC 0.00 device <unnamed> (2833:0201)
[ 1474.753624][ T5248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1474.773095][ T5247] usb 2-1: No valid video chain found.
[ 1474.788416][ T5248] usb 4-1: config 0 descriptor??
[ 1474.815639][ T5247] usb 2-1: USB disconnect, device number 90
[ 1474.855238][T26661] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[ 1474.988531][T26673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23675'.
[ 1475.165714][ T5248] usb 4-1: string descriptor 0 read error: -71
[ 1475.180695][ T5248] ftdi_sio 4-1:0.39: FTDI USB Serial Device converter detected
[ 1475.216583][ T5248] usb 4-1: Detected FT-X
[ 1475.256095][ T5248] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1475.278850][ T5248] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1475.310984][ T5248] ftdi_sio 4-1:0.39: GPIO initialisation failed: -71
[ 1475.333599][ T5248] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1475.354114][ T5248] usb 4-1: USB disconnect, device number 115
[ 1475.374083][T26703] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1475.416028][ T5248] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1475.461505][ T5248] ftdi_sio 4-1:0.39: device disconnected
[ 1475.726501][T26749] usb usb8: usbfs: process 26749 (syz.4.23697) did not claim interface 0 before use
[ 1475.942077][T26773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23703'.
[ 1476.001139][T26779] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1476.004286][T26773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23703'.
[ 1476.259106][T26803] loop3: detected capacity change from 0 to 1024
[ 1476.270880][T26805] loop0: detected capacity change from 0 to 512
[ 1476.377229][  T144] hfsplus: b-tree write err: -5, ino 25
[ 1476.398467][T26805] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[ 1476.418976][  T144] hfsplus: b-tree write err: -5, ino 4
[ 1476.435677][T26805] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[ 1476.444365][  T144] hfsplus: b-tree write err: -5, ino 2
[ 1476.499777][T26805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[ 1476.507932][T26805] System zones: 1-12
[ 1476.582707][T26805] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.23727: corrupted in-inode xattr
[ 1476.599562][T26805] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.23727: couldn't read orphan inode 15 (err -117)
[ 1476.612642][T26805] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none.
[ 1476.651729][T26837] netlink: 'syz.3.23720': attribute type 4 has an invalid length.
[ 1476.689106][T26837] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.23720'.
[ 1476.783211][T26849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23733'.
[ 1476.802290][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1476.811964][T26851] netlink: 'syz.4.23732': attribute type 1 has an invalid length.
[ 1476.853049][T26851] netlink: 'syz.4.23732': attribute type 2 has an invalid length.
[ 1477.156601][T26873] tmpfs: Bad value for 'mpol'
[ 1477.299061][T26884] netlink: 'syz.2.23743': attribute type 21 has an invalid length.
[ 1477.459941][ T5247] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1477.493861][T26898] usb usb8: usbfs: process 26898 (syz.2.23747) did not claim interface 0 before use
[ 1477.585778][T26903] __nla_validate_parse: 6 callbacks suppressed
[ 1477.585796][T26903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23752'.
[ 1477.652172][T26903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23752'.
[ 1477.791698][T26917] fuse: Invalid rootmode
[ 1477.897581][T26927] device vlan0 entered promiscuous mode
[ 1477.916486][T26927] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 1477.941114][ T5247] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1478.227094][T26957] binfmt_misc: register: failed to install interpreter file ./file2
[ 1478.261429][ T4605] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1478.304385][ T5247] usb 4-1: string descriptor 0 read error: -22
[ 1478.310700][ T5247] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[ 1478.343031][ T5247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.526671][ T4605] usb 1-1: Using ep0 maxpacket: 32
[ 1478.657175][ T4605] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1478.665335][ T4605] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1478.688453][T26992] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 1478.710335][ T4605] usb 1-1: config 0 has no interface number 0
[ 1478.723659][ T4605] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1478.889080][ T5247] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1478.924354][ T5247] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1478.947971][ T4605] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1478.984246][ T5247] usb 4-1: USB disconnect, device number 116
[ 1478.992363][ T4605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.029618][ T4605] usb 1-1: Product: syz
[ 1479.051923][ T4605] usb 1-1: Manufacturer: syz
[ 1479.085577][ T4605] usb 1-1: SerialNumber: syz
[ 1479.118162][ T4605] usb 1-1: config 0 descriptor??
[ 1479.164600][ T4605] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1479.299871][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1479.364452][T27058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23798'.
[ 1479.394934][ T4605] usb 1-1: qt2_setup_urbs - submit read urb failed -8
[ 1479.406864][ T4605] quatech2: probe of 1-1:0.51 failed with error -8
[ 1479.496881][T27067] exfat: Deprecated parameter 'debug'
[ 1479.525011][T27067] /dev/loop1: Can't open blockdev
[ 1479.618946][ T4605] usb 1-1: USB disconnect, device number 112
[ 1479.800049][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23808'.
[ 1480.294087][T27138] netlink: 9 bytes leftover after parsing attributes in process `syz.4.23823'.
[ 1480.553069][T27162] sctp: [Deprecated]: syz.3.23842 (pid 27162) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1480.553069][T27162] Use struct sctp_sack_info instead
[ 1480.676713][T27170] cgroup: noprefix used incorrectly
[ 1481.095869][T27200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23844'.
[ 1481.552962][T27243] tmpfs: Bad value for 'mpol'
[ 1481.644242][T27251] netlink: 56 bytes leftover after parsing attributes in process `syz.0.23860'.
[ 1481.708206][T27258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23864'.
[ 1482.239185][T27308] tmpfs: Bad value for 'mpol'
[ 1482.403552][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23883'.
[ 1482.453010][T27318] netlink: 56 bytes leftover after parsing attributes in process `syz.2.23881'.
[ 1482.558333][   T26] audit: type=1400 audit(1431.855:97): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=27322 comm="syz.4.23898"
[ 1482.668712][   T26] audit: type=1400 audit(1431.958:98): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=27331 comm="syz.3.23901"
[ 1483.101393][ T5247] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1483.169994][T27367] tmpfs: Bad value for 'mpol'
[ 1483.573334][ T5247] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1483.617312][ T5247] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1483.639347][ T5247] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1483.723146][ T5247] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1483.740055][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.859377][ T5247] snd-usb-audio: probe of 4-1:27.0 failed with error -2
[ 1483.891751][T27431] tmpfs: Bad value for 'mpol'
[ 1483.972447][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1484.046499][T27442] netlink: 'syz.4.23921': attribute type 27 has an invalid length.
[ 1484.066802][ T5248] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1484.118612][ T5247] usb 4-1: USB disconnect, device number 117
[ 1484.344424][ T5248] usb 2-1: Using ep0 maxpacket: 32
[ 1484.483534][ T5248] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1484.501692][ T5248] usb 2-1: config 0 has no interface number 0
[ 1484.519024][ T5248] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1484.558796][ T5248] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1484.780462][ T5248] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1484.783213][T27491] netlink: 'syz.2.23939': attribute type 27 has an invalid length.
[ 1484.804403][ T5248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.834762][ T5248] usb 2-1: Product: syz
[ 1484.840155][ T5248] usb 2-1: Manufacturer: syz
[ 1484.844803][ T5248] usb 2-1: SerialNumber: syz
[ 1484.878681][ T5248] usb 2-1: config 0 descriptor??
[ 1485.424381][ T5248] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71
[ 1485.433123][ T5248] radio-si470x: probe of 2-1:0.35 failed with error -5
[ 1485.539105][ T5248] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[ 1485.638416][ T5248] usb 2-1: USB disconnect, device number 91
[ 1485.702215][ T4610] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1486.112789][ T4610] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1486.146351][ T4610] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1486.182562][ T4610] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1486.204458][ T4610] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1486.240444][ T4610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.409390][ T4610] snd-usb-audio: probe of 3-1:27.0 failed with error -2
[ 1486.584536][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1486.661836][ T4610] usb 3-1: USB disconnect, device number 73
[ 1486.698493][T27640] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1486.942140][ T5248] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1487.242001][ T5248] usb 1-1: Using ep0 maxpacket: 32
[ 1487.402167][ T5248] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[ 1487.410316][ T5248] usb 1-1: config 0 has no interface number 0
[ 1487.435926][ T5248] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1487.494263][ T5248] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1487.553596][T27697] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1487.755011][ T5248] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1487.785826][ T5248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.809266][ T5248] usb 1-1: Product: syz
[ 1487.813509][ T5248] usb 1-1: Manufacturer: syz
[ 1487.831439][ T5248] usb 1-1: SerialNumber: syz
[ 1487.854550][ T5248] usb 1-1: config 0 descriptor??
[ 1488.238724][T27751] loop2: detected capacity change from 0 to 1764
[ 1488.396205][ T5248] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71
[ 1488.404855][ T5248] radio-si470x: probe of 1-1:0.35 failed with error -5
[ 1488.514229][ T5248] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[ 1488.580526][ T5248] usb 1-1: USB disconnect, device number 113
[ 1488.681179][T27794] No such timeout policy "syz1"
[ 1488.854627][T27808] loop3: detected capacity change from 0 to 1764
[ 1488.898762][ T5247] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1489.154611][T27830] loop2: detected capacity change from 0 to 1024
[ 1489.219398][ T5247] usb 5-1: Using ep0 maxpacket: 32
[ 1489.303070][T27842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24042'.
[ 1489.369884][ T5247] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1489.411054][ T5247] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1489.467383][T27852] Timeout policy `syz1' can only be used by L3 protocol number 24578
[ 1489.560830][T27857] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24051'.
[ 1489.625670][ T5247] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1489.642174][ T5247] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1489.709623][T27868] autofs4:pid:27868:autofs_fill_super: called with bogus options
[ 1489.720697][ T5247] usb 5-1: Product: syz
[ 1489.733434][ T5247] usb 5-1: Manufacturer: syz
[ 1489.804424][ T5247] hub 5-1:4.0: USB hub found
[ 1489.890456][T27882] autofs4:pid:27882:autofs_fill_super: called with bogus options
[ 1489.904707][T27884] loop3: detected capacity change from 0 to 1024
[ 1489.973876][T27893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24059'.
[ 1490.042570][ T5247] hub 5-1:4.0: 6 ports detected
[ 1490.063992][ T5247] hub 5-1:4.0: insufficient power available to use all downstream ports
[ 1490.267075][ T5247] hub 5-1:4.0: hub_hub_status failed (err = -71)
[ 1490.284392][ T5247] hub 5-1:4.0: config failed, can't get hub status (err -71)
[ 1490.354808][ T5247] usb 5-1: USB disconnect, device number 113
[ 1490.523503][T27923] netlink: 224 bytes leftover after parsing attributes in process `syz.1.24066'.
[ 1490.961840][ T8006] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1490.993988][ T4610] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1491.229127][ T8006] usb 1-1: Using ep0 maxpacket: 32
[ 1491.261356][ T4610] usb 4-1: Using ep0 maxpacket: 16
[ 1491.398579][ T4610] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 1491.421546][ T4610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.443838][ T4610] usb 4-1: config 0 descriptor??
[ 1491.487546][ T4610] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1491.528774][ T8006] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[ 1491.537882][ T8006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.552007][ T8006] usb 1-1: Product: syz
[ 1491.556243][ T8006] usb 1-1: Manufacturer: syz
[ 1491.561376][ T8006] usb 1-1: SerialNumber: syz
[ 1491.568730][ T8006] usb 1-1: config 0 descriptor??
[ 1491.710511][ T4610] usb 4-1: Detected FT232BM
[ 1491.806620][ T5247] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1491.945608][ T4610] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1491.967065][ T4610] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1491.975582][ T4610] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1491.997665][ T4610] usb 4-1: USB disconnect, device number 118
[ 1492.013164][ T4610] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1492.024815][ T4610] ftdi_sio 4-1:0.0: device disconnected
[ 1492.084528][ T8006] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[ 1492.092885][ T8006] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[ 1492.095347][ T5247] usb 3-1: Using ep0 maxpacket: 32
[ 1492.170360][ T8006] peak_usb: probe of 1-1:0.0 failed with error -71
[ 1492.181170][ T8006] usb 1-1: USB disconnect, device number 114
[ 1492.234324][ T5247] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1492.245964][ T5247] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.416119][ T5247] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1492.425245][ T5247] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1492.434662][ T5247] usb 3-1: Product: syz
[ 1492.439182][ T5247] usb 3-1: Manufacturer: syz
[ 1492.491972][ T5247] hub 3-1:4.0: USB hub found
[ 1492.651169][T28035] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.24099'.
[ 1492.715401][ T5247] hub 3-1:4.0: 6 ports detected
[ 1492.756512][ T5247] hub 3-1:4.0: insufficient power available to use all downstream ports
[ 1492.961222][ T5247] hub 3-1:4.0: hub_hub_status failed (err = -71)
[ 1492.967639][ T5247] hub 3-1:4.0: config failed, can't get hub status (err -71)
[ 1492.991844][T28063] netlink: 'syz.0.24117': attribute type 21 has an invalid length.
[ 1493.059454][ T5247] usb 3-1: USB disconnect, device number 74
[ 1493.301219][ T5252] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1493.613053][ T5252] usb 2-1: Using ep0 maxpacket: 16
[ 1493.624062][T28091] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.24113'.
[ 1493.752576][ T5252] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 1493.761712][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.793082][ T5252] usb 2-1: config 0 descriptor??
[ 1493.850064][ T5252] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[ 1493.976509][ T5247] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1494.073034][ T5252] usb 2-1: Detected FT232BM
[ 1494.221506][T28130] netlink: 'syz.2.24124': attribute type 21 has an invalid length.
