last executing test programs: 15.005804433s ago: executing program 3 (id=2117): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r2, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 11.734881764s ago: executing program 2 (id=2125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = syz_open_dev$radio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) 10.4512464s ago: executing program 2 (id=2128): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)={0x1, 0x0, @b}, 0x48, r5) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x13) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 10.402249022s ago: executing program 3 (id=2129): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 8.888233297s ago: executing program 3 (id=2131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) 7.89317138s ago: executing program 1 (id=2133): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) writev(r0, &(0x7f00000022c0)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) 7.764091535s ago: executing program 3 (id=2134): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x10004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 7.624313671s ago: executing program 1 (id=2135): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 6.445289262s ago: executing program 0 (id=2136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = syz_open_dev$radio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) 6.2532373s ago: executing program 1 (id=2137): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r2, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 6.161129834s ago: executing program 3 (id=2138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[], 0xff2e) 6.057322739s ago: executing program 2 (id=2139): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 5.232455745s ago: executing program 0 (id=2140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) 4.146373681s ago: executing program 2 (id=2141): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 4.145731951s ago: executing program 0 (id=2142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) 3.470145s ago: executing program 1 (id=2143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 2.921582544s ago: executing program 0 (id=2144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x1, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa10906, 0xfffffffb, '\x00', @value=0x80000001}}) 1.773671133s ago: executing program 0 (id=2145): socket$phonet(0x23, 0x2, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0xf0ff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x8, 0x0, 0x0, 0x4000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xffffffffbffffffc}, 0x0, 0x0) 1.706595017s ago: executing program 1 (id=2146): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x10004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.416761139s ago: executing program 3 (id=2147): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)={0x1, 0x0, @b}, 0x48, r5) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x13) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 255.179329ms ago: executing program 2 (id=2148): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(0xffffffffffffffff, 0x101, 0x4, 0x0, &(0x7f0000000540)) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, 0x0, 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 158.016193ms ago: executing program 0 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 56.699938ms ago: executing program 1 (id=2150): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 2 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x2c717c0, @empty, 0x4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): rb status received: -71 [ 227.763410][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.770648][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.777881][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.785064][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.792320][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.799541][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.806858][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.814083][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.821413][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.828649][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.835820][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.843514][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.850769][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.858001][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.865216][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.872449][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.879651][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.886836][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.894002][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.901221][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.908438][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.915599][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.922809][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.930006][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.937209][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.944881][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.952080][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.959285][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.966443][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.973638][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.980823][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.988254][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 227.995539][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.002740][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.009919][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.017120][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.024287][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.031468][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.038704][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.046437][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.053766][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.061174][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.068592][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.076018][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.083408][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.090779][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.098159][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.105492][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.112827][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.120144][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.127462][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.134820][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.147068][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.154458][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.161772][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.169065][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.176373][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.183704][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.191070][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.198430][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.205754][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.213141][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.222010][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.229338][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.236833][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.244553][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.251894][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.259211][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.266527][ C0] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 228.303798][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.311377][ T5144] usb 1-1: control msg error: -71 [ 228.316795][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.317507][ T5828] usb 1-1: USB disconnect, device number 4 [ 228.324140][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 228.336948][ C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -19 [ 228.435399][ T9103] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1119'. [ 228.675765][ T9114] netlink: 'syz.2.1121': attribute type 12 has an invalid length. [ 228.985985][ T9130] tipc: Enabling of bearer rejected, failed to enable media [ 229.058055][ T5828] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 229.269025][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.291281][ T5828] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.335131][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.370840][ T5828] usb 1-1: config 0 descriptor?? [ 229.414539][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 229.440144][ T9144] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1128'. [ 229.652319][ T5828] pwc: send_video_command error -71 [ 229.665636][ T5828] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 229.694325][ T5828] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 229.725787][ T5828] usb 1-1: USB disconnect, device number 5 [ 229.880050][ T9157] syz.2.1126: attempt to access beyond end of device [ 229.880050][ T9157] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 229.896518][ T9157] hfsplus: unable to find HFS+ superblock [ 229.976791][ T6689] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 230.148611][ T9161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1134'. [ 230.189335][ T6689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.209882][ T6689] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.257030][ T6689] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.276896][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 230.289432][ T6689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.304786][ T6689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.312355][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1135'. [ 230.332468][ T6689] usb 4-1: Product: syz [ 230.342593][ T6689] usb 4-1: Manufacturer: syz [ 230.352725][ T6689] usb 4-1: SerialNumber: syz [ 230.373331][ T6689] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 230.377995][ T9163] "syz.1.1135" (9163) uses obsolete ecb(arc4) skcipher [ 230.393935][ T6689] cdc_mbim 4-1:1.0: bind() failure [ 230.498036][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.516848][ T5828] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.526397][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.568879][ T5828] usb 1-1: config 0 descriptor?? [ 230.604116][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 230.619060][ T6689] usb 4-1: USB disconnect, device number 2 [ 231.036733][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.055721][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.069750][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.079228][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 231.089576][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 231.105411][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 231.121826][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 231.152859][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 231.163283][ T5828] pwc: recv_control_msg error -32 req 04 val 1500 [ 231.174182][ T5828] pwc: recv_control_msg error -32 req 02 val 2500 [ 231.188700][ T5828] pwc: recv_control_msg error -32 req 02 val 2400 [ 231.204082][ T5828] pwc: recv_control_msg error -32 req 02 val 2600 [ 231.431759][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.444070][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.453516][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.503597][ T5828] pwc: Registered as video103. [ 231.525720][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 231.559746][ T5828] usb 1-1: USB disconnect, device number 6 [ 231.856968][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 232.066984][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 150 seconds [ 233.242378][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1144'. [ 233.255574][ T9204] "syz.1.1144" (9204) uses obsolete ecb(arc4) skcipher [ 234.691660][ T9221] tipc: Enabling of bearer rejected, failed to enable media [ 235.967800][ T9239] netlink: 'syz.3.1156': attribute type 12 has an invalid length. [ 236.048051][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 236.083303][ T9242] "syz.2.1157" (9242) uses obsolete ecb(arc4) skcipher [ 236.325661][ T9249] tipc: Enabled bearer , priority 0 [ 236.354944][ T9249] tipc: Resetting bearer [ 236.379633][ T9246] tipc: Disabling bearer [ 237.828716][ T9267] tipc: Enabling of bearer rejected, failed to enable media [ 238.968477][ T9283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1169'. [ 239.040224][ T9283] "syz.3.1169" (9283) uses obsolete ecb(arc4) skcipher [ 239.089594][ T9288] tipc: Enabled bearer , priority 0 [ 239.150111][ T9288] tipc: Resetting bearer [ 239.373996][ T9286] tipc: Disabling bearer [ 239.813128][ T9299] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1172'. [ 240.206316][ T9316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 240.301093][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1180'. [ 240.329679][ T9321] "syz.3.1180" (9321) uses obsolete ecb(arc4) skcipher [ 240.953941][ T9337] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1184'. [ 242.182756][ T9353] "syz.2.1190" (9353) uses obsolete ecb(arc4) skcipher [ 242.353801][ T9357] syz.0.1187: attempt to access beyond end of device [ 242.353801][ T9357] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 242.368000][ T9357] hfsplus: unable to find HFS+ superblock [ 242.517555][ T5849] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 242.722760][ T5849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.741252][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.771253][ T9368] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1195'. [ 242.771966][ T5849] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.853129][ T5849] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.869747][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.900480][ T5849] usb 2-1: Product: syz [ 242.915519][ T5849] usb 2-1: Manufacturer: syz [ 242.927533][ T5849] usb 2-1: SerialNumber: