program: r0 = syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) statx(r0, &(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', 0x400, 0x8, &(0x7f00000006c0)) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000006800270828bd7000fcdbdf2500000400040008000500878d628b303198d2a8227adeb8222cad301085a97be98feacd023d06c7d6a8026cc950aa02d6ea856f86e09a592cf7ad9ac3b1cc8880", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x60) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000500)=[{0x8, 0x2a10, 0x0, 0x0}, {0xeb45, 0x5a00, 0x0, 0x0}], 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='10000', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) [ 85.769726][ T4643] Bluetooth: hci0: command tx timeout [ 85.819196][ T5320] loop0: detected capacity change from 0 to 256 [ 85.858192][ T5320] exFAT-fs (loop0): error, no upcase table entry. Please run fsck [ 85.858209][ T5320] exFAT-fs (loop0): Filesystem has been set read-only [ 85.884374][ T5320] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 86.125810][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.275277][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 86.276718][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 86.280995][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.281010][ T10] usb 5-1: Product: syz [ 86.281017][ T10] usb 5-1: Manufacturer: syz [ 86.281024][ T10] usb 5-1: SerialNumber: syz [ 86.321056][ T10] usb 5-1: config 0 descriptor?? [ 86.709147][ T9] cfg80211: failed to load regulatory.db [ 86.759911][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 86.779386][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.783131][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 86.783178][ T10] usb 5-1: media controller created [ 86.827501][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.415901][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 87.415949][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 87.415956][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 87.417143][ T5320] dtv5100: wlen = 0, aborting. [ 87.445653][ T5321] ------------[ cut here ]------------ [ 87.445667][ T5321] usb 5-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 87.445678][ T5321] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.0.0/5321 [ 87.457148][ T5321] Modules linked in: [ 87.459516][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.463234][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.467362][ T5321] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 87.469722][ T5321] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 87.479472][ T5321] RSP: 0000:ffffc9000ea6f798 EFLAGS: 00010246 [ 87.482079][ T5321] RAX: 0000000000000000 RBX: ffff888037469500 RCX: 0000000080000280 [ 87.486137][ T5321] RDX: ffff88803eab1e80 RSI: ffffffff8cc545c0 RDI: ffffffff90881920 [ 87.489850][ T5321] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 87.493230][ T5321] R10: ffffc9000ea6f880 R11: fffff52001d4df1c R12: 1ffff11008903c38 [ 87.496779][ T5321] R13: ffff88804481e1c0 R14: ffff88803eab1e80 R15: 0000000080000280 [ 87.500145][ T5321] FS: 00007f2c380436c0(0000) GS:ffff88808c2c6000(0000) knlGS:0000000000000000 [ 87.504324][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.507631][ T5321] CR2: 00007f6483955490 CR3: 000000001d0c6000 CR4: 0000000000352ef0 [ 87.510855][ T5321] Call Trace: [ 87.512227][ T5321] [ 87.513386][ T5321] usb_start_wait_urb+0x13f/0x5b0 [ 87.515405][ T5321] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 87.517488][ T5321] usb_control_msg+0x234/0x3e0 [ 87.519364][ T5321] dtv5100_i2c_msg+0x231/0x2f0 [ 87.521307][ T5321] dtv5100_i2c_xfer+0x1a5/0x610 [ 87.523285][ T5321] __i2c_transfer+0x7bf/0x1fe0 [ 87.525349][ T5321] ? rt_mutex_lock_nested+0x167/0x1c0 [ 87.527620][ T5321] ? i2c_transfer+0xc7/0x2d0 [ 87.529599][ T5321] i2c_transfer+0x1cb/0x2d0 [ 87.531553][ T5321] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 87.534234][ T5321] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 87.537111][ T5321] ? _copy_from_user+0x94/0xb0 [ 87.539209][ T5321] i2cdev_write+0x113/0x1e0 [ 87.541364][ T5321] ? __pfx_i2cdev_write+0x10/0x10 [ 87.543577][ T5321] vfs_write+0x296/0xba0 [ 87.545663][ T5321] ? __pfx_vfs_write+0x10/0x10 [ 87.547857][ T5321] ? __fget_files+0x2a/0x420 [ 87.550178][ T5321] ? __fget_files+0x2a/0x420 [ 87.552194][ T5321] ? __fget_files+0x3a2/0x420 [ 87.554298][ T5321] ? __fget_files+0x2a/0x420 [ 87.556430][ T5321] ksys_write+0x150/0x270 [ 87.558400][ T5321] ? __pfx_ksys_write+0x10/0x10 [ 87.560529][ T5321] do_syscall_64+0x166/0x520 [ 87.562511][ T5321] ? trace_irq_disable+0x3b/0x140 [ 87.565072][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.567878][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 