[ 1494.297462][ T5247] usb 5-1: Using ep0 maxpacket: 32
[ 1494.302862][ T5252] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1494.329755][ T5252] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1494.340795][ T5252] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1494.383715][ T5252] usb 2-1: USB disconnect, device number 92
[ 1494.395041][ T5252] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1494.425091][ T5252] ftdi_sio 2-1:0.0: device disconnected
[ 1494.500493][ T8006] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1494.507654][T28119] loop3: detected capacity change from 0 to 32768
[ 1494.546678][T28119] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1494.556179][T28119] gfs2: fsid=syz:syz: Now mounting FS (format 1802)...
[ 1494.571239][T28119] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1494.582900][ T5248] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1494.592925][ T5248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1494.632799][ T5248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms
[ 1494.640808][ T5247] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[ 1494.649904][ T5247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.659106][ T5248] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1494.665393][ T5247] usb 5-1: Product: syz
[ 1494.666060][T28119] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1494.669991][ T5247] usb 5-1: Manufacturer: syz
[ 1494.682810][ T5247] usb 5-1: SerialNumber: syz
[ 1494.689632][ T5247] usb 5-1: config 0 descriptor??
[ 1494.735982][ T4610] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1494.757131][ T8006] usb 1-1: Using ep0 maxpacket: 32
[ 1494.885482][ T8006] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1494.916262][ T8006] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1495.003033][ T4610] usb 3-1: Using ep0 maxpacket: 16
[ 1495.067520][ T8006] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1495.088680][ T8006] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1495.097128][ T8006] usb 1-1: Product: syz
[ 1495.111157][ T8006] usb 1-1: Manufacturer: syz
[ 1495.131259][ T4610] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1495.147459][ T4610] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1495.196459][ T8006] hub 1-1:4.0: USB hub found
[ 1495.216851][ T5247] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[ 1495.250473][ T5247] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[ 1495.323780][ T5247] peak_usb: probe of 5-1:0.0 failed with error -71
[ 1495.333991][ T5247] usb 5-1: USB disconnect, device number 114
[ 1495.340532][ T4610] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[ 1495.361966][ T4610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.375344][ T4610] usb 3-1: Product: syz
[ 1495.380119][ T4610] usb 3-1: Manufacturer: syz
[ 1495.384956][ T4610] usb 3-1: SerialNumber: syz
[ 1495.430748][ T8006] hub 1-1:4.0: 6 ports detected
[ 1495.452098][ T8006] hub 1-1:4.0: insufficient power available to use all downstream ports
[ 1495.666052][ T8006] hub 1-1:4.0: hub_hub_status failed (err = -71)
[ 1495.672509][ T8006] hub 1-1:4.0: config failed, can't get hub status (err -71)
[ 1495.709196][ T8006] usb 1-1: USB disconnect, device number 115
[ 1495.836918][ T4610] usbhid 3-1:1.0: can't add hid device: -71
[ 1495.842991][ T4610] usbhid: probe of 3-1:1.0 failed with error -71
[ 1495.882200][ T4610] usb 3-1: USB disconnect, device number 75
[ 1496.035544][T28230] ipt_ECN: cannot use operation on non-tcp rule
[ 1496.760796][T28273] ipt_ECN: cannot use operation on non-tcp rule
[ 1497.205181][ T4610] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1497.348496][T28310] (syz.1.24166,28310,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[ 1497.384280][T28313] damon: invalid nr_regions.  min (30786325577728) > max (1023)
[ 1497.395195][T28310] (syz.1.24166,28310,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1497.472570][ T4610] usb 1-1: Using ep0 maxpacket: 16
[ 1497.584185][T28327] ipt_ECN: cannot use operation on non-tcp rule
[ 1497.601058][ T4610] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1497.616426][ T4610] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1497.814821][ T4610] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[ 1497.823932][ T4610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.892682][ T4610] usb 1-1: Product: syz
[ 1497.896929][ T4610] usb 1-1: Manufacturer: syz
[ 1497.916019][ T4610] usb 1-1: SerialNumber: syz
[ 1498.093083][T28365] damon: invalid nr_regions.  min (30786325577728) > max (1023)
[ 1498.149352][T28370] (syz.4.24182,28370,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[ 1498.168797][T28370] (syz.4.24182,28370,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1498.370699][ T4610] usbhid 1-1:1.0: can't add hid device: -71
[ 1498.376748][ T4610] usbhid: probe of 1-1:1.0 failed with error -71
[ 1498.405730][ T4610] usb 1-1: USB disconnect, device number 116
[ 1498.563695][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24204'.
[ 1499.239673][T28449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24210'.
[ 1499.495354][T28468] netlink: 'syz.0.24217': attribute type 4 has an invalid length.
[ 1499.991527][T28518] x_tables: duplicate underflow at hook 1
[ 1500.021941][T28521] netlink: 'syz.4.24234': attribute type 4 has an invalid length.
[ 1500.572867][T28564] x_tables: duplicate underflow at hook 1
[ 1500.673969][T28577] netlink: 340 bytes leftover after parsing attributes in process `syz.2.24256'.
[ 1500.692377][T28579] autofs4:pid:28579:autofs_fill_super: called with bogus options
[ 1501.234237][T28627] netlink: 340 bytes leftover after parsing attributes in process `syz.0.24272'.
[ 1501.334857][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24272'.
[ 1501.441788][T28637] autofs4:pid:28637:autofs_fill_super: called with bogus options
[ 1501.618610][T28655] loop3: detected capacity change from 0 to 256
[ 1502.020999][T28696] autofs4:pid:28696:autofs_fill_super: called with bogus options
[ 1502.191402][T28715] autofs4:pid:28715:autofs_fill_super: called with bogus options
[ 1502.203838][T28716] loop3: detected capacity change from 0 to 64
[ 1503.352321][T28782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24333'.
[ 1503.387635][T28782] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1503.711693][T28808] netlink: 'syz.0.24332': attribute type 7 has an invalid length.
[ 1503.741820][T28808] netlink: 'syz.0.24332': attribute type 8 has an invalid length.
[ 1503.839429][T28818] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.24337'.
[ 1503.854738][T28816] netlink: 'syz.4.24336': attribute type 11 has an invalid length.
[ 1504.052706][T28831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24339'.
[ 1504.068603][T28831] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1504.249844][T28845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24357'.
[ 1504.401977][T28769] loop2: detected capacity change from 0 to 32768
[ 1504.498617][T28868] netlink: 'syz.1.24349': attribute type 7 has an invalid length.
[ 1504.506513][T28868] netlink: 'syz.1.24349': attribute type 8 has an invalid length.
[ 1504.604392][T28880] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.24352'.
[ 1504.613919][T28882] netlink: 'syz.1.24351': attribute type 11 has an invalid length.
[ 1504.640361][T28769] XFS (loop2): Mounting V5 Filesystem
[ 1504.820216][T28890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1504.839913][T28769] XFS (loop2): Ending clean mount
[ 1504.847473][T28769] XFS (loop2): Quotacheck needed: Please wait.
[ 1504.967276][T28769] XFS (loop2): Quotacheck: Done.
[ 1505.030514][ T4632] XFS (loop2): Unmounting Filesystem
[ 1505.155231][T28913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24361'.
[ 1505.165093][T28910] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready
[ 1505.254702][T28910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1505.676434][T28934] netlink: 'syz.2.24364': attribute type 7 has an invalid length.
[ 1505.689677][T28934] netlink: 'syz.2.24364': attribute type 8 has an invalid length.
[ 1506.027735][T28968] netlink: 'syz.4.24379': attribute type 1 has an invalid length.
[ 1506.046365][T28968] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24379'.
[ 1506.091677][T28968] nbd: couldn't find a device at index 1024
[ 1506.311886][ T5247] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1506.591596][ T5247] usb 1-1: Using ep0 maxpacket: 16
[ 1506.741532][ T5247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1506.785540][T28960] loop3: detected capacity change from 0 to 32768
[ 1506.825958][T28960] XFS (loop3): Mounting V5 Filesystem
[ 1506.870986][T28960] XFS (loop3): Ending clean mount
[ 1506.878412][T28960] XFS (loop3): Quotacheck needed: Please wait.
[ 1506.930868][T28960] XFS (loop3): Quotacheck: Done.
[ 1506.976988][ T5247] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1506.986093][ T5247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1507.016234][ T5247] usb 1-1: Product: syz
[ 1507.069928][ T5247] usb 1-1: Manufacturer: syz
[ 1507.075122][ T5247] usb 1-1: SerialNumber: syz
[ 1507.084700][ T5247] usb 1-1: config 0 descriptor??
[ 1507.091388][ T4628] XFS (loop3): Unmounting Filesystem
[ 1507.176400][ T5247] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[ 1507.186234][ T5247] usb 1-1: Detected FT232RL
[ 1507.404211][ T5247] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1507.425392][ T5247] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1507.446923][ T5247] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[ 1507.457849][ T5247] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1507.487445][ T5247] usb 1-1: USB disconnect, device number 117
[ 1507.543078][ T5247] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1507.582594][ T5247] ftdi_sio 1-1:0.0: device disconnected
[ 1507.668202][T29056] loop2: detected capacity change from 0 to 256
[ 1507.716336][T29060] netlink: 'syz.3.24397': attribute type 1 has an invalid length.
[ 1507.732077][T29060] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24397'.
[ 1507.771361][T29060] nbd: couldn't find a device at index 1024
[ 1507.794008][T29056] FAT-fs (loop2): Directory bread(block 64) failed
[ 1507.808814][T29056] FAT-fs (loop2): Directory bread(block 65) failed
[ 1507.828714][T29056] FAT-fs (loop2): Directory bread(block 66) failed
[ 1507.850954][T29056] FAT-fs (loop2): Directory bread(block 67) failed
[ 1507.872501][T29056] FAT-fs (loop2): Directory bread(block 68) failed
[ 1507.887141][T29056] FAT-fs (loop2): Directory bread(block 69) failed
[ 1507.893795][T29056] FAT-fs (loop2): Directory bread(block 70) failed
[ 1507.907658][T29056] FAT-fs (loop2): Directory bread(block 71) failed
[ 1507.914544][T29056] FAT-fs (loop2): Directory bread(block 72) failed
[ 1507.949187][T29056] FAT-fs (loop2): Directory bread(block 73) failed
[ 1508.297441][T29092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24414'.
[ 1508.369792][T29098] cgroup: subsys name conflicts with all
[ 1508.499227][T29108] dlm: no locking on control device
[ 1508.640801][T29114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24431'.
[ 1508.976023][ T4605] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1509.232163][ T4605] usb 5-1: Using ep0 maxpacket: 16
[ 1509.318313][T29126] loop0: detected capacity change from 0 to 32768
[ 1509.360538][ T4605] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1509.392092][T29126] XFS (loop0): Mounting V5 Filesystem
[ 1509.451920][T29126] XFS (loop0): Ending clean mount
[ 1509.469025][T29126] XFS (loop0): Quotacheck needed: Please wait.
[ 1509.519547][T29126] XFS (loop0): Quotacheck: Done.
[ 1509.553176][ T4605] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1509.582671][ T4605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.591936][ T4605] usb 5-1: Product: syz
[ 1509.606020][ T4624] XFS (loop0): Unmounting Filesystem
[ 1509.612186][ T4605] usb 5-1: Manufacturer: syz
[ 1509.618415][ T4605] usb 5-1: SerialNumber: syz
[ 1509.639927][ T4605] usb 5-1: config 0 descriptor??
[ 1509.693947][ T4605] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[ 1509.702301][ T4605] usb 5-1: Detected FT232RL
[ 1509.927107][ T4605] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1509.959374][ T4605] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1509.980726][ T4605] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[ 1510.002340][ T4605] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1510.023310][ T4605] usb 5-1: USB disconnect, device number 115
[ 1510.058475][ T4605] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1510.078293][ T4605] ftdi_sio 5-1:0.0: device disconnected
[ 1510.089387][T29177] loop0: detected capacity change from 0 to 256
[ 1510.187929][T29177] FAT-fs (loop0): Directory bread(block 64) failed
[ 1510.195365][T29177] FAT-fs (loop0): Directory bread(block 65) failed
[ 1510.202079][T29177] FAT-fs (loop0): Directory bread(block 66) failed
[ 1510.209200][T29177] FAT-fs (loop0): Directory bread(block 67) failed
[ 1510.216629][T29177] FAT-fs (loop0): Directory bread(block 68) failed
[ 1510.223285][T29177] FAT-fs (loop0): Directory bread(block 69) failed
[ 1510.230689][T29177] FAT-fs (loop0): Directory bread(block 70) failed
[ 1510.237634][T29177] FAT-fs (loop0): Directory bread(block 71) failed
[ 1510.244318][T29177] FAT-fs (loop0): Directory bread(block 72) failed
[ 1510.251541][T29177] FAT-fs (loop0): Directory bread(block 73) failed
[ 1510.459923][T29200] cgroup: subsys name conflicts with all
[ 1510.570363][T29211] dlm: no locking on control device
[ 1511.120507][T29272] kAFS: unable to lookup cell ''
[ 1511.581263][T29320] kAFS: unable to lookup cell ''
[ 1511.595997][T29322] i2c i2c-0: Invalid block write size 150
[ 1511.667668][T29329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24483'.
[ 1511.738905][T29339] netlink: 256 bytes leftover after parsing attributes in process `syz.0.24484'.
[ 1511.758511][T29339] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1511.960451][T29359] netlink: 256 bytes leftover after parsing attributes in process `syz.3.24504'.
[ 1511.981432][T29359] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1512.105799][T29376] i2c i2c-0: Invalid block write size 150
[ 1512.116550][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24501'.