syz [ 242.945818][ T5849] cdc_mbim 2-1:1.0: skipping garbage [ 242.956257][ T5849] cdc_mbim 2-1:1.0: skipping garbage [ 242.968200][ T5849] cdc_mbim 2-1:1.0: MBIM functional descriptor missing [ 242.975214][ T5849] cdc_mbim 2-1:1.0: bind() failure [ 243.154494][ T5849] usb 2-1: USB disconnect, device number 6 [ 245.063736][ T9387] "syz.3.1201" (9387) uses obsolete ecb(arc4) skcipher [ 245.286066][ T9395] syzkaller0: entered promiscuous mode [ 245.292491][ T9395] syzkaller0: entered allmulticast mode [ 245.359992][ T9398] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.448769][ T9398] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.518408][ T9398] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.707185][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 245.782321][ T9398] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.951794][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.964996][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.976956][ T5828] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.016990][ T5828] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.026273][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.037143][ T5828] usb 4-1: Product: syz [ 246.041425][ T5828] usb 4-1: Manufacturer: syz [ 246.046497][ T5828] usb 4-1: SerialNumber: syz [ 246.116216][ T5828] cdc_mbim 4-1:1.0: skipping garbage [ 246.121839][ T5828] cdc_mbim 4-1:1.0: skipping garbage [ 246.129474][ T5828] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 246.137530][ T5828] cdc_mbim 4-1:1.0: bind() failure [ 246.225350][ T9398] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.279053][ T9398] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.296310][ T9398] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.332842][ T5849] usb 4-1: USB disconnect, device number 3 [ 246.357757][ T9398] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.748121][ T9420] "syz.0.1214" (9420) uses obsolete ecb(arc4) skcipher [ 248.050375][ T9432] binder: 9431:9432 ioctl c0306201 200000000680 returned -14 [ 248.175196][ T9440] tipc: Enabling of bearer rejected, failed to enable media [ 250.309083][ T9474] tipc: Enabling of bearer rejected, failed to enable media [ 250.363489][ T9476] tipc: Enabled bearer , priority 0 [ 250.409691][ T9476] tipc: Resetting bearer [ 250.487824][ T9475] tipc: Disabling bearer [ 252.249588][ T6688] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 252.542817][ T9517] tipc: Enabled bearer , priority 0 [ 252.555098][ T9517] tipc: Resetting bearer [ 252.574357][ T9516] tipc: Disabling bearer [ 252.592985][ T9519] syzkaller0: entered promiscuous mode [ 252.599043][ T9519] syzkaller0: entered allmulticast mode [ 252.616861][ T6689] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 252.688869][ T6688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.704242][ T6688] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.714292][ T6688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.748897][ T6688] usb 2-1: config 0 descriptor?? [ 252.858849][ T6689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.878464][ T6689] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 252.960909][ T6689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.101626][ T6688] usbhid 2-1:0.0: can't add hid device: -71 [ 254.108675][ T6688] usbhid: probe of 2-1:0.0 failed with error -71 [ 254.119202][ T6689] usb 4-1: config 0 descriptor?? [ 254.126127][ T6688] usb 2-1: USB disconnect, device number 7 [ 254.134445][ T6689] pwc: Askey VC010 type 2 USB webcam detected. [ 254.337006][ T6689] pwc: send_video_command error -71 [ 254.343898][ T6689] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 254.351738][ T6689] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 254.361499][ T6689] usb 4-1: USB disconnect, device number 4 [ 254.927021][ T6689] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 255.313498][ T6689] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.328369][ T6689] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 255.337613][ T6689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.350670][ T6689] usb 4-1: config 0 descriptor?? [ 257.432561][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.444822][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.507067][ T6689] pwc: Askey VC010 type 2 USB webcam detected. [ 257.590100][ T6689] pwc: send_video_command error -71 [ 257.603841][ T6689] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 257.655452][ T6689] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 257.681790][ T6689] usb 4-1: USB disconnect, device number 5 [ 257.764246][ T9561] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.941148][ T9561] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.316870][ T6689] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 258.573057][ T9561] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.650905][ T6689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.690143][ T6689] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.703149][ T6689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.744987][ T9561] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.755500][ T6689] usb 4-1: config 0 descriptor?? [ 258.854916][ T9577] syzkaller0: entered promiscuous mode [ 258.861081][ T9577] syzkaller0: entered allmulticast mode [ 258.952876][ T9561] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.972592][ T9561] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.977895][ T6689] usbhid 4-1:0.0: can't add hid device: -71 [ 258.989947][ T6689] usbhid: probe of 4-1:0.0 failed with error -71 [ 259.001532][ T6689] usb 4-1: USB disconnect, device number 6 [ 259.019712][ T9561] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.054170][ T9561] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.405466][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'. [ 261.192107][ T9606] syzkaller0: entered promiscuous mode [ 261.205515][ T9606] syzkaller0: entered allmulticast mode [ 261.291135][ T9610] "syz.1.1277" (9610) uses obsolete ecb(arc4) skcipher [ 261.466884][ T6692] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 262.220495][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 180 seconds [ 262.409382][ T6692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.420106][ T6692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.437043][ T6692] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.463819][ T6692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.479230][ T6692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.504642][ T6692] usb 4-1: Product: syz [ 262.509404][ T6692] usb 4-1: Manufacturer: syz [ 262.514044][ T6692] usb 4-1: SerialNumber: syz [ 262.542665][ T6692] cdc_mbim 4-1:1.0: skipping garbage [ 262.558719][ T6692] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 262.577116][ T6692] cdc_mbim 4-1:1.0: bind() failure [ 262.971573][ T6692] usb 4-1: USB disconnect, device number 7 [ 263.226864][ T6687] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.316550][ T9634] netlink: 'syz.1.1290': attribute type 12 has an invalid length. [ 263.383155][ T9637] "syz.2.1291" (9637) uses obsolete ecb(arc4) skcipher [ 263.439194][ T6687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.454865][ T6687] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.464532][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.491920][ T6687] usb 1-1: config 0 descriptor?? [ 263.711099][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.722205][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.045530][ T6687] usbhid 1-1:0.0: can't add hid device: -71 [ 264.098713][ T6687] usbhid: probe of 1-1:0.0 failed with error -71 [ 264.291419][ T6687] usb 1-1: USB disconnect, device number 7 [ 264.515010][ T9656] syzkaller0: entered promiscuous mode [ 264.520649][ T9656] syzkaller0: entered allmulticast mode [ 264.707074][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 264.888917][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.899434][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.913022][ T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.922569][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.930980][ T23] usb 2-1: SerialNumber: syz [ 265.097953][ T6684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 265.151724][ T23] usb 2-1: 0:2 : does not exist [ 265.164964][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 265.184312][ T23] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 265.224455][ T23] usb 2-1: USB disconnect, device number 8 [ 265.280529][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.307752][ T6684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.335732][ T6684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.349658][ T6684] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.366340][ T6684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.376831][ T6684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.384864][ T6684] usb 1-1: Product: syz [ 265.397798][ T6684] usb 1-1: Manufacturer: syz [ 265.402508][ T6684] usb 1-1: SerialNumber: syz [ 265.487243][ T6684] cdc_mbim 1-1:1.0: skipping garbage [ 265.554456][ T6684] cdc_mbim 1-1:1.0: skipping garbage [ 265.592657][ T6684] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 265.896372][ T6684] cdc_mbim 1-1:1.0: bind() failure [ 265.941666][ T6684] usb 1-1: USB disconnect, device number 8 [ 267.055746][ T9685] syzkaller0: entered promiscuous mode [ 267.085228][ T9685] syzkaller0: entered allmulticast mode [ 267.367082][ T9694] syzkaller0: entered promiscuous mode [ 267.372612][ T9694] syzkaller0: entered allmulticast mode [ 267.498754][ T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 267.565709][ T28] audit: type=1326 audit(1764201173.291:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 267.588609][ T28] audit: type=1326 audit(1764201173.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 267.641356][ T28] audit: type=1326 audit(1764201173.291:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 267.666584][ T28] audit: type=1326 audit(1764201173.291:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 267.700998][ T28] audit: type=1326 audit(1764201173.291:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 267.725209][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.736397][ T786] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.745752][ T28] audit: type=1326 audit(1764201173.291:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 267.770478][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.805437][ T786] usb 2-1: config 0 descriptor?? [ 267.824753][ T28] audit: type=1326 audit(1764201173.291:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 268.049787][ T28] audit: type=1326 audit(1764201173.291:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 268.133343][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.279098][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.323211][ T28] audit: type=1326 audit(1764201173.291:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f36d5b8f749 code=0x7ffc0000 [ 268.639432][ T786] usbhid 2-1:0.0: can't add hid device: -71 [ 268.664566][ T786] usbhid: probe of 2-1:0.0 failed with error -71 [ 268.697946][ T786] usb 2-1: USB disconnect, device number 9 [ 268.703079][ T9705] tipc: Enabling of bearer rejected, failed to enable media [ 268.714553][ T9705] syzkaller0: entered promiscuous mode [ 268.729624][ T9705] syzkaller0: entered allmulticast mode [ 269.253184][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.560907][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.654347][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.751177][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.786724][ T9724] syzkaller0: entered promiscuous mode [ 269.926370][ T9724] syzkaller0: entered allmulticast mode [ 269.935398][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.972089][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.990749][ T23] usb 1-1: Product: syz [ 269.995087][ T23] usb 1-1: Manufacturer: syz [ 270.039253][ T23] usb 1-1: SerialNumber: syz [ 270.063675][ T23] cdc_mbim 1-1:1.0: skipping garbage [ 270.088796][ T23] cdc_mbim 1-1:1.0: skipping garbage [ 270.114555][ T23] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 270.164922][ T23] cdc_mbim 1-1:1.0: bind() failure [ 270.585584][ T23] usb 1-1: USB disconnect, device number 9 [ 270.686851][ T9730] syzkaller0: entered promiscuous mode [ 270.751607][ T9730] syzkaller0: entered allmulticast mode [ 271.237521][ T9739] syzkaller0: entered promiscuous mode [ 271.247200][ T9739] syzkaller0: entered allmulticast mode [ 271.530470][ T6688] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 272.448873][ T6688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.473417][ T6688] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 272.484114][ T9754] syzkaller0: entered promiscuous mode [ 272.495211][ T9754] syzkaller0: entered allmulticast mode [ 272.499544][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.523603][ T6688] usb 3-1: config 0 descriptor?? [ 272.638386][ T6688] pwc: Askey VC010 type 2 USB webcam detected. [ 272.957493][ T6688] pwc: send_video_command error -71 [ 273.049438][ T6688] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 273.174554][ T6688] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 273.384139][ T6688] usb 3-1: USB disconnect, device number 3 [ 273.614789][ T9766] syzkaller0: entered promiscuous mode [ 273.624607][ T9766] syzkaller0: entered allmulticast mode [ 273.857853][ T9771] syzkaller0: entered promiscuous mode [ 273.863618][ T9771] syzkaller0: entered allmulticast mode [ 273.956949][ T6688] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 273.964866][ T6692] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 274.205485][ T6688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.281604][ T6692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.388259][ T6688] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.445352][ T6692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.566306][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.589152][ T6692] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.618355][ T6688] usb 3-1: config 0 descriptor?? [ 274.677214][ T6688] usb 3-1: can't set config #0, error -71 [ 274.689108][ T6692] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.708378][ T6688] usb 3-1: USB disconnect, device number 4 [ 274.724460][ T6692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.761441][ T6692] usb 4-1: Product: syz [ 274.786121][ T6692] usb 4-1: Manufacturer: syz [ 274.796327][ T6692] usb 4-1: SerialNumber: syz [ 274.865050][ T6692] cdc_mbim 4-1:1.0: skipping garbage [ 274.910743][ T6692] cdc_mbim 4-1:1.0: skipping garbage [ 274.928103][ T6692] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 275.670595][ T6692] cdc_mbim 4-1:1.0: bind() failure [ 275.836262][ T6692] usb 4-1: USB disconnect, device number 8 [ 276.619276][ T9794] syzkaller0: entered promiscuous mode [ 276.848896][ T9794] syzkaller0: entered allmulticast mode [ 277.549850][ T9801] syzkaller0: entered promiscuous mode [ 277.560272][ T9801] syzkaller0: entered allmulticast mode [ 277.756829][ T6692] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 280.816848][ T6692] usb 4-1: device descriptor read/all, error -71 [ 281.957257][ T9834] syzkaller0: entered promiscuous mode [ 281.963291][ T9834] syzkaller0: entered allmulticast mode [ 281.975050][ T9833] syzkaller0: entered promiscuous mode [ 281.985757][ T9833] syzkaller0: entered allmulticast mode [ 282.366950][ T6692] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 285.122363][ T9849] syzkaller0: entered promiscuous mode [ 285.141812][ T9849] syzkaller0: entered allmulticast mode [ 285.266719][ T6692] usb 2-1: device not accepting address 10, error -71 [ 285.562926][ T5828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 286.946230][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.995018][ T5828] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.018522][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.050441][ T5828] usb 3-1: config 0 descriptor?? [ 287.069600][ T9863] syzkaller0: entered promiscuous mode [ 287.075134][ T9863] syzkaller0: entered allmulticast mode [ 287.084085][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 287.163522][ T9865] syzkaller0: entered promiscuous mode [ 287.169273][ T9865] syzkaller0: entered allmulticast mode [ 287.508472][ T5828] pwc: send_video_command error -71 [ 287.513842][ T5828] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 287.521610][ T5828] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 287.532299][ T5828] usb 3-1: USB disconnect, device number 5 [ 290.951446][ T9895] syzkaller0: entered promiscuous mode [ 290.962899][ T9895] syzkaller0: entered allmulticast mode [ 293.078471][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 210 seconds [ 293.247110][ T5828] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.361469][ T9919] binder_alloc: 9918: binder_alloc_buf, no vma [ 293.478520][ T9921] syzkaller0: entered promiscuous mode [ 293.484052][ T9921] syzkaller0: entered allmulticast mode [ 293.499698][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.517715][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 293.527493][ T5828] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.546209][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.555753][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.563942][ T5828] usb 1-1: Product: syz [ 293.568356][ T5828] usb 1-1: Manufacturer: syz [ 293.572986][ T5828] usb 1-1: SerialNumber: syz [ 293.585373][ T5828] cdc_mbim 1-1:1.0: skipping garbage [ 293.591379][ T5828] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 293.599168][ T5828] cdc_mbim 1-1:1.0: bind() failure [ 293.720630][ T9927] syzkaller0: entered promiscuous mode [ 293.726177][ T9927] syzkaller0: entered allmulticast mode [ 293.793287][ T23] usb 1-1: USB disconnect, device number 10 [ 295.018048][ T9935] syzkaller0: entered promiscuous mode [ 295.048946][ T9935] syzkaller0: entered allmulticast mode [ 295.070649][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'. [ 295.079866][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1400'. [ 295.250200][ T9939] team0: entered promiscuous mode [ 295.273585][ T9939] bond0: entered promiscuous mode [ 295.287502][ T9939] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 296.129476][ T9939] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 296.141067][ T9939] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 296.595870][ T9958] syzkaller0: entered promiscuous mode [ 296.605802][ T9958] syzkaller0: entered allmulticast mode [ 296.807025][ T6692] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 297.131072][ T5828] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 297.807399][ T6692] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.826023][ T6692] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.858424][ T6692] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.870294][ T9975] syzkaller0: entered promiscuous mode [ 297.875570][ T6692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.876412][ T9975] syzkaller0: entered allmulticast mode [ 297.895496][ T6692] usb 1-1: SerialNumber: syz [ 297.948728][ T5828] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.964014][ T5828] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 297.976313][ T5828] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.993692][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.012636][ T9969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 298.054642][ T5828] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 299.057666][ T6692] usb 1-1: 0:2 : does not exist [ 299.307359][ T6692] usb 1-1: USB disconnect, device number 11 [ 299.321973][ T5828] usb 2-1: USB disconnect, device number 12 [ 299.445001][ T9988] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1413'. [ 299.520156][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 299.703912][ T9995] syzkaller0: entered promiscuous mode [ 299.713887][ T9995] syzkaller0: entered allmulticast mode [ 299.836807][ T6692] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 299.968311][T10000] syzkaller0: entered promiscuous mode [ 299.973846][T10000] syzkaller0: entered allmulticast mode [ 300.190269][ T6692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.203781][ T6692] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 300.215429][ T6692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.506771][ T6692] usb 1-1: config 0 descriptor?? [ 301.029520][ T6692] pwc: Askey VC010 type 2 USB webcam detected. [ 301.373645][ T6692] pwc: send_video_command error -71 [ 301.396327][ T6692] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 301.438050][ T6692] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 301.497444][ T6692] usb 1-1: USB disconnect, device number 12 [ 301.667218][T10015] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1423'. [ 302.036850][ T6692] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 302.251815][ T6692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.311136][ T6692] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 302.353986][T10026] syzkaller0: entered promiscuous mode [ 302.367590][ T6692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.386058][T10026] syzkaller0: entered allmulticast mode [ 302.466331][ T6692] usb 1-1: config 0 descriptor?? [ 302.608372][ T6692] pwc: Askey VC010 type 2 USB webcam detected. [ 302.918165][ T6692] pwc: send_video_command error -71 [ 303.164844][ T6692] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 303.202521][ T6692] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 304.258897][ T6692] usb 1-1: USB disconnect, device number 13 [ 304.322602][T10039] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1433'. [ 304.433704][T10044] syzkaller0: entered promiscuous mode [ 304.447290][T10044] syzkaller0: entered allmulticast mode [ 307.402772][T10078] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1443'. [ 307.442559][T10080] syzkaller0: entered promiscuous mode [ 307.456793][T10080] syzkaller0: entered allmulticast mode [ 307.600135][T10083] syzkaller0: entered promiscuous mode [ 307.856456][T10083] syzkaller0: entered allmulticast mode [ 309.573168][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 309.874482][ T6692] kernel read not supported for file /dsp1 (pid: 6692 comm: kworker/0:14) [ 311.616016][T10122] syzkaller0: entered promiscuous mode [ 311.624828][T10122] syzkaller0: entered allmulticast mode [ 316.724212][ T28] audit: type=1326 audit(1764201222.451:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 316.769683][ T28] audit: type=1326 audit(1764201222.481:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 316.878957][ T28] audit: type=1326 audit(1764201222.491:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 316.901579][ T28] audit: type=1326 audit(1764201222.491:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f3378f783 code=0x7ffc0000 [ 316.994998][ T28] audit: type=1326 audit(1764201222.491:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f3378f783 code=0x7ffc0000 [ 317.018695][ T28] audit: type=1326 audit(1764201222.491:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 317.042651][ T28] audit: type=1326 audit(1764201222.491:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 317.065552][ T6687] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 317.073269][ T28] audit: type=1326 audit(1764201222.491:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 317.206849][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.213723][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.254028][ T28] audit: type=1326 audit(1764201222.491:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 317.909658][ T6687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.920089][ T6687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.932754][T10171] syzkaller0: entered promiscuous mode [ 317.938681][ T6687] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.956733][T10171] syzkaller0: entered allmulticast mode [ 317.962470][ T6687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.980657][ T6687] usb 1-1: SerialNumber: syz [ 318.259022][ T6687] usb 1-1: 0:2 : does not exist [ 318.294778][ T6687] usb 1-1: unit 5 not found! [ 318.333620][ T6687] usb 1-1: USB disconnect, device number 14 [ 318.401426][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.348137][T10214] syzkaller0: entered promiscuous mode [ 323.385390][T10214] syzkaller0: entered allmulticast mode [ 323.597010][ T10] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 240 seconds [ 324.787194][ T5828] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 324.988993][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.048685][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.061455][ T5828] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.071259][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.079441][ T5828] usb 4-1: SerialNumber: syz [ 325.157938][T10240] sd 0:0:1:0: device reset [ 326.054495][ T5828] usb 4-1: 0:2 : does not exist [ 326.086840][ T5828] usb 4-1: unit 5 not found! [ 326.956349][ T5828] usb 4-1: USB disconnect, device number 11 [ 327.003555][T10245] tipc: Enabled bearer , priority 0 [ 327.015638][T10245] tipc: Resetting bearer [ 327.068415][T10244] tipc: Disabling bearer [ 327.094213][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.356804][ T6688] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 331.504014][T10283] tipc: Enabled bearer , priority 0 [ 331.524701][T10283] tipc: Resetting bearer [ 331.557061][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 331.557214][T10282] tipc: Disabling bearer [ 331.574999][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 331.583193][ T6688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.607551][ T6688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.625000][ T6688] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.665847][ T6688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.693620][ T6688] usb 2-1: SerialNumber: syz [ 332.124262][ T6688] usb 2-1: 0:2 : does not exist [ 332.140464][ T6688] usb 2-1: unit 5 not found! [ 332.609728][ T6688] usb 2-1: USB disconnect, device number 13 [ 332.718159][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.226818][ T5849] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 333.597015][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 333.608581][ T5849] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 333.628242][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x6D, skipping [ 333.654528][ T5849] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 333.785373][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.794743][ T5849] usb 3-1: Product: syz [ 333.801449][ T5849] usb 3-1: Manufacturer: syz [ 333.806326][ T5849] usb 3-1: SerialNumber: syz [ 333.814889][ T5849] usb 3-1: config 0 descriptor?? [ 333.834010][ T5849] powermate: probe of 3-1:0.0 failed with error -22 [ 333.875715][ T5793] Bluetooth: unknown link type 175 [ 333.883293][ T5793] Bluetooth: hci0: connection err: -111 [ 334.847841][ T5849] usb 3-1: USB disconnect, device number 6 [ 334.953703][T10313] tipc: Enabled bearer , priority 0 [ 334.972218][T10313] tipc: Resetting bearer [ 335.000952][T10311] tipc: Disabling bearer [ 337.967096][T10342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.974455][T10342] IPv6: NLM_F_CREATE should be set when creating new route [ 337.981768][T10342] IPv6: NLM_F_CREATE should be set when creating new route [ 338.044306][T10342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.496840][ T6688] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 338.823943][ T6688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.930269][ T6692] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 338.944393][ T6688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.017012][ T6688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.046679][T10354] tipc: Enabled bearer , priority 0 [ 339.057947][T10354] syzkaller0: entered promiscuous mode [ 339.064120][ T6688] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.073628][T10354] syzkaller0: entered allmulticast mode [ 339.086170][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.115296][ T6688] usb 3-1: config 0 descriptor?? [ 339.146018][T10353] tipc: Resetting bearer [ 339.169267][ T6692] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 339.181991][ T6692] usb 4-1: config 0 has no interface number 0 [ 339.196840][ T6692] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 339.206016][ T6692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.256076][ T6692] usb 4-1: config 0 descriptor?? [ 339.463186][T10353] tipc: Disabling bearer [ 339.528842][ T5793] Bluetooth: hci2: Malformed LE Event: 0x0d [ 339.536458][ T6692] usb 4-1: string descriptor 0 read error: -71 [ 339.546170][ T6692] usb-storage 4-1:0.168: USB Mass Storage device detected [ 339.581732][ T6692] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 339.594300][ T6688] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 340.580640][ T6688] plantronics 0003:047F:FFFF.0001: parse failed [ 340.587585][ T6692] usb 4-1: USB disconnect, device number 12 [ 340.596769][ T6688] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 340.608940][ T6688] usb 3-1: USB disconnect, device number 7 [ 340.706547][T10368] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.053630][T10368] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.148681][T10368] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.271622][T10368] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.450005][T10368] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.474469][T10368] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.492320][T10368] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.514309][T10368] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.619851][T10388] tipc: Enabled bearer , priority 0 [ 343.662812][T10396] binder: 10389:10396 ioctl c0306201 0 returned -14 [ 344.258493][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 344.945887][T10405] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.985723][T10409] tipc: Enabling of bearer rejected, failed to enable media [ 344.996197][T10409] syzkaller0: entered promiscuous mode [ 345.002393][T10409] syzkaller0: entered allmulticast mode [ 345.094245][T10405] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.198487][T10405] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.345106][T10405] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.539544][T10420] tipc: Enabled bearer , priority 0 [ 345.550526][T10420] syzkaller0: entered promiscuous mode [ 345.556048][T10420] syzkaller0: entered allmulticast mode [ 345.579390][T10419] tipc: Resetting bearer [ 345.608944][T10419] tipc: Disabling bearer [ 345.917615][T10431] syzkaller0: entered promiscuous mode [ 345.923152][T10431] syzkaller0: entered allmulticast mode [ 346.212515][T10438] tipc: Enabling of bearer rejected, failed to enable media [ 346.234052][T10438] syzkaller0: entered promiscuous mode [ 346.473961][T10438] syzkaller0: entered allmulticast mode [ 348.210720][ T5952] udevd[5952]: inotify_add_watch(7, /dev/loop32, 10) failed: No such file or directory [ 349.407762][T10475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1572'. [ 350.148323][T10405] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.203545][T10405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.231062][T10405] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.333672][T10405] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.400173][T10483] syzkaller0: entered promiscuous mode [ 350.459664][T10483] syzkaller0: entered allmulticast mode [ 353.567612][T10503] IPv6: Can't replace route, no match found [ 353.676914][ T10] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 270 seconds [ 355.577146][ T6688] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 356.218519][ T6688] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.230463][ T6688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.268356][ T6688] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 356.292740][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.326734][ T6688] usb 3-1: SerialNumber: syz [ 356.891906][ T6688] usb 3-1: 0:2 : does not exist [ 357.229194][ T6688] usb 3-1: unit 5 not found! [ 357.421433][ T6688] usb 3-1: USB disconnect, device number 8 [ 357.513037][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.529326][T10541] "syz.2.1593" (10541) uses obsolete ecb(arc4) skcipher [ 357.643894][T10544] syzkaller0: entered promiscuous mode [ 357.650013][T10544] syzkaller0: entered allmulticast mode [ 357.749137][T10546] tipc: Enabling of bearer rejected, failed to enable media [ 357.758971][T10546] syzkaller0: entered promiscuous mode [ 357.764586][T10546] syzkaller0: entered allmulticast mode [ 359.226688][ T6684] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 359.430315][ T6684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.441549][ T6684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.476396][ T6684] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.491271][ T6684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.499590][ T6684] usb 1-1: SerialNumber: syz [ 359.552455][T10578] "syz.1.1608" (10578) uses obsolete ecb(arc4) skcipher [ 359.720273][ T6684] usb 1-1: 0:2 : does not exist [ 359.726350][ T6684] usb 1-1: unit 5 not found! [ 359.743837][ T6684] usb 1-1: USB disconnect, device number 15 [ 359.778508][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.035986][T10584] syzkaller0: entered promiscuous mode [ 360.042764][T10584] syzkaller0: entered allmulticast mode [ 361.624755][T10610] tipc: Enabling of bearer rejected, failed to enable media [ 361.745093][T10613] syzkaller0: entered promiscuous mode [ 361.760271][T10613] syzkaller0: entered allmulticast mode [ 362.091243][T10616] mmap: syz.0.1621 (10616) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 362.409092][T10618] syzkaller0: entered promiscuous mode [ 362.414997][T10618] syzkaller0: entered allmulticast mode [ 362.544882][T10621] "syz.0.1623" (10621) uses obsolete ecb(arc4) skcipher [ 364.674621][T10636] tipc: Enabling of bearer rejected, failed to enable media [ 365.668670][T10649] syzkaller0: entered promiscuous mode [ 365.681361][T10649] syzkaller0: entered allmulticast mode [ 365.914741][T10653] syzkaller0: entered promiscuous mode [ 365.924230][T10653] syzkaller0: entered allmulticast mode [ 366.395351][T10660] "syz.1.1634" (10660) uses obsolete ecb(arc4) skcipher [ 366.523012][T10662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.646909][ T5828] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 366.836935][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 366.848134][ T5828] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.849893][T10669] tipc: Enabling of bearer rejected, failed to enable media [ 366.856245][ T5828] usb 1-1: config 0 has no interface number 0 [ 366.871248][T10669] syzkaller0: entered promiscuous mode [ 366.871270][T10669] syzkaller0: entered allmulticast mode [ 366.883313][ T5828] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.894885][ T5828] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.920451][ T5828] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 366.979900][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.096304][ T5828] usb 1-1: config 0 descriptor?? [ 367.829655][T10676] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 367.836654][T10676] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.862044][T10676] vhci_hcd vhci_hcd.0: Device attached [ 367.956404][ T5828] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0002/input/input12 [ 368.222647][ T5849] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 368.672058][T10677] vhci_hcd: connection reset by peer [ 368.769709][ T5828] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0002/input/input13 [ 368.840147][ T2913] vhci_hcd: stop threads [ 368.932715][ T2913] vhci_hcd: release socket [ 369.040619][ T2913] vhci_hcd: disconnect device [ 369.134769][ T5828] uclogic 0003:28BD:0071.0002: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 369.242736][ T5828] usb 1-1: USB disconnect, device number 16 [ 369.409763][T10695] syz.3.1646[10695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.409903][T10695] syz.3.1646[10695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.429550][T10687] fido_id[10687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 369.477429][T10693] tipc: Enabled bearer , priority 0 [ 369.497779][T10693] syzkaller0: entered promiscuous mode [ 369.503302][T10693] syzkaller0: entered allmulticast mode [ 369.612908][T10693] tipc: Resetting bearer [ 369.640154][T10697] tipc: Enabled bearer , priority 0 [ 369.656079][T10691] tipc: Resetting bearer [ 369.697356][T10691] tipc: Disabling bearer [ 369.713495][T10694] tipc: Disabling bearer [ 370.732249][T10710] tipc: Enabling of bearer rejected, failed to enable media [ 370.777705][T10710] syzkaller0: entered promiscuous mode [ 370.783237][T10710] syzkaller0: entered allmulticast mode [ 371.077551][T10704] syz.2.1648 (10704): drop_caches: 2 [ 372.032808][T10726] syzkaller0: entered promiscuous mode [ 372.056557][T10726] syzkaller0: entered allmulticast mode [ 372.654224][T10731] tipc: Enabling of bearer rejected, already enabled [ 373.517223][ T5849] vhci_hcd: vhci_device speed not set [ 373.779622][ T5159] udevd[5159]: worker [5779] /devices/virtual/block/nbd0 timeout; kill it [ 373.904832][ T5159] udevd[5159]: seq 10608 '/devices/virtual/block/nbd0' killed [ 374.539091][T10742] tipc: Enabling of bearer rejected, failed to enable media [ 375.092622][T10742] syzkaller0: entered promiscuous mode [ 375.184227][T10742] syzkaller0: entered allmulticast mode [ 375.672215][T10754] syzkaller0: entered promiscuous mode [ 375.682045][T10754] syzkaller0: entered allmulticast mode [ 375.726209][T10757] tipc: Enabled bearer , priority 0 [ 375.769019][T10757] syzkaller0: entered promiscuous mode [ 375.774847][T10757] syzkaller0: entered allmulticast mode [ 375.796340][T10757] tipc: Resetting bearer [ 375.832064][T10756] tipc: Resetting bearer [ 375.892726][T10756] tipc: Disabling bearer [ 375.926878][ T6684] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 376.173752][ T6684] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.927040][ T6684] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.937865][ T6684] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 377.951465][ T6684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.960961][ T6684] usb 1-1: SerialNumber: syz [ 378.108006][T10770] "syz.3.1670" (10770) uses obsolete ecb(arc4) skcipher [ 378.216345][ T6684] usb 1-1: 0:2 : does not exist [ 378.229029][ T6684] usb 1-1: unit 5 not found! [ 378.273305][ T6684] usb 1-1: USB disconnect, device number 17 [ 378.365866][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.727965][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734942][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.290676][T10778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.297983][T10778] IPv6: NLM_F_CREATE should be set when creating new route [ 379.305292][T10778] IPv6: NLM_F_CREATE should be set when creating new route [ 379.318539][T10778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.360430][T10777] syzkaller0: entered promiscuous mode [ 379.366024][T10777] syzkaller0: entered allmulticast mode [ 379.611067][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 379.650770][T10784] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.659838][T10784] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.668115][T10784] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.676291][T10784] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.693516][T10788] syzkaller0: entered promiscuous mode [ 379.699141][T10788] syzkaller0: entered allmulticast mode [ 379.712068][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 380.212250][ T6684] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 382.298475][ T6684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.320821][T10801] "syz.0.1681" (10801) uses obsolete ecb(arc4) skcipher [ 382.328962][ T6684] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.342175][ T6684] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.351436][ T6684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.366915][ T6684] usb 2-1: config 0 descriptor?? [ 382.383891][ T6684] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 382.589640][ T6684] usb 2-1: USB disconnect, device number 14 [ 383.736766][ T6684] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 383.767304][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 300 seconds [ 383.963585][T10815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.970933][T10815] IPv6: NLM_F_CREATE should be set when creating new route [ 383.978275][T10815] IPv6: NLM_F_CREATE should be set when creating new route [ 383.991301][T10815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.757699][T10820] syzkaller0: entered promiscuous mode [ 384.763295][T10820] syzkaller0: entered allmulticast mode [ 385.046809][T10824] syzkaller0: entered promiscuous mode [ 385.052348][T10824] syzkaller0: entered allmulticast mode [ 389.068559][T10856] binder: 10849:10856 unknown command 1074553619 [ 389.075132][T10856] binder: 10849:10856 ioctl c0306201 200000000540 returned -22 [ 390.696690][ T6692] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 390.726817][ T5849] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 390.919196][ T6692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 390.936685][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 390.962621][ T6692] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 391.032972][ T6692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 391.126090][ T6692] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 391.220219][ T6692] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 391.314665][ T6692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.459263][ T6692] usb 3-1: config 0 descriptor?? [ 391.684790][ T5849] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.692961][ T5849] usb 4-1: config 0 has no interface number 0 [ 391.699171][ T5849] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.710556][ T5849] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.721539][ T5849] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 391.730722][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.745903][ T6692] hdpvr 3-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 391.762138][ T5849] usb 4-1: config 0 descriptor?? [ 391.803174][ T6692] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 391.919991][T10879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.927949][T10879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.433227][ T6692] hdpvr 3-1:0.0: Could not setup controls [ 392.464183][ T6692] hdpvr 3-1:0.0: registering videodev failed [ 392.705637][ T6692] hdpvr: probe of 3-1:0.0 failed with error -71 [ 392.936462][ T6692] usb 3-1: USB disconnect, device number 9 [ 393.090963][ T5849] uclogic 0003:28BD:0071.0003: failed retrieving string descriptor #100: -71 [ 