last executing test programs: 13.597860852s ago: executing program 4 (id=1693): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f260102030109021200"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 11.69541582s ago: executing program 2 (id=1696): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 11.5596468s ago: executing program 1 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd27, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "8919"}]}, 0x30}, 0x1, 0x0, 0x0, 0x44880}, 0x8008) 9.947092048s ago: executing program 4 (id=1699): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 9.567574878s ago: executing program 1 (id=1701): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x1}}, 0x2e) sendto(r2, 0x0, 0x0, 0x4008044, 0x0, 0x0) 9.001219762s ago: executing program 2 (id=1703): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r4 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 8.690827281s ago: executing program 3 (id=1704): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7c}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x480d0) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.690658005s ago: executing program 1 (id=1705): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x126) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8.679324503s ago: executing program 3 (id=1706): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 7.609122348s ago: executing program 3 (id=1707): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") fspick(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x404080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) mkdirat(0xffffffffffffff9c, 0x0, 0x64) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x20040, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 7.602824488s ago: executing program 1 (id=1708): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) poll(0x0, 0x0, 0x10000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000840)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0}) 7.499918019s ago: executing program 2 (id=1709): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.786184884s ago: executing program 0 (id=1712): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x38, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@generic={0xff, 0x35, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429e"}, @pad1, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x4, 0xfffffffffffffff7]}}]}}}, @rthdr={{0x18}}], 0x168}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.564236939s ago: executing program 4 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x20008080) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2734], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x4) r11 = openat$cgroup_devices(r7, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r11, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe0012ff000000078a", 0xfffffffffffffde2) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 5.856950128s ago: executing program 0 (id=1714): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x5, 0x4, "e8a38bd6"}, 0x0, 0x0}) 4.784740253s ago: executing program 3 (id=1715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x119440, 0x21) r5 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16=r0, @ANYRES32, @ANYBLOB="3da5", @ANYRESOCT=r5]) uname(0xfffffffffffffffc) 4.217219947s ago: executing program 4 (id=1716): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x556a, &(0x7f000000b9c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x60a0, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x90000, 0x102) getdents64(r0, 0x0, 0x0) 3.698921122s ago: executing program 0 (id=1717): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) 3.696909474s ago: executing program 2 (id=1718): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) flock(0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x126) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.397138474s ago: executing program 0 (id=1719): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r4 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2.311076788s ago: executing program 1 (id=1720): mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.16610446s ago: executing program 2 (id=1721): r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x2b, 0x0, 0xb, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x5, 0xa, 0x5, 0x8, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x3, 0x7fff, 0x3}, 0x50) 1.990183353s ago: executing program 3 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r3}]}, 0x24}}, 0x20008080) 1.867247346s ago: executing program 2 (id=1723): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c17aa31076b876c1d0000297ea6080cc65fd8251e4e9294ff0051f60a84c9f4d4938037e786a6d016109d4650049af3ca5c744b6e7461d73b6700000e4509c5bbcd72c6c9535c88c7c8c2cd69708cdb2bb5e49b54c38cbfc9421596a5c836ff418560762da07f88759deccaa8db4c2266350083e070932c8a8e5b3200000000000100002e539f4377b90764021e9836768808757bc7ef238d", 0xa4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8881) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) 1.865444165s ago: executing program 1 (id=1724): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 954.905537ms ago: executing program 3 (id=1725): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") fspick(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x404080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) mkdirat(0xffffffffffffff9c, 0x0, 0x64) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x20040, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) 954.640639ms ago: executing program 0 (id=1726): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8efb, 0x9, 0x400d792, 0x0, 0x2, 0x40, 0x7, 0xffffffff, 0x3, 0x0, 0x1000, 0xe}}, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x7, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd0000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 598.906733ms ago: executing program 4 (id=1727): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x5, 0x4, "e8a38bd6"}, 0x0, 0x0}) 254.252164ms ago: executing program 0 (id=1728): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) write$binfmt_elf64(r4, &(0x7f0000005b40)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x5, 0x3, 0x72, 0x2, 0x3, 0x1, 0x3a7, 0x40, 0x2ce, 0x2, 0x4, 0x38, 0x1, 0x200, 0x5, 0x1}, [{0x60000000, 0x0, 0xffffffff, 0xffff, 0xb52a, 0x9, 0x579f, 0x1}]}, 0x78) write$P9_RREMOVE(r4, &(0x7f0000005880)={0x7, 0x7b, 0x2}, 0x7) 0s ago: executing program 4 (id=1729): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 161][ T24] usb 3-1: USB disconnect, device number 72 [ 476.563704][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 476.572807][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 476.598957][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 476.618689][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 476.625802][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 476.630992][ T5901] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 476.643350][ T5901] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 476.650538][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 476.656994][ T5901] asix 5-1:0.188: probe with driver asix failed with error -32 [ 476.669032][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 476.688699][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 476.695628][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 476.709463][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 476.728722][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.741302][ T5916] pwc: Registered as video103. [ 476.768816][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 476.802845][ T5916] usb 4-1: USB disconnect, device number 71 [ 476.832924][ T6818] udevd[6818]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 476.868677][ T5901] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 476.868677][ T24] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 477.036276][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.049082][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 477.056823][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 477.064110][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.073064][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.073204][ T24] usb 3-1: Product: syz [ 477.088703][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.090054][ T24] usb 3-1: Manufacturer: syz [ 477.103852][ T24] usb 3-1: SerialNumber: syz [ 477.124446][ T24] usb 3-1: config 0 descriptor?? [ 477.129837][ T5901] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 477.129871][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.146333][ T5901] usb 2-1: config 0 descriptor?? [ 477.299073][T10294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1294'. [ 477.596152][ T5901] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 477.834437][ T5901] ft260 0003:0403:6030.001A: chip code: 6424 8183 [ 477.910737][ T9] usb 5-1: USB disconnect, device number 90 [ 478.043185][ T5901] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 478.243431][ T5916] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 478.434386][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 478.442065][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 478.453372][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 478.465673][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 478.469137][ T5901] ft260 0003:0403:6030.001A: failed to retrieve status: -71 [ 478.585124][ T5916] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 478.618855][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.627654][ T5916] usb 1-1: Product: syz [ 478.633504][ T5916] usb 1-1: Manufacturer: syz [ 478.668173][ T5916] usb 1-1: SerialNumber: syz [ 478.745711][ T5916] usb 1-1: config 0 descriptor?? [ 478.788183][T10298] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 478.815799][T10298] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 478.861402][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 478.878869][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 478.890711][ T5916] port100 1-1:0.0: NFC: Could not get supported command types [ 479.166791][ T5901] ft260 0003:0403:6030.001A: failed to reset I2C controller: -71 [ 479.185249][ T5901] usb 2-1: USB disconnect, device number 78 [ 479.199938][ T5916] usb 1-1: USB disconnect, device number 70 [ 479.379714][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 479.549736][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 479.557933][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 479.566828][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 479.576866][ T5908] usb 3-1: USB disconnect, device number 73 [ 479.577253][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 479.607864][ T9] usb 5-1: config 1 has no interface number 0 [ 479.620474][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.641866][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 479.655422][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 479.665195][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.690678][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 479.692128][ T5916] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 479.894266][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 479.909680][T10330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'. [ 480.981824][ T9] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 481.009929][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 481.310222][ T5916] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.318369][ T5916] usb 2-1: config 0 has no interface number 0 [ 481.348715][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 481.356869][ T5916] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.380331][ T29] usb 5-1: USB disconnect, device number 91 [ 481.400435][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.412022][ T29] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 481.438687][ T5916] usb 2-1: Product: syz [ 481.460835][ T5916] usb 2-1: Manufacturer: syz [ 481.486156][ T5916] usb 2-1: SerialNumber: syz [ 481.501944][ T5916] usb 2-1: config 0 descriptor?? [ 481.516244][ T5916] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.538699][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 481.548321][ T24] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 481.560190][ T24] usb 4-1: config 0 has no interface number 0 [ 481.566427][ T24] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 481.582318][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 481.599290][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.607456][ T24] usb 4-1: Product: syz [ 481.612471][ T24] usb 4-1: Manufacturer: syz [ 481.617215][ T24] usb 4-1: SerialNumber: syz [ 481.629934][ T24] usb 4-1: config 0 descriptor?? [ 481.645020][T10331] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.723170][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 481.743745][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 481.861164][T10331] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.941823][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 481.979820][ T5916] usb 2-1: USB disconnect, device number 79 [ 482.019720][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 482.094166][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 482.150921][ T5916] quatech2 2-1:0.51: device disconnected [ 482.373011][ T5908] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 482.730577][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.741748][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 482.785686][ T5908] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 482.826851][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.851628][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 482.986074][ T24] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 483.048170][ T5908] usb 5-1: config 0 descriptor?? [ 483.212033][ T24] asix 4-1:0.188: probe with driver asix failed with error -32 [ 483.419481][ T30] audit: type=1326 audit(2000000025.