[ 1512.329969][T29399] loop0: detected capacity change from 0 to 256
[ 1512.532034][T29399] FAT-fs (loop0): Directory bread(block 64) failed
[ 1512.546264][T29399] FAT-fs (loop0): Directory bread(block 65) failed
[ 1512.564059][T29399] FAT-fs (loop0): Directory bread(block 66) failed
[ 1512.578875][T29399] FAT-fs (loop0): Directory bread(block 67) failed
[ 1512.596500][T29399] FAT-fs (loop0): Directory bread(block 68) failed
[ 1512.611703][T29399] FAT-fs (loop0): Directory bread(block 69) failed
[ 1512.618370][T29399] FAT-fs (loop0): Directory bread(block 70) failed
[ 1512.626355][T29399] FAT-fs (loop0): Directory bread(block 71) failed
[ 1512.641006][T29399] FAT-fs (loop0): Directory bread(block 72) failed
[ 1512.649254][T29399] FAT-fs (loop0): Directory bread(block 73) failed
[ 1512.895475][T29446] netlink: 56 bytes leftover after parsing attributes in process `syz.0.24517'.
[ 1513.058347][T29455] netlink: 'syz.1.24523': attribute type 1 has an invalid length.
[ 1513.155647][ T4605] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1513.433738][ T4605] usb 3-1: Using ep0 maxpacket: 32
[ 1513.562076][ T4605] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1513.754370][ T4605] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1513.763519][ T4605] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1513.772012][ T4605] usb 3-1: Product: syz
[ 1513.776570][ T4605] usb 3-1: Manufacturer: syz
[ 1513.781211][ T4605] usb 3-1: SerialNumber: syz
[ 1513.788320][ T4605] usb 3-1: config 0 descriptor??
[ 1513.830014][ T4605] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1513.836078][ T4605] hub: probe of 3-1:0.0 failed with error -5
[ 1514.182078][ T4605] usb 3-1: USB disconnect, device number 76
[ 1514.874798][T29497] loop2: detected capacity change from 0 to 256
[ 1514.952285][T29503] netlink: 'syz.3.24539': attribute type 1 has an invalid length.
[ 1515.037177][T29497] FAT-fs (loop2): Directory bread(block 64) failed
[ 1515.043877][T29497] FAT-fs (loop2): Directory bread(block 65) failed
[ 1515.096512][T29497] FAT-fs (loop2): Directory bread(block 66) failed
[ 1515.119301][T29497] FAT-fs (loop2): Directory bread(block 67) failed
[ 1515.133961][T29497] FAT-fs (loop2): Directory bread(block 68) failed
[ 1515.140754][T29497] FAT-fs (loop2): Directory bread(block 69) failed
[ 1515.188886][T29497] FAT-fs (loop2): Directory bread(block 70) failed
[ 1515.195537][T29497] FAT-fs (loop2): Directory bread(block 71) failed
[ 1515.240352][T29497] FAT-fs (loop2): Directory bread(block 72) failed
[ 1515.246985][T29497] FAT-fs (loop2): Directory bread(block 73) failed
[ 1515.667802][ T5247] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1515.860293][ T5252] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1515.956474][ T5247] usb 5-1: Using ep0 maxpacket: 32
[ 1516.106678][ T5247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.288161][ T5252] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1516.298358][ T5252] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1516.341598][ T5247] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1516.350748][ T5247] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1516.359452][ T5247] usb 5-1: Product: syz
[ 1516.364188][ T5247] usb 5-1: Manufacturer: syz
[ 1516.368819][ T5247] usb 5-1: SerialNumber: syz
[ 1516.376017][ T5247] usb 5-1: config 0 descriptor??
[ 1516.416714][ T5252] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1516.425929][ T5252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1516.435578][ T5247] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1516.441761][ T5247] hub: probe of 5-1:0.0 failed with error -5
[ 1516.452293][ T5252] usb 4-1: SerialNumber: syz
[ 1516.521552][ T5252] cdc_ether 4-1:1.0: skipping garbage
[ 1516.527123][ T5252] usb 4-1: bad CDC descriptors
[ 1516.733535][ T5252] usb 4-1: USB disconnect, device number 119
[ 1516.763166][ T4605] usb 5-1: USB disconnect, device number 116
[ 1517.977037][ T4605] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1518.051889][ T8006] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1518.308494][ T8006] usb 1-1: Using ep0 maxpacket: 32
[ 1518.362141][ T4605] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.389131][ T4605] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1518.436852][ T8006] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.536274][ T4605] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1518.554870][ T4605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1518.570788][ T4605] usb 3-1: SerialNumber: syz
[ 1518.630033][ T8006] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1518.639155][ T8006] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1518.651650][ T4605] cdc_ether 3-1:1.0: skipping garbage
[ 1518.657088][ T4605] usb 3-1: bad CDC descriptors
[ 1518.682777][ T8006] usb 1-1: Product: syz
[ 1518.687099][ T8006] usb 1-1: Manufacturer: syz
[ 1518.691726][ T8006] usb 1-1: SerialNumber: syz
[ 1518.730432][ T8006] usb 1-1: config 0 descriptor??
[ 1518.769161][ T8006] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1518.775138][ T8006] hub: probe of 1-1:0.0 failed with error -5
[ 1518.880217][ T5252] usb 3-1: USB disconnect, device number 77
[ 1518.886534][T29717] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[ 1518.922046][T29717] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[ 1519.142938][ T5248] usb 1-1: USB disconnect, device number 118
[ 1519.221779][ T5247] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1519.522536][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24621'.
[ 1519.531778][ T5247] usb 2-1: Using ep0 maxpacket: 16
[ 1519.655674][ T5247] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.666842][ T5247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1519.678260][ T5247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024
[ 1519.689641][ T5247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1519.700641][ T5247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1519.710459][ T5247] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1519.723542][ T5247] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1519.733036][ T5247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.748933][ T5247] usb 2-1: config 0 descriptor??
[ 1519.813677][T29762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24624'.
[ 1519.997600][ T5247] rc_core: IR keymap rc-hauppauge not found
[ 1520.003607][ T5247] Registered IR keymap rc-empty
[ 1520.044745][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.104586][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.137275][ T5247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1520.162776][ T5247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input105
[ 1520.209614][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.232656][    C1] mceusb 2-1:0.0: Error: urb status = -75
[ 1520.242659][T29800] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[ 1520.254280][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.272084][T29800] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[ 1520.296995][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.356081][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.393305][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.435992][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.436197][ T8006] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1520.462730][T29816] Unsupported ieee802154 address type: 0
[ 1520.477128][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.521538][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.553821][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.596211][ T5247] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1520.641066][ T5247] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 1520.650810][ T5247] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1520.664115][ T5247] usb 2-1: USB disconnect, device number 93
[ 1520.724751][ T8006] usb 4-1: Using ep0 maxpacket: 32
[ 1520.853008][ T8006] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1521.023968][ T8006] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1521.033474][ T8006] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1521.042330][ T8006] usb 4-1: Product: syz
[ 1521.046989][ T8006] usb 4-1: Manufacturer: syz
[ 1521.052781][ T8006] usb 4-1: SerialNumber: syz
[ 1521.080830][ T8006] usb 4-1: config 0 descriptor??
[ 1521.120906][ T8006] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1521.126900][ T8006] hub: probe of 4-1:0.0 failed with error -5
[ 1521.462456][ T8006] usb 4-1: USB disconnect, device number 120
[ 1522.403042][ T5247] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1522.579399][T29886] Unsupported ieee802154 address type: 0
[ 1522.659708][ T5247] usb 5-1: Using ep0 maxpacket: 16
[ 1522.740237][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.771775][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.795456][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.805300][ T5247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1522.826571][T29908] No such timeout policy "syz1"
[ 1522.827030][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1522.846917][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.869898][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.888486][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024
[ 1522.900750][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.910563][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.920326][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1522.958367][T29903] netlink: 192 bytes leftover after parsing attributes in process `syz.3.24651'.
[ 1522.978470][ T5247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1522.999577][ T5247] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1523.028544][ T5247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1523.038223][ T5247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1523.048950][ T5247] usb 5-1: config 0 descriptor??
[ 1523.141482][T29928] overlayfs: missing 'lowerdir'
[ 1523.226354][ T5247] rc_core: IR keymap rc-hauppauge not found
[ 1523.232367][ T5247] Registered IR keymap rc-empty
[ 1523.275097][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.353137][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.405033][ T5247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1523.444569][ T5247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input106
[ 1523.472334][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.503983][    C1] mceusb 5-1:0.0: Error: urb status = -75
[ 1523.525598][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.538838][T29958] No such timeout policy "syz1"
[ 1523.568396][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.611016][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.672218][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.718111][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.771547][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.803451][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.846213][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.889115][ T5247] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1523.921502][T29990] overlayfs: missing 'lowerdir'
[ 1523.933024][ T5247] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1523.955656][ T5247] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1523.986644][ T5247] usb 5-1: USB disconnect, device number 117
[ 1525.193229][ T8006] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1525.278644][ T5247] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1525.391897][T30128] __nla_validate_parse: 47 callbacks suppressed
[ 1525.391917][T30128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24721'.
[ 1525.440250][T30127] loop0: detected capacity change from 0 to 256
[ 1525.460441][ T8006] usb 4-1: Using ep0 maxpacket: 16
[ 1525.529337][T30127] FAT-fs (loop0): Directory bread(block 64) failed
[ 1525.544907][T30127] FAT-fs (loop0): Directory bread(block 65) failed
[ 1525.556592][ T5247] usb 3-1: Using ep0 maxpacket: 16
[ 1525.565859][T30127] FAT-fs (loop0): Directory bread(block 66) failed
[ 1525.574525][T30138] netlink: 'syz.1.24725': attribute type 13 has an invalid length.
[ 1525.588508][T30127] FAT-fs (loop0): Directory bread(block 67) failed
[ 1525.595829][ T8006] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.610237][T30127] FAT-fs (loop0): Directory bread(block 68) failed
[ 1525.621319][T30127] FAT-fs (loop0): Directory bread(block 69) failed
[ 1525.628071][ T8006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1525.648300][T30127] FAT-fs (loop0): Directory bread(block 70) failed
[ 1525.664843][T30127] FAT-fs (loop0): Directory bread(block 71) failed
[ 1525.671754][T30127] FAT-fs (loop0): Directory bread(block 72) failed
[ 1525.674566][ T8006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024
[ 1525.679450][T30127] FAT-fs (loop0): Directory bread(block 73) failed
[ 1525.700624][ T8006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1525.717194][ T5247] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1525.723133][ T8006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1525.738470][ T4605] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1525.775525][ T8006] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1525.805418][ T8006] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1525.824013][ T8006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.844871][ T8006] usb 4-1: config 0 descriptor??
[ 1525.984752][ T5247] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1525.998705][ T5247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.020689][ T5247] usb 3-1: Product: syz
[ 1526.044330][ T8006] rc_core: IR keymap rc-hauppauge not found
[ 1526.050412][ T5247] usb 3-1: Manufacturer: syz
[ 1526.050437][ T5247] usb 3-1: SerialNumber: syz
[ 1526.068611][ T5247] usb 3-1: config 0 descriptor??
[ 1526.073623][ T8006] Registered IR keymap rc-empty
[ 1526.073711][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.103289][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.145671][ T8006] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1526.160704][ T8006] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input107
[ 1526.184347][ T5247] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1526.214277][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.230115][    C0] mceusb 4-1:0.0: Error: urb status = -75
[ 1526.252412][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.283643][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.294620][ T4605] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1526.303719][ T4605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.312322][ T4605] usb 5-1: Product: syz
[ 1526.316836][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.324082][ T4605] usb 5-1: Manufacturer: syz
[ 1526.329109][ T4605] usb 5-1: SerialNumber: syz
[ 1526.343489][ T4605] usb 5-1: config 0 descriptor??
[ 1526.348706][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.379927][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.402944][ T3327] usb 3-1: Failed to submit usb control message: -71
[ 1526.410675][ T3327] usb 3-1: unable to send the bmi data to the device: -71
[ 1526.412554][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.419165][ T5247] usb 3-1: USB disconnect, device number 78
[ 1526.433776][ T3327] usb 3-1: unable to get target info from device
[ 1526.440168][ T3327] usb 3-1: could not get target info (-71)
[ 1526.446369][ T3327] usb 3-1: could not probe fw (-71)
[ 1526.469680][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.508390][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.551059][ T8006] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1526.589468][ T8006] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[ 1526.597725][ T8006] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1526.610098][ T8006] usb 4-1: USB disconnect, device number 121
[ 1526.722081][ T4605] mos7840 5-1:0.0: required endpoints missing
[ 1526.732154][ T4605] usb 5-1: USB disconnect, device number 118
[ 1527.173693][T30212] netlink: 232 bytes leftover after parsing attributes in process `syz.1.24734'.
[ 1527.320580][ T5247] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1527.386066][T30230] netlink: 'syz.3.24738': attribute type 13 has an invalid length.
[ 1527.603603][ T5247] usb 1-1: Using ep0 maxpacket: 16
[ 1527.640125][T30250] device wireguard0 entered promiscuous mode
[ 1527.696255][T18393] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1527.740314][ T5247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1527.876804][ T4605] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1527.951565][ T5247] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[ 1527.961070][ T5247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.969682][ T5247] usb 1-1: Product: syz
[ 1527.974337][ T5247] usb 1-1: Manufacturer: syz
[ 1527.978969][ T5247] usb 1-1: SerialNumber: syz
[ 1527.992358][ T5247] usb 1-1: config 0 descriptor??