393.105785][ T5849] uclogic 0003:28BD:0071.0003: failed retrieving pen parameters: -71 [ 393.114594][ T5849] uclogic 0003:28BD:0071.0003: pen probing failed: -71 [ 393.121620][ T5849] uclogic 0003:28BD:0071.0003: failed probing parameters: -71 [ 393.129238][ T5849] uclogic: probe of 0003:28BD:0071.0003 failed with error -71 [ 393.139731][ T5849] usb 4-1: USB disconnect, device number 13 [ 393.273711][T10890] syzkaller0: entered promiscuous mode [ 393.279460][T10890] syzkaller0: entered allmulticast mode [ 393.587549][ T6692] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 394.576672][ T6692] usb 1-1: device descriptor read/64, error -71 [ 395.628487][ T6692] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 395.856866][ T6692] usb 1-1: device descriptor read/64, error -71 [ 395.988437][T10909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.001274][T10909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.009912][ T6692] usb usb1-port1: attempt power cycle [ 396.397101][T10921] syzkaller0: entered promiscuous mode [ 396.403816][T10921] syzkaller0: entered allmulticast mode [ 396.636791][ T6688] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 396.702158][T10926] syzkaller0: entered promiscuous mode [ 396.707930][T10926] syzkaller0: entered allmulticast mode [ 397.517037][ T6688] usb 3-1: Using ep0 maxpacket: 16 [ 397.525857][ T6688] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.535056][ T6688] usb 3-1: config 0 has no interface number 0 [ 397.563012][ T6688] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.718781][ T6688] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.757348][ T6688] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 397.852180][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.017298][ T6688] usb 3-1: config 0 descriptor?? [ 398.637475][ T5828] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 398.775965][ T6688] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 398.800755][ T6688] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 398.809208][ T6688] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 398.816203][ T6688] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 398.826456][ T6688] uclogic: probe of 0003:28BD:0071.0004 failed with error -71 [ 398.839365][ T6688] usb 3-1: USB disconnect, device number 10 [ 398.887082][ T5828] usb 4-1: device descriptor read/64, error -71 [ 399.176820][ T5828] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 399.376808][ T5828] usb 4-1: device descriptor read/64, error -71 [ 399.495995][T10953] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.513260][ T5828] usb usb4-port1: attempt power cycle [ 399.563094][T10953] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.621634][T10953] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.701067][T10953] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.843843][T10953] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.888398][T10953] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.914628][T10953] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.936709][ T5828] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 399.940684][T10953] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.977482][ T5828] usb 4-1: device descriptor read/8, error -71 [ 400.143254][T10955] binder: 10954:10955 unknown command 0 [ 400.167298][T10955] binder: 10954:10955 ioctl c0306201 200000000080 returned -22 [ 400.449429][T10960] kvm: pic: non byte read [ 400.454325][T10960] kvm: pic: non byte read [ 400.463926][T10960] kvm: pic: non byte read [ 400.469013][T10960] kvm: pic: non byte read [ 400.473636][T10960] kvm: pic: non byte read [ 400.484556][T10960] kvm: pic: non byte read [ 400.490345][T10960] kvm: pic: non byte read [ 400.505789][ T5828] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 400.539774][ T5828] usb 4-1: device descriptor read/8, error -71 [ 400.616744][T10960] kvm: pic: non byte read [ 400.627191][T10960] kvm: pic: non byte read [ 400.670305][ T5828] usb usb4-port1: unable to enumerate USB device [ 400.678346][T10960] kvm: pic: non byte read [ 402.225636][T10978] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.302968][T10978] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.385758][T10978] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.494724][T10978] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.686832][ T6687] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 402.876789][ T6687] usb 2-1: Using ep0 maxpacket: 16 [ 402.893160][ T6687] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.916076][ T6687] usb 2-1: config 0 has no interface number 0 [ 402.923634][ T6687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.940316][ T6687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.956663][ T6687] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 402.969843][ T6687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.982567][ T6687] usb 2-1: config 0 descriptor?? [ 403.508566][T10987] binder: 10986:10987 unknown command 0 [ 403.514284][T10987] binder: 10986:10987 ioctl c0306201 200000000080 returned -22 [ 403.608943][ T6687] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 403.625756][ T6687] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 403.653612][ T6687] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 403.664263][ T6687] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 403.676974][ T6687] uclogic: probe of 0003:28BD:0071.0005 failed with error -71 [ 403.693261][ T6687] usb 2-1: USB disconnect, device number 16 [ 403.760766][T10991] tipc: Enabled bearer , priority 0 [ 403.768746][T10991] syzkaller0: entered promiscuous mode [ 403.774267][T10991] syzkaller0: entered allmulticast mode [ 403.806798][T10991] tipc: Resetting bearer [ 403.814561][T10990] tipc: Resetting bearer [ 403.833743][T10990] tipc: Disabling bearer [ 404.056714][ T5828] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 404.246720][ T5828] usb 4-1: device descriptor read/64, error -71 [ 404.516682][ T5828] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 404.615716][ T5793] Bluetooth: hci3: unexpected event for opcode 0x200b [ 404.709436][ T5828] usb 4-1: device descriptor read/64, error -71 [ 404.865169][ T5828] usb usb4-port1: attempt power cycle [ 405.174319][T11008] binder: 11007:11008 unknown command 0 [ 405.180267][T11008] binder: 11007:11008 ioctl c0306201 200000000080 returned -22 [ 405.276838][ T5828] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 405.318004][ T5828] usb 4-1: device descriptor read/8, error -71 [ 405.596820][ T5828] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 405.647965][ T5828] usb 4-1: device descriptor read/8, error -71 [ 405.777028][ T5828] usb usb4-port1: unable to enumerate USB device [ 406.236757][ T5828] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 406.899264][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.909739][ T5828] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 406.918845][T11021] tipc: Enabled bearer , priority 0 [ 406.919749][T11021] syzkaller0: entered promiscuous mode [ 406.929054][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.936663][T11021] syzkaller0: entered allmulticast mode [ 406.945249][ T5828] usb 2-1: config 0 descriptor?? [ 406.957688][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 406.978934][T11021] tipc: Resetting bearer [ 406.991470][T11020] tipc: Resetting bearer [ 407.128056][T11020] tipc: Disabling bearer [ 407.163674][ T5828] pwc: send_video_command error -71 [ 407.186668][ T5828] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 407.203531][T10978] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.213167][ T5828] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 407.245840][ T5828] usb 2-1: USB disconnect, device number 17 [ 407.252887][T10978] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.564153][T10978] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.818358][T10978] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.827949][ T5828] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 407.908060][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1759'. [ 407.927498][T11031] "syz.0.1759" (11031) uses obsolete ecb(arc4) skcipher [ 407.991753][T11035] binder: 11032:11035 unknown command 0 [ 408.014348][ T28] audit: type=1326 audit(1764201313.741:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.034981][T11035] binder: 11032:11035 ioctl c0306201 200000000080 returned -22 [ 408.055616][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.076809][ T5828] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 408.085933][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.094353][ T28] audit: type=1326 audit(1764201313.741:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.138062][ T5828] usb 2-1: config 0 descriptor?? [ 408.143336][ T28] audit: type=1326 audit(1764201313.741:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.179201][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 408.197165][ T28] audit: type=1326 audit(1764201313.741:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.256735][ T28] audit: type=1326 audit(1764201313.741:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.282194][ T28] audit: type=1326 audit(1764201313.741:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.312159][ T28] audit: type=1326 audit(1764201313.741:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.339819][ T28] audit: type=1326 audit(1764201313.741:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.369562][ T28] audit: type=1326 audit(1764201313.741:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.397334][ T28] audit: type=1326 audit(1764201313.741:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.0.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a3d98f749 code=0x7ffc0000 [ 408.546950][ T6688] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 408.572165][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 408.583584][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 408.592681][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 408.605399][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 408.622931][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 408.640768][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 408.649750][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 408.657634][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 408.665247][ T5828] pwc: recv_control_msg error -32 req 04 val 1500 [ 408.673566][ T5828] pwc: recv_control_msg error -32 req 02 val 2500 [ 408.681852][ T5828] pwc: recv_control_msg error -32 req 02 val 2400 [ 408.744359][ T6688] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.754862][ T6688] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.780086][ T6688] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 408.807266][ T6688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.815325][ T6688] usb 4-1: SerialNumber: syz [ 408.896280][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 408.919111][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 408.941491][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 408.965299][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 408.984520][ T5828] pwc: Registered as video103. [ 409.007189][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 409.046537][ T5828] usb 2-1: USB disconnect, device number 18 [ 409.061563][ T6688] usb 4-1: 0:2 : does not exist [ 409.137707][ T6688] usb 4-1: USB disconnect, device number 22 [ 409.195844][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.805138][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1770'. [ 410.825585][T11090] "syz.2.1770" (11090) uses obsolete ecb(arc4) skcipher [ 410.918103][T11094] binder: 11093:11094 unknown command 0 [ 410.923768][T11094] binder: 11093:11094 ioctl c0306201 200000000080 returned -22 [ 411.150145][T11097] syzkaller0: entered promiscuous mode [ 411.155768][T11097] syzkaller0: entered allmulticast mode [ 411.436987][ T5828] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 411.678306][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.767955][ T5828] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.801870][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.833431][ T5828] usb 1-1: config 0 descriptor?? [ 411.863020][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 412.063600][ T5828] pwc: send_video_command error -71 [ 412.085579][ T5828] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 412.102144][ T5828] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 412.163362][ T5828] usb 1-1: USB disconnect, device number 21 [ 412.438253][ T6687] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 412.746903][ T5828] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 412.828106][ T6687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.838612][ T6687] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.866784][ T6687] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.876469][ T6687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.898842][ T6687] usb 3-1: config 0 descriptor?? [ 412.919048][ T6687] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 412.946770][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.976882][ T5828] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 412.996473][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.017904][ T5828] usb 1-1: config 0 descriptor?? [ 413.032838][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 413.131273][ T6687] usb 3-1: USB disconnect, device number 11 [ 413.469745][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 413.477071][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 413.496812][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 413.504057][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 413.517497][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 413.527326][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 413.544334][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 413.556234][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 413.574251][ T5828] pwc: recv_control_msg error -32 req 04 val 1500 [ 413.588965][ T5828] pwc: recv_control_msg error -32 req 02 val 2500 [ 413.607652][ T5828] pwc: recv_control_msg error -32 req 02 val 2400 [ 413.688415][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1780'. [ 413.710195][T11118] "syz.3.1780" (11118) uses obsolete ecb(arc4) skcipher [ 