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10353 comm="syz.0.1314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x0 [ 483.479062][ T5901] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 483.609722][ T5908] kovaplus 0003:1E7D:2D50.001B: item fetching failed at offset 2/5 [ 483.618144][ T5908] kovaplus 0003:1E7D:2D50.001B: parse failed [ 483.626483][ T5908] kovaplus 0003:1E7D:2D50.001B: probe with driver kovaplus failed with error -22 [ 483.640654][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.665483][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.686976][ T5901] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.699475][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.707687][ T5901] usb 3-1: SerialNumber: syz [ 483.812163][ T9] usb 5-1: USB disconnect, device number 92 [ 483.895368][ T5908] usb 4-1: USB disconnect, device number 72 [ 483.943480][ T5901] usb 3-1: 0:2 : does not exist [ 483.954213][ T5940] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 484.011246][ T5901] usb 3-1: USB disconnect, device number 74 [ 484.080703][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.048670][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 485.055854][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.070431][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.080537][ T5940] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 485.828475][T10364] loop3: detected capacity change from 0 to 40427 [ 485.853777][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.878473][ T5940] usb 2-1: config 0 descriptor?? [ 485.970957][T10364] F2FS-fs (loop3): build fault injection rate: 771 [ 485.988628][T10364] F2FS-fs (loop3): invalid crc value [ 486.466956][T10364] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 486.500306][T10364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 487.033492][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 487.042054][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 487.088449][ T5940] usb 2-1: USB disconnect, device number 80 [ 487.231516][T10374] fuse: Bad value for 'fd' [ 488.402497][ T5832] syz-executor: attempt to access beyond end of device [ 488.402497][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 488.428801][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 488.428836][ T5832] Tainted: [L]=SOFTLOCKUP [ 488.428845][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 488.428859][ T5832] Call Trace: [ 488.428868][ T5832] [ 488.428878][ T5832] dump_stack_lvl+0xe8/0x150 [ 488.428914][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 488.428956][ T5832] f2fs_write_end_io+0xcdb/0xff0 [ 488.429000][ T5832] __submit_merged_bio+0x256/0x650 [ 488.429039][ T5832] __submit_merged_write_cond+0x3c3/0x4e0 [ 488.429082][ T5832] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 488.429140][ T5832] f2fs_write_data_pages+0x2970/0x35e0 [ 488.429162][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 488.429227][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 488.429265][ T5832] ? css_rstat_updated+0x23a/0x530 [ 488.429347][ T5832] ? rcu_is_watching+0x15/0xb0 [ 488.429379][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 488.429419][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 488.429454][ T5832] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.429496][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 488.429528][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 488.429553][ T5832] do_writepages+0x32e/0x550 [ 488.429590][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 488.429627][ T5832] filemap_fdatawrite+0x1e9/0x2f0 [ 488.429657][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 488.429735][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 488.429772][ T5832] f2fs_sync_dirty_inodes+0x30e/0x810 [ 488.429811][ T5832] f2fs_write_checkpoint+0x9cf/0x2680 [ 488.429871][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 488.429938][ T5832] ? kfree+0x1c1/0x610 [ 488.429964][ T5832] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 488.430000][ T5832] kill_f2fs_super+0x314/0x720 [ 488.430030][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 488.430067][ T5832] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.430106][ T5832] deactivate_locked_super+0xbc/0x130 [ 488.430137][ T5832] cleanup_mnt+0x437/0x4d0 [ 488.430167][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.430212][ T5832] task_work_run+0x1d9/0x270 [ 488.430237][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 488.430271][ T5832] exit_to_user_mode_loop+0xed/0x480 [ 488.430296][ T5832] ? rcu_is_watching+0x15/0xb0 [ 488.430326][ T5832] do_syscall_64+0x2b7/0xf80 [ 488.430356][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.430379][ T5832] ? trace_irq_disable+0x37/0x100 [ 488.430407][ T5832] ? clear_bhb_loop+0x40/0x90 [ 488.430434][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.430456][ T5832] RIP: 0033:0x7fdf9179c117 [ 488.430478][ T5832] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 488.430498][ T5832] RSP: 002b:00007ffe87645858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 488.430522][ T5832] RAX: 0000000000000000 RBX: 00007fdf9180471f RCX: 00007fdf9179c117 [ 488.430537][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe87645910 [ 488.430551][ T5832] RBP: 00007ffe87645910 R08: 00007ffe87646910 R09: 00000000ffffffff [ 488.430566][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe876469a0 [ 488.430581][ T5832] R13: 00007fdf9180471f R14: 0000000000076e47 R15: 00007ffe876469e0 [ 488.430618][ T5832] [ 488.432794][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 489.771128][T10402] netlink: 'syz.1.1330': attribute type 5 has an invalid length. [ 489.938890][ T5916] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 489.990061][T10408] fuse: Bad value for 'fd' [ 489.994684][ T24] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 490.069914][T10412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1335'. [ 490.084302][T10410] blkio.reset_stats is deprecated [ 490.132167][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.151151][ T5916] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 490.168782][ T5916] usb 1-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 490.198073][ T5916] usb 1-1: Product: syz [ 490.207090][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 490.220099][ T5916] usb 1-1: Manufacturer: syz [ 490.225324][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.242352][ T5916] usb 1-1: config 0 descriptor?? [ 490.247456][ T24] usb 3-1: Product: syz [ 490.252860][ T24] usb 3-1: Manufacturer: syz [ 490.261378][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 490.270450][ T24] usb 3-1: SerialNumber: syz [ 490.287081][ T24] usb 3-1: config 0 descriptor?? [ 490.542550][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 490.577264][T10425] overlayfs: failed to resolve './file0': -2 [ 490.834471][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 490.966509][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.151037][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.161451][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.172095][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 491.250417][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 491.279657][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 491.330815][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 491.347609][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 491.369976][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 491.379958][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 491.389649][ T5916] pwc: recv_control_msg error -32 req 02 val 2600 [ 491.397261][ T5916] pwc: recv_control_msg error -32 req 02 val 2900 [ 491.409261][ T5916] pwc: recv_control_msg error -32 req 02 val 2800 [ 491.423196][ T5916] pwc: recv_control_msg error -32 req 04 val 1100 [ 491.433821][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 491.446225][ T5916] pwc: Registered as video103. [ 491.456631][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 491.477414][ T5916] usb 1-1: USB disconnect, device number 71 [ 491.859177][ T5908] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 492.010465][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.031032][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.040591][ T5916] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 492.050811][ T5908] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.061713][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.071064][ T5908] usb 4-1: SerialNumber: syz [ 492.159394][ T5940] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 492.167558][ T24] gspca_stk1135: reg_w 0xf err -71 [ 492.175437][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.187060][ T24] gspca_stk1135: Sensor write failed [ 492.193131][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.201643][ T24] gspca_stk1135: Sensor write failed [ 492.207016][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.214311][ T24] gspca_stk1135: Sensor read failed [ 492.223249][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.230019][ T24] gspca_stk1135: Sensor read failed [ 492.235591][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 492.242999][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.253280][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.260078][ T5916] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 492.269241][ T24] gspca_stk1135: Sensor read failed [ 492.274559][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.282390][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.290639][ T24] gspca_stk1135: Sensor read failed [ 492.295929][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.305929][ T5916] usb 2-1: config 0 descriptor?? [ 492.319983][ T5908] usb 4-1: 0:2 : does not exist [ 492.327936][ T24] gspca_stk1135: Sensor write failed [ 492.337658][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 492.338976][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 492.345889][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 492.357391][ T24] gspca_stk1135: Sensor write failed [ 492.363216][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.363253][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.363302][ T5940] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 492.363329][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.374310][ T5940] usb 5-1: config 0 descriptor?? [ 492.414165][ T24] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 492.459012][ T24] usb 3-1: USB disconnect, device number 75 [ 492.465526][ T5908] usb 4-1: USB disconnect, device number 73 [ 492.534563][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.960526][ T5916] pwc: recv_control_msg error -71 req 02 val 2700 [ 492.975687][ T5916] pwc: recv_control_msg error -71 req 02 val 2c00 [ 492.992839][ T5916] pwc: recv_control_msg error -71 req 04 val 1000 [ 493.008104][ T5940] usb 5-1: language id specifier not provided by device, defaulting to English [ 493.010586][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 493.027337][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 493.034413][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 493.042500][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 493.049863][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 493.056925][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 493.064050][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 493.071491][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 493.079892][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 493.158669][ T5963] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 493.229452][ T5940] letsketch 0003:6161:4D15.001C: Device info: è‚¿ [ 493.298375][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 493.307946][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 493.314952][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 493.325906][ T5916] pwc: Registered as video103. [ 493.333213][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 493.339276][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 493.355580][ T5916] usb 2-1: USB disconnect, device number 81 [ 494.111219][ T5963] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 494.120165][ T5963] usb 3-1: config 0 has no interface number 0 [ 494.140991][ T5963] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 494.151183][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.168742][ T5940] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 494.182675][ T5940] letsketch 0003:6161:4D15.001C: probe with driver letsketch failed with error -71 [ 494.216145][ T5963] usb 3-1: Product: syz [ 494.228639][ T5940] usb 5-1: USB disconnect, device number 93 [ 494.238611][ T5963] usb 3-1: Manufacturer: syz [ 494.243364][ T5963] usb 3-1: SerialNumber: syz [ 494.292900][T10468] overlayfs: failed to resolve './file1': -2 [ 494.309776][ T5963] usb 3-1: config 0 descriptor?? [ 494.344133][ T5963] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 494.551990][ T5963] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 494.569215][ T5963] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 494.648647][ T5940] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 494.762305][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 102 [ 494.814866][ T5940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 494.829624][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.838189][ T5940] usb 1-1: Product: syz [ 494.845344][ T5940] usb 1-1: Manufacturer: syz [ 494.850696][ T5940] usb 1-1: SerialNumber: syz [ 494.861001][ T5940] usb 1-1: config 0 descriptor?? [ 494.984371][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 494.988051][ T5916] usb 3-1: USB disconnect, device number 76 [ 495.012820][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 495.045278][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 495.071806][ T5940] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 495.080853][ T5916] quatech2 3-1:0.51: device disconnected [ 495.283735][ T5940] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 496.590087][T10517] overlayfs: failed to resolve './file1': -2 [ 496.599750][ T5908] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 496.759283][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 496.769468][ T5908] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 496.779096][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.788243][ T5908] usb 3-1: Product: syz [ 496.793403][ T5908] usb 3-1: Manufacturer: syz [ 496.798160][ T5908] usb 3-1: SerialNumber: syz [ 496.809954][ T5908] usb 3-1: config 0 descriptor?? [ 496.823061][ T5908] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 496.928667][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 497.085574][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 497.096862][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.105629][ T24] usb 5-1: Product: syz [ 497.111321][ T24] usb 5-1: Manufacturer: syz [ 497.116055][ T24] usb 5-1: SerialNumber: syz [ 497.130231][ T24] usb 5-1: config 0 descriptor?? [ 497.145278][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 497.348139][ T24] gspca_sunplus: reg_r err -32 [ 497.355282][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 497.433208][ T24] usb 1-1: USB disconnect, device number 72 [ 497.479879][ T5940] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 497.527259][T10530] loop0: detected capacity change from 0 to 512 [ 497.535151][T10530] EXT4-fs: Ignoring removed oldalloc option [ 497.590384][T10530] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1376: Parent and EA inode have the same ino 15 [ 497.602901][T10530] loop0: lost filesystem error report for type 5 error -117 [ 497.608568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 497.622442][ C0] EXT4-fs (loop0): initial error at time 2000000039: ext4_xattr_inode_iget:437 [ 497.631492][ C0] EXT4-fs (loop0): last error at time 2000000039: ext4_xattr_inode_iget:437 [ 497.669086][ T5940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.680401][ T5940] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.690779][ T5940] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 497.700020][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 497.709560][ T5940] usb 4-1: SerialNumber: syz [ 497.782520][T10530] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1376: Parent and EA inode have the same ino 15 [ 497.794939][T10530] loop0: lost filesystem error report for type 5 error -117 [ 497.795820][T10530] EXT4-fs (loop0): 1 orphan inode deleted [ 497.813486][T10530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.924759][ T5940] usb 4-1: 0:2 : does not exist [ 497.991355][ T5940] usb 4-1: USB disconnect, device number 74 [ 498.051393][ T6818] udevd[6818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.226009][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.296447][T10540] syzkaller0: entered promiscuous mode [ 498.302524][T10540] syzkaller0: entered allmulticast mode [ 498.481637][ T5908] gspca_ov534_9: reg_w failed -71 [ 498.738762][ T5908] gspca_ov534_9: Unknown sensor 0000 [ 498.738864][ T5908] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 498.778646][ T5940] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 498.789176][ T5908] usb 3-1: USB disconnect, device number 77 [ 499.829568][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.824384][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 500.848396][ T5940] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 501.192551][ T29] usb 5-1: USB disconnect, device number 94 [ 501.752381][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.845435][ T5940] usb 1-1: config 0 descriptor?? [ 501.874609][T10565] loop4: detected capacity change from 0 to 512 [ 501.882405][T10564] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1387'. [ 501.899916][ T5940] usb 1-1: can't set config #0, error -71 [ 501.918774][T10565] EXT4-fs: Ignoring removed oldalloc option [ 501.930209][ T5940] usb 1-1: USB disconnect, device number 73 [ 501.970087][ T800] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 502.034996][T10565] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1388: Parent and EA inode have the same ino 15 [ 502.069736][T10565] loop4: lost filesystem error report for type 5 error -117 [ 502.078576][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 502.092463][ C1] EXT4-fs (loop4): initial error at time 2000000003: ext4_xattr_inode_iget:437 [ 502.101507][ C1] EXT4-fs (loop4): last error at time 2000000003: ext4_xattr_inode_iget:437 [ 502.144914][ T800] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 502.164580][ T800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.181093][ T800] usb 4-1: Product: syz [ 502.187905][ T800] usb 4-1: Manufacturer: syz [ 502.192899][ T800] usb 4-1: SerialNumber: syz [ 502.201191][ T800] usb 4-1: config 0 descriptor?? [ 502.277811][T10565] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1388: Parent and EA inode have the same ino 15 [ 502.293126][T10565] loop4: lost filesystem error report for type 5 error -117 [ 502.293921][T10565] EXT4-fs (loop4): 1 orphan inode deleted [ 502.302727][ T29] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 502.315013][T10565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.464088][ T800] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 502.632596][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.643145][ T29] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.653515][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.674772][ T29] usb 3-1: config 0 descriptor?? [ 502.684400][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 502.775255][ T800] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 502.785328][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.829541][ T5901] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 503.006613][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.025192][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.039198][ T5901] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 503.048755][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.056892][ T5901] usb 2-1: SerialNumber: syz [ 503.086118][ T29] pwc: recv_control_msg error -71 req 02 val 2b00 [ 503.098721][ T29] pwc: recv_control_msg error -71 req 02 val 2700 [ 503.106286][ T29] pwc: recv_control_msg error -71 req 02 val 2c00 [ 503.113721][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 503.120959][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 503.128957][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 503.142160][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 503.160188][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 503.171840][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 503.189491][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 503.200728][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 503.207791][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 503.214912][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 503.222006][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 503.229275][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 503.236289][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 503.255922][ T29] pwc: Registered as video103. [ 503.267469][T10588] overlayfs: failed to resolve './file0': -2 [ 503.277161][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 503.297554][ T5901] usb 2-1: 0:2 : does not exist [ 503.325541][ T29] usb 3-1: USB disconnect, device number 78 [ 503.373124][ T5901] usb 2-1: USB disconnect, device number 82 [ 503.541381][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.660475][T10598] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1400'. [ 503.808691][ T29] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 503.834440][ T5916] usb 4-1: USB disconnect, device number 75 [ 503.849583][ T5908] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 503.965014][ T5901] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 503.982482][ T29] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 504.942022][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.950560][ T29] usb 5-1: Product: syz [ 504.954774][ T29] usb 5-1: Manufacturer: syz [ 504.960421][ T29] usb 5-1: SerialNumber: syz [ 504.969731][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 504.980218][ T29] usb 5-1: config 0 descriptor?? [ 505.015841][T10608] loop3: detected capacity change from 0 to 512 [ 505.946195][ T29] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 505.953088][ T5908] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 505.963257][ T5908] usb 1-1: config 0 has no interface number 0 [ 505.972665][ T5908] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 505.985669][T10608] EXT4-fs: Ignoring removed oldalloc option [ 506.622938][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.953115][ T29] gspca_sunplus: reg_r err -32 [ 506.960922][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.971012][ T29] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 506.979130][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.993582][ T5908] usb 1-1: Product: syz [ 507.028355][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.037650][ T5908] usb 1-1: Manufacturer: syz [ 507.047168][ T5908] usb 1-1: SerialNumber: syz [ 507.057339][T10608] EXT4-fs: error -4 creating inode table initialization thread [ 507.073466][ T5908] usb 1-1: config 0 descriptor?? [ 507.116002][T10608] EXT4-fs (loop3): mount failed [ 507.133434][ T5901] usb 3-1: string descriptor 0 read error: -71 [ 507.155896][ T5908] usb 1-1: can't set config #0, error -71 [ 507.160256][ T5901] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.181279][ T5908] usb 1-1: USB disconnect, device number 74 [ 507.233048][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.276634][ T5901] usb 3-1: can't set config #1, error -71 [ 507.301499][ T5901] usb 3-1: USB disconnect, device number 79 [ 507.676402][ T5908] usb 5-1: USB disconnect, device number 95 [ 507.968723][ T5901] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 508.078672][ T5908] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 508.135677][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.149339][ T5901] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.161747][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.173115][ T5901] usb 2-1: config 0 descriptor?? [ 508.193581][ T5901] pwc: Askey VC010 type 2 USB webcam detected. [ 508.233502][ T5908] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 508.243350][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.253643][ T5908] usb 5-1: Product: syz [ 508.260782][ T5908] usb 5-1: Manufacturer: syz [ 508.265441][ T5908] usb 5-1: SerialNumber: syz [ 508.274457][ T5908] usb 5-1: config 0 descriptor?? [ 508.505638][ T30] audit: type=1800 audit(2000000005.860:10): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1414" name="bus" dev="overlay" ino=1688 res=0 errno=0 [ 508.505718][ T5908] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 508.606924][ T5901] pwc: recv_control_msg error -71 req 02 val 2b00 [ 508.614282][ T5901] pwc: recv_control_msg error -71 req 02 val 2700 [ 508.649108][ T5901] pwc: recv_control_msg error -71 req 02 val 2c00 [ 508.661427][ T5901] pwc: recv_control_msg error -71 req 04 val 1000 [ 508.670768][ T5901] pwc: recv_control_msg error -71 req 04 val 1300 [ 508.677867][ T5901] pwc: recv_control_msg error -71 req 04 val 1400 [ 508.687257][ T5901] pwc: recv_control_msg error -71 req 02 val 2000 [ 508.694708][ T5901] pwc: recv_control_msg error -71 req 02 val 2100 [ 508.702094][ T5901] pwc: recv_control_msg error -71 req 04 val 1500 [ 508.709933][ T5901] pwc: recv_control_msg error -71 req 02 val 2500 [ 508.717048][ T5901] pwc: recv_control_msg error -71 req 02 val 2400 [ 508.727653][ T5908] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 508.739512][ T5901] pwc: recv_control_msg error -71 req 02 val 2600 [ 508.747951][ T5901] pwc: recv_control_msg error -71 req 02 val 2900 [ 508.755931][ T5901] pwc: recv_control_msg error -71 req 02 val 2800 [ 508.766099][ T5901] pwc: recv_control_msg error -71 req 04 val 1100 [ 508.776955][ T5901] pwc: recv_control_msg error -71 req 04 val 1200 [ 508.919121][ T5901] pwc: Registered as video103. [ 508.957153][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 509.068950][ T5901] usb 2-1: USB disconnect, device number 83 [ 513.007458][ T5908] usb 5-1: USB disconnect, device number 96 [ 513.298671][ T5963] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 513.338649][ T5908] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 513.488692][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 513.500243][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.510935][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.517857][ T5963] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 513.526922][ T5908] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.538729][ T5963] usb 4-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 513.547553][ T5908] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 513.547717][ T5963] usb 4-1: Product: syz [ 513.560888][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.574370][ T5908] usb 5-1: Product: syz [ 513.578959][ T5908] usb 5-1: Manufacturer: syz [ 513.586217][ T5908] usb 5-1: SerialNumber: syz [ 513.598815][ T5963] usb 4-1: Manufacturer: syz [ 513.606576][ T5908] usb 5-1: config 0 descriptor?? [ 513.610224][ T5963] usb 4-1: config 0 descriptor?? [ 513.632357][ T5963] pwc: Askey VC010 type 2 USB webcam detected. [ 513.827026][ T5901] usb 5-1: USB disconnect, device number 97 [ 514.058775][ T5963] pwc: recv_control_msg error -32 req 02 val 2b00 [ 514.065883][ T5963] pwc: recv_control_msg error -32 req 02 val 2700 [ 514.073403][ T5963] pwc: recv_control_msg error -32 req 02 val 2c00 [ 514.080563][ T5963] pwc: recv_control_msg error -32 req 04 val 1000 [ 514.087847][ T5963] pwc: recv_control_msg error -32 req 04 val 1300 [ 514.097206][ T5963] pwc: recv_control_msg error -32 req 04 val 1400 [ 514.104503][ T5963] pwc: recv_control_msg error -32 req 02 val 2000 [ 514.111610][ T5963] pwc: recv_control_msg error -32 req 02 val 2100 [ 514.121462][ T5963] pwc: recv_control_msg error -32 req 04 val 1500 [ 514.128588][ T5963] pwc: recv_control_msg error -32 req 02 val 2500 [ 514.135705][ T5963] pwc: recv_control_msg error -32 req 02 val 2400 [ 514.144893][ T5963] pwc: recv_control_msg error -32 req 02 val 2600 [ 514.152792][ T5963] pwc: recv_control_msg error -32 req 02 val 2900 [ 514.160267][ T5963] pwc: recv_control_msg error -32 req 02 val 2800 [ 514.178681][ T5908] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 514.188671][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 514.331656][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.342300][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.351508][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 514.358188][ T5908] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 514.370509][ T5963] pwc: recv_control_msg error -71 req 04 val 1200 [ 514.377121][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 514.386167][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 514.398855][ T5963] pwc: Registered as video103. [ 514.402092][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 514.414211][ T5908] usb 3-1: SerialNumber: syz [ 514.421028][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 514.425307][ T5963] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 514.435476][ T24] usb 1-1: config 1 has no interface number 0 [ 514.441016][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.441129][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 514.441454][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 514.498416][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.511781][ T5963] usb 4-1: USB disconnect, device number 76 [ 514.582576][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 514.635578][T10696] loop4: detected capacity change from 0 to 512 [ 514.651940][ T5908] usb 3-1: 0:2 : does not exist [ 514.665157][T10696] EXT4-fs: Ignoring removed oldalloc option [ 514.761196][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 514.785650][T10696] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1433: Parent and EA inode have the same ino 15 [ 514.817570][T10696] loop4: lost filesystem error report for type 5 error -117 [ 514.818571][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 514.832422][ C0] EXT4-fs (loop4): initial error at time 2000000005: ext4_xattr_inode_iget:437 [ 514.841448][ C0] EXT4-fs (loop4): last error at time 2000000005: ext4_xattr_inode_iget:437 [ 514.888280][ T5908] usb 3-1: USB disconnect, device number 80 [ 514.961980][T10696] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1433: Parent and EA inode have the same ino 15 [ 514.990617][T10696] loop4: lost filesystem error report for type 5 error -117 [ 514.991248][T10696] EXT4-fs (loop4): 1 orphan inode deleted [ 515.021584][T10696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.298430][ T5916] usb 1-1: USB disconnect, device number 75 [ 515.306266][ T5916] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 515.615218][T10713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.693509][T10713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.778689][ T5901] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 515.953976][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.009905][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.075044][ T5901] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 516.103008][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 516.112412][ T5901] usb 4-1: SerialNumber: syz [ 516.369263][ T5901] usb 4-1: 0:2 : does not exist [ 516.374897][ T5901] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 516.398644][ T5916] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 516.454909][ T5901] usb 4-1: USB disconnect, device number 77 [ 516.515411][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.558695][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 516.565815][ T5916] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 516.761966][ T5916] usb 1-1: config 0 has no interface number 0 [ 516.772057][ T5916] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 