[ 1528.015491][T18393] usb 3-1: Using ep0 maxpacket: 16
[ 1528.044648][ T5247] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1528.165413][T18393] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1528.175925][T18393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[ 1528.187600][T18393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57872, setting to 1024
[ 1528.199139][T18393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1528.210534][T18393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1528.220488][T18393] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1528.233814][T18393] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1528.243095][T18393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1528.259750][T18393] usb 3-1: config 0 descriptor??
[ 1528.267994][ T8006] usb 1-1: USB disconnect, device number 119
[ 1528.282945][ T4761] usb 1-1: Failed to submit usb control message: -71
[ 1528.290732][ T4761] usb 1-1: unable to send the bmi data to the device: -71
[ 1528.299272][ T4761] usb 1-1: unable to get target info from device
[ 1528.305473][ T4605] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1528.306831][ T4761] usb 1-1: could not get target info (-71)
[ 1528.323999][ T4761] usb 1-1: could not probe fw (-71)
[ 1528.411237][T18393] rc_core: IR keymap rc-hauppauge not found
[ 1528.417235][T18393] Registered IR keymap rc-empty
[ 1528.422399][ T4605] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[ 1528.424802][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.475517][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.508605][T18393] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1528.523643][T18393] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input108
[ 1528.543704][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.571373][    C1] mceusb 3-1:0.0: Error: urb status = -75
[ 1528.582445][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.614440][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.646332][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.689052][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.699881][ T4605] usb 2-1: string descriptor 0 read error: -22
[ 1528.706196][ T4605] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1528.715624][ T4605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.731977][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.763842][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.771797][ T4605] usb 2-1: selecting invalid altsetting 1
[ 1528.779223][ T4605] usb 2-1: unit 3 not found!
[ 1528.806888][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.853157][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.862123][T30288] netlink: 232 bytes leftover after parsing attributes in process `syz.3.24751'.
[ 1528.903140][T18393] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1528.938792][T18393] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1528.947167][T18393] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1528.963231][T18393] usb 3-1: USB disconnect, device number 79
[ 1528.988850][ T4605] usb 2-1: unit 84 not found!
[ 1528.993608][ T4605] usb 2-1: unit 89 not found!
[ 1528.999512][ T4605] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[ 1529.009355][ T4605] usb 2-1: selecting invalid altsetting 1
[ 1529.017827][ T4605] usb 2-1: unit 3 not found!
[ 1529.180867][ T8006] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1529.213244][ T4605] usb 2-1: cannot request logical cluster ID: 35217 (err: -71)
[ 1529.220950][ T4605] usb 2-1: invalid MIXER UNIT descriptor 6
[ 1529.230426][ T4605] snd-usb-audio: probe of 2-1:1.1 failed with error -71
[ 1529.241871][ T4605] usb 2-1: selecting invalid altsetting 1
[ 1529.258163][ T4605] usb 2-1: unit 3 not found!
[ 1529.277100][ T4605] usb 2-1: cannot request logical cluster ID: 35217 (err: -71)
[ 1529.284754][ T4605] usb 2-1: invalid MIXER UNIT descriptor 6
[ 1529.304643][ T4605] snd-usb-audio: probe of 2-1:1.2 failed with error -71
[ 1529.314098][ T4605] usb 2-1: USB disconnect, device number 94
[ 1529.348084][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1529.747517][ T8006] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1529.756721][ T8006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.765437][ T8006] usb 1-1: Product: syz
[ 1529.770041][ T8006] usb 1-1: Manufacturer: syz
[ 1529.774671][ T8006] usb 1-1: SerialNumber: syz
[ 1529.782329][ T8006] usb 1-1: config 0 descriptor??
[ 1530.121742][ T4605] usb 4-1: new low-speed USB device number 122 using dummy_hcd
[ 1530.143058][ T8006] mos7840 1-1:0.0: required endpoints missing
[ 1530.152898][ T8006] usb 1-1: USB disconnect, device number 120
[ 1530.506450][ T4605] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[ 1530.515669][ T4605] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 29399, setting to 8
[ 1530.527414][ T4605] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1530.536642][ T4605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.560118][T30325] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1530.627267][T30343] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1530.804074][T30357] device wireguard1 entered promiscuous mode
[ 1530.837914][ T4605] usb 4-1: string descriptor 0 read error: -71
[ 1530.894320][ T4605] usb 4-1: USB disconnect, device number 122
[ 1531.128110][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1531.324972][T30418] (syz.0.24778,30418,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[ 1531.423833][T30418] (syz.0.24778,30418,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1532.040027][T30491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24803'.
[ 1532.051112][T30488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24800'.
[ 1532.081984][T30491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1532.092888][T30488] netlink: 112 bytes leftover after parsing attributes in process `syz.0.24800'.
[ 1532.144785][T30500] netlink: 'syz.2.24805': attribute type 3 has an invalid length.
[ 1532.377281][T18393] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1532.556598][T30534] loop3: detected capacity change from 0 to 128
[ 1532.623292][ T4605] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1532.640697][T30540] usb usb7: usbfs: process 30540 (syz.2.24818) did not claim interface 0 before use
[ 1532.722340][T30544] TCP: TCP_TX_DELAY enabled
[ 1532.826535][T18393] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[ 1532.855297][T18393] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1532.874218][T18393] usb 5-1: config 0 has no interface number 0
[ 1533.022358][T30569] device bridge4 entered promiscuous mode
[ 1533.074794][ T8006] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1533.083471][T18393] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[ 1533.092560][T18393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.112147][T18393] usb 5-1: Product: syz
[ 1533.125298][T18393] usb 5-1: Manufacturer: syz
[ 1533.131167][T18393] usb 5-1: SerialNumber: syz
[ 1533.146753][T18393] usb 5-1: config 0 descriptor??
[ 1533.151140][T30577] bridge0: port 3(veth0_to_bridge) entered blocking state
[ 1533.159865][T30579] netlink: 'syz.3.24829': attribute type 1 has an invalid length.
[ 1533.168570][T30577] bridge0: port 3(veth0_to_bridge) entered disabled state
[ 1533.185753][T30577] device veth0_to_bridge entered promiscuous mode
[ 1533.192768][ T4605] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1533.212241][ T4605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.220419][ T4605] usb 2-1: Product: syz
[ 1533.234841][ T4605] usb 2-1: Manufacturer: syz
[ 1533.239652][ T4605] usb 2-1: SerialNumber: syz
[ 1533.262371][ T4605] usb 2-1: config 0 descriptor??
[ 1533.312813][ T4605] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 095
[ 1533.350317][ T8006] usb 3-1: Using ep0 maxpacket: 32
[ 1533.428778][T30597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.24834'.
[ 1533.484206][ T8006] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 26, changing to 7
[ 1533.539744][ T4605]  (null): failure setting delay to 10us
[ 1533.551307][ T4605] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5
[ 1533.570037][ T4605] usb 2-1: USB disconnect, device number 95
[ 1533.681812][ T8006] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[ 1533.683074][T18393] usb 5-1: Found UVC 0.00 device syz (046d:0823)
[ 1533.690946][ T8006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.722648][T18393] usb 5-1: No valid video chain found.
[ 1533.742524][ T8006] usb 3-1: Product: syz
[ 1533.749361][ T8006] usb 3-1: Manufacturer: syz
[ 1533.760860][ T8006] usb 3-1: SerialNumber: syz
[ 1533.783376][T18393] usb 5-1: USB disconnect, device number 119
[ 1533.812063][T30633] IPv6: sit1: Disabled Multicast RS
[ 1533.902266][T30644] netlink: 72 bytes leftover after parsing attributes in process `syz.0.24845'.
[ 1534.087936][ T8006] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[ 1534.131468][ T8006] usb 3-1: USB disconnect, device number 80
[ 1534.654709][T30713] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1534.670302][T30717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24867'.
[ 1534.848742][T30734] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1534.883117][T30723] loop3: detected capacity change from 0 to 4096
[ 1534.923248][T30723] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1535.028232][T30723] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[ 1535.060837][T30723] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1535.112977][T30723] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1535.161053][T30723] ntfs: volume version 3.1.
[ 1535.277869][ T4628] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[ 1535.385674][T30763] loop0: detected capacity change from 0 to 4096
[ 1535.414037][T30763] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[ 1535.436231][T30778] netlink: 2 bytes leftover after parsing attributes in process `syz.2.24886'.
[ 1535.535379][T30763] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[ 1535.542254][T18393] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1535.743501][ T1452] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[ 1535.758935][ T4624] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[ 1535.766762][ T4624] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1535.773770][ T4624] ntfs3: loop0: ntfs_set_state r=3 failed, -22.
[ 1535.809263][ T4761] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22.
[ 1535.819966][T18393] usb 5-1: Using ep0 maxpacket: 32
[ 1535.827547][ T4624] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22.
[ 1535.980063][ T4605] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1535.980972][T18393] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[ 1536.022476][T18393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1536.048931][T18393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1536.236771][ T4605] usb 2-1: Using ep0 maxpacket: 8
[ 1536.279944][T18393] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1536.321682][T18393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.339145][T18393] usb 5-1: Product: syz
[ 1536.349947][T18393] usb 5-1: Manufacturer: syz
[ 1536.363175][T18393] usb 5-1: SerialNumber: syz
[ 1536.366193][ T4605] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1536.386417][ T4605] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1536.401843][T18393] usb 5-1: config 0 descriptor??
[ 1536.557455][ T4605] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1536.566612][ T4605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.600619][ T4605] usb 2-1: Product: syz
[ 1536.604849][ T4605] usb 2-1: Manufacturer: syz
[ 1536.629809][ T4605] usb 2-1: SerialNumber: syz
[ 1536.652612][ T4605] usb 2-1: config 0 descriptor??
[ 1536.691067][T18393] usb 5-1: USB disconnect, device number 120
[ 1536.720498][ T4605] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[ 1536.750360][T30866] xt_TCPMSS: Only works on TCP SYN packets
[ 1536.918600][T30818] loop0: detected capacity change from 0 to 40427
[ 1536.956468][ T4605] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[ 1536.971815][T30818] F2FS-fs (loop0): invalid crc value
[ 1536.990982][ T4605] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1537.018704][ T4605] snd_usb_toneport: probe of 2-1:0.0 failed with error -22
[ 1537.037482][T30818] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1537.172694][ T4605] usb 2-1: USB disconnect, device number 96
[ 1537.192710][T30818] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[ 1537.232176][T30818] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[ 1537.249030][T30818] F2FS-fs (loop0): Start checkpoint disabled!
[ 1537.279321][T30818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1537.312631][T30903] netlink: 'syz.4.24922': attribute type 27 has an invalid length.
[ 1537.342493][T30906] netlink: 'syz.3.24921': attribute type 1 has an invalid length.
[ 1537.363474][T30906] netlink: 'syz.3.24921': attribute type 3 has an invalid length.
[ 1537.387867][T30906] netlink: 224 bytes leftover after parsing attributes in process `syz.3.24921'.
[ 1537.398227][T30906] NCSI netlink: No device for ifindex 55159
[ 1537.474705][T30911] netlink: 'syz.4.24923': attribute type 3 has an invalid length.
[ 1537.885667][T30943] netlink: 'syz.1.24933': attribute type 10 has an invalid length.
[ 1537.915001][T30943] netlink: 55 bytes leftover after parsing attributes in process `syz.1.24933'.
[ 1538.006367][T30943] team0: Port device virt_wifi0 added
[ 1538.097066][T30959] netlink: 'syz.3.24939': attribute type 1 has an invalid length.
[ 1538.403782][T30989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24949'.
[ 1538.683364][T31013] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.706598][T31013] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.748962][T31013] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.769064][T31013] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1538.779512][T31013] device geneve1 entered promiscuous mode
[ 1538.813182][T31022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24962'.
[ 1538.825585][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1539.582970][T31093] netlink: 'syz.1.24987': attribute type 10 has an invalid length.
[ 1539.590979][T31093] netlink: 'syz.1.24987': attribute type 10 has an invalid length.
[ 1539.753973][ T5248] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1539.875561][T31115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.24994'.
[ 1540.039895][ T5248] usb 1-1: Using ep0 maxpacket: 16
[ 1540.203167][ T5248] usb 1-1: config 8 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10
[ 1540.225691][ T5248] usb 1-1: config 8 interface 0 has no altsetting 0
[ 1540.349758][ T5248] usb 1-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff
[ 1540.367604][ T5248] usb 1-1: New USB device strings: Mfr=230, Product=0, SerialNumber=0
[ 1540.398162][ T5248] usb 1-1: Manufacturer: syz
[ 1540.422251][T31159] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1540.444207][ T5247] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1540.494148][T31164] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1540.625544][ T4605] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1540.728938][ T5248] usb 1-1: USB disconnect, device number 121
[ 1540.749697][ T5247] usb 4-1: Using ep0 maxpacket: 16
[ 1540.897847][ T4605] usb 2-1: Using ep0 maxpacket: 16
[ 1540.899629][ T5247] usb 4-1: config 0 has no interfaces?
[ 1541.026043][ T4605] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1541.063474][T31214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25027'.
[ 1541.079846][T31214] netlink: 31 bytes leftover after parsing attributes in process `syz.2.25027'.
[ 1541.088931][T31214] netlink: 'syz.2.25027': attribute type 3 has an invalid length.
[ 1541.110102][T31214] netlink: 'syz.2.25027': attribute type 2 has an invalid length.
[ 1541.122398][ T5247] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1541.136849][ T5247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.144061][T31214] netlink: 31 bytes leftover after parsing attributes in process `syz.2.25027'.
