last executing test programs: 5m36.550005737s ago: executing program 3 (id=217): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 5m36.414566067s ago: executing program 3 (id=219): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f00000005c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYRES8, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5m35.922796427s ago: executing program 3 (id=222): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xf3b, &(0x7f0000001180)={@empty, @remote, @val={@void}, {@llc_tr={0x11, {@snap={0x1, 0x1, "0e", "50f9d0", 0x600, "689471c23b5e97e14ba992eda2b3f60dade78a819d8775d9b3ed1ffca60f969a1f97364b212889f06b23d02dac20585b82ae7f00a47cc1469ff5029ee3b572c9ecdc01f8f3f6f0739653fcb60a94ce6ca94f369d708ff550413784a76e88561a94349f27168b4a714c8373a5760cd30c461c94465aa1e211015a0eeaa4f62b70b6942e18831e81e384f85f0dc43b755e8c8bad9a142d3f117f4d55a95ec1a08f74926964990c6ac9c45e650ba5840199da1da8bd7a10d1c326c611d9ccc20e72dffd34560a661ff6627129383cef7353b53e22686a710772a1775bfdb650850eeac355358ddc55f75036ec1b02b4f0c17dab76148b929c354913e752121ce3c3ac5fb9ea131634d28833aa5c91a2f85c61b79a10c29eecc95a1f837882dbc3483e41bc0bb97d83b173b309cb554c46adafe885ddf14c260700c9d964bc1f5af3f3aa31aa303c0914f36b38ddda26b628254ffef32c39e7ec2b873784d60c23bb54fbd5ee6674ae7c1b4990b9c3546c8678d359ceabb9bf2143c615a496023d389a3214a1315dedb3518a1fd6a407357b640fd577175e0ffc3d0b96d60a581f9133937574b6301f612ce427a4cb0489d418e1353d4440e3d7c83f91bd28a8b0da5002dcf47b69c162fc66f027130af038c261a81ae50fcaaedbf77b9a567fb0fd99f9fb9a6d8340aa78feac9ad0333234c9c22861401e6900762b044a4a2c2025ee51e02c290456d53d37764bfb897eae50556647dcce12eb3a88ecdee0b329b18c5fd275c2ebacff53c33139c0345e6b2f488ce2a7a3e0f7d29238a9e9d32488a6d8459a0a419d2b9970b9faae5d657a1282b87880e78d02e4ca39c4af3eed1ebd97113951c41a3396be74da38cd19d1a3df7c7276db4d61693b4536c859ee8b1daf1f7af734aa2a4413f4c1c5ee5dbfe71932b81ef3a48ca95329038b17d022586508c96d08d2a64f3ac2a16bd9c4c9e16930e603ac816099b18b952d211e1e09b7094bc98eb1305b3ce507cafbb5f6f6e44936955e7bc2bd0a51951d3f7ba6ccf17a2b3967f34ea63b043fd6cbdd3c89479410c8ad94c0f8cda70b5b70c2a7c63226c16daae72d5fdb36a9ce4cc5fb43970f5b3cfac77d9b4f11420e09fb5eab84ab71aefcc5745d64c128ce5406deefafc83de7ca5e4e77aec1e8894642492f847d19befd9b302ebfad3a5dda94a1341cecd12ca676e73f81c2cc17922112dacc6ccb8eb5ba15368f26ca66a79b4ed657a7d3d73e8d74521a37f7b5fb1558135feb35f0fa8dc01573079b830f069d74a38c10c71e3cabf41d77b1e11fe2516a18c362f4270897f7e13103294140f5715659340255f5fe2d87be98ad8f9519c4b658975ab2289ca9296a4ee999a897f16386b40488aff4f770e17b0907344f290b867b948211cc4ddce0f69c53bbe0b6a268928a4963315a3c120f98f55d10cfffbb4b40e70ec1a41f72720fe545da88fb706b025182b06cf0995e527f2615fd1f8b8ac5fe5cc4e48c76254dfe41bec0539f918178aaa06cd9fe18a77e52a0d8ea4936c02875d74c2348921bbc7a0c0b57e6bd3827fe115b320af8677e0083f3154915d5837cb41eb6cdbd55964071674113499aa0a0f49d226d077e8f5928ada8cd6abf843de0388453f72b136645a19f4193d9d0f15f524e1cf06ea797ac76b93e9751644ad61bad18260e469af4d32291444a8129ec6131a5e0421760fd8c828fabf81c888bbca261f665c76138f84129ce72a81392d8ef5f33a7d825c54611de7de8aeb3f408ec32a76966c71b685cc3a46e380fba2076df6c0d6c751446bf6cd69b5cefb26b1cdd7de95cbe3e7a00e6bef7c248a8722fb59f942d034f92914639f9b382deec52f8635a07761dfa465620e840c11ace35229464c9a50eaf3b7fd8f874c750dc7118d4e384badbe76cfb12e354e86da4f32ea403de63403f3219546820545ded92dbd9452c79441a027086109d00180330f8dbc650f4ebf613b2c1456015fe585f4a3b5b856e49d775e5b4341ed2b48ffa6ddc3e6e5c95ca1eb900907401201f00887acb0349cbc9638b6a3ec84b8957de7a2fb9305975c140ee20f905965f7b88fc0c87dd653654345666e98691dba5f49a17f17b1f7498e3771ac8ff682905df8be342ae759969d222a59c2559a7127f9d13c74bb731342bbfb7cc76cf079c517a09ae4d62e76a9ff36e2b905a1d3929b58b0c7e7683f5d29740701f5ff2d1dd7e9f393cc4f5b218454bc2a9a87a4ececd026b8e569f2880c1eba3fa0c0ef6af2bbee720a95cb117cd09225ba5218cee80b1ca41958adba2b83bfaf2168d8d16663e8948b9eb3caf9d1ba5ebd0c14d87f12e586c417664a58d35846d61e5a5795546da080eb53f95a4333aef0081d75777f1b9ad25463421aba6dca9f51ed8d78c8998b87a68edb0dcf1288e865c5229f8f0f8cb863de0137961eeba7c6940259bcfc6f9a2c0b6d48989c19af93482e88f7a9be10513df219e16eb2766c960f8ecc52b58c0c014da7650eaba5fbb7722d0f98ada5bec53a76a7409e6fb75552aa6ac5a61408b54c6700939f66331384231bd200e4bef69fa4aec8bb41b17c09a1f1b526eb76ec41ea10ae884b137e1311026775f020b0690962efa759db1668175376832a9befbec253023b2b52d85d51b392b5d34ef1b1dee6866110d103e6a6b690e897f108ac161affd429a89bd42b6fa6b8c984c7d83e997cf28c9bd1346eb4b35ce893cbdbbc676754687301ac70eba0f7f17bef0be6e9ca8013fdcf2f02c5b7673890cb32f338efbc5179912077c8f68fcf9b99a070445117cec74ef2e033d1c7210a13f509989feefd3809938006220bae598d36996cee9d6985294cc24ebff0a2add89c5d6d234bddcf6c4cdd52a3487ee8adfcdda07c5ebda7fbb009c9cfdd4a52550de12a83c54705353cf5a5fdcb3d701cb42e6690ecf56dfb9344eb99a8545a023c06134721c90c10b5ab1119672e250523c38690a51adb7176d1453d5edf86cde28363254541caf3103953c832063deeabaa3f1a7f3b9527e00dec9878e449f8f0f8c1af9c02f473af3f578e8840d74e32202d2ce5c346b663be1f03730814b64c2ceab4078a2188be14856d98c6eb2bc7fa6697082547ddf4685f5dab9dcc8d6bdc790f84d23ccca73a1f69c0cfd64ae6b6a2d801153a4b0784505d821e735693723aa31e23e3afce05c5ca95ee97447cd851ef760d478faef7edb6b2f6f242e779cd0bde95870a90cbedd9825515efe356bb37c29dcb4ce50576ee2aef0db3bbcbf02964c482ca8b4f0956884118638c93f0063b9beb078ef9f20597e748dd655cba8040804d8c849afea9aa09925c1c1d64c5bd9e6f0b9f720dc6a5633f72ac98c2324690c25d9e8669f2d31d94c13489d3f184fc971dad7afef9dc4acb7a45ac4dde70a24f194b0bdffd8d27dae99d9fc17ce14d8efe25a0e48e6a0f3d293842ceb578094169c7762584f3a3c88dcfaf1c821de2909990019b188834a6a9fe2b0ca1b26afda53fb80b1530fa8f7e6c4262da2065e613636ddaf801c1c8826101b68701b9a10e66773b191706d64b853cef2d3fa9f5180e72c912b339aa72f0d43fb647e90ee3f08a98e5a82ee5fe39c1444d2fdc64a60d56734512231058d31c4667993c2eebc4adfbf6adb688ae34002d17f82c1375bacf10c08782551d6d2533eef363a58e97952bfda3e1747f66d23b47e9d5a98a4ec34aff4c57d22eb98940a0937cfaabe8f21546458e113c405d0520efee8c82576846473d356292b25f1da9488a31d4134368ca374c678fa8bc4d3ad3de9de26e36a58851e72a16ffa0e6e345fd5e349946ca5bbc9f0450eccee363c0537ab83b1cb374548a61ab0122c451c3d8e5a0c2e3c9dd2ec62352542d357bdd4782eda32c4073f97ae370672de1feed14d99542cafc6338d9000aa28e2eac5a586014cc857aae213bcd22786ff0f6b76132b33c83d061d99e65726d577b47db9fb7035c5fe8447374bc41dab2d0d92f5c991be01cc04404f86e070f85f4578cc387367024fb8e15211d1c106eb33b3bdbcbd18b7089b6af1ec6d1e5cf04a9ec4ae34476854bdef4a6345bf933ee19ed70d04a562c9cdd446237b57564b1033e6ec9dfb15fe040354341ccf8407669e562b917c150bece885598ff36b26549352391b0ce054900a17029ccdc533c9dbb115b127d5ce04f81e433462454669481b508fdb6970d6fceec01b0e9aef13a0492a1193ea50f9681f95b9634d514595e6af6832bc1eda617ea40790e920ba62e1c60dde98319ddabd4647110289ad34c6c02ff363759566265f2385d713396a5abb2379ae20a7e41e9b98cc194f20ee957fad2b4c7ac68a68038539d79f92da2c944f6bb5765193f02e318844d8cf13f15700c79bb04c205dd7adf08c61cf6013dd1fdadab3e0294fb7c92590f9be2e530f3da4454933cf05981b7a615755c82fb3ee3df1f6af40ddaa46e2d4d810de64216dd90c971bef064bb0ad1cbdc5a4f6d4a9e7dbd569e06bdf175dd15587e95f8e863d6e2214640ed6306146a9168aceab22945fa02fcf215ff90af07ab266364aba9e5b85c2c975402ecdf75050a118c60e1ffdbdd52edd018520dfecfd1188114f87184ec4ccbf49c0df5427e5cd3803f09d6848c24f27f69e9254bdcdf84cbfecf048f0b6bb4d5eb5411f71be0c0aaa0ac36008305f576c6def730e503ea2063fd544e666f08a394baaf95f6c5e7df08bdc68e94cb2ec9e28c80c2e5d67535b6e8130bdb6e9412735a46764c7a0618bab2d7761e4d9b15d82d6d3762674e71529e7328595f3e521df5024a06434417e4306e24b67cdb65cbff1f215d50ec4a0e8b33b753ee68ca2c8f20fe16b06a7f6e06ea511d76a76e6bca80d613591dc6a3cab3793b6bbf13da11d48050945a61da63d460a8d05507bf48d529048da3803f38ae91c8f7a32671e8c48d11889743aef1c67285a09edf19885190784368eb6c1241d01c12a62fad10a28458b543c1a8d6593043749264e3c2c06a8bb38075410d1f1f953d951c4c363c61e997f0efee7c2be4de8d4fe82c1fb8889bad95c9986733436041e20727b08de87ae9969b3992a253d4f8585449c99fc3ef4520de52247fa424bca56f42e12e8c7913e2d603a07b2cd97732f8839382d14988e61917f0fa20cc80b39d5e35aea0de081300a8ed808da69b48e7deef8a0458ffab3eea98f80a8d5cfd03b95969085f002a2130b9e2a8c082e14be2b0ccbdef45c5da7be7b1ff232354223d7480adcc1496efb45165f17bc0573bb62321606335c55e3c2ec8779d9929e6cf655e5a759788d2740e481985d6d247949f36459af7dabe214fcb3821760549d9fb442deac7b0b379e9cf986e22c097a57a35faf2feae2c358fb87a768451f57b083d51c338ae329e96f7121c875384aceb4de7985cfcac89c424781175e152d4fb84bd82bd29f6bb983310a65e220a5925a"}}}}}, 0x0) 5m35.600459367s ago: executing program 3 (id=224): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000340)={0x23820000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 5m33.835750016s ago: executing program 3 (id=225): r0 = socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x9}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 5m33.082518416s ago: executing program 3 (id=227): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1d8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 5m31.100619426s ago: executing program 32 (id=227): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1d8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 5m12.691618914s ago: executing program 4 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860188a8", 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m12.486241464s ago: executing program 4 (id=303): syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) 5m12.080120953s ago: executing program 4 (id=305): sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x49}, 0x4000000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 5m11.892886834s ago: executing program 4 (id=306): r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x20, 0x8c0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) 4m56.020788161s ago: executing program 33 (id=306): r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x20, 0x8c0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) 18.439683498s ago: executing program 0 (id=1053): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.528637985s ago: executing program 0 (id=1058): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0xab42359c2fbac8f8, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2000, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0) 14.481692525s ago: executing program 2 (id=1060): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, 0x0, 0x0, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x40003, 0xfffffffe, 0x4}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x40}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41, 0x2}, 0x1}}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) fallocate(r2, 0x0, 0x0, 0x1001ed) 13.87834839s ago: executing program 2 (id=1061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12.054122835s ago: executing program 1 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[], 0x1, 0x1f5, &(0x7f0000000600)="$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") getsockopt$packet_int(r3, 0x107, 0xe, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004011}, 0x4040010) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 11.090047038s ago: executing program 1 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x0, 0x0, 0x0, 0x320c8d4, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xaa) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) 10.904998603s ago: executing program 1 (id=1068): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 10.741393717s ago: executing program 1 (id=1069): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000540)=ANY=[], 0x1, 0x105f0, &(0x7f000001d600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0xf501, 0x0) 9.671588083s ago: executing program 2 (id=1071): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0), 0xfd, 0x4bb, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrusage(0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9.405428719s ago: executing program 0 (id=1072): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.062722042s ago: executing program 5 (id=1074): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x851) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 7.024844688s ago: executing program 2 (id=1075): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) io_setup(0x2dd8, &(0x7f00000000c0)=0x0) io_submit(r5, 0x0, 0x0) 6.789173673s ago: executing program 0 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x0, 0x0, 0x0, 0x320c8d4, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xaa) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) 6.706651265s ago: executing program 5 (id=1077): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@usrjquota}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 6.571003959s ago: executing program 0 (id=1078): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000009000000030000000900000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500000007000000010000000000000000000000fbe087d6bbd572760a4e4a44ecf18b00000000f3da7030528966f671b655f0e2712167becee3e948fe755223306833e90c8ae9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setgid(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x8a, &(0x7f0000000440)=@req={0x3fc}, 0x10) write(r3, 0x0, 0x0) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x84000151) 6.341134034s ago: executing program 1 (id=1079): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.182702133s ago: executing program 0 (id=1080): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0xab42359c2fbac8f8, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2000, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0) 4.47899336s ago: executing program 5 (id=1081): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0xab42359c2fbac8f8, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000001) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2000, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0xa0c}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3.66908359s ago: executing program 2 (id=1082): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x81, 0x63e, &(0x7f00000004c0)="$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") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="63532558c565581eabc3b81d7f00dbd96df0aa90468305047c977b0567e8da5a0000000003e7f45fdfcd06b775e9b6586d61e3e9bb11726de1cc460e4372e319469d8264623af7a06b1a8875a223d2d8ad32c7387827bfa2b9a4c4c0c0a95348a264803cf7be9dd02c16f65853f599a6fb7bdfe383cb3e6636c22ad09f046225e3a211ed847decaeb466b266306b8a476d6e21b9234e117c4d06c9e323d4b0", 0x9f}, {&(0x7f0000000040)="e3a2a9", 0x3}, {0x0}, {0x0}], 0x4) 3.26232001s ago: executing program 5 (id=1083): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0), 0xfd, 0x4bb, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getrusage(0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0x4000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 506.448757ms ago: executing program 5 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d) 203.076895ms ago: executing program 2 (id=1085): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001ac1e01012000000000000000000000004e23ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003300000000000000000000000000000000000000fefffffffffffffffeffffffffffffff060000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000900000000000000010000000000000000084000000000000900000000000000920200000000000000100000000000000000000000000000000000000a0004002c00000000000000600002006362632874776f666973682900"/201], 0x19c}}, 0x44050) 202.545145ms ago: executing program 5 (id=1086): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a7, &(0x7f00000010c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8004, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) 0s ago: executing program 1 (id=1087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x0, 0x0, 0x0, 0x320c8d4, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xaa) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001"], 0xbc}}, 0x0) kernel console output (not intermixed with test programs): ng dummy_hcd [ 241.677530][ T7763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.311510][ T5844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 242.510821][ T5844] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 242.530053][ T5844] usb 2-1: config 2 has no interface number 0 [ 242.559899][ T5844] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 242.579187][ T5844] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 242.599184][ T5844] usb 2-1: config 2 interface 43 has no altsetting 0 [ 242.610758][ T5844] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 242.628936][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.638017][ T5844] usb 2-1: Product: syz [ 242.659175][ T5844] usb 2-1: Manufacturer: syz [ 242.663921][ T5844] usb 2-1: SerialNumber: syz [ 242.683912][ T7785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.704038][ T7785] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.959481][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.968262][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.016542][ T5844] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 244.267097][ T5844] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 244.959113][ T5824] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 244.990254][ T1192] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 245.167324][ T5824] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.179750][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.187988][ T5824] usb 3-1: Product: syz [ 245.198008][ T5824] usb 3-1: Manufacturer: syz [ 245.205130][ T5824] usb 3-1: SerialNumber: syz [ 245.223025][ T5824] usb 3-1: config 0 descriptor?? [ 245.230379][ T1192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.280192][ T5844] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 245.286999][ T1192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.318222][ T5844] usb 2-1: USB disconnect, device number 14 [ 245.318220][ T1192] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 245.318255][ T1192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.363222][ T1192] usb 6-1: config 0 descriptor?? [ 245.487154][ T5824] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 245.728973][ T5844] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 245.781329][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.790140][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.912975][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 245.933538][ T5844] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 245.942917][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.956456][ T5844] usb 2-1: config 0 descriptor?? [ 245.970489][ T5844] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 246.406462][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.415501][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.636513][ T1192] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2 [ 246.647667][ T1192] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 246.914591][ T5824] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 246.925480][ T5824] usb 3-1: USB disconnect, device number 18 [ 247.238457][ T1192] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 247.248448][ T1192] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 247.263913][ T1192] pyra: probe of 0003:1E7D:2CF6.0009 failed with error -71 [ 247.286741][ T1192] usb 6-1: USB disconnect, device number 2 [ 247.859155][ T5819] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 248.072217][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.093196][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.105627][ T5819] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 248.119086][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.140270][ T5819] usb 3-1: config 0 descriptor?? [ 248.453212][ T5844] gspca_vc032x: reg_r err -71 [ 248.468609][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.496053][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.521828][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.527223][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.558923][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.587403][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.610983][ T5819] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 248.621629][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.626975][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.633571][ T5819] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 248.642755][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.648323][ T5819] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 248.866079][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.014217][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.454693][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.460277][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.465606][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.471018][ T5819] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 249.478455][ T5819] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 249.485944][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.493321][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.501520][ T5819] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 249.513755][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.529177][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.534535][ T5844] gspca_vc032x: I2c Bus Busy Wait 00 [ 249.587732][ T5844] gspca_vc032x: Unknown sensor... [ 249.602060][ T5844] vc032x: probe of 2-1:0.0 failed with error -22 [ 249.620949][ T5844] usb 2-1: USB disconnect, device number 15 [ 249.877427][ T5819] playstation 0003:054C:0DF2.000A: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 249.909889][ T5819] playstation 0003:054C:0DF2.000A: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 249.964489][ T5819] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.000A/input/input16 [ 250.029426][ T5819] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.000A/input/input17 [ 250.108250][ T5819] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.000A/input/input18 [ 250.310281][ T5819] playstation 0003:054C:0DF2.000A: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 250.323682][ T5844] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 250.356002][ T5819] usb 3-1: USB disconnect, device number 19 [ 250.509126][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 250.536290][ T5844] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 250.549001][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.557067][ T5844] usb 2-1: Product: syz [ 250.578298][ T5844] usb 2-1: Manufacturer: syz [ 250.583667][ T5844] usb 2-1: SerialNumber: syz [ 250.590865][ T5844] usb 2-1: config 0 descriptor?? [ 250.731031][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.742245][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.754094][ T8] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 250.763386][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.774979][ T8] usb 6-1: config 0 descriptor?? [ 250.802342][ T5844] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 251.285539][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.324670][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.110505][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.137537][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.489039][ T1192] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 252.679070][ T1192] usb 3-1: Using ep0 maxpacket: 16 [ 252.695443][ T1192] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 252.708901][ T1192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.732806][ T1192] usb 3-1: Product: syz [ 252.737035][ T1192] usb 3-1: Manufacturer: syz [ 252.765986][ T1192] usb 3-1: SerialNumber: syz [ 252.854368][ T1192] usb 3-1: config 0 descriptor?? [ 252.868745][ T1192] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 253.330115][ T5844] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 253.352170][ T8] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x2 [ 253.359371][ T5844] usb 2-1: USB disconnect, device number 16 [ 253.469420][ T8] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 253.705664][ T8] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 253.735982][ T8] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 253.757430][ T8] pyra: probe of 0003:1E7D:2CF6.000B failed with error -71 [ 253.794830][ T8] usb 6-1: USB disconnect, device number 3 [ 254.120534][ T1192] ssu100: probe of 3-1:0.0 failed with error -71 [ 254.159957][ T1192] usb 3-1: USB disconnect, device number 20 [ 254.668485][ T5766] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.799244][ T1192] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 254.881484][ T5766] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.903073][ T5766] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 254.939557][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.947639][ T5766] usb 6-1: Product: syz [ 254.966020][ T5766] usb 6-1: Manufacturer: syz [ 254.976139][ T5766] usb 6-1: SerialNumber: syz [ 255.006674][ T1192] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.018123][ T1192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.028408][ T1192] usb 2-1: Product: syz [ 255.033280][ T1192] usb 2-1: Manufacturer: syz [ 255.038176][ T1192] usb 2-1: SerialNumber: syz [ 255.047187][ T1192] usb 2-1: config 0 descriptor?? [ 255.267564][ T1192] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.406300][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.431021][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.796304][ T5766] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 255.806486][ T5766] usb 6-1: MIDIStreaming interface descriptor not found [ 255.834396][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849283][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.992409][ T5766] usb 6-1: USB disconnect, device number 4 [ 256.077462][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.479554][ T5824] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 256.681744][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.699735][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.710734][ T5824] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 256.724047][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.732468][ T1192] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 256.747569][ T1192] usb 2-1: USB disconnect, device number 17 [ 256.758238][ T5824] usb 3-1: config 0 descriptor?? [ 256.991676][ T5766] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 257.185884][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.208994][ T5766] usb 6-1: Using ep0 maxpacket: 32 [ 257.209854][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.231691][ T5766] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 257.271207][ T5766] usb 6-1: config 0 has no interface number 0 [ 257.278036][ T5766] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.325134][ T5766] usb 6-1: config 0 interface 89 has no altsetting 0 [ 257.608188][ T5766] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 257.617491][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.625595][ T5766] usb 6-1: Product: syz [ 257.629922][ T5766] usb 6-1: Manufacturer: syz [ 257.634588][ T5766] usb 6-1: SerialNumber: syz [ 257.670693][ T5766] usb 6-1: config 0 descriptor?? [ 257.751939][ T5766] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 257.868541][ T5766] em28xx 6-1:0.89: Video interface 89 found: [ 257.911416][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.959901][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.298200][ T5824] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x2 [ 258.328296][ T5824] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 258.341128][ T5766] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 258.682521][ T5824] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 258.690175][ T5824] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 258.701886][ T5824] pyra: probe of 0003:1E7D:2CF6.000C failed with error -5 [ 258.893786][ T176] usb 3-1: USB disconnect, device number 21 [ 259.196466][ T5766] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 259.214250][ T5766] em28xx 6-1:0.89: board has no eeprom [ 259.289020][ T5766] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 259.296649][ T5766] em28xx 6-1:0.89: analog set to bulk mode. [ 259.308025][ T5824] em28xx 6-1:0.89: Registering V4L2 extension [ 259.317926][ T5766] usb 6-1: USB disconnect, device number 5 [ 259.336462][ T5766] em28xx 6-1:0.89: Disconnecting em28xx [ 259.403293][ T5824] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 259.433548][ T5824] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 259.454175][ T5824] em28xx 6-1:0.89: No AC97 audio processor [ 259.466526][ T5824] usb 6-1: Decoder not found [ 259.473029][ T5824] em28xx 6-1:0.89: failed to create media graph [ 259.484144][ T5824] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 259.495820][ T5824] em28xx 6-1:0.89: Registering snapshot button... [ 259.518174][ T5824] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input19 [ 259.552624][ T5824] em28xx 6-1:0.89: Remote control support is not available for this card. [ 259.582728][ T5766] em28xx 6-1:0.89: Closing input extension [ 259.588712][ T5766] em28xx 6-1:0.89: Deregistering snapshot button [ 259.653976][ T5766] em28xx 6-1:0.89: Freeing device [ 261.362743][ T5766] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 261.833932][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.027041][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.390660][ T5766] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 262.436654][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.470771][ T5766] usb 3-1: config 0 descriptor?? [ 262.929622][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.967620][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.686350][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.712303][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.858223][ T1192] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 264.329815][ T5766] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x2 [ 264.361140][ T1192] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 264.376318][ T5766] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 264.397879][ T1192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.440096][ T1192] usb 6-1: Product: syz [ 264.447401][ T1192] usb 6-1: Manufacturer: syz [ 264.467573][ T1192] usb 6-1: SerialNumber: syz [ 264.504313][ T1192] usb 6-1: config 0 descriptor?? [ 264.541980][ T1192] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 264.549885][ T5766] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device [ 264.578425][ T5766] pyra 0003:1E7D:2CF6.000D: couldn't install mouse [ 264.617115][ T5766] pyra: probe of 0003:1E7D:2CF6.000D failed with error -5 [ 264.788211][ T5821] usb 3-1: USB disconnect, device number 22 [ 265.357100][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.386435][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.411728][ T1192] gspca_stk1135: reg_w 0x0 err -71 [ 265.417946][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.444917][ T1192] gspca_stk1135: Sensor write failed [ 265.479526][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.498923][ T1192] gspca_stk1135: Sensor write failed [ 265.504306][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.529377][ T1192] gspca_stk1135: Sensor read failed [ 265.538954][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.552211][ T1192] gspca_stk1135: Sensor read failed [ 265.570668][ T1192] gspca_stk1135: Detected sensor type unknown (0x0) [ 265.604400][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.619126][ T1192] gspca_stk1135: Sensor read failed [ 265.628954][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.638849][ T1192] gspca_stk1135: Sensor read failed [ 265.664426][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.691887][ T1192] gspca_stk1135: Sensor write failed [ 265.717579][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 265.737875][ T1192] gspca_stk1135: Sensor write failed [ 265.749767][ T1192] stk1135: probe of 6-1:0.0 failed with error -71 [ 265.766068][ T1192] usb 6-1: USB disconnect, device number 6 [ 266.598931][ T1192] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 266.805084][ T1192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.819166][ T5766] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 266.834280][ T1192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.846383][ T1192] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 266.864368][ T1192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.881307][ T1192] usb 6-1: config 0 descriptor?? [ 267.036176][ T5766] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 267.045439][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.054064][ T5766] usb 3-1: Product: syz [ 267.058312][ T5766] usb 3-1: Manufacturer: syz [ 267.063596][ T5766] usb 3-1: SerialNumber: syz [ 267.076205][ T5766] usb 3-1: config 0 descriptor?? [ 267.104838][ T5821] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 267.289848][ T5766] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 267.316905][ T5821] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 267.330965][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.351469][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.353308][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.376462][ T5821] usb 2-1: Product: syz [ 267.381414][ T5821] usb 2-1: Manufacturer: syz [ 267.386070][ T5821] usb 2-1: SerialNumber: syz [ 267.394224][ T5821] usb 2-1: config 0 descriptor?? [ 267.407128][ T5821] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 267.971012][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.988742][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.213077][ T1192] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x2 [ 268.225804][ T5821] gspca_stk1135: reg_w 0x0 err -71 [ 268.238961][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.250940][ T1192] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 268.258681][ T5821] gspca_stk1135: Sensor write failed [ 268.294763][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.301770][ T5821] gspca_stk1135: Sensor write failed [ 268.308072][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.319668][ T5821] gspca_stk1135: Sensor read failed [ 268.324943][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.356115][ T5821] gspca_stk1135: Sensor read failed [ 268.372239][ T5821] gspca_stk1135: Detected sensor type unknown (0x0) [ 268.394965][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.404161][ T5821] gspca_stk1135: Sensor read failed [ 268.413290][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.421247][ T5821] gspca_stk1135: Sensor read failed [ 268.426677][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.442019][ T5821] gspca_stk1135: Sensor write failed [ 268.456615][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 268.464659][ T5821] gspca_stk1135: Sensor write failed [ 268.474917][ T5821] stk1135: probe of 2-1:0.0 failed with error -71 [ 268.486026][ T5821] usb 2-1: USB disconnect, device number 18 [ 268.686626][ T1192] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 268.695356][ T1192] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 268.710952][ T1192] pyra: probe of 0003:1E7D:2CF6.000E failed with error -5 [ 269.014913][ T5766] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 269.398000][ T5766] usb 3-1: USB disconnect, device number 23 [ 269.421339][ T23] usb 6-1: USB disconnect, device number 7 [ 273.009215][ T1192] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 273.169009][ T5819] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 273.248244][ T1192] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 273.260251][ T1192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.268639][ T1192] usb 6-1: Product: syz [ 273.366081][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.378545][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.394718][ T5819] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 273.405507][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.421915][ T5819] usb 3-1: config 0 descriptor?? [ 273.483214][ T1192] usb 6-1: Manufacturer: syz [ 273.488568][ T1192] usb 6-1: SerialNumber: syz [ 273.501861][ T1192] usb 6-1: config 0 descriptor?? [ 273.511367][ T1192] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 274.169623][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.205439][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.427237][ T1192] gspca_stk1135: reg_w 0x0 err -71 [ 274.441534][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.459558][ T1192] gspca_stk1135: Sensor write failed [ 274.467644][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.474538][ T1192] gspca_stk1135: Sensor write failed [ 274.481541][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.487952][ T1192] gspca_stk1135: Sensor read failed [ 274.493711][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.502033][ T1192] gspca_stk1135: Sensor read failed [ 274.507365][ T1192] gspca_stk1135: Detected sensor type unknown (0x0) [ 274.515437][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.525640][ T1192] gspca_stk1135: Sensor read failed [ 274.531215][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.537673][ T1192] gspca_stk1135: Sensor read failed [ 274.548137][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.555284][ T1192] gspca_stk1135: Sensor write failed [ 274.564477][ T1192] gspca_stk1135: serial bus timeout: status=0x00 [ 274.572437][ T1192] gspca_stk1135: Sensor write failed [ 274.577883][ T1192] stk1135: probe of 6-1:0.0 failed with error -71 [ 274.594041][ T1192] usb 6-1: USB disconnect, device number 8 [ 274.844993][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.868422][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.422130][ T5819] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x2 [ 276.442248][ T5819] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 277.848245][ T5819] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 277.866562][ T5819] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 277.875719][ T5819] pyra: probe of 0003:1E7D:2CF6.000F failed with error -71 [ 277.915704][ T5819] usb 3-1: USB disconnect, device number 24 [ 278.147466][ T8287] fido_id[8287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 279.369207][ T1192] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 279.557146][ T1192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.574592][ T1192] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 279.588807][ T1192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.598390][ T1192] usb 2-1: Product: syz [ 279.608465][ T1192] usb 2-1: Manufacturer: syz [ 279.614983][ T1192] usb 2-1: SerialNumber: syz [ 279.619899][ T6058] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 279.846788][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.864534][ T6058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.883077][ T6058] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 279.899656][ T6058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.922382][ T6058] usb 3-1: config 0 descriptor?? [ 280.087505][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.104676][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.163468][ T1192] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 280.178494][ T1192] usb 2-1: MIDIStreaming interface descriptor not found [ 280.254055][ T1192] usb 2-1: USB disconnect, device number 19 [ 280.383890][ T7761] udevd[7761]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.562731][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.580723][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.282591][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.297243][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.681645][ T6058] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x2 [ 281.691712][ T6058] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 282.615649][ T6058] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 282.674326][ T6058] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 282.716368][ T6058] pyra: probe of 0003:1E7D:2CF6.0010 failed with error -71 [ 282.808749][ T6058] usb 3-1: USB disconnect, device number 25 [ 286.526474][ T8350] loop0: detected capacity change from 0 to 512 [ 286.646419][ T8350] EXT4-fs (loop0): 1 truncate cleaned up [ 286.676807][ T8350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.740009][ T5821] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 286.802426][ T8357] loop1: detected capacity change from 0 to 1024 [ 286.842733][ T8357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.856833][ T8357] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.943254][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 286.967415][ T5821] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 286.988114][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.011790][ T5821] usb 6-1: Product: syz [ 287.016033][ T5821] usb 6-1: Manufacturer: syz [ 287.041214][ T5821] usb 6-1: SerialNumber: syz [ 287.219173][ T6058] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 287.693315][ T8352] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 288.160963][ T6058] usb 3-1: Using ep0 maxpacket: 32 [ 288.214392][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.259328][ T6058] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 288.329240][ T6058] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 288.344828][ T8352] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 288.394109][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.411664][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.430377][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.466366][ T6058] usb 3-1: Product: syz [ 288.475853][ T8352] EXT4-fs (loop1): Remounting filesystem read-only [ 288.499334][ T6058] usb 3-1: Manufacturer: syz [ 288.505271][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.545057][ T6058] usb 3-1: SerialNumber: syz [ 288.903895][ T6058] usb 3-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 289.007450][ T6058] usb 3-1: found format II with max.bitrate = 6, frame size=0 [ 289.048898][ T6058] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 289.101295][ T6058] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 289.120969][ T6058] usb 3-1: unit 5 not found! [ 289.311332][ T6058] usb 3-1: USB disconnect, device number 26 [ 289.428297][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.691560][ T5821] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 289.698628][ T5821] usb 6-1: MIDIStreaming interface descriptor not found [ 289.759695][ T5821] usb 6-1: USB disconnect, device number 9 [ 289.856156][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.915410][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 292.459703][ T6058] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 292.694680][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.757971][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.821787][ T6058] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 292.872521][ T6058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.900322][ T6058] usb 2-1: config 0 descriptor?? [ 293.279168][ T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 293.332502][ T6058] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 293.354946][ T6058] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 293.363435][ T6058] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 293.373159][ T6058] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 293.381604][ T6058] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 293.400357][ T6058] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 293.459517][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 293.483019][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 293.495413][ T23] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 293.512935][ T23] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 293.523390][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.533900][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.543679][ T23] usb 6-1: Product: syz [ 293.548015][ T23] usb 6-1: Manufacturer: syz [ 293.553748][ T23] usb 6-1: SerialNumber: syz [ 293.559846][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.793070][ T23] usb 6-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 293.801854][ T23] usb 6-1: found format II with max.bitrate = 6, frame size=0 [ 293.812786][ T23] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 293.822167][ T23] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 293.850540][ T23] usb 6-1: USB disconnect, device number 10 [ 293.896934][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.976146][ T6058] playstation 0003:054C:0DF2.0011: Failed to retrieve feature with reportID 5: -71 [ 293.986600][ T6058] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense calibration info: -71 [ 293.999338][ T6058] playstation 0003:054C:0DF2.0011: Failed to get calibration data from DualSense [ 294.008532][ T6058] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 294.019377][ T6058] playstation: probe of 0003:054C:0DF2.0011 failed with error -71 [ 294.033063][ T6058] usb 2-1: USB disconnect, device number 20 [ 294.596218][ T8411] loop5: detected capacity change from 0 to 512 [ 295.758270][ T27] audit: type=1326 audit(1785178012.380:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 295.918984][ T27] audit: type=1326 audit(1785178012.380:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 295.988734][ T8411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.046139][ T27] audit: type=1326 audit(1785178012.380:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.098453][ T8411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.198133][ T27] audit: type=1326 audit(1785178012.380:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.336815][ T27] audit: type=1326 audit(1785178012.380:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.371698][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 296.447945][ T27] audit: type=1326 audit(1785178012.380:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.536722][ T27] audit: type=1326 audit(1785178012.390:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.706082][ T27] audit: type=1326 audit(1785178012.390:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.795268][ T27] audit: type=1326 audit(1785178012.400:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 296.853993][ T8410] loop5: detected capacity change from 0 to 1024 [ 296.946925][ T8410] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.978458][ T27] audit: type=1326 audit(1785178012.400:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8405 comm="syz.2.674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2359de99 code=0x7ffc0000 [ 297.048734][ T8410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.578998][ T5821] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 297.787849][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 297.794557][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.814816][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.853206][ T5821] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 297.871650][ T5821] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 297.887529][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.897557][ T5821] usb 2-1: Product: syz [ 297.906584][ T5821] usb 2-1: Manufacturer: syz [ 297.942420][ T5821] usb 2-1: SerialNumber: syz [ 298.746577][ T5821] usb 2-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 298.756698][ T5821] usb 2-1: found format II with max.bitrate = 6, frame size=0 [ 298.764312][ T5821] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 298.770939][ T5821] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 298.810215][ T5821] usb 2-1: USB disconnect, device number 21 [ 298.871224][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.077407][ T6058] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 299.272084][ T6058] usb 6-1: unable to get BOS descriptor or descriptor too short [ 299.420546][ T6058] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 299.567556][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.634356][ T6058] usb 6-1: Product: syz [ 299.779494][ T6058] usb 6-1: Manufacturer: syz [ 299.798118][ T6058] usb 6-1: SerialNumber: syz [ 299.829365][ T5824] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 300.064987][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 300.103789][ T5824] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 300.127772][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.143655][ T5824] usb 2-1: Product: syz [ 300.158053][ T5824] usb 2-1: Manufacturer: syz [ 300.181924][ T5824] usb 2-1: SerialNumber: syz [ 300.194008][ T5824] usb 2-1: config 0 descriptor?? [ 300.205392][ T5824] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 300.298297][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.307552][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.509270][ T6058] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 300.517387][ T6058] usb 6-1: MIDIStreaming interface descriptor not found [ 300.565003][ T6058] usb 6-1: USB disconnect, device number 11 [ 300.691915][ T8470] loop2: detected capacity change from 0 to 512 [ 301.085194][ T8470] EXT4-fs error (device loop2): ext4_quota_enable:7140: comm syz.2.686: Bad quota inum: 12023, type: 1 [ 301.102596][ T8470] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 301.131306][ T8470] EXT4-fs (loop2): mount failed [ 301.514376][ T5824] ssu100: probe of 2-1:0.0 failed with error -32 [ 301.531118][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.637738][ T5824] usb 2-1: USB disconnect, device number 22 [ 303.905026][ T5824] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 304.149018][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 304.156781][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 304.177356][ T5824] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 304.236116][ T5824] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 304.272628][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.289060][ T6058] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 304.309054][ T5824] usb 3-1: Product: syz [ 304.313296][ T5824] usb 3-1: Manufacturer: syz [ 304.338641][ T5824] usb 3-1: SerialNumber: syz [ 306.123510][ T5824] usb 3-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 306.132091][ T5824] usb 3-1: found format II with max.bitrate = 6, frame size=0 [ 306.139931][ T5824] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 306.146488][ T5824] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 306.173804][ T5824] usb 3-1: USB disconnect, device number 27 [ 306.245945][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.443716][ T6058] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 306.452679][ T6058] usb 2-1: config 2 has no interface number 0 [ 306.458939][ T6058] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 306.468964][ T6058] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 306.479406][ T6058] usb 2-1: config 2 interface 43 has no altsetting 0 [ 306.490537][ T6058] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 306.499807][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.507808][ T6058] usb 2-1: Product: syz [ 306.512085][ T6058] usb 2-1: Manufacturer: syz [ 306.516719][ T6058] usb 2-1: SerialNumber: syz [ 306.524682][ T8487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.535641][ T8487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.657777][ T8512] loop0: detected capacity change from 0 to 512 [ 306.829283][ T5824] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 306.924753][ T8512] EXT4-fs error (device loop0): ext4_quota_enable:7140: comm syz.0.697: Bad quota inum: 12023, type: 1 [ 306.951715][ T8512] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 306.982543][ T8512] EXT4-fs (loop0): mount failed [ 307.524483][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.849708][ T5824] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 308.087197][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.302536][ T5824] usb 3-1: Product: syz [ 308.365478][ T5824] usb 3-1: Manufacturer: syz [ 308.436925][ T5824] usb 3-1: SerialNumber: syz [ 308.676174][ T6058] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 308.760467][ T5824] usb 3-1: can't set config #1, error -71 [ 308.857936][ T6058] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 308.879163][ T5824] usb 3-1: USB disconnect, device number 28 [ 309.139648][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 309.219287][ T6058] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 309.235720][ T6058] usb 2-1: USB disconnect, device number 23 [ 310.824918][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 310.838807][ T8] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 310.847991][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.856685][ T8] usb 6-1: Product: syz [ 310.861212][ T8] usb 6-1: Manufacturer: syz [ 310.865854][ T8] usb 6-1: SerialNumber: syz [ 310.882061][ T8] usb 6-1: config 0 descriptor?? [ 310.892951][ T8] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 311.095156][ T8] ssu100: probe of 6-1:0.0 failed with error -71 [ 311.132844][ T8] usb 6-1: USB disconnect, device number 12 [ 311.333649][ T6058] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 311.519186][ T6058] usb 2-1: Using ep0 maxpacket: 32 [ 311.702513][ T6058] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 311.852059][ T6058] usb 2-1: config 0 has no interface number 0 [ 312.001768][ T6058] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.146657][ T6058] usb 2-1: config 0 interface 89 has no altsetting 0 [ 312.162597][ T6058] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 