516.782137][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.782807][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.790911][ T5916] usb 1-1: Product: syz [ 516.803528][ T5916] usb 1-1: Manufacturer: syz [ 516.808168][ T5916] usb 1-1: SerialNumber: syz [ 516.820394][ T5916] usb 1-1: config 0 descriptor?? [ 516.828647][ T5916] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 517.049204][ T5916] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 517.092335][ T5916] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 517.128646][ T5963] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 517.252748][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 517.272117][ T5916] usb 1-1: USB disconnect, device number 76 [ 517.292729][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 517.310465][ T5963] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 517.335920][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 517.351901][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 517.371005][ T5963] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 517.381912][ T5916] quatech2 1-1:0.51: device disconnected [ 517.407058][ T5963] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 517.413122][ T5908] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 517.436460][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.447936][ T5963] usb 5-1: Product: syz [ 517.452281][ T5963] usb 5-1: Manufacturer: syz [ 517.456916][ T5963] usb 5-1: SerialNumber: syz [ 517.465231][ T5963] usb 5-1: config 0 descriptor?? [ 517.474749][T10727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.484153][T10727] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.493781][ T5963] usb 5-1: ucan: probing device on interface #0 [ 517.593340][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.604202][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.614579][ T5908] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 517.623936][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.632153][ T5908] usb 4-1: SerialNumber: syz [ 517.668740][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 517.788685][ T5940] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 517.839864][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 517.855582][ T5908] usb 4-1: 0:2 : does not exist [ 517.867022][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.894603][T10744] loop0: detected capacity change from 0 to 1024 [ 517.901173][ T9] usb 2-1: config 0 has no interface number 0 [ 517.907348][ T9] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 517.920753][ T5963] usb 5-1: ucan: device reported invalid device info [ 517.927497][ T5963] usb 5-1: ucan: probe failed; try to update the device firmware [ 517.940915][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 517.962142][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 517.964990][ T5908] usb 4-1: USB disconnect, device number 78 [ 517.979239][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.002731][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.021181][ T5940] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.035507][ T9] usb 2-1: Product: syz [ 518.045825][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.054812][ T9] usb 2-1: Manufacturer: syz [ 518.064712][ T9] usb 2-1: SerialNumber: syz [ 518.081900][ T5940] usb 3-1: config 0 descriptor?? [ 518.102432][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 518.115693][ T9] usb 2-1: config 0 descriptor?? [ 518.130770][ T6818] udevd[6818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.361926][ T9] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 518.383465][ T9] cx231xx 2-1:0.1: Not found matching IAD interface [ 518.404135][ T9] usb 2-1: USB disconnect, device number 84 [ 518.430650][T10746] loop0: detected capacity change from 0 to 256 [ 518.506903][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 518.528718][T10746] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.548347][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 518.584602][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 518.618693][T10746] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 518.621500][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 518.920364][ T5940] pwc: recv_control_msg error -71 req 04 val 1400 [ 518.935052][ T5940] pwc: recv_control_msg error -71 req 02 val 2000 [ 518.949236][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 518.967687][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 518.974425][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 518.995901][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 519.037693][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 519.056243][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 519.069014][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 519.086169][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 519.119648][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 519.127692][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 519.138080][ T5940] pwc: Registered as video103. [ 519.144477][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 519.151938][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.160559][ T9] usb 2-1: config 0 has no interface number 0 [ 519.169201][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 519.179290][ T9] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 519.205511][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 519.228144][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 519.244341][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.258504][ T5940] usb 3-1: USB disconnect, device number 81 [ 519.269476][T10756] binder: BINDER_SET_CONTEXT_MGR already set [ 519.287560][ T9] usb 2-1: Product: syz [ 519.300321][T10756] binder: 10755:10756 ioctl 4018620d 200000004a80 returned -16 [ 519.306016][ T9] usb 2-1: Manufacturer: syz [ 519.313431][T10758] loop3: detected capacity change from 0 to 512 [ 519.340214][ T9] usb 2-1: SerialNumber: syz [ 519.357803][T10758] EXT4-fs: Ignoring removed oldalloc option [ 519.384876][ T9] usb 2-1: config 0 descriptor?? [ 519.410518][T10758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1455: Parent and EA inode have the same ino 15 [ 519.424454][T10758] loop3: lost filesystem error report for type 5 error -117 [ 519.428564][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 519.442465][ C1] EXT4-fs (loop3): initial error at time 2000000004: ext4_xattr_inode_iget:437 [ 519.451516][ C1] EXT4-fs (loop3): last error at time 2000000004: ext4_xattr_inode_iget:437 [ 519.582276][T10758] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.1455: Parent and EA inode have the same ino 15 [ 519.602756][T10758] loop3: lost filesystem error report for type 5 error -117 [ 519.603403][T10758] EXT4-fs (loop3): 1 orphan inode deleted [ 519.633709][T10758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.655458][ T9] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 519.674690][ T9] cx231xx 2-1:0.1: Not found matching IAD interface [ 519.898980][ T5940] usb 5-1: USB disconnect, device number 98 [ 519.979201][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 520.196074][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.216243][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.227626][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.240588][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.716227][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.868845][ T9] usb 1-1: SerialNumber: syz [ 521.143484][ T9] usb 1-1: 0:2 : does not exist [ 521.148490][ T9] usb 1-1: unit 1 not found! [ 521.168099][ T5963] usb 2-1: USB disconnect, device number 85 [ 521.288028][ T9] usb 1-1: USB disconnect, device number 77 [ 521.333224][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.344229][ T5908] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 521.550009][ T5908] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 521.561564][T10791] binder: BINDER_SET_CONTEXT_MGR already set [ 521.571428][T10791] binder: 10790:10791 ioctl 4018620d 200000004a80 returned -16 [ 521.580476][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.598674][ T5908] usb 3-1: Product: syz [ 521.603044][ T5908] usb 3-1: Manufacturer: syz [ 521.607742][ T5908] usb 3-1: SerialNumber: syz [ 521.629922][ T5908] usb 3-1: config 0 descriptor?? [ 521.814011][T10797] loop0: detected capacity change from 0 to 512 [ 521.833690][T10797] EXT4-fs: Ignoring removed oldalloc option [ 521.940704][T10797] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1470: Parent and EA inode have the same ino 15 [ 521.956769][T10797] loop0: lost filesystem error report for type 5 error -117 [ 521.958573][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 521.972427][ C1] EXT4-fs (loop0): initial error at time 2000000002: ext4_xattr_inode_iget:437 [ 521.981484][ C1] EXT4-fs (loop0): last error at time 2000000002: ext4_xattr_inode_iget:437 [ 522.106929][ T5908] airspy 3-1:0.0: Board ID: 00 [ 522.111976][ T5908] airspy 3-1:0.0: Firmware version: [ 522.136894][T10797] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1470: Parent and EA inode have the same ino 15 [ 522.176213][T10797] loop0: lost filesystem error report for type 5 error -117 [ 522.176971][T10797] EXT4-fs (loop0): 1 orphan inode deleted [ 522.206843][T10797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.270472][ T5908] airspy 3-1:0.0: Registered as swradio24 [ 523.276276][ T5908] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 523.476697][T10818] fuse: Bad value for 'fd' [ 523.498687][T10809] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 523.908725][T10809] usb 4-1: Using ep0 maxpacket: 32 [ 524.035508][T10809] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.203996][T10809] usb 4-1: config 0 has no interface number 0 [ 524.295601][T10809] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 524.408823][T10809] usb 4-1: config 0 interface 1 has no altsetting 0 [ 524.420807][T10809] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 524.438611][T10809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.446675][T10809] usb 4-1: Product: syz [ 524.468624][T10809] usb 4-1: Manufacturer: syz [ 524.473297][T10809] usb 4-1: SerialNumber: syz [ 524.501794][T10809] usb 4-1: config 0 descriptor?? [ 524.567104][ T9] usb 3-1: USB disconnect, device number 82 [ 524.658356][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.827574][T10809] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 524.841072][T10809] cx231xx 4-1:0.1: Not found matching IAD interface [ 524.855862][T10809] usb 4-1: USB disconnect, device number 79 [ 525.108639][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 525.260307][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.270748][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.280356][T10809] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 525.283647][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 525.297729][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 525.306153][ T9] usb 3-1: SerialNumber: syz [ 525.468739][T10809] usb 4-1: Using ep0 maxpacket: 32 [ 525.483619][T10809] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 525.509430][T10809] usb 4-1: config 0 has no interface number 0 [ 525.515618][T10809] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 525.532006][T10809] usb 4-1: config 0 interface 1 has no altsetting 0 [ 525.540473][ T9] usb 3-1: 0:2 : does not exist [ 525.545256][T10809] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 525.546286][ T9] usb 3-1: unit 1 not found! [ 525.557260][T10809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.583943][T10809] usb 4-1: Product: syz [ 525.588265][T10809] usb 4-1: Manufacturer: syz [ 525.603901][T10809] usb 4-1: SerialNumber: syz [ 525.613016][T10809] usb 4-1: config 0 descriptor?? [ 525.676997][ T9] usb 3-1: USB disconnect, device number 83 [ 525.735653][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.835045][T10809] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 525.869210][T10809] cx231xx 4-1:0.1: Not found matching IAD interface [ 525.956590][T10852] fuse: Bad value for 'fd' [ 526.578653][ T5963] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 526.748657][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 526.757081][ T5963] usb 3-1: config 1 has an invalid interface number: 209 but max is 0 [ 526.778633][ T5963] usb 3-1: config 1 has no interface number 0 [ 526.785223][ T5963] usb 3-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 526.805051][ T5963] usb 3-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 526.816484][ T5963] usb 3-1: config 1 interface 209 has no altsetting 0 [ 526.834927][ T5963] usb 3-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 526.844365][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.854018][ T5963] usb 3-1: Product: syz [ 526.858365][ T5963] usb 3-1: Manufacturer: syz [ 526.864129][ T5963] usb 3-1: SerialNumber: syz [ 526.868997][ T5940] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 526.887690][T10864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 526.910226][T10864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.018919][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 527.030448][ T5940] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 527.038891][ T5940] usb 1-1: config 0 has no interface number 0 [ 527.052888][ T5940] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 527.062471][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.071050][ T5940] usb 1-1: Product: syz [ 527.075267][ T5940] usb 1-1: Manufacturer: syz [ 527.080315][ T5940] usb 1-1: SerialNumber: syz [ 527.089112][ T5940] usb 1-1: config 0 descriptor?? [ 527.100713][ T5940] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 527.258880][ T9] usb 4-1: USB disconnect, device number 80 [ 527.298700][ T5908] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 527.339743][ T5940] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 527.384976][ T5940] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 527.450080][ T5908] usb 2-1: device descriptor read/64, error -71 [ 527.548061][T10879] fuse: Bad value for 'fd' [ 527.561128][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1493'. [ 528.638938][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 528.653306][ T5836] usb 1-1: USB disconnect, device number 78 [ 528.668872][ T5908] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 529.650819][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 529.681316][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 529.971362][T10883] loop3: detected capacity change from 0 to 40427 [ 530.069261][T10883] F2FS-fs (loop3): build fault injection rate: 771 [ 530.087993][T10883] F2FS-fs (loop3): invalid crc value [ 530.249430][ T5836] quatech2 1-1:0.51: device disconnected [ 530.288666][ T5908] usb 2-1: device descriptor read/64, error -71 [ 530.314919][T10883] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 530.337866][T10883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 530.398500][ T5963] cdc_subset 3-1:1.209: probe with driver cdc_subset failed with error -71 [ 530.412190][ T5908] usb usb2-port1: attempt power cycle [ 530.437683][ T5963] usb 3-1: USB disconnect, device number 84 [ 530.480033][T10889] binder: BINDER_SET_CONTEXT_MGR already set [ 530.515213][T10889] binder: 10887:10889 ioctl 4018620d 200000004a80 returned -16 [ 530.535960][T10892] overlayfs: failed to resolve './file0': -2 [ 531.265931][T10895] loop4: detected capacity change from 0 to 40427 [ 531.280649][T10895] F2FS-fs (loop4): build fault injection rate: 174 [ 531.439830][T10895] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 531.454866][T10895] F2FS-fs (loop4): invalid crc value [ 531.479084][ T5832] syz-executor: attempt to access beyond end of device [ 531.479084][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 531.498861][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 531.498898][ T5832] Tainted: [L]=SOFTLOCKUP [ 531.498907][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 531.498921][ T5832] Call Trace: [ 531.498931][ T5832] [ 531.498942][ T5832] dump_stack_lvl+0xe8/0x150 [ 531.498979][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 531.499025][ T5832] f2fs_write_end_io+0xcdb/0xff0 [ 531.499074][ T5832] __submit_merged_bio+0x256/0x650 [ 531.499119][ T5832] __submit_merged_write_cond+0x3c3/0x4e0 [ 531.499165][ T5832] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 531.499229][ T5832] f2fs_write_data_pages+0x2970/0x35e0 [ 531.499253][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 531.499325][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 531.499368][ T5832] ? css_rstat_updated+0x23a/0x530 [ 531.499445][ T5832] ? rcu_is_watching+0x15/0xb0 [ 531.499476][ T5832] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 531.499509][ T5832] ? lru_gen_update_size+0x7c9/0xd10 [ 531.499551][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 531.499611][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 531.499638][ T5832] do_writepages+0x32e/0x550 [ 531.499680][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 531.499726][ T5832] filemap_fdatawrite+0x1e9/0x2f0 [ 531.499759][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 531.499841][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 531.499880][ T5832] f2fs_sync_dirty_inodes+0x30e/0x810 [ 531.499924][ T5832] f2fs_write_checkpoint+0x9cf/0x2680 [ 531.499991][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 531.500068][ T5832] ? kfree+0x1c1/0x610 [ 531.500095][ T5832] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 531.500135][ T5832] kill_f2fs_super+0x314/0x720 [ 531.500167][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 531.500210][ T5832] ? lockdep_hardirqs_on+0x7a/0x110 [ 531.500253][ T5832] deactivate_locked_super+0xbc/0x130 [ 531.500287][ T5832] cleanup_mnt+0x437/0x4d0 [ 531.500319][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.500347][ T5832] task_work_run+0x1d9/0x270 [ 531.500374][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 531.500410][ T5832] exit_to_user_mode_loop+0xed/0x480 [ 531.500443][ T5832] ? rcu_is_watching+0x15/0xb0 [ 531.500472][ T5832] do_syscall_64+0x2b7/0xf80 [ 531.500496][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.500518][ T5832] ? trace_irq_disable+0x37/0x100 [ 531.500545][ T5832] ? clear_bhb_loop+0x40/0x90 [ 531.500573][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.500593][ T5832] RIP: 0033:0x7fdf9179c117 [ 531.500614][ T5832] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 531.500634][ T5832] RSP: 002b:00007ffe87645858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 531.500658][ T5832] RAX: 0000000000000000 RBX: 00007fdf9180471f RCX: 00007fdf9179c117 [ 531.500674][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe87645910 [ 531.500688][ T5832] RBP: 00007ffe87645910 R08: 00007ffe87646910 R09: 00000000ffffffff [ 531.500704][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe876469a0 [ 531.500718][ T5832] R13: 00007fdf9180471f R14: 0000000000081916 R15: 00007ffe876469e0 [ 531.500757][ T5832] [ 531.826671][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 531.918646][ T5908] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 531.979042][ T5908] usb 2-1: device descriptor read/8, error -71 [ 532.125333][T10895] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 532.135274][T10895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 532.431695][T10926] overlayfs: failed to resolve './file0': -2 [ 532.438978][ T5908] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 532.546555][T10927] syz.4.1504: attempt to access beyond end of device [ 532.546555][T10927] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 532.571463][T10927] syz.4.1504: attempt to access beyond end of device [ 532.571463][T10927] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 532.823026][ T5908] usb 2-1: device descriptor read/8, error -71 [ 532.969069][ T5908] usb usb2-port1: unable to enumerate USB device [ 533.149602][ T5835] syz-executor: attempt to access beyond end of device [ 533.149602][ T5835] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 533.177149][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 533.177187][ T5835] Tainted: [L]=SOFTLOCKUP [ 533.177196][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 533.177210][ T5835] Call Trace: [ 533.177220][ T5835] [ 533.177230][ T5835] dump_stack_lvl+0xe8/0x150 [ 533.177269][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 533.177315][ T5835] f2fs_write_end_io+0xcdb/0xff0 [ 533.177340][ T5835] ? __submit_merged_bio+0x256/0x650 [ 533.177395][ T5835] __submit_merged_bio+0x256/0x650 [ 533.177437][ T5835] __submit_merged_write_cond+0x3c3/0x4e0 [ 533.177483][ T5835] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 533.177553][ T5835] f2fs_write_data_pages+0x2970/0x35e0 [ 533.177578][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 533.177649][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.177727][ T5835] ? is_bpf_text_address+0x292/0x2b0 [ 533.177761][ T5835] ? is_bpf_text_address+0x26/0x2b0 [ 533.177798][ T5835] ? kernel_text_address+0xa5/0xe0 [ 533.177841][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 533.177872][ T5835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 533.177897][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 533.177947][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 533.177973][ T5835] do_writepages+0x32e/0x550 [ 533.178013][ T5835] ? do_raw_spin_unlock+0xf5/0x210 [ 533.178054][ T5835] filemap_fdatawrite+0x1e9/0x2f0 [ 533.178088][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 533.178180][ T5835] ? do_raw_spin_unlock+0xf5/0x210 [ 533.178220][ T5835] f2fs_sync_dirty_inodes+0x30e/0x810 [ 533.178265][ T5835] f2fs_write_checkpoint+0x9cf/0x2680 [ 533.178291][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 533.178358][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 533.178453][ T5835] kill_f2fs_super+0x314/0x720 [ 533.178488][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 533.178532][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 533.178574][ T5835] deactivate_locked_super+0xbc/0x130 [ 533.178607][ T5835] cleanup_mnt+0x437/0x4d0 [ 533.178638][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.178666][ T5835] task_work_run+0x1d9/0x270 [ 533.178692][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 533.178729][ T5835] exit_to_user_mode_loop+0xed/0x480 [ 533.178755][ T5835] ? rcu_is_watching+0x15/0xb0 [ 533.178787][ T5835] do_syscall_64+0x2b7/0xf80 [ 533.178813][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.178835][ T5835] ? trace_irq_disable+0x37/0x100 [ 533.178863][ T5835] ? clear_bhb_loop+0x40/0x90 [ 533.178892][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.178914][ T5835] RIP: 0033:0x7f0702b9c117 [ 533.178936][ T5835] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 533.178954][ T5835] RSP: 002b:00007ffdfcc7b9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 533.178978][ T5835] RAX: 0000000000000000 RBX: 00007f0702c0471f RCX: 00007f0702b9c117 [ 533.178993][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfcc7ba90 [ 533.179007][ T5835] RBP: 00007ffdfcc7ba90 R08: 00007ffdfcc7ca90 R09: 00000000ffffffff [ 533.179022][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfcc7cb20 [ 533.179035][ T5835] R13: 00007f0702c0471f R14: 0000000000082126 R15: 00007ffdfcc7cb60 [ 533.179075][ T5835] [ 533.509720][ T5835] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 534.681813][T10950] fuse: Bad value for 'fd' [ 534.699191][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 534.871138][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.894715][ T5963] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 534.911174][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 534.922847][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.939575][ T9] usb 2-1: config 0 descriptor?? [ 534.953126][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 534.960494][T10960] overlayfs: failed to resolve './file0': -2 [ 535.060054][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 535.071617][ T5963] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 535.081479][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.094021][ T5963] usb 1-1: Product: syz [ 535.098325][ T5963] usb 1-1: Manufacturer: syz [ 535.113378][ T5963] usb 1-1: SerialNumber: syz [ 535.129851][ T5963] usb 1-1: config 0 descriptor?? [ 535.154837][ T5963] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 535.455428][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 535.464518][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 535.472323][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 535.480768][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 535.489693][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 535.499598][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 535.708289][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 535.716023][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 535.724086][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 535.732033][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 535.740767][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 535.749010][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 535.966078][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 535.973292][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 535.993699][ T9] pwc: Registered as video103. [ 536.026532][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 536.091814][ T9] usb 2-1: USB disconnect, device number 90 [ 536.661078][T11000] fuse: Bad value for 'fd' [ 536.789225][ T5963] gspca_ov534_9: reg_r err -71 [ 537.688854][ T5963] gspca_ov534_9: Unknown sensor 0000 [ 537.688979][ T5963] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 537.733761][ T5963] usb 1-1: USB disconnect, device number 79 [ 538.482690][T11030] loop0: detected capacity change from 0 to 512 [ 538.524614][T11030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1551: bg 0: block 393: padding at end of block bitmap is not set [ 538.540989][T11030] loop0: lost filesystem error report for type 5 error -117 [ 538.548569][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 538.551826][T11030] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 538.556173][ C0] EXT4-fs (loop0): initial error at time 2000000014: ext4_validate_block_bitmap:441 [ 538.580559][ C0] EXT4-fs (loop0): last error at time 2000000014: ext4_validate_block_bitmap:441 [ 538.593257][T11030] loop0: lost filesystem error report for type 5 error -117 [ 538.605284][T11030] EXT4-fs (loop0): 2 truncates cleaned up [ 538.650787][T11030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.700907][T11030] overlayfs: failed to verify upper root origin [ 538.748617][ T5901] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 538.871718][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.926323][T11039] fuse: Bad value for 'fd' [ 538.943445][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.955322][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 538.972946][ T5901] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 539.773546][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.782817][ T5901] usb 5-1: SerialNumber: syz [ 540.019985][ T5901] usb 5-1: 0:2 : does not exist [ 540.125732][ T5901] usb 5-1: USB disconnect, device number 99 [ 540.191175][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.363146][T11058] kvm: kvm [11057]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 540.373003][T11058] kvm: kvm [11057]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 540.439096][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 540.589059][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 540.605247][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 540.627577][ T24] usb 4-1: config 0 has no interface number 0 [ 540.643491][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.655447][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.664240][ T24] usb 4-1: Product: syz [ 540.668966][ T24] usb 4-1: Manufacturer: syz [ 540.673753][ T24] usb 4-1: SerialNumber: syz [ 540.685451][ T24] usb 4-1: config 0 descriptor?? [ 540.700557][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 542.142125][T11071] loop4: detected capacity change from 0 to 40427 [ 542.212805][T11071] F2FS-fs (loop4): build fault injection rate: 771 [ 542.221686][T11071] F2FS-fs (loop4): invalid crc value [ 542.493429][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 542.519556][T11071] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 542.555720][T11071] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 542.653816][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 543.648962][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 543.661728][ T24] usb 4-1: USB disconnect, device number 81 [ 543.683243][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 543.901642][ T5835] syz-executor: attempt to access beyond end of device [ 543.901642][ T5835] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.919234][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 543.952634][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 543.952670][ T5835] Tainted: [L]=SOFTLOCKUP [ 543.952678][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 543.952691][ T5835] Call Trace: [ 543.952700][ T5835] [ 543.952709][ T5835] dump_stack_lvl+0xe8/0x150 [ 543.952743][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 543.952783][ T5835] f2fs_write_end_io+0xcdb/0xff0 [ 543.952832][ T5835] __submit_merged_bio+0x256/0x650 [ 543.952872][ T5835] __submit_merged_write_cond+0x3c3/0x4e0 [ 543.952911][ T5835] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 543.952967][ T5835] f2fs_write_data_pages+0x2970/0x35e0 [ 543.952989][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 543.953050][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 543.953122][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 543.953168][ T5835] ? __lock_acquire+0x6b5/0x2cf0 [ 543.953220][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 543.953245][ T5835] do_writepages+0x32e/0x550 [ 543.953283][ T5835] ? do_raw_spin_unlock+0xf5/0x210 [ 543.953320][ T5835] filemap_fdatawrite+0x1e9/0x2f0 [ 543.953352][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 543.953428][ T5835] ? do_raw_spin_unlock+0xf5/0x210 [ 543.953466][ T5835] f2fs_sync_dirty_inodes+0x30e/0x810 [ 543.953508][ T5835] f2fs_write_checkpoint+0x9cf/0x2680 [ 543.953570][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 543.953641][ T5835] ? kfree+0x1c1/0x610 [ 543.953667][ T5835] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 543.953705][ T5835] kill_f2fs_super+0x314/0x720 [ 543.953736][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 543.953776][ T5835] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.953817][ T5835] deactivate_locked_super+0xbc/0x130 [ 543.953856][ T5835] cleanup_mnt+0x437/0x4d0 [ 543.953887][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.953914][ T5835] task_work_run+0x1d9/0x270 [ 543.953940][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 543.953973][ T5835] exit_to_user_mode_loop+0xed/0x480 [ 543.953999][ T5835] ? rcu_is_watching+0x15/0xb0 [ 543.954030][ T5835] do_syscall_64+0x2b7/0xf80 [ 543.954060][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.954082][ T5835] ? trace_irq_disable+0x37/0x100 [ 543.954110][ T5835] ? clear_bhb_loop+0x40/0x90 [ 543.954138][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.954160][ T5835] RIP: 0033:0x7f0702b9c117 [ 543.954182][ T5835] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 543.954201][ T5835] RSP: 002b:00007ffdfcc7b9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 543.954225][ T5835] RAX: 0000000000000000 RBX: 00007f0702c0471f RCX: 00007f0702b9c117 [ 543.954241][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfcc7ba90 [ 543.954255][ T5835] RBP: 00007ffdfcc7ba90 R08: 00007ffdfcc7ca90 R09: 00000000ffffffff [ 543.954270][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfcc7cb20 [ 543.954285][ T5835] R13: 00007f0702c0471f R14: 0000000000084a11 R15: 00007ffdfcc7cb60 [ 543.954321][ T5835] [ 543.954363][ T5835] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 544.003906][ T24] quatech2 4-1:0.51: device disconnected [ 544.356883][T11088] fuse: Bad value for 'fd' [ 544.609033][ T5901] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 544.698605][ T5940] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 544.770576][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.780607][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 544.793649][ T5901] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 544.803928][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.818285][ T5901] usb 3-1: config 0 descriptor?? [ 544.851522][ T5940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.877883][ T5940] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.910216][ T5940] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 544.931317][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 544.960946][ T5940] usb 2-1: SerialNumber: syz [ 544.966493][ T9] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 545.163752][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 545.177407][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.187872][ T9] usb 5-1: Product: syz [ 545.207674][ T5940] usb 2-1: 0:2 : does not exist [ 545.215128][ T9] usb 5-1: Manufacturer: syz [ 545.225488][ T9] usb 5-1: SerialNumber: syz [ 545.244842][ T9] usb 5-1: config 0 descriptor?? [ 545.254076][ T5963] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 545.268050][ T5901] kovaplus 0003:1E7D:2D50.001D: item fetching failed at offset 2/5 [ 545.300899][ T5901] kovaplus 0003:1E7D:2D50.001D: parse failed [ 545.307056][ T5901] kovaplus 0003:1E7D:2D50.001D: probe with driver kovaplus failed with error -22 [ 545.349942][ T5940] usb 2-1: USB disconnect, device number 91 [ 545.401590][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.440633][ T5963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.456054][ T5901] usb 3-1: USB disconnect, device number 85 [ 545.489428][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.513485][ T5963] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 545.526887][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.537055][ T5963] usb 4-1: SerialNumber: syz [ 545.756867][ T5963] usb 4-1: 0:2 : does not exist [ 545.769455][ T9] airspy 5-1:0.0: Board ID: 00 [ 545.774522][ T9] airspy 5-1:0.0: Firmware version: [ 545.821809][T11105] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1575'. [ 545.850451][ T5901] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 545.850915][T11105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 545.875991][ T5963] usb 4-1: USB disconnect, device number 82 [ 545.918490][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.020665][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.032182][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.045486][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.059231][ T5901] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.068393][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.097329][ T5901] usb 1-1: config 0 descriptor?? [ 546.238669][ T24] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 546.378614][ T24] usb 2-1: device descriptor read/64, error -71 [ 547.557987][ T24] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 547.591865][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 547.599792][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 548.570714][ T9] airspy 5-1:0.0: usb_control_msg() failed -110 request 10 [ 548.578419][ T5901] usb 1-1: USB disconnect, device number 80 [ 548.628608][ T24] usb 2-1: device descriptor read/64, error -71 [ 548.748706][T11117] loop3: detected capacity change from 0 to 40427 [ 548.829014][T11117] F2FS-fs (loop3): build fault injection rate: 771 [ 548.846656][T11117] F2FS-fs (loop3): invalid crc value [ 549.232618][ T24] usb usb2-port1: attempt power cycle [ 549.244117][T11117] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 549.264538][ T9] airspy 5-1:0.0: Registered as swradio24 [ 549.275594][T11117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 549.286089][ T9] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 549.412638][T11124] evm: overlay not supported [ 550.580362][T11135] fuse: Bad value for 'fd' [ 550.690486][ T5940] usb 5-1: USB disconnect, device number 100 [ 550.773374][ T5832] syz-executor: attempt to access beyond end of device [ 550.773374][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 550.833554][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 550.833590][ T5832] Tainted: [L]=SOFTLOCKUP [ 550.833598][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 550.833612][ T5832] Call Trace: [ 550.833621][ T5832] [ 550.833632][ T5832] dump_stack_lvl+0xe8/0x150 [ 550.833667][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 550.833707][ T5832] f2fs_write_end_io+0xcdb/0xff0 [ 550.833750][ T5832] __submit_merged_bio+0x256/0x650 [ 550.833790][ T5832] __submit_merged_write_cond+0x3c3/0x4e0 [ 550.833831][ T5832] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 550.833884][ T5832] f2fs_write_data_pages+0x2970/0x35e0 [ 550.833907][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 550.833971][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 550.834008][ T5832] ? unwind_next_frame+0xa5/0x23c0 [ 550.834038][ T5832] ? css_rstat_updated+0x23a/0x530 [ 550.834107][ T5832] ? rcu_is_watching+0x15/0xb0 [ 550.834137][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 550.834175][ T5832] ? __lock_acquire+0x6b5/0x2cf0 [ 550.834207][ T5832] ? do_raw_spin_lock+0x12b/0x2f0 [ 550.834248][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 550.834283][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 550.834308][ T5832] do_writepages+0x32e/0x550 [ 550.834347][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 550.834385][ T5832] filemap_fdatawrite+0x1e9/0x2f0 [ 550.834418][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 550.834500][ T5832] ? do_raw_spin_unlock+0xf5/0x210 [ 550.834539][ T5832] f2fs_sync_dirty_inodes+0x30e/0x810 [ 550.834579][ T5832] f2fs_write_checkpoint+0x9cf/0x2680 [ 550.834638][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 550.834705][ T5832] ? kfree+0x1c1/0x610 [ 550.834731][ T5832] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 550.834768][ T5832] kill_f2fs_super+0x314/0x720 [ 550.834800][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 550.834837][ T5832] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.834878][ T5832] deactivate_locked_super+0xbc/0x130 [ 550.834910][ T5832] cleanup_mnt+0x437/0x4d0 [ 550.834941][ T5832] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.834968][ T5832] task_work_run+0x1d9/0x270 [ 550.834994][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 550.835027][ T5832] exit_to_user_mode_loop+0xed/0x480 [ 550.835053][ T5832] ? rcu_is_watching+0x15/0xb0 [ 550.835184][ T5832] do_syscall_64+0x2b7/0xf80 [ 550.835223][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.835244][ T5832] ? trace_irq_disable+0x37/0x100 [ 550.835272][ T5832] ? clear_bhb_loop+0x40/0x90 [ 550.835298][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.835320][ T5832] RIP: 0033:0x7fdf9179c117 [ 550.835357][ T5832] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 550.835375][ T5832] RSP: 002b:00007ffe87645858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 550.835398][ T5832] RAX: 0000000000000000 RBX: 00007fdf9180471f RCX: 00007fdf9179c117 [ 550.835414][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe87645910 [ 550.835428][ T5832] RBP: 00007ffe87645910 R08: 00007ffe87646910 R09: 00000000ffffffff [ 550.835443][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe876469a0 [ 550.835457][ T5832] R13: 00007fdf9180471f R14: 000000000008629a R15: 00007ffe876469e0 [ 550.835491][ T5832] [ 550.835597][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 552.199775][ T5908] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 552.674170][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 552.690925][ T5908] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 552.709164][ T5908] usb 3-1: config 0 has no interface number 0 [ 552.725493][ T5908] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 552.748752][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.756821][ T5908] usb 3-1: Product: syz [ 552.778615][ T5908] usb 3-1: Manufacturer: syz [ 552.783293][ T5908] usb 3-1: SerialNumber: syz [ 552.847228][T11161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 553.020955][ T5908] usb 3-1: config 0 descriptor?? [ 553.038672][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 553.046830][ T5908] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 553.109099][ T5940] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 553.118618][ T5901] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 553.220461][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.238834][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.258975][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.278615][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 553.289456][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.315230][ T5940] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.328612][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.338578][ T5940] usb 4-1: config 0 has no interface number 0 [ 553.348601][ T5940] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 553.368881][ T5940] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 553.380579][ T9] usb 1-1: config 0 descriptor?? [ 553.394950][ T5901] usb 5-1: no configurations [ 553.405387][ T5901] usb 5-1: can't read configurations, error -22 [ 553.427367][ T5940] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 553.441238][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.449735][ T5940] usb 4-1: Product: syz [ 553.453974][ T5940] usb 4-1: Manufacturer: syz [ 553.460419][ T5940] usb 4-1: SerialNumber: syz [ 553.469918][ T5940] usb 4-1: config 0 descriptor?? [ 553.487623][ T5940] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 553.689919][ T5940] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 553.697324][ T5940] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 553.911492][ T5940] usb 4-1: USB disconnect, device number 83 [ 553.975435][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1594'. [ 554.033412][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 554.046948][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 554.086210][ T9] usb 1-1: USB disconnect, device number 81 [ 554.428732][T10809] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 554.469034][ T5901] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 554.570604][T11177] fuse: Bad value for 'fd' [ 554.591456][T10809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.613237][T10809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 554.642019][T10809] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 554.656422][T10809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.675428][ T5901] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 554.687657][T10809] usb 2-1: config 0 descriptor?? [ 554.698604][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.718624][ T5901] usb 5-1: Product: syz [ 554.722846][ T5901] usb 5-1: Manufacturer: syz [ 554.727562][ T5901] usb 5-1: SerialNumber: syz [ 554.760179][ T5901] usb 5-1: config 0 descriptor?? [ 554.818719][ T5908] usb 3-1: qt2_attach - failed to power on unit: -71 [ 554.852388][ T5908] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 554.883869][ T5908] usb 3-1: USB disconnect, device number 86 [ 554.945649][T11182] overlayfs: failed to resolve './file0': -2 [ 555.101902][T10809] kovaplus 0003:1E7D:2D50.001E: item fetching failed at offset 2/5 [ 555.124309][T10809] kovaplus 0003:1E7D:2D50.001E: parse failed [ 555.141149][T10809] kovaplus 0003:1E7D:2D50.001E: probe with driver kovaplus failed with error -22 [ 555.249654][ T5901] airspy 5-1:0.0: Board ID: 00 [ 555.254617][ T5901] airspy 5-1:0.0: Firmware version: [ 555.380513][ T9] usb 2-1: USB disconnect, device number 95 [ 555.676519][T11192] overlay: Unknown parameter 'subj_user' [ 555.787278][T11191] loop0: detected capacity change from 0 to 128 [ 556.331454][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 556.900820][ T5836] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 557.482744][ T5901] airspy 5-1:0.0: usb_control_msg() failed -110 request 10 [ 557.499378][ T5901] airspy 5-1:0.0: Registered as swradio24 [ 557.505172][ T5901] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 558.450790][T11100] usb 5-1: USB disconnect, device number 102 [ 558.517715][ T5836] usb 3-1: no configurations [ 558.528676][ T5836] usb 3-1: can't read configurations, error -22 [ 558.569838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 558.579367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 558.649285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 558.683958][T11214] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 558.734952][T11214] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 558.918832][T11100] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 559.091028][T11100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.110792][T10809] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 559.118587][T11100] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.148667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 559.163681][T11100] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 559.218302][T11100] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 559.237846][T11100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.265996][T11221] overlayfs: failed to resolve './file0': -2 [ 559.268165][T11100] usb 5-1: config 0 descriptor?? [ 559.301264][T11222] fuse: Invalid rootmode [ 559.332422][T10809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.357287][T10809] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 559.375003][T10809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.387206][T10809] usb 1-1: config 0 descriptor?? [ 559.403667][T10809] pwc: Askey VC010 type 2 USB webcam detected. [ 559.909936][T11100] usbhid 5-1:0.0: can't add hid device: -71 [ 559.916018][T11100] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 559.948676][ T5940] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 559.960511][T11100] usb 5-1: USB disconnect, device number 103 [ 560.008674][T10809] pwc: recv_control_msg error -71 req 02 val 2700 [ 560.026844][T10809] pwc: recv_control_msg error -71 req 02 val 2c00 [ 560.049099][T10809] pwc: recv_control_msg error -71 req 04 val 1000 [ 560.068673][T10809] pwc: recv_control_msg error -71 req 04 val 1300 [ 560.077200][T10809] pwc: recv_control_msg error -71 req 04 val 1400 [ 560.094012][T10809] pwc: recv_control_msg error -71 req 02 val 2000 [ 560.109740][T10809] pwc: recv_control_msg error -71 req 02 val 2100 [ 560.116718][T10809] pwc: recv_control_msg error -71 req 04 val 1500 [ 560.123929][T10809] pwc: recv_control_msg error -71 req 02 val 2500 [ 560.135374][T10809] pwc: recv_control_msg error -71 req 02 val 2400 [ 560.138800][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 560.147909][T10809] pwc: recv_control_msg error -71 req 02 val 2600 [ 560.156862][T10809] pwc: recv_control_msg error -71 req 02 val 2900 [ 560.163863][ T5940] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 560.166741][T10809] pwc: recv_control_msg error -71 req 02 val 2800 [ 560.179319][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.189223][ T5940] usb 4-1: Product: syz [ 560.191760][T10809] pwc: recv_control_msg error -71 req 04 val 1100 [ 560.200572][T10809] pwc: recv_control_msg error -71 req 04 val 1200 [ 560.204333][ T5940] usb 4-1: Manufacturer: syz [ 560.215485][T10809] pwc: Registered as video103. [ 560.222095][ T5940] usb 4-1: SerialNumber: syz [ 560.227137][T10809] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 560.264030][T10809] usb 1-1: USB disconnect, device number 82 [ 560.287466][ T5940] usb 4-1: config 0 descriptor?? [ 560.349063][ T5940] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 560.355543][T11100] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 560.540684][T11100] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 560.560361][T11100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.599259][T11100] usb 3-1: Product: syz [ 560.624012][T11100] usb 3-1: Manufacturer: syz [ 560.638573][T11100] usb 3-1: SerialNumber: syz [ 560.697478][T11100] usb 3-1: config 0 descriptor?? [ 561.950508][T11100] airspy 3-1:0.0: usb_control_msg() failed -110 request 09 [ 561.957896][T11100] airspy 3-1:0.0: Could not detect board [ 561.965177][T11100] airspy 3-1:0.0: probe with driver airspy failed with error -110 [ 562.298646][T10809] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 562.366193][ T5940] gspca_ov534_9: reg_r err -71 [ 562.450261][T10809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.460548][T10809] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 562.469683][T10809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.480309][T10809] usb 1-1: config 0 descriptor?? [ 562.490208][T10809] pwc: Askey VC010 type 2 USB webcam detected. [ 562.628615][ T5940] gspca_ov534_9: Unknown sensor 0000 [ 562.628729][ T5940] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 562.648422][ T5940] usb 4-1: USB disconnect, device number 84 [ 562.963042][T10809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 563.029365][T10809] pwc: recv_control_msg error -32 req 02 val 2700 [ 563.097561][T10809] pwc: recv_control_msg error -32 req 02 val 2c00 [ 563.176727][T10809] pwc: recv_control_msg error -32 req 04 val 1000 [ 563.271000][T10809] pwc: recv_control_msg error -32 req 04 val 1300 [ 563.371957][T10809] pwc: recv_control_msg error -32 req 04 val 1400 [ 563.513112][ T5940] usb 3-1: USB disconnect, device number 89 [ 563.691790][T10809] pwc: recv_control_msg error -32 req 02 val 2100 [ 563.708892][T10809] pwc: recv_control_msg error -32 req 04 val 1500 [ 563.722076][T10809] pwc: recv_control_msg error -32 req 02 val 2500 [ 563.730193][T10809] pwc: recv_control_msg error -32 req 02 val 2400 [ 563.737727][T10809] pwc: recv_control_msg error -32 req 02 val 2600 [ 563.746283][T10809] pwc: recv_control_msg error -32 req 02 val 2900 [ 563.938590][T11100] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 563.965225][T10809] pwc: recv_control_msg error -71 req 04 val 1100 [ 563.979680][T10809] pwc: recv_control_msg error -71 req 04 val 1200 [ 564.045221][T10809] pwc: Registered as video103. [ 564.058614][ T5940] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 564.068796][T10809] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 564.122369][T11100] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 564.138619][T11100] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 564.161408][T10809] usb 1-1: USB disconnect, device number 83 [ 564.161420][T11100] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 564.204292][T11100] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 564.217154][T11100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.227388][T11100] usb 4-1: Product: syz [ 564.236232][T11100] usb 4-1: Manufacturer: syz [ 564.243909][T11100] usb 4-1: SerialNumber: syz [ 564.260994][T11100] usb 4-1: config 0 descriptor?? [ 564.276412][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.287527][ T5940] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 564.297243][T11276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.306741][T11276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.314998][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.326275][T11100] usb 4-1: ucan: probing device on interface #0 [ 564.349952][ T5940] usb 2-1: config 0 descriptor?? [ 564.381696][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 564.750297][T11100] usb 4-1: ucan: device reported invalid device info [ 564.757521][T11100] usb 4-1: ucan: probe failed; try to update the device firmware [ 564.977987][ T5940] pwc: recv_control_msg error -71 req 02 val 2700 [ 564.989957][ T5940] pwc: recv_control_msg error -71 req 02 val 2c00 [ 564.997362][ T5940] pwc: recv_control_msg error -71 req 04 val 1000 [ 565.019203][ T5940] pwc: recv_control_msg error -71 req 04 val 1300 [ 565.027223][ T5940] pwc: recv_control_msg error -71 req 04 val 1400 [ 565.034995][ T5940] pwc: recv_control_msg error -71 req 02 val 2000 [ 565.042366][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 565.049835][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 565.056953][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 565.064422][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 565.071795][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 565.079909][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 565.090645][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 565.097830][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 565.105411][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 565.114289][ T5940] pwc: Registered as video103. [ 565.122603][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 565.137048][ T5940] usb 2-1: USB disconnect, device number 96 [ 565.211995][T10809] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 565.380868][T10809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.392362][T10809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.404427][T10809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.417498][T10809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.426756][T10809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.437827][T10809] usb 3-1: config 0 descriptor?? [ 565.529739][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 565.741612][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.753901][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.779529][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 565.791631][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 565.854374][ T24] usb 5-1: SerialNumber: syz [ 566.267405][T10809] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 566.331623][ T24] usb 5-1: 0:2 : does not exist [ 566.386934][ T24] usb 5-1: USB disconnect, device number 104 [ 566.474733][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.664657][T11100] usb 4-1: USB disconnect, device number 85 [ 568.242291][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.539384][ T24] usb 3-1: USB disconnect, device number 90 [ 568.672982][T11374] fuse: Bad value for 'group_id' [ 568.677994][T11374] fuse: Bad value for 'group_id' [ 568.938847][ T5940] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 569.048621][T11100] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 569.113847][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.150056][ T5940] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.176364][ T5940] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 569.198768][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.233474][ T5940] usb 2-1: Product: syz [ 569.238199][T11100] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.304841][ T5940] usb 2-1: Manufacturer: syz [ 569.326356][T11100] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.336064][ T5940] usb 2-1: SerialNumber: syz [ 569.347249][T11100] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.919126][ T5940] usb 2-1: config 0 descriptor?? [ 569.931769][T11100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.948571][T11100] usb 4-1: SerialNumber: syz [ 570.218032][T11100] usb 4-1: 0:2 : does not exist [ 570.355201][T11100] usb 4-1: USB disconnect, device number 86 [ 570.449062][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.068843][T11420] overlayfs: missing 'lowerdir' [ 571.109395][ T9] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 571.301049][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 571.316356][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.834737][T10809] usb 2-1: USB disconnect, device number 97 [ 571.882665][ T9] usb 4-1: Product: syz [ 571.886901][ T9] usb 4-1: Manufacturer: syz [ 571.891630][ T9] usb 4-1: SerialNumber: syz [ 571.910416][ T9] usb 4-1: config 0 descriptor?? [ 572.750049][ T9] airspy 4-1:0.0: Board ID: 00 [ 572.754896][ T9] airspy 4-1:0.0: Firmware version: [ 573.180356][T11461] overlayfs: missing 'lowerdir' [ 574.155380][ T9] airspy 4-1:0.0: usb_control_msg() failed -110 request 12 [ 574.191585][ T9] airspy 4-1:0.0: Registered as swradio24 [ 574.197396][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 574.753723][T11466] loop0: detected capacity change from 0 to 40427 [ 574.828764][ T5963] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 574.918155][T11466] F2FS-fs (loop0): build fault injection rate: 771 [ 574.932822][T11466] F2FS-fs (loop0): invalid crc value [ 575.364843][T11466] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 575.455533][T11466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 575.575947][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.240713][ T5963] usb 5-1: config 0 has no interfaces? [ 576.318796][ T9] usb 4-1: USB disconnect, device number 87 [ 576.408089][ T5963] usb 5-1: string descriptor 0 read error: -71 [ 576.618330][ T5963] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 576.779764][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.873890][ T5963] usb 5-1: config 0 descriptor?? [ 576.944637][ T5963] usb 5-1: can't set config #0, error -71 [ 576.987422][ T5833] syz-executor: attempt to access beyond end of device [ 576.987422][ T5833] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 577.015692][ T5963] usb 5-1: USB disconnect, device number 105 [ 577.042107][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 577.042144][ T5833] Tainted: [L]=SOFTLOCKUP [ 577.042153][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 577.042167][ T5833] Call Trace: [ 577.042176][ T5833] [ 577.042187][ T5833] dump_stack_lvl+0xe8/0x150 [ 577.042225][ T5833] f2fs_handle_critical_error+0x37c/0x540 [ 577.042271][ T5833] f2fs_write_end_io+0xcdb/0xff0 [ 577.042328][ T5833] __submit_merged_bio+0x256/0x650 [ 577.042371][ T5833] __submit_merged_write_cond+0x3c3/0x4e0 [ 577.042417][ T5833] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 577.042480][ T5833] f2fs_write_data_pages+0x2970/0x35e0 [ 577.042505][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 577.042573][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 577.042611][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 577.042642][ T5833] ? css_rstat_updated+0x23a/0x530 [ 577.042710][ T5833] ? rcu_is_watching+0x15/0xb0 [ 577.042745][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 577.042790][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 577.042829][ T5833] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.042878][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 577.042912][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 577.042938][ T5833] do_writepages+0x32e/0x550 [ 577.042980][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 577.043020][ T5833] filemap_fdatawrite+0x1e9/0x2f0 [ 577.043060][ T5833] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 577.043146][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 577.043187][ T5833] f2fs_sync_dirty_inodes+0x30e/0x810 [ 577.043232][ T5833] f2fs_write_checkpoint+0x9cf/0x2680 [ 577.043307][ T5833] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 577.043386][ T5833] ? kfree+0x1c1/0x610 [ 577.043415][ T5833] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 577.043455][ T5833] kill_f2fs_super+0x314/0x720 [ 577.043489][ T5833] ? __pfx_kill_f2fs_super+0x10/0x10 [ 577.043536][ T5833] ? lockdep_hardirqs_on+0x7a/0x110 [ 577.043580][ T5833] deactivate_locked_super+0xbc/0x130 [ 577.043613][ T5833] cleanup_mnt+0x437/0x4d0 [ 577.043645][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.043672][ T5833] task_work_run+0x1d9/0x270 [ 577.043700][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 577.043736][ T5833] exit_to_user_mode_loop+0xed/0x480 [ 577.043762][ T5833] ? rcu_is_watching+0x15/0xb0 [ 577.043794][ T5833] do_syscall_64+0x2b7/0xf80 [ 577.043821][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.043843][ T5833] ? trace_irq_disable+0x37/0x100 [ 577.043871][ T5833] ? clear_bhb_loop+0x40/0x90 [ 577.043899][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.043922][ T5833] RIP: 0033:0x7f533839c117 [ 577.043944][ T5833] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 577.043963][ T5833] RSP: 002b:00007ffd0baa6168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 577.043987][ T5833] RAX: 0000000000000000 RBX: 00007f533840471f RCX: 00007f533839c117 [ 577.044002][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0baa6220 [ 577.044017][ T5833] RBP: 00007ffd0baa6220 R08: 00007ffd0baa7220 R09: 00000000ffffffff [ 577.044033][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0baa72b0 [ 577.044047][ T5833] R13: 00007f533840471f R14: 000000000008caad R15: 00007ffd0baa72f0 [ 577.044087][ T5833] [ 577.044432][ T5833] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 577.406480][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 577.406517][ T5833] Tainted: [L]=SOFTLOCKUP [ 577.406526][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 577.406540][ T5833] Call Trace: [ 577.406549][ T5833] [ 577.406559][ T5833] dump_stack_lvl+0xe8/0x150 [ 577.406597][ T5833] f2fs_handle_critical_error+0x37c/0x540 [ 577.406641][ T5833] f2fs_write_end_io+0xcdb/0xff0 [ 577.406689][ T5833] __submit_merged_bio+0x256/0x650 [ 577.406733][ T5833] __submit_merged_write_cond+0x3c3/0x4e0 [ 577.406777][ T5833] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 577.406842][ T5833] f2fs_write_data_pages+0x2970/0x35e0 [ 577.406866][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 577.406937][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 577.406976][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 