[ 1541.154137][ T5247] usb 4-1: Product: syz
[ 1541.164059][ T5247] usb 4-1: Manufacturer: syz
[ 1541.175577][ T5247] usb 4-1: SerialNumber: syz
[ 1541.190145][ T5247] r8152-cfgselector 4-1: config 0 descriptor??
[ 1541.197574][ T4605] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1541.206814][ T4605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.259144][ T4605] usb 2-1: Product: syz
[ 1541.271807][ T4605] usb 2-1: Manufacturer: syz
[ 1541.276524][ T4605] usb 2-1: SerialNumber: syz
[ 1541.286351][T31222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25029'.
[ 1541.305098][ T4605] r8152-cfgselector 2-1: config 0 descriptor??
[ 1541.352956][T31226] loop0: detected capacity change from 0 to 64
[ 1541.475559][ T5247] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 1541.667380][ T8006] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1541.700256][ T5247] usb 4-1: USB disconnect, device number 123
[ 1541.767230][T31244] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1541.817137][ T4605] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1541.832581][ T4605] r8152-cfgselector 2-1: USB disconnect, device number 97
[ 1542.052622][ T8006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1542.073438][ T8006] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1542.093437][ T8006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1542.114428][ T8006] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1542.126326][ T8006] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1542.135702][ T8006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.156819][ T8006] usb 3-1: config 0 descriptor??
[ 1542.191293][ T5248] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1542.296507][T31286] x_tables: duplicate underflow at hook 4
[ 1542.437587][ T8006] hdpvr 3-1:0.0: firmware version 0xd9 dated �L�W@���'^��R"�5����D��BUN��=r�p]��E�/
[ 1542.447588][ T8006] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[ 1542.524848][T31302] (syz.4.25050,31302,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[ 1542.542858][T31302] (syz.4.25050,31302,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1542.616252][ T5248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1542.647856][ T5248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1542.661619][ T8006] hdpvr 3-1:0.0: device init failed
[ 1542.666929][ T8006] hdpvr: probe of 3-1:0.0 failed with error -12
[ 1542.712136][ T5248] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1542.718444][ T8006] usb 3-1: USB disconnect, device number 81
[ 1542.768004][ T5248] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1542.784174][ T5248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.818393][ T5248] usb 1-1: config 0 descriptor??
[ 1542.865745][ T5248] hub 1-1:0.0: USB hub found
[ 1543.089489][ T5248] hub 1-1:0.0: 14 ports detected
[ 1543.136498][ T5248] hub 1-1:0.0: insufficient power available to use all downstream ports
[ 1543.313959][ T5248] hub 1-1:0.0: hub_hub_status failed (err = -71)
[ 1543.320592][ T5248] hub 1-1:0.0: config failed, can't get hub status (err -71)
[ 1543.421265][ T5248] usb 1-1: USB disconnect, device number 122
[ 1543.911111][T31422] device geneve1 entered promiscuous mode
[ 1544.738660][T31493] netlink: 'syz.4.25112': attribute type 3 has an invalid length.
[ 1544.980756][T31508] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1545.018469][T31436] loop0: detected capacity change from 0 to 32768
[ 1545.080616][T31515] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component
[ 1545.112558][T31513] loop2: detected capacity change from 0 to 1764
[ 1545.144502][T31436] 
[ 1545.144502][T31436]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1545.144502][T31436] 
[ 1545.225502][T31527] overlayfs: workdir and upperdir must be separate subtrees
[ 1545.271022][ T4624] 
[ 1545.271022][ T4624]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1545.271022][ T4624] 
[ 1545.322557][ T4624] 
[ 1545.322557][ T4624]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1545.322557][ T4624] 
[ 1545.405706][T31542] netlink: 'syz.1.25140': attribute type 13 has an invalid length.
[ 1545.517829][T31549] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1545.690466][T31564] netdevsim netdevsim2: Direct firmware load for �� failed with error -2
[ 1545.749704][T31564] netdevsim netdevsim2: Falling back to sysfs fallback for: ��
[ 1545.867300][T31583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25141'.
[ 1545.883134][T31571] xt_CT: No such helper "snmp_trap"
[ 1545.911039][T31580] lo speed is unknown, defaulting to 1000
[ 1546.681526][ T5247] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1546.821488][T31657] loop3: detected capacity change from 0 to 4096
[ 1546.843956][T31670] cgroup: noprefix used incorrectly
[ 1546.895369][T31657] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[ 1546.932763][T31657] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1546.991372][ T5247] usb 5-1: Using ep0 maxpacket: 32
[ 1547.048002][T31657] ntfs: volume version 3.1.
[ 1547.091627][T31657] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[ 1547.112282][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1547.141137][ T5247] usb 5-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config
[ 1547.195482][ T5247] usb 5-1: config 239 has 1 interface, different from the descriptor's value: 3
[ 1547.225721][T31657] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[ 1547.311469][T31657] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[ 1547.335614][T31690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25167'.
[ 1547.378755][T31690] netlink: 112 bytes leftover after parsing attributes in process `syz.2.25167'.
[ 1547.398046][ T5247] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[ 1547.409910][ T5247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1547.465540][ T5247] usb 5-1: Product: syz
[ 1547.469934][ T5247] usb 5-1: Manufacturer: syz
[ 1547.516333][ T5247] usb 5-1: SerialNumber: syz
[ 1547.964322][ T5247] usb 5-1: unit 2 not found!
[ 1548.032238][T31739] loop2: detected capacity change from 0 to 256
[ 1548.039843][ T5247] usb 5-1: USB disconnect, device number 121
[ 1548.163659][T31739] FAT-fs (loop2): Directory bread(block 64) failed
[ 1548.185217][T31739] FAT-fs (loop2): Directory bread(block 65) failed
[ 1548.214382][T31739] FAT-fs (loop2): Directory bread(block 66) failed
[ 1548.228516][T31762] loop3: detected capacity change from 0 to 512
[ 1548.246284][T31739] FAT-fs (loop2): Directory bread(block 67) failed
[ 1548.263886][T31766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25189'.
[ 1548.275918][T31739] FAT-fs (loop2): Directory bread(block 68) failed
[ 1548.282506][T31739] FAT-fs (loop2): Directory bread(block 69) failed
[ 1548.304755][T31762] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[ 1548.317134][T31766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25189'.
[ 1548.326309][T31762] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1548.328799][T31739] FAT-fs (loop2): Directory bread(block 70) failed
[ 1548.352949][T31739] FAT-fs (loop2): Directory bread(block 71) failed
[ 1548.369237][T31762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[ 1548.384986][T31739] FAT-fs (loop2): Directory bread(block 72) failed
[ 1548.390544][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1548.391598][T31739] FAT-fs (loop2): Directory bread(block 73) failed
[ 1548.415625][T31762] System zones: 1-12
[ 1548.446059][T31762] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.25186: corrupted in-inode xattr
[ 1548.517502][T31762] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.25186: couldn't read orphan inode 15 (err -117)
[ 1548.562854][T31762] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none.
[ 1548.773768][T31793] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1548.870596][T31800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.25195'.
[ 1549.062414][T31818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25199'.
[ 1549.119033][T31818] netlink: 'syz.3.25199': attribute type 1 has an invalid length.
[ 1549.783197][T31872] netlink: 'syz.2.25224': attribute type 8 has an invalid length.
[ 1549.818939][T31872] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.25224'.
[ 1549.856545][ T4605] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1549.899940][T31880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25226'.
[ 1549.902050][T31879] netlink: 'syz.0.25225': attribute type 2 has an invalid length.
[ 1549.942072][T31879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25225'.
[ 1550.097568][T31890] ieee802154 phy1 wpan1: encryption failed: -22
[ 1550.292304][T31906] program syz.0.25233 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1550.415625][ T4605] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1550.449865][ T4605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.480178][ T4605] usb 5-1: Product: syz
[ 1550.515349][ T4605] usb 5-1: Manufacturer: syz
[ 1550.530402][ T4605] usb 5-1: SerialNumber: syz
[ 1550.595110][ T4605] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1550.605041][T18393] usb 4-1: new full-speed USB device number 124 using dummy_hcd
[ 1550.757298][T31940] netlink: 'syz.1.25257': attribute type 7 has an invalid length.
[ 1550.786859][T31940] netlink: 'syz.1.25257': attribute type 1 has an invalid length.
[ 1550.916712][T31946] loop2: detected capacity change from 0 to 64
[ 1551.064957][T18393] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1551.074205][T18393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1551.141816][T18393] usb 4-1: config 0 descriptor??
[ 1551.183478][T18393] cp210x 4-1:0.0: cp210x converter detected
[ 1551.236273][ T4605] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1551.532482][T31995] __nla_validate_parse: 3 callbacks suppressed
[ 1551.532502][T31995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25263'.
[ 1551.652521][T18393] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71
[ 1551.660184][T18393] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1551.710770][T18393] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1551.711911][ T8006] usb 5-1: USB disconnect, device number 122
[ 1551.743168][T18393] usb 4-1: USB disconnect, device number 124
[ 1551.794173][T18393] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1551.833363][T18393] cp210x 4-1:0.0: device disconnected
[ 1552.043776][T32041] loop0: detected capacity change from 0 to 1024
[ 1552.098396][T32047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25276'.
[ 1552.121460][T32041] EXT4-fs (loop0): Ignoring removed bh option
[ 1552.168528][T32041] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.25274: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1552.211696][T32041] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1552.220007][T32041] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.25274: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1552.234778][T32041] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1552.251022][T32041] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.25274: Failed to acquire dquot type 0
[ 1552.310416][T32057] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1552.318131][T32041] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1552.330589][T32059] tmpfs: Bad value for 'mpol'
[ 1552.422136][ T4605] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1552.429335][ T4605] ath9k_htc: Failed to initialize the device
[ 1552.434018][T32063] netlink: zone id is out of range
[ 1552.438323][T32041] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.25274: mark_inode_dirty error
[ 1552.461611][T32063] netlink: zone id is out of range
[ 1552.466629][ T8006] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1552.493892][T32041] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[ 1552.499003][T32063] netlink: zone id is out of range
[ 1552.524573][T32041] EXT4-fs (loop0): 1 orphan inode deleted
[ 1552.530662][T32063] netlink: zone id is out of range
[ 1552.530676][T32063] netlink: zone id is out of range
[ 1552.530687][T32063] netlink: zone id is out of range
[ 1552.530696][T32063] netlink: del zone limit has 4 unknown bytes
[ 1552.553389][ T1452] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1552.596226][ T1452] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1552.605449][ T1452] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0
[ 1552.617672][T32041] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noblock_validity,bh,nodiscard,nouid32,barrier,,errors=continue. Quota mode: none.
[ 1552.626648][T32072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25281'.
[ 1552.789996][    T9] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1552.860387][    T9] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1552.869395][    T9] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0
[ 1552.930434][ T4624] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1552.965994][ T4624] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[ 1553.033161][ T4624] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[ 1553.122761][T32102] ieee802154 phy1 wpan1: encryption failed: -22
[ 1553.409529][T32131] loop0: detected capacity change from 0 to 8
[ 1553.439253][T32134] loop3: detected capacity change from 0 to 256
[ 1553.445747][T32136] (syz.2.25303,32136,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[ 1553.465994][T32136] (syz.2.25303,32136,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1553.524929][   T26] audit: type=1800 audit(1498.240:99): pid=32131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.25301" name="file0" dev="loop0" ino=1 res=0 errno=0
[ 1553.642715][T32149] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1554.121935][T18393] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 1554.404906][T32204] loop2: detected capacity change from 0 to 256
[ 1554.410680][T18393] usb 1-1: Using ep0 maxpacket: 32
[ 1554.561642][T32204] FAT-fs (loop2): Directory bread(block 64) failed
[ 1554.568273][T32204] FAT-fs (loop2): Directory bread(block 65) failed
[ 1554.572146][T18393] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[ 1554.603032][T18393] usb 1-1: config 0 has no interface number 0
[ 1554.612425][T32204] FAT-fs (loop2): Directory bread(block 66) failed
[ 1554.620135][T18393] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1554.640570][T32204] FAT-fs (loop2): Directory bread(block 67) failed
[ 1554.663451][T18393] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48
[ 1554.675785][T32218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.25327'.
[ 1554.688719][T32204] FAT-fs (loop2): Directory bread(block 68) failed
[ 1554.695326][T32204] FAT-fs (loop2): Directory bread(block 69) failed
[ 1554.752977][T32204] FAT-fs (loop2): Directory bread(block 70) failed
[ 1554.759734][T32204] FAT-fs (loop2): Directory bread(block 71) failed
[ 1554.804361][T32204] FAT-fs (loop2): Directory bread(block 72) failed
[ 1554.836995][T32204] FAT-fs (loop2): Directory bread(block 73) failed
[ 1554.902782][T18393] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 1554.922947][T18393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1554.962016][T18393] usb 1-1: Product: syz
[ 1554.988115][T18393] usb 1-1: Manufacturer: syz
[ 1554.992778][T18393] usb 1-1: SerialNumber: syz
[ 1555.039502][T18393] usb 1-1: config 0 descriptor??
[ 1555.063372][T32166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1555.077907][T32166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1555.336699][ T5248] usb 1-1: USB disconnect, device number 123
[ 1555.437034][ T4605] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1555.826550][T32315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25349'.