312.192865][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.213126][ T6058] usb 2-1: Product: syz [ 312.228015][ T6058] usb 2-1: Manufacturer: syz [ 312.267578][ T6058] usb 2-1: SerialNumber: syz [ 312.294774][ T6058] usb 2-1: config 0 descriptor?? [ 312.325238][ T6058] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 312.337130][ T6058] em28xx 2-1:0.89: Video interface 89 found: [ 312.579089][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 312.784467][ T8] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 312.792739][ T8] usb 3-1: config 2 has no interface number 0 [ 312.799061][ T8] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 312.809478][ T5821] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 312.821150][ T8] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 312.832248][ T8] usb 3-1: config 2 interface 43 has no altsetting 0 [ 312.842332][ T8] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 312.851623][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.859719][ T8] usb 3-1: Product: syz [ 312.863950][ T8] usb 3-1: Manufacturer: syz [ 312.868601][ T8] usb 3-1: SerialNumber: syz [ 312.879152][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 312.887442][ T8545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 312.939470][ T6058] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 313.002579][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.017554][ T5821] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 313.026778][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.035096][ T5821] usb 6-1: Product: syz [ 313.039366][ T5821] usb 6-1: Manufacturer: syz [ 313.044040][ T5821] usb 6-1: SerialNumber: syz [ 313.112012][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.125230][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.143752][ T8] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 313.157703][ T8] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 313.231373][ T8] ums-usbat: probe of 3-1:2.43 failed with error -5 [ 313.250214][ T8] usb 3-1: USB disconnect, device number 29 [ 313.469962][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.479973][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.566261][ T6058] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 313.591450][ T6058] em28xx 2-1:0.89: board has no eeprom [ 313.666202][ T6058] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 313.678874][ T6058] em28xx 2-1:0.89: analog set to bulk mode. [ 313.684893][ T5824] em28xx 2-1:0.89: Registering V4L2 extension [ 313.710854][ T6058] usb 2-1: USB disconnect, device number 24 [ 313.717901][ T6058] em28xx 2-1:0.89: Disconnecting em28xx [ 313.761010][ T5824] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 313.768244][ T5824] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 313.806872][ T5824] em28xx 2-1:0.89: No AC97 audio processor [ 313.823324][ T5824] usb 2-1: Decoder not found [ 313.828001][ T5824] em28xx 2-1:0.89: failed to create media graph [ 313.839643][ T5824] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 313.848135][ T5824] em28xx 2-1:0.89: Registering snapshot button... [ 313.856796][ T5824] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input20 [ 313.872031][ T5824] em28xx 2-1:0.89: Remote control support is not available for this card. [ 313.881282][ T6058] em28xx 2-1:0.89: Closing input extension [ 313.887191][ T6058] em28xx 2-1:0.89: Deregistering snapshot button [ 313.913957][ T6058] em28xx 2-1:0.89: Freeing device [ 313.984054][ T5821] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 313.991524][ T5821] usb 6-1: MIDIStreaming interface descriptor not found [ 314.092277][ T5821] usb 6-1: USB disconnect, device number 13 [ 314.229182][ T5819] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 314.391420][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.903414][ T5819] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 315.946398][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.005860][ T5819] usb 3-1: Product: syz [ 316.052327][ T5819] usb 3-1: Manufacturer: syz [ 316.085073][ T5819] usb 3-1: SerialNumber: syz [ 316.111753][ T5819] usb 3-1: config 0 descriptor?? [ 316.151289][ T5819] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 316.231282][ T8573] loop0: detected capacity change from 0 to 256 [ 316.251416][ T8573] exfat: Deprecated parameter 'utf8' [ 316.258033][ T8573] exfat: Deprecated parameter 'utf8' [ 316.294297][ T8573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 316.366149][ T5819] gspca_m5602: Failed to find a sensor [ 316.388611][ T5819] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 316.436877][ T5819] usb 3-1: USB disconnect, device number 30 [ 316.953499][ T5819] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 317.108961][ T5824] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 317.274114][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.287611][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.430961][ T5824] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 317.478871][ T5824] usb 2-1: config 2 has no interface number 0 [ 317.536066][ T5824] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 317.636961][ T5824] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 317.805873][ T5824] usb 2-1: config 2 interface 43 has no altsetting 0 [ 317.829051][ T5824] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 317.846570][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.855243][ T5824] usb 2-1: Product: syz [ 317.864220][ T5824] usb 2-1: Manufacturer: syz [ 317.869365][ T5824] usb 2-1: SerialNumber: syz [ 317.919732][ T8585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.948712][ T8585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.998949][ T5819] usb 6-1: Using ep0 maxpacket: 32 [ 318.023333][ T5819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 318.033954][ T5819] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 318.048647][ T5819] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 318.068293][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.079845][ T5819] usb 6-1: Product: syz [ 318.084074][ T5819] usb 6-1: Manufacturer: syz [ 318.094427][ T5819] usb 6-1: SerialNumber: syz [ 318.548792][ T8599] loop2: detected capacity change from 0 to 256 [ 321.885004][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.983679][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.003269][ T5819] usb 6-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 322.063564][ T5819] usb 6-1: found format II with max.bitrate = 6, frame size=0 [ 322.098998][ T5819] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 322.167905][ T5819] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 322.184109][ T5819] usb 6-1: unit 4 not found! [ 322.268049][ T5824] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 322.311051][ T5824] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 322.362879][ T5819] usb 6-1: USB disconnect, device number 14 [ 322.400680][ T5824] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 322.424121][ T5824] usb 2-1: USB disconnect, device number 25 [ 324.473478][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 324.663121][ T8634] loop5: detected capacity change from 0 to 512 [ 324.680450][ T28] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 324.690318][ T1192] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 324.726628][ T8634] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 324.739900][ T8634] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 324.811621][ T8634] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.734: bad orphan inode 131083 [ 324.850592][ T8634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.950542][ T1192] usb 3-1: Using ep0 maxpacket: 32 [ 325.005163][ T28] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 325.319119][ T1192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.327780][ T28] usb 2-1: config 2 has no interface number 0 [ 325.357425][ T1192] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 325.373774][ T28] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 325.419604][ T28] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 325.458757][ T1192] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 325.492124][ T28] usb 2-1: config 2 interface 43 has no altsetting 0 [ 325.509233][ T1192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.558642][ T1192] usb 3-1: Product: syz [ 325.565351][ T28] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 325.602084][ T1192] usb 3-1: Manufacturer: syz [ 325.617491][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.626506][ T1192] usb 3-1: SerialNumber: syz [ 325.662752][ T28] usb 2-1: Product: syz [ 325.982168][ T28] usb 2-1: Manufacturer: syz [ 325.993718][ T1192] usb 3-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 326.734404][ T8640] loop0: detected capacity change from 0 to 256 [ 326.746533][ T28] usb 2-1: SerialNumber: syz [ 326.835373][ T1192] usb 3-1: found format II with max.bitrate = 6, frame size=0 [ 327.003251][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.059923][ T1192] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 327.066636][ T8630] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 327.075400][ T1192] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 327.081319][ T8630] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 327.091643][ T1192] usb 3-1: unit 4 not found! [ 327.168323][ T1192] usb 3-1: USB disconnect, device number 31 [ 327.336763][ T6472] udevd[6472]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.382209][ T28] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 327.431083][ T28] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 327.539367][ T28] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 327.589106][ T28] usb 2-1: USB disconnect, device number 26 [ 329.380534][ T8673] loop0: detected capacity change from 0 to 1024 [ 329.401426][ T8673] EXT4-fs: Ignoring removed bh option [ 329.436563][ T8673] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 329.535315][ T8673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.592279][ T8673] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.745: Abort forced by user [ 329.635026][ T8673] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 329.659049][ T5844] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 329.838454][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.863966][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.964553][ T8682] loop5: detected capacity change from 0 to 256 [ 330.250663][ T5844] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 330.289655][ T5821] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 330.308270][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.359742][ T5844] usb 3-1: Product: syz [ 330.385616][ T5844] usb 3-1: Manufacturer: syz [ 330.405508][ T5844] usb 3-1: SerialNumber: syz [ 330.539011][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 330.553322][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.564928][ T5821] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 330.586164][ T5821] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 330.608375][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.626602][ T5821] usb 2-1: Product: syz [ 330.631496][ T5821] usb 2-1: Manufacturer: syz [ 330.636188][ T5821] usb 2-1: SerialNumber: syz [ 330.957960][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.985821][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.773453][ T5821] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 331.799038][ T5821] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 331.805393][ T5821] usb 2-1: unit 5 not found! [ 331.875456][ T5821] usb 2-1: USB disconnect, device number 27 [ 332.107922][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.232385][ T8698] loop5: detected capacity change from 0 to 256 [ 332.368479][ T5844] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 332.394341][ T5844] usb 3-1: MIDIStreaming interface descriptor not found [ 332.512482][ T5844] usb 3-1: USB disconnect, device number 32 [ 332.587609][ T6526] udevd[6526]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.591770][ T8715] loop0: detected capacity change from 0 to 1024 [ 333.614615][ T8715] ext4: Bad value for 'debug_want_extra_isize' [ 334.599234][ T176] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 334.939060][ T176] usb 3-1: Using ep0 maxpacket: 16 [ 335.161670][ T176] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 335.211032][ T176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.358265][ T176] usb 3-1: Product: syz [ 335.426692][ T176] usb 3-1: Manufacturer: syz [ 335.453282][ T176] usb 3-1: SerialNumber: syz [ 335.486944][ T176] usb 3-1: config 0 descriptor?? [ 335.544532][ T176] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 336.904521][ T176] ssu100: probe of 3-1:0.0 failed with error -32 [ 336.948223][ T8] usb 3-1: USB disconnect, device number 33 [ 336.989166][ T5821] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 337.189089][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 337.214417][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.226992][ T5821] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 337.246615][ T5821] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 337.260187][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.268358][ T5821] usb 2-1: Product: syz [ 337.273237][ T5821] usb 2-1: Manufacturer: syz [ 337.277880][ T5821] usb 2-1: SerialNumber: syz [ 337.489077][ T28] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 337.524852][ T5821] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 337.535268][ T5821] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 337.542688][ T5821] usb 2-1: unit 5 not found! [ 337.583855][ T5821] usb 2-1: USB disconnect, device number 28 [ 337.633682][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.722673][ T28] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 337.731001][ T28] usb 3-1: config 2 has no interface number 0 [ 337.737266][ T28] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 337.747958][ T28] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 337.762645][ T28] usb 3-1: config 2 interface 43 has no altsetting 0 [ 337.773710][ T28] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 337.783732][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.792144][ T28] usb 3-1: Product: syz [ 337.796557][ T28] usb 3-1: Manufacturer: syz [ 337.803140][ T28] usb 3-1: SerialNumber: syz [ 337.814054][ T8738] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 337.822056][ T8738] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 338.053883][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.078270][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.140237][ T28] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 338.168402][ T28] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 338.232544][ T28] ums-usbat: probe of 3-1:2.43 failed with error -5 [ 338.249192][ T28] usb 3-1: USB disconnect, device number 34 [ 343.619449][ T1192] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 343.918895][ T28] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 343.961703][ T1192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.974276][ T1192] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 343.983542][ T1192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.992288][ T1192] usb 6-1: Product: syz [ 343.996573][ T1192] usb 6-1: Manufacturer: syz [ 344.001400][ T1192] usb 6-1: SerialNumber: syz [ 344.073902][ T8787] loop1: detected capacity change from 0 to 256 [ 344.127166][ T28] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 344.308967][ T28] usb 3-1: config 2 has no interface number 0 [ 344.315247][ T28] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 344.328066][ T28] usb 3-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 344.338788][ T28] usb 3-1: config 2 interface 43 has no altsetting 0 [ 344.357775][ T28] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 344.372640][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.382693][ T28] usb 3-1: Product: syz [ 344.387031][ T28] usb 3-1: Manufacturer: syz [ 344.396429][ T28] usb 3-1: SerialNumber: syz [ 344.408082][ T8779] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 344.421520][ T8779] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 344.675457][ T28] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 344.690909][ T28] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 344.771587][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.793576][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.899502][ T28] ums-usbat: probe of 3-1:2.43 failed with error -5 [ 344.937767][ T28] usb 3-1: USB disconnect, device number 35 [ 346.297522][ T8799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.786'. [ 346.807596][ T1192] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 346.815426][ T1192] usb 6-1: MIDIStreaming interface descriptor not found [ 347.985560][ T1192] usb 6-1: USB disconnect, device number 15 [ 348.143155][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.115732][ T8820] loop1: detected capacity change from 0 to 256 [ 352.983842][ T8846] loop0: detected capacity change from 0 to 256 [ 352.992468][ T8846] exfat: Deprecated parameter 'utf8' [ 352.997925][ T8846] exfat: Deprecated parameter 'utf8' [ 353.034259][ T8846] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 353.644937][ T5824] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 353.871980][ T5824] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.897259][ T5824] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 353.927376][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.948384][ T5824] usb 2-1: Product: syz [ 353.961296][ T5824] usb 2-1: Manufacturer: syz [ 353.973676][ T5824] usb 2-1: SerialNumber: syz [ 354.836885][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.109488][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.618034][ T5824] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 355.630829][ T5824] usb 2-1: MIDIStreaming interface descriptor not found [ 355.703779][ T5824] usb 2-1: USB disconnect, device number 29 [ 355.787889][ T8602] udevd[8602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.671320][ T8874] loop1: detected capacity change from 0 to 256 [ 356.689375][ T8874] exfat: Deprecated parameter 'utf8' [ 356.694836][ T8874] exfat: Deprecated parameter 'utf8' [ 356.774053][ T8874] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 361.577744][ T8906] loop2: detected capacity change from 0 to 512 [ 361.648712][ T8906] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.2.825: corrupted xattr block 95: invalid header [ 361.724506][ T8906] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.825: bg 0: block 7: invalid block bitmap [ 361.763899][ T8906] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 361.784598][ T8906] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.825: corrupted xattr block 95: invalid header [ 361.821566][ T8906] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 361.853492][ T8906] EXT4-fs (loop2): 1 orphan inode deleted [ 361.874062][ T8906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.148897][ T176] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 367.510174][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.349469][ T5821] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 369.771075][ T1192] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 370.159408][ T1192] usb 3-1: Using ep0 maxpacket: 32 [ 370.182057][ T1192] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 370.201782][ T1192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.231867][ T1192] usb 3-1: config 0 descriptor?? [ 370.261206][ T1192] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 371.582701][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.595485][ T5821] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 371.608275][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.617458][ T5821] usb 6-1: Product: syz [ 371.625617][ T5821] usb 6-1: Manufacturer: syz [ 371.630636][ T5821] usb 6-1: SerialNumber: syz [ 373.890344][ T8961] macsec0: entered promiscuous mode [ 373.897625][ T8961] macsec0: entered allmulticast mode [ 373.903135][ T8961] veth1_macvtap: entered allmulticast mode [ 376.302346][ T1192] gspca_vc032x: reg_r err -110 [ 376.309001][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.370499][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.376034][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.397999][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.407274][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.443547][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.466319][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.521841][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.576402][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.598918][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.604276][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.669631][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.674997][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.721159][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.739314][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.763251][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.774817][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.776274][ T5821] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 376.794457][ T1192] gspca_vc032x: I2c Bus Busy Wait 00 [ 376.813445][ T5821] usb 6-1: MIDIStreaming interface descriptor not found [ 376.819257][ T1192] gspca_vc032x: Unknown sensor... [ 376.835731][ T1192] vc032x: probe of 3-1:0.0 failed with error -22 [ 376.856162][ T1192] usb 3-1: USB disconnect, device number 36 [ 377.279062][ T8] usb 6-1: USB disconnect, device number 16 [ 379.548068][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.561780][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.164652][ T5821] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 382.678955][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 382.729267][ T5821] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 382.773970][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.828032][ T5821] usb 2-1: config 0 descriptor?? [ 382.866556][ T5821] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 383.079318][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 383.292754][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.313521][ T8] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 383.338186][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.368891][ T8] usb 3-1: Product: syz [ 383.380221][ T8] usb 3-1: Manufacturer: syz [ 383.389027][ T8] usb 3-1: SerialNumber: syz [ 383.459088][ T176] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 383.659020][ T176] usb 6-1: Using ep0 maxpacket: 32 [ 383.666770][ T176] usb 6-1: unable to get BOS descriptor or descriptor too short [ 385.668215][ T5821] gspca_vc032x: reg_w err -71 [ 386.161341][ T176] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 386.178145][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.304840][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.317597][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.323772][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 386.331238][ T176] usb 6-1: string descriptor 0 read error: -71 [ 386.337577][ T176] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 386.346873][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.352424][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 386.359590][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.364926][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.376953][ T176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.385924][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.398584][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.410815][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.416169][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.428857][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.434208][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.451250][ T176] usb 6-1: can't set config #1, error -71 [ 386.472292][ T176] usb 6-1: USB disconnect, device number 17 [ 386.478285][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.499649][ T8] usb 3-1: USB disconnect, device number 37 [ 386.522525][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.527882][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.560670][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.568374][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.596745][ T5821] gspca_vc032x: I2c Bus Busy Wait 00 [ 386.623215][ T5821] gspca_vc032x: Unknown sensor... [ 386.650707][ T5821] vc032x: probe of 2-1:0.0 failed with error -22 [ 386.715438][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.760422][ T5821] usb 2-1: USB disconnect, device number 31 [ 386.989131][ T176] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 387.269310][ T176] usb 6-1: device descriptor read/64, error -71 [ 387.561250][ T176] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 387.909098][ T176] usb 6-1: device descriptor read/64, error -71 [ 388.030341][ T176] usb usb6-port1: attempt power cycle [ 388.540989][ T176] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 388.600745][ T176] usb 6-1: device descriptor read/8, error -71 [ 388.635085][ T9046] loop1: detected capacity change from 0 to 512 [ 388.704410][ T9046] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.1.867: corrupted xattr block 95: invalid header [ 388.750094][ T9046] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.867: bg 0: block 7: invalid block bitmap [ 388.841642][ T9046] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 388.853651][ T9046] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #11: comm syz.1.867: corrupted xattr block 95: invalid header [ 388.876853][ T9046] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 388.886356][ T176] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 388.905000][ T9046] EXT4-fs (loop1): 1 orphan inode deleted [ 388.916641][ T9046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.939012][ T176] usb 6-1: device descriptor read/8, error -71 [ 390.159392][ T176] usb usb6-port1: unable to enumerate USB device [ 393.909188][ T1192] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 394.078666][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.239301][ T1192] usb 6-1: Using ep0 maxpacket: 32 [ 394.248530][ T1192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 394.262840][ T1192] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 394.286576][ T1192] usb 6-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 394.302949][ T1192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.312606][ T1192] usb 6-1: Product: syz [ 394.316881][ T1192] usb 6-1: Manufacturer: syz [ 394.328098][ T1192] usb 6-1: SerialNumber: syz [ 394.567508][ T1192] usb 6-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 394.585369][ T1192] usb 6-1: found format II with max.bitrate = 6, frame size=0 [ 394.594805][ T1192] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 394.606924][ T1192] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 394.622786][ T1192] usb 6-1: unit 5 not found! [ 394.664811][ T1192] usb 6-1: USB disconnect, device number 22 [ 394.755775][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.319114][ T9072] netlink: 64 bytes leftover after parsing attributes in process `syz.5.874'. [ 395.358779][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.874'. [ 395.388708][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 396.539103][ T5821] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 396.939280][ T5821] usb 2-1: device descriptor read/64, error -71 [ 397.198950][ T5819] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 397.219004][ T5821] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 397.388961][ T5821] usb 2-1: device descriptor read/64, error -71 [ 397.395438][ T5819] usb 6-1: Using ep0 maxpacket: 32 [ 397.417963][ T5819] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 397.448288][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.535673][ T5821] usb usb2-port1: attempt power cycle [ 397.550586][ T5819] usb 6-1: config 0 descriptor?? [ 397.587804][ T5819] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 397.979126][ T5821] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 398.019867][ T5821] usb 2-1: device descriptor read/8, error -71 [ 398.319557][ T5821] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 398.377630][ T5821] usb 2-1: device descriptor read/8, error -71 [ 398.503284][ T5821] usb usb2-port1: unable to enumerate USB device [ 398.537052][ T9101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.884'. [ 398.546599][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 398.556486][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 398.739070][ T5823] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 400.017348][ T5819] gspca_vc032x: reg_r err -32 [ 400.024686][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.126889][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 400.132174][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.137521][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.144938][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.151174][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.156990][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.162620][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.168362][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.174225][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.189393][ T5823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 400.198663][ T5823] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 400.210504][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.215864][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.221444][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.230452][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.235998][ T5823] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 400.245382][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.253557][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.260975][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.266312][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.271789][ T5823] usb 3-1: Product: syz [ 400.276002][ T5823] usb 3-1: Manufacturer: syz [ 400.288635][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.295028][ T5823] usb 3-1: SerialNumber: syz [ 400.305705][ T5819] gspca_vc032x: I2c Bus Busy Wait 00 [ 400.314364][ T9115] 8021q: VLANs not supported on ip6_vti0 [ 400.324796][ T5819] gspca_vc032x: Unknown sensor... [ 400.337958][ T5819] vc032x: probe of 6-1:0.0 failed with error -22 [ 400.727781][ T5823] usb 3-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 400.736955][ T5823] usb 3-1: found format II with max.bitrate = 6, frame size=0 [ 400.756688][ T5823] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 400.763578][ T5823] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 400.770239][ T5823] usb 3-1: unit 5 not found! [ 400.809141][ T5823] usb 3-1: USB disconnect, device number 38 [ 400.880180][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.109553][ T6058] usb 6-1: USB disconnect, device number 23 [ 403.274576][ T9140] netlink: 44 bytes leftover after parsing attributes in process `syz.0.898'. [ 403.335024][ T9140] syzkaller0: entered promiscuous mode [ 403.355013][ T9140] syzkaller0: entered allmulticast mode [ 403.400583][ T9140] tipc: Started in network mode [ 403.420082][ T9140] tipc: Node identity dae4ea89846d, cluster identity 3 [ 403.443595][ T9140] tipc: Enabled bearer , priority 0 [ 403.472494][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 403.488166][ T9140] tipc: Resetting bearer [ 403.516089][ T9139] tipc: Resetting bearer [ 403.539250][ T6058] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 403.573975][ T9139] tipc: Disabling bearer [ 403.718923][ T23] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 403.763093][ T6058] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 403.784441][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.793090][ T6058] usb 6-1: Product: syz [ 403.797270][ T6058] usb 6-1: Manufacturer: syz [ 403.802012][ T6058] usb 6-1: SerialNumber: syz [ 403.809251][ T6058] usb 6-1: config 0 descriptor?? [ 403.820470][ T6058] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 403.921374][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.932618][ T23] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 403.941811][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.950567][ T23] usb 3-1: Product: syz [ 403.954790][ T23] usb 3-1: Manufacturer: syz [ 403.959570][ T23] usb 3-1: SerialNumber: syz [ 404.029059][ T5823] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 404.239028][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 404.251092][ T5823] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 404.260320][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.273644][ T5823] usb 2-1: config 0 descriptor?? [ 404.290629][ T5823] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 404.487143][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 404.494454][ T23] usb 3-1: MIDIStreaming interface descriptor not found [ 404.545680][ T23] usb 3-1: USB disconnect, device number 39 [ 404.628482][ T6058] gspca_stk1135: reg_w 0x0 err -71 [ 404.636138][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.644964][ T6058] gspca_stk1135: Sensor write failed [ 404.652654][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.675132][ T6058] gspca_stk1135: Sensor write failed [ 404.686463][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.695377][ T6058] gspca_stk1135: Sensor read failed [ 404.704507][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.714853][ T6058] gspca_stk1135: Sensor read failed [ 404.720653][ T6058] gspca_stk1135: Detected sensor type unknown (0x0) [ 404.727515][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.736843][ T6058] gspca_stk1135: Sensor read failed [ 404.751219][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.757728][ T6058] gspca_stk1135: Sensor read failed [ 404.763216][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.771050][ T6058] gspca_stk1135: Sensor write failed [ 404.776434][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 404.782994][ T6058] gspca_stk1135: Sensor write failed [ 404.788392][ T6058] stk1135: probe of 6-1:0.0 failed with error -71 [ 404.802825][ T6058] usb 6-1: USB disconnect, device number 24 [ 405.779108][ T6058] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 405.974240][ T6058] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 405.983511][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.991734][ T6058] usb 3-1: Product: syz [ 405.996016][ T6058] usb 3-1: Manufacturer: syz [ 406.003798][ T6058] usb 3-1: SerialNumber: syz [ 406.020704][ T6058] usb 3-1: config 0 descriptor?? [ 406.131346][ T5823] gspca_vc032x: reg_r err -32 [ 406.136100][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.149607][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.156132][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.165005][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.174386][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.183297][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.188645][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.195525][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.209144][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.216049][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.236536][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.245538][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.249337][ T6058] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 406.252334][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.265037][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.278891][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.287957][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.294786][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.303837][ T5823] gspca_vc032x: I2c Bus Busy Wait 00 [ 406.312680][ T5823] gspca_vc032x: Unknown sensor... [ 406.317819][ T5823] vc032x: probe of 2-1:0.0 failed with error -22 [ 407.487246][ T5821] usb 2-1: USB disconnect, device number 36 [ 409.290038][ T6058] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 409.299202][ T5821] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 409.517058][ T5821] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 409.556633][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.577874][ T5821] usb 2-1: Product: syz [ 409.587864][ T5821] usb 2-1: Manufacturer: syz [ 409.602713][ T5821] usb 2-1: SerialNumber: syz [ 409.630407][ T5821] usb 2-1: config 0 descriptor?? [ 409.680825][ T5821] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 409.700201][ T6058] usb 3-1: USB disconnect, device number 40 [ 409.994067][ T5824] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 410.182834][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.183973][ T9196] loop2: detected capacity change from 0 to 1024 [ 410.198958][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.214994][ T9196] EXT4-fs: Ignoring removed i_version option [ 410.222361][ T5824] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 410.238766][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.255528][ T5824] usb 6-1: config 0 descriptor?? [ 410.260739][ T9196] EXT4-fs (loop2): stripe (35402) is not aligned with cluster size (16), stripe is disabled [ 410.281616][ T9196] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 410.636968][ T5821] gspca_stk1135: reg_w 0x0 err -71 [ 410.649904][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 410.656291][ T5821] gspca_stk1135: Sensor write failed [ 410.678984][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 410.685376][ T5821] gspca_stk1135: Sensor write failed [ 410.690799][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 410.697157][ T5821] gspca_stk1135: Sensor read failed [ 410.702479][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 410.708926][ T5821] gspca_stk1135: Sensor read failed [ 410.717600][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.742717][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.759071][ T5824] usbhid 6-1:0.0: can't add hid device: -71 [ 410.785742][ T5824] usbhid: probe of 6-1:0.0 failed with error -71 [ 410.804891][ T5824] usb 6-1: USB disconnect, device number 25 [ 411.059451][ T5821] gspca_stk1135: Detected sensor type unknown (0x0) [ 411.066144][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 411.072642][ T5821] gspca_stk1135: Sensor read failed [ 411.078123][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 411.085951][ T5821] gspca_stk1135: Sensor read failed [ 411.091311][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 411.097703][ T5821] gspca_stk1135: Sensor write failed [ 411.103104][ T5821] gspca_stk1135: serial bus timeout: status=0x00 [ 411.109542][ T5821] gspca_stk1135: Sensor write failed [ 411.114953][ T5821] stk1135: probe of 2-1:0.0 failed with error -71 [ 411.124386][ T5821] usb 2-1: USB disconnect, device number 37 [ 411.588986][ T5821] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 411.803747][ T5821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 411.818935][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.826983][ T5821] usb 2-1: Product: syz [ 411.844662][ T5821] usb 2-1: Manufacturer: syz [ 411.858881][ T5821] usb 2-1: SerialNumber: syz [ 411.884892][ T5821] usb 2-1: config 0 descriptor?? [ 411.896356][ T9207] loop2: detected capacity change from 0 to 40427 [ 411.924763][ T9207] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 411.944761][ T9207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 411.973668][ T9207] F2FS-fs (loop2): invalid crc value [ 412.120216][ T9207] F2FS-fs (loop2): Found nat_bits in checkpoint [ 412.240379][ T5821] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.282680][ T9207] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 412.291302][ T9207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 413.401464][ T9207] syz.2.921: attempt to access beyond end of device [ 413.401464][ T9207] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 413.453918][ T5821] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 414.374716][ T9227] loop2: detected capacity change from 0 to 256 [ 414.393840][ T9227] exfat: Deprecated parameter 'utf8' [ 414.422086][ T9227] exfat: Deprecated parameter 'utf8' [ 414.458465][ T9227] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 414.588122][ T6058] usb 2-1: USB disconnect, device number 38 [ 415.809292][ T5824] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 416.194340][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.240933][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.254564][ T5824] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 417.263916][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.283481][ T5824] usb 3-1: config 0 descriptor?? [ 417.296917][ T5824] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 417.525744][ T5824] usb 3-1: USB disconnect, device number 41 [ 418.258875][ T5823] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 418.922984][ T9250] loop5: detected capacity change from 0 to 256 [ 419.412769][ T9252] loop0: detected capacity change from 0 to 512 [ 419.420713][ T9252] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.558680][ T9252] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 419.739708][ T6058] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 421.898587][ T6058] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.298889][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.307023][ T6058] usb 2-1: Product: syz [ 422.312144][ T6058] usb 2-1: Manufacturer: syz [ 422.316805][ T6058] usb 2-1: SerialNumber: syz [ 422.324586][ T6058] usb 2-1: config 0 descriptor?? [ 422.560293][ T6058] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 422.602281][ T6058] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 422.646326][ T6058] usb 2-1: USB disconnect, device number 39 [ 424.088935][ T6058] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 424.351762][ T6058] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 424.400878][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.434332][ T6058] usb 2-1: Product: syz [ 424.453372][ T6058] usb 2-1: Manufacturer: syz [ 424.470260][ T6058] usb 2-1: SerialNumber: syz [ 424.512871][ T6058] usb 2-1: config 0 descriptor?? [ 424.554687][ T6058] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 425.512005][ T6058] gspca_stk1135: reg_w 0x0 err -110 [ 425.518310][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 425.560315][ T6058] gspca_stk1135: Sensor write failed [ 425.566136][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 425.923572][ T6058] gspca_stk1135: Sensor write failed [ 426.410659][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 426.417066][ T6058] gspca_stk1135: Sensor read failed [ 426.423104][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 426.429797][ T6058] gspca_stk1135: Sensor read failed [ 426.435034][ T6058] gspca_stk1135: Detected sensor type unknown (0x0) [ 426.469246][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 426.504181][ T6058] gspca_stk1135: Sensor read failed [ 426.525666][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 428.260100][ T6058] gspca_stk1135: Sensor read failed [ 428.265411][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 428.271837][ T6058] gspca_stk1135: Sensor write failed [ 428.277196][ T6058] gspca_stk1135: serial bus timeout: status=0x00 [ 428.283666][ T6058] gspca_stk1135: Sensor write failed [ 428.289938][ T6058] stk1135: probe of 2-1:0.0 failed with error -110 [ 428.520005][ T6058] usb 2-1: USB disconnect, device number 40 [ 430.278776][ T9318] loop5: detected capacity change from 0 to 256 [ 430.306402][ T6058] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 430.713203][ T6058] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 430.722387][ T6058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.730953][ T6058] usb 2-1: Product: syz [ 430.735135][ T6058] usb 2-1: Manufacturer: syz [ 430.740079][ T6058] usb 2-1: SerialNumber: syz [ 430.748040][ T6058] usb 2-1: config 0 descriptor?? [ 430.780459][ T8] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 430.792184][ T6058] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 430.982402][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.995014][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.008438][ T8] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 431.032605][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.048123][ T6058] gspca_m5602: Failed to find a sensor [ 431.065011][ T6058] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 431.071885][ T8] usb 3-1: config 0 descriptor?? [ 431.086949][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 431.106737][ T6058] usb 2-1: USB disconnect, device number 41 [ 431.170648][ T9322] loop5: detected capacity change from 0 to 128 [ 431.200718][ T9322] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.213514][ T9322] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 431.288630][ T8] usb 3-1: USB disconnect, device number 42 [ 431.354428][ T7151] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.919033][ T8] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 432.300052][ T8] usb 2-1: device descriptor read/64, error -71 [ 432.569170][ T8] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 434.149776][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 434.149871][ T27] audit: type=1107 audit(1785178151.640:114): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='`îÚë' [ 435.025795][ T9355] loop0: detected capacity change from 0 to 256 [ 435.044292][ T1192] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 435.814010][ T9357] loop5: detected capacity change from 0 to 2048 [ 435.823201][ T1192] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.846965][ T1192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.877073][ T9357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.885756][ T1192] usb 3-1: Product: syz [ 435.904087][ T9357] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.919496][ T1192] usb 3-1: Manufacturer: syz [ 435.950252][ T1192] usb 3-1: SerialNumber: syz [ 435.966490][ T1192] usb 3-1: config 0 descriptor?? [ 436.064370][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.201197][ T1192] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.408927][ T5823] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 436.588938][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 436.597484][ T5823] usb 6-1: config 0 has no interfaces? [ 436.605709][ T5823] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 436.616178][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.624316][ T5823] usb 6-1: Product: syz [ 436.628561][ T5823] usb 6-1: Manufacturer: syz [ 436.633367][ T5823] usb 6-1: SerialNumber: syz [ 436.640769][ T5823] usb 6-1: config 0 descriptor?? [ 437.307846][ T9372] loop1: detected capacity change from 0 to 256 [ 437.542974][ T1192] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 438.616541][ T6058] usb 3-1: USB disconnect, device number 43 [ 439.542141][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.718250][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.759388][ T6058] usb 6-1: USB disconnect, device number 27 [ 440.169445][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.175934][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.278949][ T6058] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 442.373759][ T6058] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 442.399013][ T6058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.798497][ T9406] loop1: detected capacity change from 0 to 256 [ 442.807004][ T6058] usb 6-1: Product: syz [ 442.811953][ T6058] usb 6-1: Manufacturer: syz [ 442.816745][ T6058] usb 6-1: SerialNumber: syz [ 443.125417][ T6058] usb 6-1: config 0 descriptor?? [ 443.180269][ T6058] usb 6-1: can't set config #0, error -71 [ 443.200139][ T6058] usb 6-1: USB disconnect, device number 28 [ 443.262509][ T23] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 443.325489][ T23] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 444.130113][ T9412] loop1: detected capacity change from 0 to 40427 [ 444.147629][ T9412] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 444.168838][ T9412] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 444.197935][ T9412] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 444.435498][ T9412] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 444.653520][ T9412] F2FS-fs (loop1): invalid crc value [ 444.992108][ T9412] F2FS-fs (loop1): Found nat_bits in checkpoint [ 445.189151][ T9412] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 445.217717][ T9412] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 445.385125][ T9433] loop5: detected capacity change from 0 to 256 [ 445.930558][ T5785] syz-executor: attempt to access beyond end of device [ 445.930558][ T5785] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 445.968515][ T5785] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 446.098886][ T5824] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 446.299004][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 446.350720][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.371090][ T5824] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 446.403615][ T5824] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 446.438074][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.458901][ T5824] usb 3-1: Product: syz [ 446.463139][ T5824] usb 3-1: Manufacturer: syz [ 446.483028][ T5824] usb 3-1: SerialNumber: syz [ 446.766851][ T5824] usb 3-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 446.809341][ T5824] usb 3-1: found format II with max.bitrate = 6, frame size=0 [ 446.840603][ T5824] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 446.865007][ T5824] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 446.878075][ T5824] usb 3-1: unit 5 not found! [ 446.917711][ T5824] usb 3-1: USB disconnect, device number 44 [ 447.007082][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.123330][ T6058] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 447.360940][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.407448][ T6058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.460942][ T6058] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 447.533890][ T6058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.563990][ T6058] usb 2-1: config 0 descriptor?? [ 447.822362][ T8] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 448.288665][ T8] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 448.319322][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.327386][ T8] usb 6-1: Product: syz [ 448.352543][ T8] usb 6-1: Manufacturer: syz [ 448.385712][ T8] usb 6-1: SerialNumber: syz [ 448.420651][ T8] usb 6-1: config 0 descriptor?? [ 448.448369][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 449.057214][ T8] gspca_stk1135: reg_w 0x0 err -71 [ 449.078203][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.088749][ T8] gspca_stk1135: Sensor write failed [ 449.099433][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.105824][ T8] gspca_stk1135: Sensor write failed [ 449.117838][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.125932][ T8] gspca_stk1135: Sensor read failed [ 449.136804][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.144594][ T8] gspca_stk1135: Sensor read failed [ 449.153648][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 449.160649][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.168323][ T8] gspca_stk1135: Sensor read failed [ 449.195265][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.201980][ T8] gspca_stk1135: Sensor read failed [ 449.217816][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.245961][ T8] gspca_stk1135: Sensor write failed [ 449.283035][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 449.294841][ T8] gspca_stk1135: Sensor write failed [ 449.317987][ T8] stk1135: probe of 6-1:0.0 failed with error -71 [ 449.345623][ T8] usb 6-1: USB disconnect, device number 29 [ 449.399733][ T5821] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 449.468784][ T5821] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.709166][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.790302][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.178714][ T9465] loop5: detected capacity change from 0 to 512 [ 450.339597][ T9465] EXT4-fs error (device loop5): ext4_quota_enable:7140: comm syz.5.997: Bad quota inum: 12023, type: 1 [ 450.357615][ T9465] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 450.421917][ T9465] EXT4-fs (loop5): mount failed [ 450.980831][ T6058] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x2 [ 451.009506][ T6058] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 451.262320][ T6058] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 451.285232][ T6058] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 451.299265][ T8] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 451.466732][ T6058] pyra: probe of 0003:1E7D:2CF6.0014 failed with error -71 [ 451.478304][ T6058] usb 2-1: USB disconnect, device number 44 [ 451.509824][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 451.612249][ T9478] loop2: detected capacity change from 0 to 256 [ 452.495372][ T9482] loop1: detected capacity change from 0 to 512 [ 452.632344][ T9482] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.1.1002: corrupted xattr block 95: invalid header [ 452.704774][ T9482] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1002: bg 0: block 7: invalid block bitmap [ 452.737952][ T9482] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 452.767251][ T9482] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #11: comm syz.1.1002: corrupted xattr block 95: invalid header [ 452.811732][ T9482] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 452.825902][ T9482] EXT4-fs (loop1): 1 orphan inode deleted [ 452.833444][ T9482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.270229][ T8] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 453.288864][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.640792][ T8] usb 6-1: config 0 has no interface number 0 [ 453.651317][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 453.660730][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.668755][ T8] usb 6-1: Product: syz [ 453.673002][ T8] usb 6-1: Manufacturer: syz [ 453.678165][ T8] usb 6-1: SerialNumber: syz [ 453.732687][ T8] usb 6-1: config 0 descriptor?? [ 453.887416][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.076789][ T5824] usb 6-1: USB disconnect, device number 30 [ 455.437520][ T9502] loop2: detected capacity change from 0 to 512 [ 455.487976][ T9502] EXT4-fs error (device loop2): ext4_quota_enable:7140: comm syz.2.1007: Bad quota inum: 12023, type: 1 [ 455.502414][ T9502] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 455.551610][ T9502] EXT4-fs (loop2): mount failed [ 457.359041][ T5824] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 457.430222][ T9524] loop2: detected capacity change from 0 to 512 [ 457.529740][ T9524] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.2.1014: corrupted xattr block 95: invalid header [ 457.615675][ T9524] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1014: bg 0: block 7: invalid block bitmap [ 457.650220][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.665780][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.667755][ T9524] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 457.692744][ T5824] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 457.706357][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.725622][ T5824] usb 6-1: config 0 descriptor?? [ 457.732467][ T9524] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.1014: corrupted xattr block 95: invalid header [ 457.792704][ T9524] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 457.813259][ T9524] EXT4-fs (loop2): 1 orphan inode deleted [ 457.831667][ T9524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.299912][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.335999][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.755711][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.779475][ T5819] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 458.880448][ T5824] pyra 0003:1E7D:2CF6.0015: unknown main item tag 0x2 [ 458.932312][ T5824] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 459.018919][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 459.032381][ T9542] loop0: detected capacity change from 0 to 512 [ 459.082122][ T5819] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 459.136777][ T5819] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.159126][ T9542] EXT4-fs error (device loop0): ext4_quota_enable:7140: comm syz.0.1020: Bad quota inum: 12023, type: 1 [ 459.175096][ T9542] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 459.193512][ T9542] EXT4-fs (loop0): mount failed [ 459.275110][ T5819] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.329340][ T5819] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.413183][ T5819] usb 2-1: config 7 interface 0 has no altsetting 0 [ 459.447790][ T5819] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 459.531630][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.429026][ T5824] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 461.474249][ T5824] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 461.521691][ T5824] pyra: probe of 0003:1E7D:2CF6.0015 failed with error -71 [ 461.605566][ T5824] usb 6-1: USB disconnect, device number 31 [ 461.968487][ T5819] usbhid 2-1:7.0: can't add hid device: -71 [ 462.194275][ T5819] usbhid: probe of 2-1:7.0 failed with error -71 [ 462.220199][ T5819] usb 2-1: USB disconnect, device number 45 [ 462.959380][ T23] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 464.090687][ T23] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 464.249927][ T23] usb 6-1: config 2 has no interface number 0 [ 464.285274][ T23] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 464.300434][ T5824] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 464.317157][ T23] usb 6-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 464.352088][ T23] usb 6-1: config 2 interface 43 has no altsetting 0 [ 464.372651][ T23] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 464.396675][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.419254][ T23] usb 6-1: Product: syz [ 464.423495][ T23] usb 6-1: Manufacturer: syz [ 464.446649][ T23] usb 6-1: SerialNumber: syz [ 464.465782][ T9568] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.489447][ T9568] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.521081][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.538858][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.560005][ T5824] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 464.575109][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.620618][ T5824] usb 3-1: config 0 descriptor?? [ 464.727474][ T23] ums-usbat 6-1:2.43: USB Mass Storage device detected [ 464.762523][ T23] ums-usbat 6-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 464.800397][ T23] ums-usbat: probe of 6-1:2.43 failed with error -5 [ 464.825228][ T23] usb 6-1: USB disconnect, device number 32 [ 465.072348][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.093382][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.532540][ T5824] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x2 [ 465.573531][ T5824] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 467.536327][ T5824] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 467.596957][ T5824] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 467.651100][ T5824] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -71 [ 467.949216][ T5824] usb 3-1: USB disconnect, device number 45 [ 468.061582][ T9600] loop1: detected capacity change from 0 to 256 [ 473.630881][ T5819] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 473.950294][ T5824] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 474.166111][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.182564][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.204504][ T5824] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 474.215489][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.231830][ T5824] usb 2-1: config 0 descriptor?? [ 474.665561][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.711532][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.165877][ T5824] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x2 [ 475.195224][ T5824] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 475.739008][ T5819] usb 3-1: device not accepting address 46, error -71 [ 475.838996][ T5824] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 475.847987][ T5824] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 475.857610][ T5824] pyra: probe of 0003:1E7D:2CF6.0017 failed with error -71 [ 475.869804][ T5824] usb 2-1: USB disconnect, device number 46 [ 476.004823][ T9632] loop5: detected capacity change from 0 to 256 [ 478.065724][ T5819] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 480.578997][ T5823] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 480.820781][ T5823] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 480.854526][ T5823] usb 2-1: config 2 has no interface number 0 [ 480.878867][ T5823] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 480.930993][ T5823] usb 2-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 480.988953][ T5823] usb 2-1: config 2 interface 43 has no altsetting 0 [ 481.045197][ T5823] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 481.077446][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.121355][ T5823] usb 2-1: Product: syz [ 481.168832][ T5823] usb 2-1: Manufacturer: syz [ 481.173495][ T5823] usb 2-1: SerialNumber: syz [ 481.221908][ T9654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.261003][ T9654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 481.517517][ T5823] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 481.546435][ T5823] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 481.636615][ T5823] ums-usbat: probe of 2-1:2.43 failed with error -5 [ 481.664913][ T5823] usb 2-1: USB disconnect, device number 47 [ 481.721048][ T176] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 481.786011][ T9669] loop5: detected capacity change from 0 to 512 [ 481.806130][ T9669] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 481.834343][ T9669] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.1063: bad orphan inode 16 [ 481.856496][ T9669] ext4_test_bit(bit=15, block=4) = 0 [ 481.866615][ T9669] EXT4-fs (loop5): 1 orphan inode deleted [ 481.874270][ T9669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.918988][ T176] usb 3-1: Using ep0 maxpacket: 32 [ 481.929111][ T176] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 481.944392][ T176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.961357][ T176] usb 3-1: config 0 descriptor?? [ 481.978106][ T176] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 482.000760][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.449177][ T5824] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 482.719454][ T5824] usb 6-1: device descriptor read/64, error -71 [ 483.118131][ T5824] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 483.423312][ T5824] usb 6-1: device descriptor read/64, error -71 [ 483.563358][ T9682] loop1: detected capacity change from 0 to 256 [ 483.589600][ T5824] usb usb6-port1: attempt power cycle [ 484.069173][ T5824] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 484.139157][ T5824] usb 6-1: device descriptor read/8, error -71 [ 484.218021][ T9684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1067'. [ 484.360756][ T176] gspca_vc032x: reg_r err -32 [ 484.368926][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.374268][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.389202][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.394559][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.408989][ T5824] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 484.411568][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.448851][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.454322][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.471767][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.472315][ T5824] usb 6-1: device descriptor read/8, error -71 [ 484.477114][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.477128][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.477139][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.477150][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.522723][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.528178][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.534092][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.539850][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.545180][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.551126][ T176] gspca_vc032x: I2c Bus Busy Wait 00 [ 484.556468][ T176] gspca_vc032x: Unknown sensor... [ 484.567525][ T176] vc032x: probe of 3-1:0.0 failed with error -22 [ 484.639103][ T5824] usb usb6-port1: unable to enumerate USB device [ 485.438475][ T5824] usb 3-1: USB disconnect, device number 48 [ 485.675341][ T9693] loop2: detected capacity change from 0 to 512 [ 485.864200][ T9693] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.2.1071: corrupted xattr block 95: invalid header [ 485.934238][ T9693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1071: bg 0: block 7: invalid block bitmap [ 485.970735][ T9693] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 485.986171][ T9693] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.1071: corrupted xattr block 95: invalid header [ 486.004233][ T9693] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 486.014981][ T9693] EXT4-fs (loop2): 1 orphan inode deleted [ 486.025960][ T9693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.094420][ T9700] loop5: detected capacity change from 0 to 512 [ 486.275590][ T9700] EXT4-fs (loop5): 1 truncate cleaned up [ 486.318413][ T9700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.150519][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.260177][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.514187][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1076'. [ 488.681200][ T9713] loop5: detected capacity change from 0 to 4096 [ 488.781690][ T9713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 488.818898][ T9713] EXT4-fs (loop5): Test dummy encryption mode enabled [ 490.025196][ T9713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.622821][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.545560][ T23] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 491.769037][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 491.810752][ T23] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 491.864282][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.949510][ T23] usb 2-1: config 0 descriptor?? [ 492.026671][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 492.110757][ T9737] loop5: detected capacity change from 0 to 512 [ 492.205518][ T9737] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.5.1083: corrupted xattr block 95: invalid header [ 492.316565][ T9737] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.1083: bg 0: block 7: invalid block bitmap [ 492.373708][ T9737] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 492.402273][ T9737] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2971: inode #11: comm syz.5.1083: corrupted xattr block 95: invalid header [ 492.449236][ T9737] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 492.484038][ T9737] EXT4-fs (loop5): 1 orphan inode deleted [ 492.509136][ T9737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.677830][ T23] gspca_vc032x: reg_r err -32 [ 494.682806][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.687061][ T7151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.688118][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.688132][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.688144][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.713299][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.718627][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.724015][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.731416][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.736773][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.742153][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.748311][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.757718][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.774658][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.799180][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.804545][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.823346][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.828718][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.850373][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 494.855755][ T23] gspca_vc032x: Unknown sensor... [ 494.879502][ T23] vc032x: probe of 2-1:0.0 failed with error -22 [ 495.032156][ T9750] loop5: detected capacity change from 0 to 512 [ 495.048066][ T9748] loop2: detected capacity change from 0 to 512 [ 495.053800][ T9750] EXT4-fs: Ignoring removed nobh option [ 495.143623][ T9750] [ 495.146111][ T9750] ====================================================== [ 495.153160][ T9750] WARNING: possible circular locking dependency detected [ 495.160219][ T9750] syzkaller #0 Not tainted [ 495.161351][ T5821] usb 2-1: USB disconnect, device number 48 [ 495.164648][ T9750] ------------------------------------------------------ [ 495.164656][ T9750] syz.5.1086/9750 is trying to acquire lock: [ 495.164668][ T9750] ffff88802192cc58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 495.193769][ T9750] [ 495.193769][ T9750] but task is already holding lock: [ 495.201186][ T9750] ffff88805d146ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 495.211127][ T9750] [ 495.211127][ T9750] which lock already depends on the new lock. [ 495.211127][ T9750] [ 495.221593][ T9750] [ 495.221593][ T9750] the existing dependency chain (in reverse order) is: [ 495.230648][ T9750] [ 495.230648][ T9750] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 495.238276][ T9750] down_write+0x97/0x200 [ 495.243225][ T9750] ext4_inline_data_truncate+0x1bb/0xbc0 [ 495.249430][ T9750] ext4_truncate+0x45e/0x1140 [ 495.254688][ T9750] ext4_evict_inode+0x897/0xe70 [ 495.260116][ T9750] evict+0x4b7/0x8a0 [ 495.264621][ T9750] ext4_orphan_cleanup+0xc33/0x1470 [ 495.270389][ T9750] ext4_fill_super+0x5fb5/0x6870 [ 495.275917][ T9750] get_tree_bdev+0x3e5/0x520 [ 495.281122][ T9750] vfs_get_tree+0x8c/0x280 [ 495.286108][ T9750] do_new_mount+0x24a/0xa40 [ 495.291182][ T9750] __se_sys_mount+0x2e7/0x3d0 [ 495.296520][ T9750] do_syscall_64+0x55/0xb0 [ 495.301535][ T9750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.308060][ T9750] [ 495.308060][ T9750] -> #1 (sb_internal){.+.