413.822990][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 413.834750][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 413.855159][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 413.872289][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 413.897273][ T5828] pwc: Registered as video103. [ 413.924925][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 413.992784][ T6687] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 414.001486][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 330 seconds [ 414.013054][ T5828] usb 1-1: USB disconnect, device number 22 [ 414.828667][ T6687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.847386][ T6687] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.866676][ T6687] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 414.875787][ T6687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.891264][ T6687] usb 3-1: config 0 descriptor?? [ 414.908476][ T6687] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 414.915576][ T6687] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 414.927070][T11128] binder: 11127:11128 unknown command 0 [ 414.932693][T11128] binder: 11127:11128 ioctl c0306201 200000000080 returned -22 [ 414.965030][ T6687] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 415.103603][ T6687] usb 3-1: USB disconnect, device number 12 [ 415.527432][ T5793] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 417.582946][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 417.582963][ T28] audit: type=1326 audit(1764201323.301:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 417.643717][ T28] audit: type=1326 audit(1764201323.301:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 417.660998][T11163] binder: 11160:11163 unknown command 0 [ 417.669043][ T28] audit: type=1326 audit(1764201323.351:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 417.692841][T11163] binder: 11160:11163 ioctl c0306201 200000000080 returned -22 [ 417.695764][ T28] audit: type=1326 audit(1764201323.351:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 417.728764][ T28] audit: type=1326 audit(1764201323.351:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 417.747829][T11166] tipc: Enabled bearer , priority 0 [ 418.295704][T11170] syzkaller0: entered promiscuous mode [ 418.329036][T11170] syzkaller0: entered allmulticast mode [ 418.413791][ T28] audit: type=1326 audit(1764201323.361:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 418.462368][T11170] tipc: Resetting bearer [ 418.497198][T11164] tipc: Resetting bearer [ 418.515053][ T28] audit: type=1326 audit(1764201323.361:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 418.538998][ T28] audit: type=1326 audit(1764201323.361:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 418.562968][ T28] audit: type=1326 audit(1764201323.361:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 418.585393][ T28] audit: type=1326 audit(1764201323.361:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11161 comm="syz.1.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f3378f749 code=0x7ffc0000 [ 418.609312][T11164] tipc: Disabling bearer [ 418.828682][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1799'. [ 418.845403][T11179] "syz.0.1799" (11179) uses obsolete ecb(arc4) skcipher [ 420.912766][T11196] tipc: Enabling of bearer rejected, already enabled [ 421.403835][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 421.467343][T11209] "syz.2.1810" (11209) uses obsolete ecb(arc4) skcipher [ 422.283806][T11216] tipc: Enabling of bearer rejected, already enabled [ 424.415069][T11229] tipc: Enabled bearer , priority 0 [ 424.463296][T11229] tipc: Resetting bearer [ 424.563726][T11228] tipc: Disabling bearer [ 425.230961][T11240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1821'. [ 425.266873][T11238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.297987][T11240] "syz.2.1821" (11240) uses obsolete ecb(arc4) skcipher [ 425.458632][T11247] tipc: Enabling of bearer rejected, already enabled [ 427.896505][T11264] tipc: Enabled bearer , priority 0 [ 428.003339][T11264] tipc: Resetting bearer [ 428.197516][T11263] tipc: Disabling bearer [ 428.391509][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1831'. [ 428.662271][T11268] "syz.2.1831" (11268) uses obsolete ecb(arc4) skcipher [ 429.417221][T11279] tipc: Enabling of bearer rejected, already enabled [ 430.452286][T11292] binder: 11290:11292 unknown command 0 [ 430.466726][T11292] binder: 11290:11292 ioctl c0306201 200000000080 returned -22 [ 430.575846][T11296] tipc: Enabled bearer , priority 0 [ 430.595729][T11296] syzkaller0: entered promiscuous mode [ 430.610100][T11296] syzkaller0: entered allmulticast mode [ 430.697851][T11295] tipc: Resetting bearer [ 430.803018][T11295] tipc: Disabling bearer [ 430.906893][T11304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1844'. [ 430.930980][T11304] "syz.0.1844" (11304) uses obsolete ecb(arc4) skcipher [ 431.061449][T11307] macsec1: entered allmulticast mode [ 431.078276][T11307] dummy0: entered allmulticast mode [ 431.167942][T11307] dummy0: left allmulticast mode [ 431.992245][T11313] tipc: Enabled bearer , priority 0 [ 432.042708][T11315] syzkaller0: entered promiscuous mode [ 432.152170][T11315] syzkaller0: entered allmulticast mode [ 432.971835][T11313] tipc: Resetting bearer [ 433.006326][T11312] tipc: Resetting bearer [ 433.013880][T11305] binder: 11288:11305 ioctl 0 200000000040 returned -22 [ 433.165297][T11312] tipc: Disabling bearer [ 433.181108][T11324] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.200236][T11324] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.371871][T11324] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.915097][T11324] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.404594][T11324] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.415480][T11324] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.456129][T11337] tipc: Enabling of bearer rejected, already enabled [ 434.464951][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'. [ 434.557271][T11338] "syz.0.1855" (11338) uses obsolete ecb(arc4) skcipher [ 434.577489][T11324] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.678171][T11324] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.397554][T11324] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.410816][T11324] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.448116][T11324] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.456376][T11324] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.475554][T11324] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.484140][T11324] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.567165][T11324] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.648301][T11324] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.437969][ T5793] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 437.165032][T11366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1866'. [ 437.343319][T11366] "syz.3.1866" (11366) uses obsolete ecb(arc4) skcipher [ 437.376827][ T5849] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 437.476213][T11369] tipc: Enabled bearer , priority 0 [ 437.499681][T11369] syzkaller0: entered promiscuous mode [ 437.505214][T11369] syzkaller0: entered allmulticast mode [ 437.531946][T11368] tipc: Resetting bearer [ 437.575648][T11368] tipc: Disabling bearer [ 437.589956][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.806693][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 438.431207][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.445572][ T5849] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.454993][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.474163][ T5849] usb 2-1: config 0 descriptor?? [ 438.644823][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.745324][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.356154][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.401328][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 439.417896][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.433431][ T5849] usbhid: probe of 2-1:0.0 failed with error -71 [ 439.442126][ T23] usb 4-1: SerialNumber: syz [ 439.454519][ T5849] usb 2-1: USB disconnect, device number 19 [ 439.538507][T11385] tipc: Enabled bearer , priority 0 [ 439.551742][T11385] syzkaller0: entered promiscuous mode [ 439.564046][T11385] syzkaller0: entered allmulticast mode [ 439.597057][T11384] tipc: Resetting bearer [ 439.641654][T11384] tipc: Disabling bearer [ 439.787261][T11391] tipc: Enabled bearer , priority 0 [ 439.795016][T11391] syzkaller0: entered promiscuous mode [ 439.803218][T11391] syzkaller0: entered allmulticast mode [ 439.840662][T11390] tipc: Resetting bearer [ 439.859962][ T23] usb 4-1: 0:2 : does not exist [ 439.865027][ T23] usb 4-1: unit 5 not found! [ 439.885354][ T23] usb 4-1: USB disconnect, device number 23 [ 439.942755][T11390] tipc: Disabling bearer [ 440.069893][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.076416][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.781920][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.826472][T11397] tipc: Enabled bearer , priority 0 [ 440.862071][T11397] syzkaller0: entered promiscuous mode [ 440.868132][T11397] syzkaller0: entered allmulticast mode [ 440.882806][T11400] binder: 11398:11400 ioctl 4018620d 0 returned -22 [ 440.888265][T11397] tipc: Resetting bearer [ 440.951363][T11396] tipc: Resetting bearer [ 441.545369][T11396] tipc: Disabling bearer [ 441.913484][T11410] IPv6: Can't replace route, no match found [ 443.470700][T11432] binder: 11431:11432 ioctl 4018620d 0 returned -22 [ 443.636766][T11103] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 443.663954][T11437] tipc: Enabled bearer , priority 0 [ 443.672451][T11437] syzkaller0: entered promiscuous mode [ 443.680894][T11437] syzkaller0: entered allmulticast mode [ 443.714947][T11437] tipc: Resetting bearer [ 443.731515][T11436] tipc: Resetting bearer [ 443.783456][T11436] tipc: Disabling bearer [ 444.328581][T11103] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.400970][T11445] syzkaller0: entered promiscuous mode [ 444.418085][T11445] syzkaller0: entered allmulticast mode [ 444.438529][T11103] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.457232][T11103] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 444.469143][T11103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.477230][T11103] usb 3-1: SerialNumber: syz [ 444.576924][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 360 seconds [ 444.607690][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'. [ 444.711645][T11103] usb 3-1: 0:2 : does not exist [ 444.732870][T11103] usb 3-1: unit 5 not found! [ 444.770791][T11103] usb 3-1: USB disconnect, device number 13 [ 444.821316][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.069702][T11459] tipc: Enabled bearer , priority 0 [ 445.077772][T11459] syzkaller0: entered promiscuous mode [ 445.083351][T11459] syzkaller0: entered allmulticast mode [ 445.103854][T11459] tipc: Resetting bearer [ 445.114111][T11458] tipc: Resetting bearer [ 445.150675][T11458] tipc: Disabling bearer [ 445.216751][ T786] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 445.429150][ T786] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 445.463188][ T786] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 445.495129][ T786] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 445.519050][ T786] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 445.550296][ T786] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 445.567845][ T786] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 445.598795][ T786] usb 1-1: string descriptor 0 read error: -22 [ 445.605829][ T786] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 445.632018][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.470967][ T6684] usb 1-1: USB disconnect, device number 23 [ 447.043704][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1905'. [ 447.403617][T11484] binder: 11482:11484 unknown command 0 [ 447.423574][T11484] binder: 11482:11484 ioctl c0306201 200000000080 returned -22 [ 447.460856][T11486] tipc: Enabled bearer , priority 0 [ 447.475032][T11486] syzkaller0: entered promiscuous mode [ 447.481121][T11486] syzkaller0: entered allmulticast mode [ 447.517841][T11486] tipc: Resetting bearer [ 447.555202][T11485] tipc: Resetting bearer [ 447.611925][T11485] tipc: Disabling bearer [ 447.727292][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 447.906881][ T6684] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 448.144774][ T6684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.196184][ T6684] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 448.250291][ T6684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.382479][ T6684] usb 3-1: config 0 descriptor?? [ 448.434132][ T6684] pwc: Askey VC010 type 2 USB webcam detected. [ 448.638815][ T6684] pwc: send_video_command error -71 [ 448.652233][ T6684] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 448.849689][ T6684] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 448.859305][ T6684] usb 3-1: USB disconnect, device number 14 [ 448.918033][T11505] syzkaller0: entered promiscuous mode [ 448.923559][T11505] syzkaller0: entered allmulticast mode [ 449.227161][ T6684] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 449.373142][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1926'. [ 449.438756][ T6684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.449383][ T6684] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 449.460641][ T6684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.477514][ T6684] usb 3-1: config 0 descriptor?? [ 449.479480][T11522] tipc: Enabled bearer , priority 0 [ 449.493796][T11522] syzkaller0: entered promiscuous mode [ 449.495378][ T6684] pwc: Askey VC010 type 2 USB webcam detected. [ 449.500710][T11522] syzkaller0: entered allmulticast mode [ 449.527564][T11522] tipc: Resetting bearer [ 449.539926][T11521] tipc: Resetting bearer [ 449.560437][T11521] tipc: Disabling bearer [ 449.914513][ T6684] pwc: recv_control_msg error -32 req 02 val 2b00 [ 449.986424][ T6684] pwc: recv_control_msg error -32 req 02 val 2700 [ 449.996442][ T6684] pwc: recv_control_msg error -32 req 02 val 2c00 [ 450.003642][ T6684] pwc: recv_control_msg error -32 req 04 val 1000 [ 450.011501][ T6684] pwc: recv_control_msg error -32 req 04 val 1300 [ 450.018923][ T6684] pwc: recv_control_msg error -32 req 