[ 1555.864673][ T4605] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1555.960968][ T4605] usb 5-1: config 4 has an invalid interface number: 57 but max is 0
[ 1555.971369][ T4605] usb 5-1: config 4 has no interface number 0
[ 1555.982061][ T4605] usb 5-1: config 4 interface 57 has no altsetting 0
[ 1556.174738][ T4605] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5a.ce
[ 1556.183858][ T4605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1556.217482][ T4605] usb 5-1: Product: syz
[ 1556.221814][ T4605] usb 5-1: Manufacturer: syz
[ 1556.248095][ T4605] usb 5-1: SerialNumber: syz
[ 1556.603328][ T4605] quatech2 5-1:4.57: Quatech 2nd gen USB to Serial Driver converter detected
[ 1556.625992][ T4605] usb 5-1: qt2_attach - failed to power on unit: -71
[ 1556.666562][ T4605] quatech2: probe of 5-1:4.57 failed with error -71
[ 1556.682052][ T4605] usb 5-1: USB disconnect, device number 123
[ 1556.980883][T32313] loop2: detected capacity change from 0 to 40427
[ 1557.105128][T32313] F2FS-fs (loop2): invalid crc value
[ 1557.138010][T32313] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1557.203323][T32410] netlink: 'syz.0.25377': attribute type 1 has an invalid length.
[ 1557.320962][T32313] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[ 1557.342271][T32313] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[ 1557.364898][T32313] F2FS-fs (loop2): Start checkpoint disabled!
[ 1557.425288][T32313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[ 1557.501023][T32435] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1557.844214][T32446] loop0: detected capacity change from 0 to 4096
[ 1557.875536][T32446] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1558.024004][ T1107] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1558.034806][T32446] ntfs: volume version 3.1.
[ 1558.086406][T32446] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported.
[ 1558.130499][T32446] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date.  Mounting read-only.  Run chkdsk.
[ 1558.190666][T32465] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1558.269874][T32465] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1558.419918][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1558.454030][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1558.466407][T32426] loop3: detected capacity change from 0 to 32768
[ 1558.497920][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1558.535184][ T1107] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1558.564849][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1558.604400][ T1107] usb 5-1: config 0 descriptor??
[ 1558.609475][T32426] XFS (loop3): Mounting V5 Filesystem
[ 1558.711812][T32426] XFS (loop3): Ending clean mount
[ 1558.721190][T32426] XFS (loop3): Quotacheck needed: Please wait.
[ 1558.776304][T32426] XFS (loop3): Quotacheck: Done.
[ 1558.832053][ T4628] XFS (loop3): Unmounting Filesystem
[ 1558.916469][ T1107] ath6kl: Failed to submit usb control message: -71
[ 1558.932676][ T1107] ath6kl: unable to send the bmi data to the device: -71
[ 1558.954100][ T1107] ath6kl: Unable to send get target info: -71
[ 1558.981596][ T1107] ath6kl: Failed to init ath6kl core: -71
[ 1559.034141][ T1107] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[ 1559.075508][ T1107] usb 5-1: USB disconnect, device number 124
[ 1559.658836][T32565] netlink: 'syz.4.25422': attribute type 4 has an invalid length.
[ 1559.778692][T32560] block device autoloading is deprecated and will be removed.
[ 1560.036285][T32580] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1560.679427][T32563] loop2: detected capacity change from 0 to 32768
[ 1560.824163][T32626] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1560.872557][T32570] loop3: detected capacity change from 0 to 40427
[ 1560.979861][T32570] F2FS-fs (loop3): invalid crc value
[ 1561.008556][T32570] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1561.135080][ T1107] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1561.187883][T32570] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[ 1561.225513][T32570] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[ 1561.264856][T32570] F2FS-fs (loop3): Start checkpoint disabled!
[ 1561.306186][T32570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[ 1561.562795][ T1107] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1561.659358][ T1107] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[ 1561.805026][T32633] loop2: detected capacity change from 0 to 32768
[ 1561.949736][T32633] __jfs_setxattr: xattr_size = 72, new_size = 13096
[ 1561.969132][ T1107] usb 1-1: string descriptor 0 read error: -22
[ 1561.975560][ T1107] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1562.033028][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.100371][ T1107] usb 1-1: selecting invalid altsetting 1
[ 1562.106630][ T1107] usb 1-1: unit 3 not found!
[ 1562.321940][ T1107] usb 1-1: unit 84 not found!
[ 1562.337679][ T1107] usb 1-1: unit 89 not found!
[ 1562.350091][T32718] loop2: detected capacity change from 0 to 16
[ 1562.361779][ T1107] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[ 1562.387665][T32721] device gtp0 entered promiscuous mode
[ 1562.418321][ T1107] usb 1-1: selecting invalid altsetting 1
[ 1562.427386][ T1107] usb 1-1: unit 3 not found!
[ 1562.497533][T32718] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1562.556323][ T1107] usb 1-1: cannot request logical cluster ID: 35217 (err: -71)
[ 1562.597415][ T1107] usb 1-1: invalid MIXER UNIT descriptor 6
[ 1562.615781][ T1107] snd-usb-audio: probe of 1-1:1.1 failed with error -71
[ 1562.673302][ T1107] usb 1-1: selecting invalid altsetting 1
[ 1562.691299][ T1107] usb 1-1: unit 3 not found!
[ 1562.728002][ T1107] usb 1-1: cannot request logical cluster ID: 35217 (err: -71)
[ 1562.745082][T32742] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.25470'.
[ 1562.768379][ T1107] usb 1-1: invalid MIXER UNIT descriptor 6
[ 1562.771379][T32750] x_tables: duplicate entry at hook 3
[ 1562.788432][T32742] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1562.818961][T32742] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1562.859600][T32756] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25472'.
[ 1562.878566][ T1107] snd-usb-audio: probe of 1-1:1.2 failed with error -71
[ 1562.942263][ T1107] usb 1-1: USB disconnect, device number 124
[ 1563.083305][  T313] netlink: 11 bytes leftover after parsing attributes in process `syz.1.25479'.
[ 1563.123658][  T313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25479'.
[ 1563.206396][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1563.319804][  T341] overlayfs: missing 'lowerdir'
[ 1563.578602][  T365] device ip6gre2 entered promiscuous mode
[ 1563.635428][  T362] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1563.674390][  T362] bond0: (slave lo): Error: Device can not be enslaved while up
[ 1563.747404][  T368] xt_CT: No such helper "pptp"
[ 1564.299458][ T5247] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1564.327917][  T414] loop3: detected capacity change from 0 to 4096
[ 1564.336816][ T1107] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1564.372668][  T420] netlink: 'syz.1.25517': attribute type 1 has an invalid length.
[ 1564.479875][  T414] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[ 1564.555641][  T414] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1564.577289][ T5247] usb 3-1: Using ep0 maxpacket: 32
[ 1564.580047][  T414] ntfs3: loop3: Failed to load $Extend.
[ 1564.705882][ T5247] usb 3-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config
[ 1564.727673][ T5247] usb 3-1: config 239 has 1 interface, different from the descriptor's value: 3
[ 1564.748739][ T1107] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[ 1564.778361][ T1107] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1564.804875][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1565.005157][ T5247] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[ 1565.015850][ T1107] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1565.024935][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1565.025773][ T5247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1565.047902][ T1107] usb 1-1: Product: syz
[ 1565.052133][ T1107] usb 1-1: Manufacturer: syz
[ 1565.059588][ T5247] usb 3-1: Product: syz
[ 1565.063818][ T5247] usb 3-1: Manufacturer: syz
[ 1565.067867][ T1107] usb 1-1: SerialNumber: syz
[ 1565.068470][ T5247] usb 3-1: SerialNumber: syz
[ 1565.088399][ T1107] usb 1-1: config 0 descriptor??
[ 1565.134002][ T1107] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1565.140007][ T1107] hub: probe of 1-1:0.0 failed with error -5
[ 1565.149494][ T1107] usb 1-1: selecting invalid altsetting 0
[ 1565.261912][ T5248] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[ 1565.486470][ T1107] usb 1-1: USB disconnect, device number 125
[ 1565.518644][ T5247] usb 3-1: unit 2 not found!
[ 1565.594918][ T5247] usb 3-1: USB disconnect, device number 82
[ 1565.721573][ T5248] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1565.775042][ T5248] usb 4-1: not running at top speed; connect to a high speed hub
[ 1565.869478][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:239.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1565.886349][ T5248] usb 4-1: config 5 has an invalid interface number: 1 but max is 0
[ 1565.894444][ T5248] usb 4-1: config 5 has no interface number 0
[ 1566.023454][  T494] lo speed is unknown, defaulting to 1000
[ 1566.077577][  T502] netlink: 4844 bytes leftover after parsing attributes in process `syz.2.25531'.
[ 1566.095690][ T5248] usb 4-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice=b9.5f
[ 1566.106352][ T5248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.114392][ T5248] usb 4-1: Product: syz
[ 1566.151440][ T5248] usb 4-1: Manufacturer: syz
[ 1566.159790][ T5248] usb 4-1: SerialNumber: syz
[ 1566.172329][  T497] loop0: detected capacity change from 0 to 2048
[ 1566.236784][  T516] IPv6: sit3: Disabled Multicast RS
[ 1566.579434][ T5248] snd_usb_variax 4-1:5.1: Line 6 PODxt Live found
[ 1566.586160][ T5248] usb 4-1: selecting invalid altsetting 1
[ 1566.631847][ T5248] snd_usb_variax 4-1:5.1: set_interface failed
[ 1566.638148][ T5248] snd_usb_variax 4-1:5.1: Line 6 PODxt Live now disconnected
[ 1566.705048][ T5248] snd_usb_variax: probe of 4-1:5.1 failed with error -22
[ 1566.756413][ T5248] usb 4-1: USB disconnect, device number 125
[ 1566.774608][  T570] device bond6 entered promiscuous mode
[ 1566.790775][  T570] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1567.176477][  T653] loop3: detected capacity change from 0 to 16
[ 1567.179090][  T642] lo speed is unknown, defaulting to 1000
[ 1567.225525][  T648] loop2: detected capacity change from 0 to 2048
[ 1567.259321][  T663] tmpfs: Bad value for 'mpol'
[ 1567.263348][  T653] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1567.371685][  T670] netlink: 'syz.4.25564': attribute type 3 has an invalid length.
[ 1567.401166][  T681] No such timeout policy "syz1"
[ 1568.083031][  T748] loop2: detected capacity change from 0 to 8
[ 1568.160082][  T753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25584'.
[ 1568.208804][  T748] cramfs: bad data blocksize 3222268820
[ 1568.232912][  T748] cramfs: Error -3 while decompressing!
[ 1568.254912][  T748] cramfs: ffffffff964080fc(16)->ffff888065167000(4096)
[ 1568.288064][  T748] cramfs: bad data blocksize 4165569313
[ 1568.309016][  T748] cramfs: bad data blocksize 3825676623
[ 1568.351466][  T748] cramfs: bad data blocksize 4294480561
[ 1568.358542][  T748] cramfs: bad data blocksize 1011200
[ 1568.393193][  T748] cramfs: bad data blocksize 4293956096
[ 1568.432825][  T748] cramfs: bad data blocksize 3222268820
[ 1568.454573][   T26] audit: type=1800 audit(1512.206:100): pid=748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.25583" name="file2" dev="loop2" ino=348 res=0 errno=0
[ 1568.736123][  T792] netlink: 404 bytes leftover after parsing attributes in process `syz.1.25596'.
[ 1568.814041][  T800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.25600'.
[ 1569.339747][  T850] netlink: 'syz.0.25617': attribute type 1 has an invalid length.
[ 1569.784732][  T892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25632'.
[ 1569.819447][  T892] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1569.869479][ T8006] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1570.082404][  T922] lo speed is unknown, defaulting to 1000
[ 1570.109897][  T922] lo speed is unknown, defaulting to 1000
[ 1570.147324][ T8006] usb 3-1: Using ep0 maxpacket: 32
[ 1570.150945][  T922] lo speed is unknown, defaulting to 1000
[ 1570.275807][ T8006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[ 1570.318868][ T8006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[ 1570.521695][ T8006] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1570.574340][ T8006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1570.596358][ T8006] usb 3-1: Product: syz
[ 1570.600583][ T8006] usb 3-1: Manufacturer: syz
[ 1570.605209][ T8006] usb 3-1: SerialNumber: syz
[ 1570.659203][ T8006] usb 3-1: config 0 descriptor??
[ 1570.725964][ T5248] lo speed is unknown, defaulting to 1000
[ 1570.725931][  T922] infiniband syz1: set down
[ 1570.766636][  T922] infiniband syz1: added lo
[ 1570.801375][ T8006] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1570.874495][  T967] lo speed is unknown, defaulting to 1000
[ 1570.928209][  T979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25658'.
[ 1570.942913][ T5248] usb 3-1: USB disconnect, device number 83
[ 1570.960033][ T4761] usb 3-1: Failed to submit usb control message: -71
[ 1570.967831][ T4761] usb 3-1: unable to send the bmi data to the device: -71
[ 1570.987481][  T967] lo speed is unknown, defaulting to 1000
[ 1571.022905][ T4761] usb 3-1: unable to get target info from device
[ 1571.045532][ T4761] usb 3-1: could not get target info (-71)
[ 1571.051493][ T4761] usb 3-1: could not probe fw (-71)
[ 1571.201630][  T922] RDS/IB: syz1: added
[ 1571.225149][  T922] smc: adding ib device syz1 with port count 1
[ 1571.246257][ T1004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25662'.
[ 1571.262743][  T922] smc:    ib device syz1 port 1 has pnetid 
[ 1571.282168][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1571.292667][ T4605] lo speed is unknown, defaulting to 1000
[ 1571.760904][ T1021] netlink: 'syz.0.25669': attribute type 1 has an invalid length.
[ 1571.804365][ T1021] netlink: 'syz.0.25669': attribute type 2 has an invalid length.