+}-{0:0}: [ 495.315449][ T9750] percpu_down_read+0x44/0x1a0 [ 495.320787][ T9750] ext4_evict_inode+0x2b4/0xe70 [ 495.326229][ T9750] evict+0x4b7/0x8a0 [ 495.330699][ T9750] ext4_ext_migrate+0xcd4/0x1060 [ 495.336203][ T9750] ext4_ioctl+0x1ede/0x3b70 [ 495.341272][ T9750] __se_sys_ioctl+0xfd/0x170 [ 495.346434][ T9750] do_syscall_64+0x55/0xb0 [ 495.351445][ T9750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.357909][ T9750] [ 495.357909][ T9750] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 495.366381][ T9750] __lock_acquire+0x37ef/0x7d80 [ 495.371843][ T9750] lock_acquire+0x19e/0x420 [ 495.376920][ T9750] percpu_down_read+0x44/0x1a0 [ 495.382253][ T9750] ext4_writepages+0x1a4/0x350 [ 495.387581][ T9750] do_writepages+0x351/0x590 [ 495.392798][ T9750] __writeback_single_inode+0x14e/0xee0 [ 495.398920][ T9750] writeback_single_inode+0x21f/0x760 [ 495.404869][ T9750] write_inode_now+0x183/0x210 [ 495.410210][ T9750] iput+0x58f/0x900 [ 495.414579][ T9750] ext4_xattr_block_set+0x248b/0x2fe0 [ 495.420552][ T9750] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 495.427025][ T9750] __ext4_expand_extra_isize+0x306/0x400 [ 495.433232][ T9750] __ext4_mark_inode_dirty+0x458/0x6d0 [ 495.439271][ T9750] ext4_evict_inode+0x7dd/0xe70 [ 495.444686][ T9750] evict+0x4b7/0x8a0 [ 495.449146][ T9750] ext4_orphan_cleanup+0xc33/0x1470 [ 495.454905][ T9750] ext4_fill_super+0x5fb5/0x6870 [ 495.460420][ T9750] get_tree_bdev+0x3e5/0x520 [ 495.465570][ T9750] vfs_get_tree+0x8c/0x280 [ 495.470555][ T9750] do_new_mount+0x24a/0xa40 [ 495.475634][ T9750] __se_sys_mount+0x2e7/0x3d0 [ 495.480876][ T9750] do_syscall_64+0x55/0xb0 [ 495.485867][ T9750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.492340][ T9750] [ 495.492340][ T9750] other info that might help us debug this: [ 495.492340][ T9750] [ 495.502613][ T9750] Chain exists of: [ 495.502613][ T9750] &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem [ 495.502613][ T9750] [ 495.516151][ T9750] Possible unsafe locking scenario: [ 495.516151][ T9750] [ 495.523635][ T9750] CPU0 CPU1 [ 495.529039][ T9750] ---- ---- [ 495.534442][ T9750] lock(&ei->xattr_sem); [ 495.538831][ T9750] lock(sb_internal); [ 495.545466][ T9750] lock(&ei->xattr_sem); [ 495.552384][ T9750] rlock(&sbi->s_writepages_rwsem); [ 495.557716][ T9750] [ 495.557716][ T9750] *** DEADLOCK *** [ 495.557716][ T9750] [ 495.565893][ T9750] 3 locks held by syz.5.1086/9750: [ 495.571034][ T9750] #0: ffff88802192a0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 495.581201][ T9750] #1: ffff88802192a608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 495.590672][ T9750] #2: ffff88805d146ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 495.601010][ T9750] [ 495.601010][ T9750] stack backtrace: [ 495.606948][ T9750] CPU: 1 PID: 9750 Comm: syz.5.1086 Not tainted syzkaller #0 [ 495.614358][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 495.624477][ T9750] Call Trace: [ 495.627885][ T9750] [ 495.630925][ T9750] dump_stack_lvl+0x18c/0x250 [ 495.635753][ T9750] ? load_image+0x420/0x420 [ 495.640369][ T9750] ? show_regs_print_info+0x20/0x20 [ 495.645653][ T9750] ? print_circular_bug+0x12b/0x1a0 [ 495.650935][ T9750] check_noncircular+0x2fc/0x400 [ 495.655932][ T9750] ? look_up_lock_class+0x75/0x140 [ 495.661102][ T9750] ? print_deadlock_bug+0x5d0/0x5d0 [ 495.666442][ T9750] ? lockdep_lock+0xf5/0x230 [ 495.671087][ T9750] ? _find_first_zero_bit+0xd6/0x100 [ 495.676485][ T9750] __lock_acquire+0x37ef/0x7d80 [ 495.681386][ T9750] ? debug_objects_fill_pool+0x8b/0x790 [ 495.686996][ T9750] ? __lock_acquire+0x1336/0x7d80 [ 495.692077][ T9750] ? verify_lock_unused+0x140/0x140 [ 495.697345][ T9750] ? verify_lock_unused+0x140/0x140 [ 495.702597][ T9750] lock_acquire+0x19e/0x420 [ 495.707146][ T9750] ? ext4_writepages+0x1a4/0x350 [ 495.712130][ T9750] ? cgroup_rstat_updated+0xd5/0x360 [ 495.717498][ T9750] ? __might_sleep+0xe0/0xe0 [ 495.722176][ T9750] ? read_lock_is_recursive+0x20/0x20 [ 495.727604][ T9750] ? mark_lock+0x94/0x320 [ 495.731984][ T9750] ? __lock_acquire+0x1336/0x7d80 [ 495.737148][ T9750] percpu_down_read+0x44/0x1a0 [ 495.741968][ T9750] ? ext4_writepages+0x1a4/0x350 [ 495.746951][ T9750] ext4_writepages+0x1a4/0x350 [ 495.751785][ T9750] ? ext4_read_folio+0x2f0/0x2f0 [ 495.756774][ T9750] ? verify_lock_unused+0x140/0x140 [ 495.762031][ T9750] ? finish_task_switch+0x323/0x8f0 [ 495.767283][ T9750] ? ext4_read_folio+0x2f0/0x2f0 [ 495.772267][ T9750] do_writepages+0x351/0x590 [ 495.776922][ T9750] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 495.782701][ T9750] ? writeback_single_inode+0x214/0x760 [ 495.788310][ T9750] ? __lock_acquire+0x7d80/0x7d80 [ 495.793381][ T9750] ? do_raw_spin_lock+0x11f/0x2b0 [ 495.798463][ T9750] __writeback_single_inode+0x14e/0xee0 [ 495.804077][ T9750] writeback_single_inode+0x21f/0x760 [ 495.809517][ T9750] ? write_inode_now+0x210/0x210 [ 495.814513][ T9750] write_inode_now+0x183/0x210 [ 495.819329][ T9750] ? bdi_split_work_to_wbs+0x900/0x900 [ 495.822302][ T9748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.824822][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 495.837968][ T9748] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.842548][ T9750] iput+0x58f/0x900 [ 495.842581][ T9750] ext4_xattr_block_set+0x248b/0x2fe0 [ 495.842615][ T9750] ? write_boundary_block+0xb0/0xb0 [ 495.867536][ T9750] ? xattr_find_entry+0x12b/0x2f0 [ 495.872621][ T9750] ? ext4_xattr_block_find+0x320/0x320 [ 495.878135][ T9750] ? ext4_xattr_block_find+0x2a1/0x320 [ 495.883646][ T9750] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 495.889613][ T9750] __ext4_expand_extra_isize+0x306/0x400 [ 495.895308][ T9750] __ext4_mark_inode_dirty+0x458/0x6d0 [ 495.900831][ T9750] ext4_evict_inode+0x7dd/0xe70 [ 495.905745][ T9750] ? evict+0x482/0x8a0 [ 495.909871][ T9750] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 495.915828][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 495.921075][ T9750] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 495.927026][ T9750] evict+0x4b7/0x8a0 [ 495.930966][ T9750] ? __lock_acquire+0x7d80/0x7d80 [ 495.936043][ T9750] ? proc_nr_inodes+0x230/0x230 [ 495.941029][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 495.946280][ T9750] ? _raw_spin_unlock+0x28/0x40 [ 495.951279][ T9750] ext4_orphan_cleanup+0xc33/0x1470 [ 495.956542][ T9750] ? ext4_orphan_del+0xc90/0xc90 [ 495.961528][ T9750] ? ext4_register_li_request+0x182/0x930 [ 495.967291][ T9750] ? errseq_check_and_advance+0x66/0x120 [ 495.972975][ T9750] ext4_fill_super+0x5fb5/0x6870 [ 495.977982][ T9750] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 495.984278][ T9750] ? __might_sleep+0xe0/0xe0 [ 495.988924][ T9750] ? read_lock_is_recursive+0x20/0x20 [ 495.994381][ T9750] ? snprintf+0xe9/0x140 [ 495.998720][ T9750] ? down_read_killable+0x340/0x340 [ 496.003981][ T9750] ? setup_bdev_super+0x56b/0x660 [ 496.009058][ T9750] get_tree_bdev+0x3e5/0x520 [ 496.013714][ T9750] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 496.020038][ T9750] ? setup_bdev_super+0x660/0x660 [ 496.025106][ T9750] ? apparmor_capable+0x137/0x1a0 [ 496.030218][ T9750] ? bpf_lsm_capable+0x9/0x10 [ 496.034970][ T9750] ? security_capable+0x89/0xb0 [ 496.039892][ T9750] vfs_get_tree+0x8c/0x280 [ 496.044361][ T9750] do_new_mount+0x24a/0xa40 [ 496.048910][ T9750] __se_sys_mount+0x2e7/0x3d0 [ 496.053644][ T9750] ? __x64_sys_mount+0xc0/0xc0 [ 496.058465][ T9750] ? lockdep_hardirqs_on+0x98/0x150 [ 496.063718][ T9750] ? __x64_sys_mount+0x20/0xc0 [ 496.068540][ T9750] do_syscall_64+0x55/0xb0 [ 496.073007][ T9750] ? clear_bhb_loop+0x40/0x90 [ 496.077737][ T9750] ? clear_bhb_loop+0x40/0x90 [ 496.082491][ T9750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.088541][ T9750] RIP: 0033:0x7fcff979f10a [ 496.093068][ T9750] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.112898][ T9750] RSP: 002b:00007fcffa67ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.121454][ T9750] RAX: ffffffffffffffda RBX: 00007fcffa67cee0 RCX: 00007fcff979f10a [ 496.129559][ T9750] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fcffa67cea0 [ 496.137574][ T9750] RBP: 0000200000000180 R08: 00007fcffa67cee0 R09: 0000000000800718 [ 496.145587][ T9750] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 496.153597][ T9750] R13: 00007fcffa67cea0 R14: 00000000000004a7 R15: 00002000000003c0 [ 496.161619][ T9750] [ 496.162160][ T9748] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1085'. [ 496.217516][ T9750] ------------[ cut here ]------------ [ 496.223426][ T9750] EA inode 11 i_nlink=1026 [ 496.235257][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.249427][ T9750] WARNING: CPU: 0 PID: 9750 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.259931][ T9750] Modules linked in: [ 496.263872][ T9750] CPU: 0 PID: 9750 Comm: syz.5.1086 Not tainted syzkaller #0 [ 496.271555][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 496.282869][ T9750] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.289832][ T9750] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 c1 f5 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 7e 42 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 c8 d7 45 08 [ 496.309659][ T9750] RSP: 0018:ffffc90004ef7220 EFLAGS: 00010246 [ 496.315784][ T9750] RAX: 0f2a6c97dc55cb00 RBX: ffff88805d1454a8 RCX: 0000000000080000 [ 496.323863][ T9750] RDX: ffffc9001b2a6000 RSI: 000000000007ffff RDI: 0000000000080000 [ 496.331983][ T9750] RBP: ffffc90004ef7318 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 496.340032][ T9750] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805d145300 [ 496.348047][ T9750] R13: ffffc90004ef7280 R14: dffffc0000000000 R15: 0000000000000402 [ 496.356113][ T9750] FS: 00007fcffa67d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 496.365282][ T9750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.371956][ T9750] CR2: 0000200000ceb030 CR3: 000000007e20e000 CR4: 00000000003506f0 [ 496.380016][ T9750] DR0: 000a000000000000 DR1: ffffffffff7fff00 DR2: 4000000000010022 [ 496.389083][ T9750] DR3: fffffffffffffff6 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 496.397107][ T9750] Call Trace: [ 496.400635][ T9750] [ 496.403612][ T9750] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 496.409350][ T9750] ? ext4_xattr_inode_iget+0x3f5/0x5d0 [ 496.414875][ T9750] ext4_xattr_set_entry+0xcc9/0x1ee0 [ 496.420287][ T9750] ext4_xattr_ibody_set+0x262/0x700 [ 496.425552][ T9750] ext4_expand_extra_isize_ea+0x134a/0x1e70 [ 496.431568][ T9750] __ext4_expand_extra_isize+0x306/0x400 [ 496.437272][ T9750] __ext4_mark_inode_dirty+0x458/0x6d0 [ 496.442834][ T9750] ext4_evict_inode+0x7dd/0xe70 [ 496.447737][ T9750] ? evict+0x482/0x8a0 [ 496.451968][ T9750] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 496.457913][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 496.463233][ T9750] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 496.469883][ T9750] evict+0x4b7/0x8a0 [ 496.473841][ T9750] ? __lock_acquire+0x7d80/0x7d80 [ 496.479103][ T9750] ? proc_nr_inodes+0x230/0x230 [ 496.484991][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 496.490436][ T9750] ? _raw_spin_unlock+0x28/0x40 [ 496.495455][ T9750] ext4_orphan_cleanup+0xc33/0x1470 [ 496.500764][ T9750] ? ext4_orphan_del+0xc90/0xc90 [ 496.505752][ T9750] ? ext4_register_li_request+0x182/0x930 [ 496.511570][ T9750] ? errseq_check_and_advance+0x66/0x120 [ 496.517261][ T9750] ext4_fill_super+0x5fb5/0x6870 [ 496.522322][ T9750] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 496.528709][ T9750] ? __might_sleep+0xe0/0xe0 [ 496.533380][ T9750] ? read_lock_is_recursive+0x20/0x20 [ 496.538839][ T9750] ? snprintf+0xe9/0x140 [ 496.543138][ T9750] ? down_read_killable+0x340/0x340 [ 496.548490][ T9750] ? setup_bdev_super+0x56b/0x660 [ 496.553649][ T9750] get_tree_bdev+0x3e5/0x520 [ 496.558320][ T9750] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 496.564790][ T9750] ? setup_bdev_super+0x660/0x660 [ 496.569891][ T9750] ? apparmor_capable+0x137/0x1a0 [ 496.574963][ T9750] ? bpf_lsm_capable+0x9/0x10 [ 496.579781][ T9750] ? security_capable+0x89/0xb0 [ 496.584685][ T9750] vfs_get_tree+0x8c/0x280 [ 496.590150][ T9750] do_new_mount+0x24a/0xa40 [ 496.594709][ T9750] __se_sys_mount+0x2e7/0x3d0 [ 496.599613][ T9750] ? __x64_sys_mount+0xc0/0xc0 [ 496.604468][ T9750] ? lockdep_hardirqs_on+0x98/0x150 [ 496.609854][ T9750] ? __x64_sys_mount+0x20/0xc0 [ 496.614668][ T9750] do_syscall_64+0x55/0xb0 [ 496.619170][ T9750] ? clear_bhb_loop+0x40/0x90 [ 496.623903][ T9750] ? clear_bhb_loop+0x40/0x90 [ 496.628720][ T9750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.635094][ T9750] RIP: 0033:0x7fcff979f10a [ 496.639633][ T9750] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.660038][ T9750] RSP: 002b:00007fcffa67ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.668511][ T9750] RAX: ffffffffffffffda RBX: 00007fcffa67cee0 RCX: 00007fcff979f10a [ 496.676617][ T9750] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fcffa67cea0 [ 496.684685][ T9750] RBP: 0000200000000180 R08: 00007fcffa67cee0 R09: 0000000000800718 [ 496.693749][ T9750] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 496.701937][ T9750] R13: 00007fcffa67cea0 R14: 00000000000004a7 R15: 00002000000003c0 [ 496.710249][ T9750] [ 496.713325][ T9750] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 496.720643][ T9750] CPU: 0 PID: 9750 Comm: syz.5.1086 Not tainted syzkaller #0 [ 496.728054][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 496.738148][ T9750] Call Trace: [ 496.741470][ T9750] [ 496.744444][ T9750] dump_stack_lvl+0x18c/0x250 [ 496.749194][ T9750] ? show_regs_print_info+0x20/0x20 [ 496.754437][ T9750] ? load_image+0x420/0x420 [ 496.758994][ T9750] panic+0x2ca/0x720 [ 496.762941][ T9750] ? bpf_jit_dump+0xd0/0xd0 [ 496.767588][ T9750] __warn+0x2e0/0x470 [ 496.771663][ T9750] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.777706][ T9750] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.783738][ T9750] report_bug+0x2be/0x4f0 [ 496.788192][ T9750] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.794231][ T9750] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.800265][ T9750] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 496.806299][ T9750] handle_bug+0xcf/0x120 [ 496.810620][ T9750] exc_invalid_op+0x1a/0x50 [ 496.815171][ T9750] asm_exc_invalid_op+0x1a/0x20 [ 496.820087][ T9750] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 496.826730][ T9750] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 c1 f5 98 ff 49 8b 34 24 48 c7 c7 60 dd de 8a 44 89 fa e8 7e 42 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 c8 d7 45 08 [ 496.846359][ T9750] RSP: 0018:ffffc90004ef7220 EFLAGS: 00010246 [ 496.852455][ T9750] RAX: 0f2a6c97dc55cb00 RBX: ffff88805d1454a8 RCX: 0000000000080000 [ 496.860453][ T9750] RDX: ffffc9001b2a6000 RSI: 000000000007ffff RDI: 0000000000080000 [ 496.868449][ T9750] RBP: ffffc90004ef7318 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 496.876443][ T9750] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805d145300 [ 496.884438][ T9750] R13: ffffc90004ef7280 R14: dffffc0000000000 R15: 0000000000000402 [ 496.892445][ T9750] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 496.898135][ T9750] ? ext4_xattr_inode_iget+0x3f5/0x5d0 [ 496.903642][ T9750] ext4_xattr_set_entry+0xcc9/0x1ee0 [ 496.908969][ T9750] ext4_xattr_ibody_set+0x262/0x700 [ 496.914198][ T9750] ext4_expand_extra_isize_ea+0x134a/0x1e70 [ 496.920139][ T9750] __ext4_expand_extra_isize+0x306/0x400 [ 496.925820][ T9750] __ext4_mark_inode_dirty+0x458/0x6d0 [ 496.931331][ T9750] ext4_evict_inode+0x7dd/0xe70 [ 496.936214][ T9750] ? evict+0x482/0x8a0 [ 496.940305][ T9750] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 496.946310][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 496.951561][ T9750] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 496.957483][ T9750] evict+0x4b7/0x8a0 [ 496.961490][ T9750] ? __lock_acquire+0x7d80/0x7d80 [ 496.966540][ T9750] ? proc_nr_inodes+0x230/0x230 [ 496.971443][ T9750] ? do_raw_spin_unlock+0x121/0x230 [ 496.976671][ T9750] ? _raw_spin_unlock+0x28/0x40 [ 496.981554][ T9750] ext4_orphan_cleanup+0xc33/0x1470 [ 496.986782][ T9750] ? ext4_orphan_del+0xc90/0xc90 [ 496.991737][ T9750] ? ext4_register_li_request+0x182/0x930 [ 496.997497][ T9750] ? errseq_check_and_advance+0x66/0x120 [ 497.003155][ T9750] ext4_fill_super+0x5fb5/0x6870 [ 497.008129][ T9750] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 497.014417][ T9750] ? __might_sleep+0xe0/0xe0 [ 497.019030][ T9750] ? read_lock_is_recursive+0x20/0x20 [ 497.024429][ T9750] ? snprintf+0xe9/0x140 [ 497.028705][ T9750] ? down_read_killable+0x340/0x340 [ 497.033937][ T9750] ? setup_bdev_super+0x56b/0x660 [ 497.038983][ T9750] get_tree_bdev+0x3e5/0x520 [ 497.043592][ T9750] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 497.049852][ T9750] ? setup_bdev_super+0x660/0x660 [ 497.054895][ T9750] ? apparmor_capable+0x137/0x1a0 [ 497.059943][ T9750] ? bpf_lsm_capable+0x9/0x10 [ 497.064665][ T9750] ? security_capable+0x89/0xb0 [ 497.069538][ T9750] vfs_get_tree+0x8c/0x280 [ 497.073973][ T9750] do_new_mount+0x24a/0xa40 [ 497.078496][ T9750] __se_sys_mount+0x2e7/0x3d0 [ 497.083193][ T9750] ? __x64_sys_mount+0xc0/0xc0 [ 497.087981][ T9750] ? lockdep_hardirqs_on+0x98/0x150 [ 497.093210][ T9750] ? __x64_sys_mount+0x20/0xc0 [ 497.098000][ T9750] do_syscall_64+0x55/0xb0 [ 497.102445][ T9750] ? clear_bhb_loop+0x40/0x90 [ 497.107158][ T9750] ? clear_bhb_loop+0x40/0x90 [ 497.111895][ T9750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.117843][ T9750] RIP: 0033:0x7fcff979f10a [ 497.122372][ T9750] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.142016][ T9750] RSP: 002b:00007fcffa67ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 497.150467][ T9750] RAX: ffffffffffffffda RBX: 00007fcffa67cee0 RCX: 00007fcff979f10a [ 497.158474][ T9750] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fcffa67cea0 [ 497.166484][ T9750] RBP: 0000200000000180 R08: 00007fcffa67cee0 R09: 0000000000800718 [ 497.174497][ T9750] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 497.182502][ T9750] R13: 00007fcffa67cea0 R14: 00000000000004a7 R15: 00002000000003c0 [ 497.190521][ T9750] [ 497.194146][ T9750] Kernel Offset: disabled [ 497.198495][ T9750] Rebooting in 86400 seconds..