577.407008][ T5833] ? css_rstat_updated+0x23a/0x530 [ 577.407075][ T5833] ? rcu_is_watching+0x15/0xb0 [ 577.407111][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 577.407157][ T5833] ? __lock_acquire+0x6b5/0x2cf0 [ 577.407195][ T5833] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.407243][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 577.407278][ T5833] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 577.407303][ T5833] do_writepages+0x32e/0x550 [ 577.407344][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 577.407384][ T5833] filemap_fdatawrite+0x1e9/0x2f0 [ 577.407416][ T5833] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 577.407510][ T5833] ? do_raw_spin_unlock+0xf5/0x210 [ 577.407550][ T5833] f2fs_sync_dirty_inodes+0x30e/0x810 [ 577.407595][ T5833] f2fs_write_checkpoint+0x9cf/0x2680 [ 577.407663][ T5833] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 577.407740][ T5833] ? kfree+0x1c1/0x610 [ 577.407768][ T5833] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 577.407807][ T5833] kill_f2fs_super+0x314/0x720 [ 577.407840][ T5833] ? __pfx_kill_f2fs_super+0x10/0x10 [ 577.407883][ T5833] ? lockdep_hardirqs_on+0x7a/0x110 [ 577.407925][ T5833] deactivate_locked_super+0xbc/0x130 [ 577.407957][ T5833] cleanup_mnt+0x437/0x4d0 [ 577.407988][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.408014][ T5833] task_work_run+0x1d9/0x270 [ 577.408041][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 577.408076][ T5833] exit_to_user_mode_loop+0xed/0x480 [ 577.408101][ T5833] ? rcu_is_watching+0x15/0xb0 [ 577.408132][ T5833] do_syscall_64+0x2b7/0xf80 [ 577.408156][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.408176][ T5833] ? trace_irq_disable+0x37/0x100 [ 577.408204][ T5833] ? clear_bhb_loop+0x40/0x90 [ 577.408231][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.408253][ T5833] RIP: 0033:0x7f533839c117 [ 577.408275][ T5833] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 577.408294][ T5833] RSP: 002b:00007ffd0baa6168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 577.408318][ T5833] RAX: 0000000000000000 RBX: 00007f533840471f RCX: 00007f533839c117 [ 577.408333][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0baa6220 [ 577.408347][ T5833] RBP: 00007ffd0baa6220 R08: 00007ffd0baa7220 R09: 00000000ffffffff [ 577.408362][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0baa72b0 [ 577.408375][ T5833] R13: 00007f533840471f R14: 000000000008caad R15: 00007ffd0baa72f0 [ 577.408414][ T5833] [ 577.408425][ T5833] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 577.465480][ T5963] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 577.930325][ T5963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.950203][ T5963] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.980601][ T5963] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 578.012719][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.052676][ T5963] usb 5-1: Product: syz [ 578.071639][ T5963] usb 5-1: Manufacturer: syz [ 578.088904][ T5963] usb 5-1: SerialNumber: syz [ 578.124557][ T5963] usb 5-1: config 0 descriptor?? [ 579.176883][ T30] audit: type=1326 audit(2000000054.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.216697][ T30] audit: type=1326 audit(2000000054.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.244682][ T30] audit: type=1326 audit(2000000054.790:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.273014][ T30] audit: type=1326 audit(2000000054.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.296131][ T30] audit: type=1326 audit(2000000054.790:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.319014][ T5963] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 579.336280][ T30] audit: type=1326 audit(2000000054.790:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.360041][ T30] audit: type=1326 audit(2000000054.790:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.383029][ T30] audit: type=1326 audit(2000000054.800:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.407595][ T30] audit: type=1326 audit(2000000054.800:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.430875][ T9] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 579.442601][ T30] audit: type=1326 audit(2000000054.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11511 comm="syz.0.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f533839aeb9 code=0x7ffc0000 [ 579.493222][ T5963] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 579.502599][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.518909][ T5963] usb 2-1: Product: syz [ 579.542046][ T5963] usb 2-1: Manufacturer: syz [ 579.567362][ T5963] usb 2-1: SerialNumber: syz [ 579.594890][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.607260][ T5963] usb 2-1: config 0 descriptor?? [ 579.619127][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.651286][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 579.660938][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.678548][ T9] usb 3-1: Product: syz [ 579.692148][ T9] usb 3-1: Manufacturer: syz [ 579.707572][ T9] usb 3-1: SerialNumber: syz [ 579.733329][ T9] usb 3-1: config 0 descriptor?? [ 579.952342][ T9] usb 5-1: USB disconnect, device number 106 [ 580.119867][ T5963] airspy 2-1:0.0: Board ID: 00 [ 580.133258][ T5963] airspy 2-1:0.0: Firmware version: [ 581.901331][T11525] kernel profiling enabled (shift: 9) [ 581.909116][T11525] netlink: 'syz.4.1713': attribute type 4 has an invalid length. [ 581.916930][T11525] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.1713'. [ 582.826428][ T5836] usb 3-1: USB disconnect, device number 91 [ 584.038948][ T5963] airspy 2-1:0.0: usb_control_msg() failed -110 request 10 [ 584.083242][ T5963] airspy 2-1:0.0: Registered as swradio24 [ 584.127865][ T5963] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 584.235168][ T5963] usb 2-1: USB disconnect, device number 98 [ 585.180157][ T5836] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 585.508663][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 585.582377][ T5836] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 585.598770][ T5836] usb 3-1: config 0 has no interface number 0 [ 585.632527][ T5836] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 585.648637][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.656705][ T5836] usb 3-1: Product: syz [ 585.683274][ T5836] usb 3-1: Manufacturer: syz [ 585.687940][ T5836] usb 3-1: SerialNumber: syz [ 585.706761][T11539] loop4: detected capacity change from 0 to 40427 [ 585.714012][ T800] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 585.726388][T11539] F2FS-fs (loop4): Unable to read 1th superblock [ 585.744242][ T5836] usb 3-1: config 0 descriptor?? [ 585.749832][T11539] F2FS-fs (loop4): Unable to read 2th superblock [ 585.881755][ T800] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.915365][ T800] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.938925][ T800] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 585.952444][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 585.967306][ T800] usb 2-1: SerialNumber: syz [ 586.204207][ T800] usb 2-1: 0:2 : does not exist [ 586.385323][ T800] usb 2-1: USB disconnect, device number 99 [ 586.467201][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.723415][ T5836] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 586.736249][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 586.748245][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 586.756708][ C1] CPU: 1 UID: 0 PID: 5836 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.767724][ C1] Tainted: [L]=SOFTLOCKUP [ 586.772088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 586.782191][ C1] Workqueue: usb_hub_wq hub_event [ 586.787337][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 586.792603][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 586.812264][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 586.819101][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 586.827125][ C1] RDX: ffffc90002412000 RSI: 0000000000000208 RDI: 0000000000000209 [ 586.835129][ C1] RBP: 0000000000000000 R08: ffff88803600c01f R09: 1ffff11006c01803 [ 586.843853][ C1] R10: dffffc0000000000 R11: ffffed1006c01804 R12: dffffc0000000000 [ 586.851872][ C1] R13: ffff88803600c018 R14: 00000000000001c0 R15: 0000000000000000 [ 586.859891][ C1] FS: 0000000000000000(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 586.868869][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.875511][ C1] CR2: 00007fdf926fcff8 CR3: 0000000089b8c000 CR4: 00000000003526f0 [ 586.883528][ C1] Call Trace: [ 586.886826][ C1] [ 586.889706][ C1] ? __asan_memcpy+0x40/0x70 [ 586.894381][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 586.900701][ C1] queue_work_on+0x106/0x1d0 [ 586.905366][ C1] qt2_read_bulk_callback+0xe96/0x1030 [ 586.910885][ C1] ? __pfx_qt2_read_bulk_callback+0x10/0x10 [ 586.916848][ C1] ? kcov_remote_start+0x88/0x7a0 [ 586.921954][ C1] ? kcov_remote_start+0x88/0x7a0 [ 586.927064][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 586.932487][ C1] dummy_timer+0xbbd/0x45d0 [ 586.937170][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 586.942160][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 586.948029][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 586.953034][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 586.958021][ C1] __hrtimer_run_queues+0x529/0xc30 [ 586.963309][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 586.969088][ C1] ? read_tsc+0x9/0x20 [ 586.973222][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 586.978409][ C1] handle_softirqs+0x22a/0x7c0 [ 586.983221][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 586.988048][ C1] __irq_exit_rcu+0x5f/0x150 [ 586.992735][ C1] irq_exit_rcu+0x9/0x30 [ 586.997069][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 587.002755][ C1] [ 587.005721][ C1] [ 587.008703][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.014751][ C1] RIP: 0010:lock_acquire+0x221/0x330 [ 587.020132][ C1] Code: ff ff ff e8 e1 1d fe 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 fb bd 75 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 88 6b 72 [ 587.039815][ C1] RSP: 0018:ffffc9000411eac8 EFLAGS: 00000282 [ 587.045908][ C1] RAX: 088193e46f80fc00 RBX: 0000000000000000 RCX: 0000000080000001 [ 587.054011][ C1] RDX: 0000000038ed8e00 RSI: ffffffff8e14e200 RDI: ffffffff8c273e00 [ 587.062029][ C1] RBP: ffffffff8b95c19b R08: ffffffff8b95c19b R09: ffff88801e6ef328 [ 587.070032][ C1] R10: dffffc0000000000 R11: ffffed1003cdde72 R12: 0000000000000000 [ 587.078036][ C1] R13: ffff88801e6ef328 R14: 0000000000000001 R15: 0000000000000246 [ 587.086034][ C1] ? kobject_add_internal+0x38b/0xd00 [ 587.091460][ C1] ? kobject_add_internal+0x38b/0xd00 [ 587.096899][ C1] _raw_spin_lock+0x2e/0x40 [ 587.101436][ C1] ? kobject_add_internal+0x38b/0xd00 [ 587.106853][ C1] kobject_add_internal+0x38b/0xd00 [ 587.112099][ C1] kobject_add+0x163/0x240 [ 587.116554][ C1] ? __pfx_kobject_add+0x10/0x10 [ 587.121529][ C1] ? class_to_subsys+0xb6/0x120 [ 587.126435][ C1] ? get_device_parent+0xbc/0x3a0 [ 587.131496][ C1] device_add+0x408/0xb70 [ 587.135877][ C1] usb_serial_probe+0x26f4/0x2e50 [ 587.140935][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 587.148161][ C1] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 587.155406][ C1] usb_probe_interface+0x668/0xc90 [ 587.160649][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 587.166320][ C1] really_probe+0x267/0xaf0 [ 587.170858][ C1] __driver_probe_device+0x18c/0x320 [ 587.176173][ C1] driver_probe_device+0x4f/0x240 [ 587.181243][ C1] __device_attach_driver+0x2d4/0x4c0 [ 587.186647][ C1] bus_for_each_drv+0x258/0x2f0 [ 587.191523][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 587.197454][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 587.202851][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 587.208168][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 587.214009][ C1] __device_attach+0x2c5/0x450 [ 587.218821][ C1] ? __pfx___device_attach+0x10/0x10 [ 587.224144][ C1] ? _raw_spin_unlock+0x28/0x50 [ 587.229021][ C1] device_initial_probe+0xa1/0xd0 [ 587.234081][ C1] bus_probe_device+0x12a/0x220 [ 587.239134][ C1] ? device_add+0x726/0xb70 [ 587.243763][ C1] device_add+0x7b6/0xb70 [ 587.248124][ C1] usb_set_configuration+0x1a87/0x2110 [ 587.253638][ C1] usb_generic_driver_probe+0x8d/0x150 [ 587.259135][ C1] usb_probe_device+0x1c4/0x3b0 [ 587.264200][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 587.269613][ C1] really_probe+0x267/0xaf0 [ 587.274158][ C1] __driver_probe_device+0x18c/0x320 [ 587.279479][ C1] driver_probe_device+0x4f/0x240 [ 587.284537][ C1] __device_attach_driver+0x2d4/0x4c0 [ 587.289955][ C1] bus_for_each_drv+0x258/0x2f0 [ 587.294833][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 587.300758][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 587.306158][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 587.311494][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 587.317362][ C1] __device_attach+0x2c5/0x450 [ 587.322435][ C1] ? __pfx___device_attach+0x10/0x10 [ 587.327770][ C1] ? _raw_spin_unlock+0x28/0x50 [ 587.332680][ C1] device_initial_probe+0xa1/0xd0 [ 587.337744][ C1] bus_probe_device+0x12a/0x220 [ 587.342632][ C1] ? device_add+0x726/0xb70 [ 587.347176][ C1] device_add+0x7b6/0xb70 [ 587.351538][ C1] usb_new_device+0xa08/0x16f0 [ 587.356509][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 587.361939][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.367191][ C1] hub_event+0x2a1c/0x4f30 [ 587.371659][ C1] ? __pfx_hub_event+0x10/0x10 [ 587.376454][ C1] ? process_one_work+0x87c/0x15a0 [ 587.381595][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 587.387018][ C1] ? process_one_work+0x87c/0x15a0 [ 587.392164][ C1] process_one_work+0x949/0x15a0 [ 587.397141][ C1] ? __pfx_process_one_work+0x10/0x10 [ 587.402635][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 587.407696][ C1] worker_thread+0xb46/0x1140 [ 587.412416][ C1] kthread+0x388/0x470 [ 587.416518][ C1] ? __pfx_worker_thread+0x10/0x10 [ 587.421660][ C1] ? __pfx_kthread+0x10/0x10 [ 587.426288][ C1] ret_from_fork+0x51b/0xa40 [ 587.430905][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 587.436041][ C1] ? __switch_to+0xc7d/0x1400 [ 587.441013][ C1] ? __pfx_kthread+0x10/0x10 [ 587.446000][ C1] ret_from_fork_asm+0x1a/0x30 [ 587.450811][ C1] [ 587.453862][ C1] Modules linked in: [ 587.457795][ C1] ---[ end trace 0000000000000000 ]--- [ 587.463272][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 587.468511][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 587.488153][ C1] RSP: 0018:ffffc90000a087f8 EFLAGS: 00010002 [ 587.494239][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 587.502232][ C1] RDX: ffffc90002412000 RSI: 0000000000000208 RDI: 0000000000000209 [ 587.510222][ C1] RBP: 0000000000000000 R08: ffff88803600c01f R09: 1ffff11006c01803 [ 587.518214][ C1] R10: dffffc0000000000 R11: ffffed1006c01804 R12: dffffc0000000000 [ 587.526206][ C1] R13: ffff88803600c018 R14: 00000000000001c0 R15: 0000000000000000 [ 587.534197][ C1] FS: 0000000000000000(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 587.543150][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.549752][ C1] CR2: 00007fdf926fcff8 CR3: 0000000089b8c000 CR4: 00000000003526f0 [ 587.557747][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 587.565558][ C1] Kernel Offset: disabled [ 587.569897][ C1] Rebooting in 86400 seconds..