[ 1572.010082][ T1031] netlink: 2 bytes leftover after parsing attributes in process `syz.0.25673'.
[ 1572.107290][  T922] lo speed is unknown, defaulting to 1000
[ 1572.171053][ T1047] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1572.746157][  T922] lo speed is unknown, defaulting to 1000
[ 1573.179875][  T922] lo speed is unknown, defaulting to 1000
[ 1573.258270][ T8006] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1573.260799][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1573.405920][  T922] lo speed is unknown, defaulting to 1000
[ 1573.412083][ T4605] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1573.507282][  T922] lo speed is unknown, defaulting to 1000
[ 1573.598186][  T922] lo speed is unknown, defaulting to 1000
[ 1573.653766][ T8006] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1573.662331][ T8006] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1573.671487][ T1107] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1573.696697][ T8006] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1573.707343][ T8006] usb 1-1: config 220 has no interface number 2
[ 1573.713665][ T8006] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1573.727356][ T8006] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1573.734843][ T8006] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1573.749870][ T8006] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1573.803854][ T4605] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[ 1573.815423][ T4605] usb 4-1: config 0 has no interface number 1
[ 1573.825330][ T4605] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1573.844708][ T4605] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1573.931948][ T8006] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1573.941063][ T8006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.949796][ T4605] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1573.958985][ T1107] usb 3-1: Using ep0 maxpacket: 16
[ 1573.980528][ T4605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1573.995114][ T8006] usb 1-1: Product: syz
[ 1573.999772][ T4605] usb 4-1: SerialNumber: syz
[ 1574.004509][ T8006] usb 1-1: Manufacturer: syz
[ 1574.020033][ T4605] usb 4-1: config 0 descriptor??
[ 1574.025354][ T8006] usb 1-1: SerialNumber: syz
[ 1574.094074][ T1107] usb 3-1: config 0 has an invalid interface number: 180 but max is 0
[ 1574.110939][ T1107] usb 3-1: config 0 has no interface number 0
[ 1574.311752][ T1107] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72
[ 1574.327351][ T4605] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1574.334268][ T4605] usb 4-1: No valid video chain found.
[ 1574.351898][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.375636][ T4605] usb 4-1: USB disconnect, device number 126
[ 1574.384238][ T1107] usb 3-1: Product: syz
[ 1574.388452][ T1107] usb 3-1: Manufacturer: syz
[ 1574.423679][ T8006] usb 1-1: selecting invalid altsetting 0
[ 1574.430351][ T8006] usb 1-1: selecting invalid altsetting 0
[ 1574.456853][ T1107] usb 3-1: SerialNumber: syz
[ 1574.462643][ T1198] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[ 1574.476887][ T8006] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[ 1574.483466][ T8006] usb 1-1: No valid video chain found.
[ 1574.499222][ T1107] usb 3-1: config 0 descriptor??
[ 1574.605155][ T1107] usb 3-1: bad CDC descriptors
[ 1574.618283][ T1107] usb 3-1: bad CDC descriptors
[ 1574.649355][ T8006] usb 1-1: selecting invalid altsetting 0
[ 1574.655153][ T8006] usbtest: probe of 1-1:220.1 failed with error -22
[ 1574.693948][ T8006] usb 1-1: USB disconnect, device number 126
[ 1574.770499][ T1107] usb 3-1: USB disconnect, device number 84
[ 1576.430505][ T1342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1577.242661][ T1383] loop0: detected capacity change from 0 to 4096
[ 1577.312643][ T1401] netlink: 68 bytes leftover after parsing attributes in process `syz.2.25767'.
[ 1577.898278][ T1435] netlink: 'syz.0.25776': attribute type 49 has an invalid length.
[ 1578.187812][ T1456] overlayfs: missing 'lowerdir'
[ 1578.194277][ T1457] rdma_rxe: rxe_register_device failed with error -23
[ 1578.215844][ T1457] rdma_rxe: failed to add netdevsim0
[ 1578.342543][ T1469] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.25786'.
[ 1578.829062][ T1517] loop2: detected capacity change from 0 to 512
[ 1578.943295][ T1525] lo speed is unknown, defaulting to 1000
[ 1579.015141][ T1525] lo speed is unknown, defaulting to 1000
[ 1579.076443][ T1517] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback.
[ 1579.100936][ T1517] Quota error (device loop2): find_tree_dqentry: Getting block too big (67108869 >= 6)
[ 1579.112032][ T1517] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[ 1579.122054][ T1517] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.25801: Failed to acquire dquot type 0
[ 1579.419387][ T1602] netlink: 80 bytes leftover after parsing attributes in process `syz.3.25816'.
[ 1579.488255][ T1608] netlink: 'syz.2.25818': attribute type 3 has an invalid length.
[ 1579.497426][ T1608] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.25818'.
[ 1579.626967][ T1621] netlink: 'syz.3.25822': attribute type 1 has an invalid length.
[ 1579.857922][ T1645] ieee802154 phy1 wpan1: encryption failed: -22
[ 1580.070053][ T1676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25837'.
[ 1580.378322][T18393] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1580.816535][T18393] usb 1-1: config index 0 descriptor too short (expected 32820, got 52)
[ 1580.832769][T18393] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1580.875673][T18393] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x2F, skipping
[ 1580.914301][ T1745] loop2: detected capacity change from 0 to 8
[ 1580.931667][T18393] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[ 1580.996177][ T1745] SQUASHFS error: Failed to read block 0xdfa: -5
[ 1581.012923][T18393] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1581.043804][ T1745] SQUASHFS error: Unable to read metadata cache entry [dfa]
[ 1581.221513][ T1762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.25865'.
[ 1581.300654][ T1762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25865'.
[ 1581.329831][T18393] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97
[ 1581.338762][ T1762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25865'.
[ 1581.368418][ T1762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25865'.
[ 1581.412477][T18393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.440166][T18393] usb 1-1: Product: syz
[ 1581.450668][T18393] usb 1-1: Manufacturer: syz
[ 1581.476071][T18393] usb 1-1: SerialNumber: syz
[ 1581.520783][T18393] usb 1-1: config 0 descriptor??
[ 1581.661872][T18393] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[ 1581.826978][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1581.880573][ T5250] usb 1-1: USB disconnect, device number 127
[ 1582.323752][ T5252] usb 3-1: new low-speed USB device number 85 using dummy_hcd
[ 1582.564852][ T1830] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1582.762255][ T5252] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[ 1582.789661][ T5252] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4
[ 1582.854875][ T5252] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0
[ 1582.871442][ T1844] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4.
[ 1583.017947][ T1853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25891'.
[ 1583.147545][ T5252] usb 3-1: string descriptor 0 read error: -22
[ 1583.153859][ T5252] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[ 1583.217623][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.232231][ T1868] netlink: 'syz.0.25896': attribute type 4 has an invalid length.
[ 1583.249794][ T1868] netlink: 152 bytes leftover after parsing attributes in process `syz.0.25896'.
[ 1583.267570][ T1868] .`: renamed from bond0
[ 1583.287620][ T1870] 
 (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1583.414438][T18393] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1583.553553][ T5252] snd-usb-audio: probe of 3-1:1.0 failed with error -2
[ 1583.815634][ T5252] usb 3-1: USB disconnect, device number 85
[ 1583.841988][T18393] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1583.857242][T18393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1583.971664][T18393] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1584.002287][T18393] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1584.021338][T18393] usb 4-1: Manufacturer: syz
[ 1584.042451][T18393] usb 4-1: config 0 descriptor??
[ 1584.245328][T18393] rc_core: IR keymap rc-hauppauge not found
[ 1584.255048][T18393] Registered IR keymap rc-empty
[ 1584.276754][T18393] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1584.307482][T18393] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input112
[ 1584.529615][ T1955] loop0: detected capacity change from 0 to 256
[ 1584.657382][ T1955] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1584.696697][T18393] usb 4-1: USB disconnect, device number 127
[ 1584.953242][ T1998] netlink: 'syz.4.25930': attribute type 3 has an invalid length.
[ 1584.996375][ T1998] netlink: 'syz.4.25930': attribute type 1 has an invalid length.
[ 1585.114184][ T5252] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[ 1585.541923][ T5252] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x78, skipping
[ 1585.583883][ T5252] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 221, setting to 64
[ 1585.616977][ T5252] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1585.626128][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.721346][ T1983] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1585.751097][ T1983] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1585.802228][ T5252] usb 3-1: invalid MIDI in EP 0
[ 1585.974185][ T5252] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[ 1586.072199][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1586.112552][ T5252] usb 3-1: USB disconnect, device number 86
[ 1587.154416][ T2177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25979'.
[ 1587.328486][ T2188] netlink: 'syz.2.25983': attribute type 41 has an invalid length.
[ 1587.695780][ T2205] loop0: detected capacity change from 0 to 4096
[ 1587.813561][ T2205] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[ 1587.873714][ T2205] ntfs3: loop0: failed to convert "c46c" to cp850
[ 1587.915128][ T8006] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1587.965073][ T2222] rdma_rxe: rxe_register_device failed with error -23
[ 1587.987907][ T2222] rdma_rxe: failed to add lo
[ 1588.300262][ T8006] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1588.309453][ T8006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.353704][ T8006] usb 3-1: config 0 descriptor??
[ 1588.397565][ T8006] cp210x 3-1:0.0: cp210x converter detected
[ 1588.519580][ T2252] loop3: detected capacity change from 0 to 16
[ 1588.586213][ T2252] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1588.826979][ T8006] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: 0
[ 1589.024057][T18393] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1589.033649][ T8006] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71
[ 1589.047226][ T8006] cp210x 3-1:0.0: GPIO initialisation failed: -71
[ 1589.082128][ T8006] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1589.115746][ T8006] usb 3-1: USB disconnect, device number 87
[ 1589.148685][ T8006] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1589.190373][ T8006] cp210x 3-1:0.0: device disconnected
[ 1589.370986][ T2309] loop3: detected capacity change from 0 to 512
[ 1589.377753][T18393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1589.398934][T18393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1589.418558][T18393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1589.444230][T18393] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1589.463325][T18393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1589.487739][T18393] usb 2-1: config 0 descriptor??
[ 1589.495201][ T2316] loop0: detected capacity change from 0 to 1024
[ 1589.590025][ T2309] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.26012: attempt to clear invalid blocks 2 len 1
[ 1589.624231][ T2309] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[ 1589.662357][ T2309] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.26012: invalid indirect mapped block 1819239214 (level 0)
[ 1589.685226][   T26] audit: type=1800 audit(1532.230:101): pid=2316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26014" name="file1" dev="loop0" ino=20 res=0 errno=0
[ 1589.772079][ T2309] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.26012: invalid indirect mapped block 1819239214 (level 1)
[ 1589.808621][   T26] audit: type=1804 audit(1532.261:102): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.26014" name=2F6E6577726F6F742F343937342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop0" ino=20 res=1 errno=0
[ 1589.916196][ T3327] hfsplus: b-tree write err: -5, ino 25
[ 1589.916911][ T2309] EXT4-fs (loop3): 1 truncate cleaned up
[ 1589.922447][ T3327] hfsplus: b-tree write err: -5, ino 4
[ 1589.944188][ T3327] hfsplus: b-tree write err: -5, ino 2
[ 1589.960960][T18393] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[ 1589.970068][ T3327] hfsplus: b-tree write err: -5, ino 20
[ 1589.978709][ T2309] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none.
[ 1590.226275][T18393] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1590.294570][T18393] usb 2-1: USB disconnect, device number 98
[ 1590.342023][ T2376] loop2: detected capacity change from 0 to 256
[ 1590.350596][ T2377] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1590.362613][ T2375] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980
[ 1590.398853][ T2377] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem
[ 1590.521525][ T2376] FAT-fs (loop2): Directory bread(block 64) failed
[ 1590.528130][ T2376] FAT-fs (loop2): Directory bread(block 65) failed
[ 1590.578054][ T2376] FAT-fs (loop2): Directory bread(block 66) failed
[ 1590.648565][ T2376] FAT-fs (loop2): Directory bread(block 67) failed
[ 1590.658809][ T2376] FAT-fs (loop2): Directory bread(block 68) failed
[ 1590.680445][ T2391] fido_id[2391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1590.698306][ T2376] FAT-fs (loop2): Directory bread(block 69) failed
[ 1590.711014][ T2376] FAT-fs (loop2): Directory bread(block 70) failed
[ 1590.731540][ T2376] FAT-fs (loop2): Directory bread(block 71) failed
[ 1590.785621][ T2376] FAT-fs (loop2): Directory bread(block 72) failed
[ 1590.807629][ T2376] FAT-fs (loop2): Directory bread(block 73) failed
[ 1590.831512][ T2407] autofs4:pid:2407:autofs_fill_super: called with bogus options
[ 1590.940400][ T2410] tipc: Started in network mode
[ 1590.945714][ T2410] tipc: Node identity ac14140d, cluster identity 4711
[ 1590.986259][ T2410] vcan0: MTU too low for tipc bearer
[ 1591.035331][ T2410] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1591.057977][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26036'.
[ 1591.114890][ T2420] netlink: 'syz.4.26036': attribute type 22 has an invalid length.
[ 1591.133607][ T2426] loop0: detected capacity change from 0 to 512
[ 1591.145780][ T2420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26036'.
[ 1591.309601][ T2426] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.26040: inode has both inline data and extents flags
[ 1591.371952][ T2426] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.26040: couldn't read orphan inode 15 (err -117)
[ 1591.384836][ T2426] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1591.438224][ T2442] usb usb8: usbfs: process 2442 (syz.2.26045) did not claim interface 0 before use
[ 1591.458048][ T2447] loop3: detected capacity change from 0 to 256
[ 1591.508642][ T2447] FAT-fs (loop3): "posix" option is obsolete, not supported now
[ 1592.071392][   T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1592.324699][   T13] usb 4-1: Using ep0 maxpacket: 8
[ 1592.479743][ T2549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26071'.