04 val 1400 [ 450.026500][ T6684] pwc: recv_control_msg error -32 req 02 val 2000 [ 450.034645][ T6684] pwc: recv_control_msg error -32 req 02 val 2100 [ 450.044917][ T6684] pwc: recv_control_msg error -32 req 04 val 1500 [ 450.066116][ T6684] pwc: recv_control_msg error -32 req 02 val 2500 [ 450.074097][ T6684] pwc: recv_control_msg error -32 req 02 val 2400 [ 450.231409][T11532] syzkaller0: entered promiscuous mode [ 450.237275][T11532] syzkaller0: entered allmulticast mode [ 450.288209][ T6684] pwc: recv_control_msg error -71 req 02 val 2900 [ 450.300274][ T6684] pwc: recv_control_msg error -71 req 02 val 2800 [ 450.311365][ T6684] pwc: recv_control_msg error -71 req 04 val 1100 [ 450.325903][ T6684] pwc: recv_control_msg error -71 req 04 val 1200 [ 450.342500][ T6684] pwc: Registered as video103. [ 450.368424][ T6684] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 450.407801][ T6684] usb 3-1: USB disconnect, device number 15 [ 450.899401][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1935'. [ 451.703251][T11564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1945'. [ 452.408020][T11566] tipc: Enabling of bearer rejected, already enabled [ 452.733891][T11578] tipc: Enabled bearer , priority 0 [ 452.744819][T11578] syzkaller0: entered promiscuous mode [ 452.753172][T11578] syzkaller0: entered allmulticast mode [ 452.780792][T11578] tipc: Resetting bearer [ 452.801268][T11577] tipc: Resetting bearer [ 452.830315][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 452.906172][T11577] tipc: Disabling bearer [ 453.052063][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'. [ 453.236819][ T6688] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 453.426939][ T6688] usb 3-1: Using ep0 maxpacket: 16 [ 453.440205][ T6688] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.463051][ T6688] usb 3-1: config 0 has no interface number 0 [ 454.297197][ T6688] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.308683][ T6688] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.319940][ T6688] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 454.329208][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.339904][ T6688] usb 3-1: config 0 descriptor?? [ 456.241279][ T6688] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0006/input/input17 [ 456.386218][ T6688] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0006/input/input18 [ 456.450490][ T6688] uclogic 0003:28BD:0071.0006: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 456.481953][ T6688] usb 3-1: USB disconnect, device number 16 [ 456.680420][T11612] vivid-002: kernel_thread() failed [ 456.980584][T11616] fido_id[11616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 457.014462][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 457.119413][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 457.148279][T11621] tipc: Enabled bearer , priority 0 [ 457.172012][T11621] syzkaller0: entered promiscuous mode [ 457.181450][T11621] syzkaller0: entered allmulticast mode [ 457.208397][T11621] tipc: Resetting bearer [ 457.229701][T11619] tipc: Resetting bearer [ 457.252585][T11619] tipc: Disabling bearer [ 457.263079][T11628] tipc: Enabled bearer , priority 0 [ 457.271882][T11628] syzkaller0: entered promiscuous mode [ 457.277575][T11628] syzkaller0: entered allmulticast mode [ 457.297661][T11628] tipc: Resetting bearer [ 457.306288][T11627] tipc: Resetting bearer [ 457.337921][T11627] tipc: Disabling bearer [ 459.681355][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1977'. [ 459.711568][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 459.821332][T11656] tipc: Enabled bearer , priority 0 [ 459.832572][T11656] syzkaller0: entered promiscuous mode [ 460.187470][T11656] syzkaller0: entered allmulticast mode [ 460.407742][T11657] vivid-003: kernel_thread() failed [ 460.564189][T11656] tipc: Resetting bearer [ 460.597391][T11655] tipc: Resetting bearer [ 460.739879][T11666] binder: 11664:11666 unknown command 0 [ 460.745629][T11666] binder: 11664:11666 ioctl c0306201 200000000080 returned -22 [ 460.755190][T11666] binder: BINDER_SET_CONTEXT_MGR already set [ 460.762460][T11666] binder: 11664:11666 ioctl 4018620d 200000000040 returned -16 [ 460.785660][T11655] tipc: Disabling bearer [ 463.373676][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1987'. [ 463.424281][T11688] tipc: Enabling of bearer rejected, already enabled [ 464.543422][T11695] vivid-000: kernel_thread() failed [ 465.446757][ T786] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 465.662530][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.675528][ T786] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 465.686713][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.801198][ T786] usb 2-1: config 0 descriptor?? [ 466.144784][ T786] usbhid 2-1:0.0: can't add hid device: -71 [ 466.169530][ T786] usbhid: probe of 2-1:0.0 failed with error -71 [ 466.206515][ T786] usb 2-1: USB disconnect, device number 20 [ 466.255711][ T5793] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 466.277065][T11713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1997'. [ 466.371763][T11715] tipc: Enabled bearer , priority 0 [ 466.380119][T11715] syzkaller0: entered promiscuous mode [ 466.385633][T11715] syzkaller0: entered allmulticast mode [ 466.403044][T11715] tipc: Resetting bearer [ 466.426265][T11714] tipc: Resetting bearer [ 466.451882][T11714] tipc: Disabling bearer [ 466.463638][T11718] tipc: Enabled bearer , priority 0 [ 466.472387][T11718] syzkaller0: entered promiscuous mode [ 466.482215][T11718] syzkaller0: entered allmulticast mode [ 466.522390][T11718] tipc: Resetting bearer [ 466.560745][T11716] tipc: Resetting bearer [ 466.637481][T11716] tipc: Disabling bearer [ 467.236750][T11103] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 467.429455][T11103] usb 3-1: Using ep0 maxpacket: 16 [ 467.439230][T11103] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.456602][T11103] usb 3-1: config 0 has no interface number 0 [ 467.467259][T11103] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.489381][T11103] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.499441][T11103] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 467.513388][T11103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.533088][T11103] usb 3-1: config 0 descriptor?? [ 468.204731][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2008'. [ 468.214368][T11103] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0007/input/input19 [ 468.237208][ T5793] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 468.268169][T11103] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0007/input/input20 [ 468.383593][T11103] uclogic 0003:28BD:0071.0007: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 468.867057][T11103] usb 3-1: USB disconnect, device number 17 [ 469.156098][T11746] fido_id[11746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 469.189360][T11753] tipc: Enabled bearer , priority 0 [ 469.206506][T11753] syzkaller0: entered promiscuous mode [ 469.212183][T11753] syzkaller0: entered allmulticast mode [ 469.269828][T11753] tipc: Resetting bearer [ 469.286082][T11749] tipc: Resetting bearer [ 469.316989][T11749] tipc: Disabling bearer [ 469.416741][ T786] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 469.576663][ T786] usb 4-1: device descriptor read/64, error -71 [ 469.856811][ T786] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 470.036780][ T786] usb 4-1: device descriptor read/64, error -71 [ 470.176884][ T786] usb usb4-port1: attempt power cycle [ 470.596786][ T786] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 470.637443][ T786] usb 4-1: device descriptor read/8, error -71 [ 470.907690][ T786] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 471.021632][ T786] usb 4-1: device descriptor read/8, error -71 [ 471.218818][ T786] usb usb4-port1: unable to enumerate USB device [ 471.532018][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2021'. [ 471.893650][T11782] tipc: Enabled bearer , priority 0 [ 471.906329][T11782] syzkaller0: entered promiscuous mode [ 471.918253][T11782] syzkaller0: entered allmulticast mode [ 472.000187][T11782] tipc: Resetting bearer [ 472.092599][T11781] tipc: Resetting bearer [ 472.538980][T11781] tipc: Disabling bearer [ 472.786622][ T5793] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 472.943337][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2031'. [ 472.987166][ T6692] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 473.196646][ T6692] usb 4-1: Using ep0 maxpacket: 16 [ 473.217911][ T6692] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 473.225949][ T6692] usb 4-1: config 0 has no interface number 0 [ 473.232731][ T6692] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.247727][ T6692] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.261195][ T6692] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 473.271815][ T6692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.287752][ T6692] usb 4-1: config 0 descriptor?? [ 474.118447][ T6692] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0008/input/input21 [ 474.237271][ T6688] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 474.486936][ T6688] usb 2-1: device descriptor read/64, error -71 [ 474.832735][ T6692] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0008/input/input22 [ 474.972979][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 390 seconds [ 474.989766][ T6692] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 475.022729][ T6692] usb 4-1: USB disconnect, device number 28 [ 475.116628][ T6688] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 475.149418][T11813] fido_id[11813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 475.297194][ T6688] usb 2-1: device descriptor read/64, error -71 [ 475.421054][ T6688] usb usb2-port1: attempt power cycle [ 475.527046][ T6684] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 475.727337][ T6684] usb 3-1: device descriptor read/64, error -71 [ 475.866833][ T6688] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 475.971494][ T6688] usb 2-1: device descriptor read/8, error -71 [ 476.020538][T11819] tipc: Enabled bearer , priority 0 [ 476.032734][T11819] syzkaller0: entered promiscuous mode [ 476.039263][T11819] syzkaller0: entered allmulticast mode [ 476.066106][T11819] tipc: Resetting bearer [ 476.078005][ T6684] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 476.091959][T11818] tipc: Resetting bearer [ 476.125223][T11818] tipc: Disabling bearer [ 476.246669][ T6688] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 476.254417][ T6684] usb 3-1: device descriptor read/64, error -71 [ 476.287651][ T6688] usb 2-1: device descriptor read/8, error -71 [ 476.376867][ T6684] usb usb3-port1: attempt power cycle [ 476.406874][ T6688] usb usb2-port1: unable to enumerate USB device [ 476.791328][ T6684] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 476.829955][ T6684] usb 3-1: device descriptor read/8, error -71 [ 477.374111][ T6684] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 479.562649][ T6684] usb 3-1: device descriptor read/8, error -71 [ 479.641132][T11844] binder: BINDER_SET_CONTEXT_MGR already set [ 479.647339][T11844] binder: 11843:11844 ioctl 4018620d 200000000040 returned -16 [ 479.716354][ T6684] usb usb3-port1: unable to enumerate USB device [ 479.794655][T11852] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.996962][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 480.120880][T11852] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.214834][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.226745][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.246169][ T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.256859][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.265259][ T23] usb 2-1: SerialNumber: syz [ 480.435075][T11852] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.516045][ T23] usb 2-1: skipping empty audio interface (v1) [ 480.563570][T11852] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.598067][ T23] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 480.646652][ T23] usb 2-1: USB disconnect, device number 25 [ 480.698903][ T9981] udevd[9981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.753948][T11855] binder: 11854:11855 ioctl c0306201 0 returned -14 [ 480.777666][T11852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.795655][T11852] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.813520][T11852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.831401][T11852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.143920][T11863] tipc: Enabling of bearer rejected, already enabled [ 483.017318][ T5793] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 483.344189][T11889] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.245138][T11889] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.298092][T11889] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.357838][T11889] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.387578][T11898] tipc: Enabled bearer , priority 0 [ 484.398480][T11898] syzkaller0: entered promiscuous mode [ 484.404070][T11898] syzkaller0: entered allmulticast mode [ 484.453954][T11898] tipc: Resetting bearer [ 484.473807][T11897] tipc: Resetting bearer [ 484.517545][T11897] tipc: Disabling bearer [ 484.564285][T11889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.624083][T11889] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.660588][T11889] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.680207][T11889] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.809830][T11908] binder: 11907:11908 unknown command 0 [ 485.815657][T11908] binder: 11907:11908 ioctl c0306201 200000000080 returned -22 [ 485.891109][ T5793] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 488.060217][T11937] binder: 11936:11937 unknown command 0 [ 488.086853][T11937] binder: 11936:11937 ioctl c0306201 200000000080 returned -22 [ 488.810657][T11103] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 489.076206][T11103] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 489.196614][T11103] usb 4-1: config 0 has no interface number 0 [ 489.202772][T11103] usb 4-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 489.226695][T11103] usb 4-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 489.246821][T11103] usb 4-1: config 0 interface 231 has no altsetting 0 [ 489.274867][T11103] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 