87.570018][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.573404][ T5321] RIP: 0033:0x7f2c3719e159 [ 87.575878][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.584423][ T5321] RSP: 002b:00007f2c38042fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.588213][ T5321] RAX: ffffffffffffffda RBX: 00007f2c37426090 RCX: 00007f2c3719e159 [ 87.591476][ T5321] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 87.594620][ T5321] RBP: 00007f2c3723503b R08: 0000000000000000 R09: 0000000000000000 [ 87.597403][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.600266][ T5321] R13: 00007f2c37426128 R14: 00007f2c37426090 R15: 00007ffd08d637f8 [ 87.603600][ T5321] [ 87.605390][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.608215][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.611645][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.615290][ T5321] Call Trace: [ 87.616537][ T5321] [ 87.617797][ T5321] vpanic+0x56d/0xa60 [ 87.619465][ T5321] ? __pfx__printk+0x10/0x10 [ 87.621239][ T5321] ? __pfx_vpanic+0x10/0x10 [ 87.622964][ T5321] ? is_bpf_text_address+0x292/0x2b0 [ 87.624896][ T5321] ? is_bpf_text_address+0x26/0x2b0 [ 87.627036][ T5321] panic+0xc5/0xd0 [ 87.628552][ T5321] ? __pfx_panic+0x10/0x10 [ 87.630439][ T5321] __warn+0x315/0x4c0 [ 87.632236][ T5321] ? usb_submit_urb+0x1057/0x18b0 [ 87.634334][ T5321] ? usb_submit_urb+0x1057/0x18b0 [ 87.636579][ T5321] __report_bug+0x276/0x570 [ 87.638965][ T5321] ? usb_submit_urb+0x1057/0x18b0 [ 87.641469][ T5321] ? __pfx___report_bug+0x10/0x10 [ 87.643697][ T5321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 87.646362][ T5321] ? kasan_save_track+0x4f/0x80 [ 87.648530][ T5321] report_bug_entry+0x19b/0x290 [ 87.650756][ T5321] ? usb_submit_urb+0x1100/0x18b0 [ 87.652998][ T5321] ? usb_submit_urb+0x1105/0x18b0 [ 87.655302][ T5321] handle_bug+0xce/0x200 [ 87.657249][ T5321] exc_invalid_op+0x1a/0x50 [ 87.659326][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 87.661019][ T5321] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 87.663153][ T5321] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 87.671122][ T5321] RSP: 0000:ffffc9000ea6f798 EFLAGS: 00010246 [ 87.673639][ T5321] RAX: 0000000000000000 RBX: ffff888037469500 RCX: 0000000080000280 [ 87.677080][ T5321] RDX: ffff88803eab1e80 RSI: ffffffff8cc545c0 RDI: ffffffff90881920 [ 87.680510][ T5321] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 87.683957][ T5321] R10: ffffc9000ea6f880 R11: fffff52001d4df1c R12: 1ffff11008903c38 [ 87.687358][ T5321] R13: ffff88804481e1c0 R14: ffff88803eab1e80 R15: 0000000080000280 [ 87.690698][ T5321] ? usb_submit_urb+0x1091/0x18b0 [ 87.692869][ T5321] usb_start_wait_urb+0x13f/0x5b0 [ 87.694691][ T5321] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 87.697001][ T5321] usb_control_msg+0x234/0x3e0 [ 87.698962][ T5321] dtv5100_i2c_msg+0x231/0x2f0 [ 87.701097][ T5321] dtv5100_i2c_xfer+0x1a5/0x610 [ 87.703136][ T5321] __i2c_transfer+0x7bf/0x1fe0 [ 87.705072][ T5321] ? rt_mutex_lock_nested+0x167/0x1c0 [ 87.707380][ T5321] ? i2c_transfer+0xc7/0x2d0 [ 87.709302][ T5321] i2c_transfer+0x1cb/0x2d0 [ 87.711337][ T5321] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 87.713742][ T5321] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 87.716313][ T5321] ? _copy_from_user+0x94/0xb0 [ 87.718445][ T5321] i2cdev_write+0x113/0x1e0 [ 87.720437][ T5321] ? __pfx_i2cdev_write+0x10/0x10 [ 87.722580][ T5321] vfs_write+0x296/0xba0 [ 87.724436][ T5321] ? __pfx_vfs_write+0x10/0x10 [ 87.726488][ T5321] ? __fget_files+0x2a/0x420 [ 87.728509][ T5321] ? __fget_files+0x2a/0x420 [ 87.730513][ T5321] ? __fget_files+0x3a2/0x420 [ 87.732653][ T5321] ? __fget_files+0x2a/0x420 [ 87.734757][ T5321] ksys_write+0x150/0x270 [ 87.736728][ T5321] ? __pfx_ksys_write+0x10/0x10 [ 87.738839][ T5321] do_syscall_64+0x166/0x520 [ 87.740900][ T5321] ? trace_irq_disable+0x3b/0x140 [ 87.743070][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.745835][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 87.747920][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.750276][ T5321] RIP: 0033:0x7f2c3719e159 [ 87.752160][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.760090][ T5321] RSP: 002b:00007f2c38042fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.763520][ T5321] RAX: ffffffffffffffda RBX: 00007f2c37426090 RCX: 00007f2c3719e159 [ 87.766636][ T5321] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 87.769734][ T5321] RBP: 00007f2c3723503b R08: 0000000000000000 R09: 0000000000000000 [ 87.773088][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.776347][ T5321] R13: 00007f2c37426128 R14: 00007f2c37426090 R15: 00007ffd08d637f8 [ 87.779612][ T5321] [ 87.781373][ T5321] Kernel Offset: disabled [ 87.783259][ T5321] Rebooting in 86400 seconds..