[ 1592.591308][ T2565] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[ 1592.610633][   T13] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1592.658006][   T13] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1592.679560][   T13] usb 4-1: Product: syz
[ 1592.706088][   T13] usb 4-1: Manufacturer: syz
[ 1592.729341][   T13] usb 4-1: SerialNumber: syz
[ 1592.753053][   T13] usb 4-1: config 0 descriptor??
[ 1592.817167][   T13] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1592.874113][ T2582] loop2: detected capacity change from 0 to 64
[ 1593.174364][    C0] ip6_tunnel: ip6gretap5 xmit: Local address not yet configured!
[ 1593.211841][ T2611] lo speed is unknown, defaulting to 1000
[ 1593.222605][ T2611] lo speed is unknown, defaulting to 1000
[ 1593.241752][ T2621] futex_wake_op: syz.2.26083 tries to shift op by 32; fix this program
[ 1593.329398][ T2624] lo speed is unknown, defaulting to 1000
[ 1593.482265][   T13] gspca_zc3xx: reg_w_i err -71
[ 1593.487160][   T13] gspca_zc3xx: probe of 4-1:0.0 failed with error -71
[ 1593.526229][   T13] usb 4-1: USB disconnect, device number 2
[ 1593.598686][ T2630] loop0: detected capacity change from 0 to 8192
[ 1593.805555][ T2624] lo speed is unknown, defaulting to 1000
[ 1594.980753][ T2702] loop3: detected capacity change from 0 to 32768
[ 1595.834368][ T2812] 
[ 1595.836774][ T2812] ======================================================
[ 1595.843818][ T2812] WARNING: possible circular locking dependency detected
[ 1595.850875][ T2812] syzkaller #0 Not tainted
[ 1595.855429][ T2812] ------------------------------------------------------
[ 1595.862488][ T2812] syz.3.26116/2812 is trying to acquire lock:
[ 1595.868582][ T2812] ffff88801e9d8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[ 1595.879694][ T2812] 
[ 1595.879694][ T2812] but task is already holding lock:
[ 1595.887105][ T2812] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560
[ 1595.896924][ T2812] 
[ 1595.896924][ T2812] which lock already depends on the new lock.
[ 1595.896924][ T2812] 
[ 1595.907364][ T2812] 
[ 1595.907364][ T2812] the existing dependency chain (in reverse order) is:
[ 1595.916411][ T2812] 
[ 1595.916411][ T2812] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[ 1595.924451][ T2812]        __mutex_lock_common+0x1e3/0x2400
[ 1595.930308][ T2812]        mutex_lock_nested+0x17/0x20
[ 1595.935642][ T2812]        rfkill_register+0x33/0x980
[ 1595.940935][ T2812]        hci_register_dev+0x452/0x970
[ 1595.946362][ T2812]        vhci_create_device+0x32c/0x5c0
[ 1595.951947][ T2812]        vhci_write+0x391/0x450
[ 1595.956837][ T2812]        vfs_write+0x745/0xd60
[ 1595.961630][ T2812]        ksys_write+0x152/0x260
[ 1595.966523][ T2812]        do_syscall_64+0x4c/0xa0
[ 1595.971500][ T2812]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1595.977960][ T2812] 
[ 1595.977960][ T2812] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[ 1595.985831][ T2812]        __mutex_lock_common+0x1e3/0x2400
[ 1595.991599][ T2812]        mutex_lock_nested+0x17/0x20
[ 1595.996928][ T2812]        vhci_send_frame+0x88/0x100
[ 1596.002163][ T2812]        hci_send_frame+0x1a9/0x2e0
[ 1596.007395][ T2812]        hci_tx_work+0x9f9/0x1710
[ 1596.012454][ T2812]        process_one_work+0x85f/0x1010
[ 1596.017946][ T2812]        worker_thread+0xaa6/0x1290
[ 1596.023183][ T2812]        kthread+0x436/0x520
[ 1596.027800][ T2812]        ret_from_fork+0x1f/0x30
[ 1596.032761][ T2812] 
[ 1596.032761][ T2812] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[ 1596.042000][ T2812]        __flush_work+0x116/0x210
[ 1596.047065][ T2812]        hci_dev_do_open+0xc58/0x1270
[ 1596.052478][ T2812]        hci_power_on+0x1c1/0x610
[ 1596.057550][ T2812]        process_one_work+0x85f/0x1010
[ 1596.063059][ T2812]        worker_thread+0xaa6/0x1290
[ 1596.068331][ T2812]        kthread+0x436/0x520
[ 1596.072968][ T2812]        ret_from_fork+0x1f/0x30
[ 1596.077955][ T2812] 
[ 1596.077955][ T2812] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[ 1596.085654][ T2812]        __mutex_lock_common+0x1e3/0x2400
[ 1596.091421][ T2812]        mutex_lock_nested+0x17/0x20
[ 1596.096748][ T2812]        bg_scan_update+0x44/0x3b0
[ 1596.101890][ T2812]        process_one_work+0x85f/0x1010
[ 1596.107389][ T2812]        worker_thread+0xaa6/0x1290
[ 1596.112631][ T2812]        kthread+0x436/0x520
[ 1596.117263][ T2812]        ret_from_fork+0x1f/0x30
[ 1596.122259][ T2812] 
[ 1596.122259][ T2812] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[ 1596.132117][ T2812]        __lock_acquire+0x2c42/0x7d10
[ 1596.137539][ T2812]        lock_acquire+0x19e/0x400
[ 1596.142608][ T2812]        __flush_work+0x116/0x210
[ 1596.147669][ T2812]        __cancel_work_timer+0x3f4/0x560
[ 1596.153343][ T2812]        hci_request_cancel_all+0xcc/0x300
[ 1596.159185][ T2812]        hci_dev_do_close+0x4e/0x1030
[ 1596.164594][ T2812]        hci_rfkill_set_block+0x10a/0x190
[ 1596.170349][ T2812]        rfkill_set_block+0x1c9/0x3d0
[ 1596.175755][ T2812]        rfkill_fop_write+0x452/0x560
[ 1596.181245][ T2812]        vfs_write+0x30b/0xd60
[ 1596.186052][ T2812]        ksys_write+0x152/0x260
[ 1596.190954][ T2812]        do_syscall_64+0x4c/0xa0
[ 1596.195935][ T2812]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1596.202396][ T2812] 
[ 1596.202396][ T2812] other info that might help us debug this:
[ 1596.202396][ T2812] 
[ 1596.212650][ T2812] Chain exists of:
[ 1596.212650][ T2812]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[ 1596.212650][ T2812] 
[ 1596.228434][ T2812]  Possible unsafe locking scenario:
[ 1596.228434][ T2812] 
[ 1596.235911][ T2812]        CPU0                    CPU1
[ 1596.241296][ T2812]        ----                    ----
[ 1596.246705][ T2812]   lock(rfkill_global_mutex);
[ 1596.251496][ T2812]                                lock(&data->open_mutex);
[ 1596.258628][ T2812]                                lock(rfkill_global_mutex);
[ 1596.265941][ T2812]   lock((work_completion)(&hdev->bg_scan_update));
[ 1596.272681][ T2812] 
[ 1596.272681][ T2812]  *** DEADLOCK ***
[ 1596.272681][ T2812] 
[ 1596.280844][ T2812] 1 lock held by syz.3.26116/2812:
[ 1596.285987][ T2812]  #0: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560
[ 1596.296133][ T2812] 
[ 1596.296133][ T2812] stack backtrace:
[ 1596.302059][ T2812] CPU: 0 PID: 2812 Comm: syz.3.26116 Not tainted syzkaller #0
[ 1596.309549][ T2812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1596.319648][ T2812] Call Trace:
[ 1596.322954][ T2812]  <TASK>
[ 1596.325947][ T2812]  dump_stack_lvl+0x188/0x250
[ 1596.330672][ T2812]  ? load_image+0x400/0x400
[ 1596.335221][ T2812]  ? show_regs_print_info+0x20/0x20
[ 1596.340447][ T2812]  ? print_circular_bug+0x12b/0x1a0
[ 1596.345679][ T2812]  check_noncircular+0x296/0x330
[ 1596.350661][ T2812]  ? add_chain_block+0x940/0x940
[ 1596.355703][ T2812]  ? lockdep_lock+0xf1/0x1f0
[ 1596.360322][ T2812]  ? __lock_acquire+0x12e8/0x7d10
[ 1596.365533][ T2812]  ? mark_lock+0x94/0x320
[ 1596.369900][ T2812]  __lock_acquire+0x2c42/0x7d10
[ 1596.374800][ T2812]  ? lockdep_hardirqs_on+0x94/0x140
[ 1596.380032][ T2812]  ? verify_lock_unused+0x140/0x140
[ 1596.385271][ T2812]  lock_acquire+0x19e/0x400
[ 1596.389961][ T2812]  ? __flush_work+0xfa/0x210
[ 1596.394690][ T2812]  ? __lock_acquire+0x7d10/0x7d10
[ 1596.399764][ T2812]  ? read_lock_is_recursive+0x10/0x10
[ 1596.405175][ T2812]  ? start_flush_work+0x776/0x820
[ 1596.410238][ T2812]  __flush_work+0x116/0x210
[ 1596.414779][ T2812]  ? __flush_work+0xfa/0x210
[ 1596.419497][ T2812]  ? flush_work+0x20/0x20
[ 1596.423871][ T2812]  ? try_to_grab_pending+0xfa/0x7f0
[ 1596.429116][ T2812]  ? mark_lock+0x94/0x320
[ 1596.433490][ T2812]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1596.439574][ T2812]  ? lock_chain_count+0x20/0x20
[ 1596.444473][ T2812]  ? mark_lock+0x94/0x320
[ 1596.448840][ T2812]  ? __cancel_work_timer+0x36a/0x560
[ 1596.454164][ T2812]  __cancel_work_timer+0x3f4/0x560
[ 1596.459397][ T2812]  ? cancel_work_sync+0x20/0x20
[ 1596.464278][ T2812]  ? __cancel_work+0x1f9/0x2e0
[ 1596.469072][ T2812]  ? lockdep_hardirqs_on+0x94/0x140
[ 1596.474307][ T2812]  ? __cancel_work+0x27b/0x2e0
[ 1596.479131][ T2812]  ? cancel_work+0x20/0x20
[ 1596.483575][ T2812]  ? lock_chain_count+0x20/0x20
[ 1596.488477][ T2812]  hci_request_cancel_all+0xcc/0x300
[ 1596.493808][ T2812]  hci_dev_do_close+0x4e/0x1030
[ 1596.498700][ T2812]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1596.504628][ T2812]  ? _raw_spin_unlock+0x40/0x40
[ 1596.509509][ T2812]  hci_rfkill_set_block+0x10a/0x190
[ 1596.514746][ T2812]  ? rcu_lock_release+0x20/0x20
[ 1596.519630][ T2812]  rfkill_set_block+0x1c9/0x3d0
[ 1596.524553][ T2812]  rfkill_fop_write+0x452/0x560
[ 1596.529465][ T2812]  ? rfkill_fop_read+0x520/0x520
[ 1596.534434][ T2812]  ? common_file_perm+0x140/0x1c0
[ 1596.539493][ T2812]  ? fsnotify_perm+0x5d/0x560
[ 1596.544297][ T2812]  ? security_file_permission+0x75/0xa0
[ 1596.549882][ T2812]  ? rfkill_fop_read+0x520/0x520
[ 1596.554854][ T2812]  vfs_write+0x30b/0xd60
[ 1596.559147][ T2812]  ? file_end_write+0x250/0x250
[ 1596.564060][ T2812]  ? __fget_files+0x40f/0x480
[ 1596.568768][ T2812]  ? __fdget_pos+0x1e2/0x370
[ 1596.573378][ T2812]  ? ksys_write+0x71/0x260
[ 1596.577830][ T2812]  ksys_write+0x152/0x260
[ 1596.582276][ T2812]  ? __ia32_sys_read+0x80/0x80
[ 1596.587076][ T2812]  ? lockdep_hardirqs_on+0x94/0x140
[ 1596.592314][ T2812]  do_syscall_64+0x4c/0xa0
[ 1596.596759][ T2812]  ? clear_bhb_loop+0x30/0x80
[ 1596.601464][ T2812]  ? clear_bhb_loop+0x30/0x80
[ 1596.606260][ T2812]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1596.612197][ T2812] RIP: 0033:0x7f52ee4c4dd9
[ 1596.616644][ T2812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1596.636283][ T2812] RSP: 002b:00007f52ec71e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1596.644749][ T2812] RAX: ffffffffffffffda RBX: 00007f52ee73dfa0 RCX: 00007f52ee4c4dd9
[ 1596.652758][ T2812] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[ 1596.660774][ T2812] RBP: 00007f52ee55ad69 R08: 0000000000000000 R09: 0000000000000000
[ 1596.668927][ T2812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1596.676940][ T2812] R13: 00007f52ee73e038 R14: 00007f52ee73dfa0 R15: 00007ffea1618388
[ 1596.684950][ T2812]  </TASK>
[ 1596.711269][ T2830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26118'.
[ 1596.747340][ T2830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26118'.
[ 1596.782216][ T2830] netlink: 5 bytes leftover after parsing attributes in process `syz.4.26118'.
[ 1603.985108][ T1422] ieee802154 phy1 wpan1: encryption failed: -22