489.296697][T11103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.315748][T11949] tipc: Enabled bearer , priority 0 [ 489.316696][T11103] usb 4-1: Product: syz [ 489.336579][T11103] usb 4-1: Manufacturer: syz [ 489.338217][T11949] syzkaller0: entered promiscuous mode [ 489.341209][T11103] usb 4-1: SerialNumber: syz [ 489.366659][T11949] syzkaller0: entered allmulticast mode [ 489.367797][T11103] usb 4-1: config 0 descriptor?? [ 489.454230][T11952] tipc: Resetting bearer [ 489.482802][T11948] tipc: Resetting bearer [ 489.524920][T11948] tipc: Disabling bearer [ 490.831900][T11960] zonefs (nullb0) ERROR: Not a zoned block device [ 491.251480][T11103] hub 4-1:0.231: bad descriptor, ignoring hub [ 491.259339][T11103] hub: probe of 4-1:0.231 failed with error -5 [ 491.291095][T11103] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 491.373738][T11103] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 491.382230][T11103] dib0700: firmware download failed at 7 with -22 [ 492.395174][T11103] usb 4-1: USB disconnect, device number 29 [ 492.488589][T11972] binder: 11969:11972 unknown command 0 [ 492.494299][T11972] binder: 11969:11972 ioctl c0306201 200000000080 returned -22 [ 492.608304][T11976] tipc: Enabled bearer , priority 0 [ 492.620902][T11976] syzkaller0: entered promiscuous mode [ 492.630722][T11976] syzkaller0: entered allmulticast mode [ 492.817492][T11976] tipc: Resetting bearer [ 492.823953][T11981] tipc: Enabled bearer , priority 0 [ 492.831990][T11981] syzkaller0: entered promiscuous mode [ 492.856489][T11981] syzkaller0: entered allmulticast mode [ 494.068032][T11975] tipc: Resetting bearer [ 494.170785][T11975] tipc: Disabling bearer [ 494.195736][ T5849] tipc: Node number set to 4169810990 [ 494.230563][T11987] tipc: Resetting bearer [ 494.254249][T11979] tipc: Resetting bearer [ 494.317990][T11979] tipc: Disabling bearer [ 497.757182][T12017] binder: 12015:12017 unknown command 0 [ 497.786772][T12017] binder: 12015:12017 ioctl c0306201 200000000080 returned -22 [ 498.284916][T12029] tipc: Enabling of bearer rejected, already enabled [ 498.793483][T12025] vxfs: WRONG superblock magic 00000000 at 1 [ 498.801108][T12025] vxfs: WRONG superblock magic 00000000 at 8 [ 498.807215][T12025] vxfs: can't find superblock. [ 501.546003][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.553717][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.367069][T11103] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 502.698844][T11103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.738070][T11103] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.749645][T12063] tipc: Enabled bearer , priority 0 [ 502.757317][T12063] syzkaller0: entered promiscuous mode [ 502.763721][T12063] syzkaller0: entered allmulticast mode [ 502.773306][T11103] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 502.802786][T11103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.813748][T12063] tipc: Resetting bearer [ 502.826369][T11103] usb 1-1: config 0 descriptor?? [ 502.829013][T12065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.847868][T12065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.860569][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2112'. [ 502.871688][T12062] tipc: Resetting bearer [ 502.917654][T12062] tipc: Disabling bearer [ 505.736612][ T9194] block nbd0: Possible stuck request ffff888021948000: control (read@0,4096B). Runtime 420 seconds [ 505.792666][ T6688] usb 1-1: USB disconnect, device number 24 [ 507.559313][T12099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.677781][T12099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.717014][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 510.486688][T11103] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 510.678841][T11103] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.701133][T11103] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.726029][T11103] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 510.748489][T11103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.768195][T11103] usb 1-1: config 0 descriptor?? [ 512.059280][T12136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.082524][T12136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.091667][T12136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2132'. [ 514.181007][ T6684] usb 1-1: USB disconnect, device number 25 [ 516.976908][T11103] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 517.191960][T11103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.250086][T11103] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 517.306885][T11103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.493164][T11103] usb 3-1: config 0 descriptor?? [ 517.521830][T11103] pwc: Askey VC010 type 2 USB webcam detected. [ 517.735759][T11103] pwc: send_video_command error -71 [ 517.771714][T11103] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 517.788160][T11103] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 517.805986][T11103] usb 3-1: USB disconnect, device number 22 [ 520.688458][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 520.695620][ T1069] Bluetooth: hci4: Frame reassembly failed (-84) [ 521.417453][ T29] INFO: task udevd:5779 blocked for more than 143 seconds. [ 521.436302][ T29] Not tainted syzkaller #0 [ 521.460703][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 521.503013][ T29] task:udevd state:D stack:25352 pid:5779 ppid:5159 flags:0x00004006 [ 521.888846][ T29] Call Trace: [ 521.896891][ T29] [ 521.912558][ T29] __schedule+0x14d2/0x44d0 [ 521.937320][ T29] ? asan.module_dtor+0x20/0x20 [ 521.963145][ T29] ? mark_lock+0x94/0x320 [ 521.972692][ T29] ? lock_chain_count+0x20/0x20 [ 521.981006][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 521.986198][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 521.995648][ T29] schedule+0xbd/0x170 [ 522.002361][ T29] io_schedule+0x80/0xd0 [ 522.009257][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 522.014692][ T29] ? folio_wait_bit+0x30/0x30 [ 522.020638][ T29] ? _compound_head+0x120/0x120 [ 522.031375][ T29] ? filemap_add_folio+0x192/0x3c0 [ 522.036875][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 522.042203][ T29] ? blkdev_writepage+0x30/0x30 [ 522.051553][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 522.057103][ T29] ? blkdev_writepage+0x30/0x30 [ 522.062247][ T29] read_part_sector+0xd2/0x350 [ 522.067532][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 522.077342][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 522.082688][ T29] ? put_partition+0x350/0x350 [ 522.091413][ T29] ? alloc_pages+0x4dc/0x740 [ 522.096074][ T29] bdev_disk_changed+0x73a/0x1410 [ 522.102874][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 522.111600][ T29] ? iput+0x347/0x920 [ 522.115786][ T29] blkdev_get_whole+0x30d/0x390 [ 522.122083][ T29] blkdev_get_by_dev+0x279/0x600 [ 522.130419][ T29] blkdev_open+0x152/0x360 [ 522.136136][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 522.142176][ T29] do_dentry_open+0x8c6/0x1500 [ 522.150355][ T29] path_openat+0x274b/0x3190 [ 522.155082][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 522.161433][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.171105][ T29] ? verify_lock_unused+0x140/0x140 [ 522.176358][ T29] ? do_filp_open+0x3d0/0x3d0 [ 522.182469][ T29] ? __virt_addr_valid+0x18c/0x540 [ 522.190879][ T29] do_filp_open+0x1c5/0x3d0 [ 522.195519][ T29] ? vfs_tmpfile+0x490/0x490 [ 522.201716][ T29] ? _raw_spin_unlock+0x28/0x40 [ 522.210180][ T29] ? alloc_fd+0x58f/0x630 [ 522.214575][ T29] do_sys_openat2+0x12c/0x1c0 [ 522.220855][ T29] ? do_sys_open+0xe0/0xe0 [ 522.225331][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 522.236154][ T29] ? lock_chain_count+0x20/0x20 [ 522.242365][ T29] __x64_sys_openat+0x139/0x160 [ 522.250843][ T29] do_syscall_64+0x55/0xb0 [ 522.255392][ T29] ? clear_bhb_loop+0x40/0x90 [ 522.260382][ T29] ? clear_bhb_loop+0x40/0x90 [ 522.265116][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.271513][ T29] RIP: 0033:0x7f37bb4a7407 [ 522.275981][ T29] RSP: 002b:00007ffd4f4f97f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 522.284570][ T29] RAX: ffffffffffffffda RBX: 00007f37bbb40880 RCX: 00007f37bb4a7407 [ 522.292809][ T29] RDX: 00000000000a0800 RSI: 000055b3754df4d0 RDI: ffffffffffffff9c [ 522.300889][ T29] RBP: 000055b3754de910 R08: 0000000000000000 R09: 0000000000000000 [ 522.309221][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b3754fbf10 [ 522.317290][ T29] R13: 000055b3754f6410 R14: 0000000000000000 R15: 000055b3754fbf10 [ 522.325297][ T29] [ 522.328466][ T29] [ 522.328466][ T29] Showing all locks held in the system: [ 522.336657][ T29] 1 lock held by khungtaskd/29: [ 522.341544][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 522.351575][ T29] 5 locks held by kworker/u4:5/1069: [ 522.357019][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 522.368903][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0 [ 522.377898][ T29] #2: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 522.387359][ T29] #3: ffffffff970ce878 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x4b0 [ 522.397749][ T29] #4: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 522.407247][ T29] 2 locks held by getty/5548: [ 522.411944][ T29] #0: ffff8880313d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 522.421790][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 522.431993][ T29] 1 lock held by udevd/5779: [ 522.436655][ T29] #0: ffff888141b824c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 522.447072][ T29] 3 locks held by kworker/u5:3/5793: [ 522.452376][ T29] #0: ffff88802de58138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 522.463247][ T29] #1: ffffc900044ffd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 522.475435][ T29] #2: ffff888079a58e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1ad/0x680 [ 522.485009][ T29] 3 locks held by kworker/0:7/6684: [ 522.490455][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 522.501754][ T29] #1: ffffc90018bbfd00 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 522.512279][ T29] #2: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830 [ 522.523295][ T29] 2 locks held by kworker/0:9/6687: [ 522.528787][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 522.539871][ T29] #1: ffffc90018befd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 522.552451][ T29] 2 locks held by syz.0.2149/12192: [ 522.557733][ T29] #0: ffff88801beed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb7/0x200 [ 522.567644][ T29] #1: ffff88802c1390a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xdb/0x200 [ 522.577898][ T29] [ 522.580250][ T29] ============================================= [ 522.580250][ T29] [ 522.588784][ T29] NMI backtrace for cpu 0 [ 522.593140][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 522.600338][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.610393][ T29] Call Trace: [ 522.613676][ T29] [ 522.616622][ T29] dump_stack_lvl+0x16c/0x230 [ 522.621334][ T29] ? preempt_count_add+0x91/0x1a0 [ 522.626377][ T29] ? show_regs_print_info+0x20/0x20 [ 522.631583][ T29] ? load_image+0x3b0/0x3b0 [ 522.636104][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 522.641099][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 522.647288][ T29] ? _printk+0xd0/0x110 [ 522.651468][ T29] ? load_image+0x3b0/0x3b0 [ 522.655983][ T29] ? load_image+0x3b0/0x3b0 [ 522.660494][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 522.666584][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 522.672603][ T29] watchdog+0xf41/0xf80 [ 522.676782][ T29] ? watchdog+0x1e1/0xf80 [ 522.681163][ T29] kthread+0x2fa/0x390 [ 522.685257][ T29] ? hungtask_pm_notify+0x90/0x90 [ 522.690307][ T29] ? kthread_blkcg+0xd0/0xd0 [ 522.694917][ T29] ret_from_fork+0x48/0x80 [ 522.699361][ T29] ? kthread_blkcg+0xd0/0xd0 [ 522.703963][ T29] ret_from_fork_asm+0x11/0x20 [ 522.706887][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 522.708741][ T29] [ 522.709518][ T29] Sending NMI from CPU 0 to CPUs 1: [ 522.715297][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 522.718315][ C1] NMI backtrace for cpu 1 [ 522.718324][ C1] CPU: 1 PID: 5788 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 522.718340][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.718350][ C1] Workqueue: hci4 hci_cmd_timeout [ 522.718375][ C1] RIP: 0010:kasan_check_range+0x89/0x290 [ 522.718395][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 cc 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 522.718409][ C1] RSP: 0018:ffffc900043a72a8 EFLAGS: 00000246 [ 522.718422][ C1] RAX: 1ffff92000874e01 RBX: fffffffffffffffe RCX: ffffffff816aacb2 [ 522.718434][ C1] RDX: 0000000000000001 RSI: 0000000000000030 RDI: ffffc900043a7380 [ 522.718444][ C1] RBP: 0000000000000000 R08: ffffc900043a73af R09: 1ffff92000874e75 [ 522.718455][ C1] R10: dffffc0000000000 R11: fffff52000874e74 R12: 0000000000000006 [ 522.718466][ C1] R13: dffffc0000000000 R14: fffff52000874e76 R15: 1ffff92000874e70 [ 522.718478][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 522.718491][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.718502][ C1] CR2: 00007f5006bb42f8 CR3: 000000002c98a000 CR4: 00000000003506e0 [ 522.718515][ C1] Call Trace: [ 522.718521][ C1] [ 522.718529][ C1] __asan_memset+0x22/0x40 [ 522.718551][ C1] record_print_text+0x132/0x420 [ 522.718575][ C1] ? kmsg_dump_get_line+0x340/0x340 [ 522.718595][ C1] ? verify_lock_unused+0x140/0x140 [ 522.718612][ C1] ? check_noncircular+0x175/0x3c0 [ 522.718634][ C1] printk_get_next_message+0x282/0x8e0 [ 522.718658][ C1] ? mark_lock+0x94/0x320 [ 522.718673][ C1] ? trace_raw_output_console+0xd0/0xd0 [ 522.718700][ C1] ? read_lock_is_recursive+0x20/0x20 [ 522.718720][ C1] ? console_flush_all+0x35a/0xd00 [ 522.718741][ C1] console_flush_all+0x3ad/0xd00 [ 522.718761][ C1] ? console_flush_all+0x10f/0xd00 [ 522.718785][ C1] ? is_console_locked+0x20/0x20 [ 522.718802][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 522.718825][ C1] console_unlock+0xae/0x340 [ 522.718843][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 522.718863][ C1] ? vprintk_emit+0x447/0x600 [ 522.718880][ C1] ? vprintk_emit+0x301/0x600 [ 522.718902][ C1] ? vprintk_emit+0x301/0x600 [ 522.718920][ C1] vprintk_emit+0x477/0x600 [ 522.718936][ C1] ? vprintk_emit+0x301/0x600 [ 522.718954][ C1] ? printk_sprint+0x460/0x460 [ 522.718978][ C1] _printk+0xd0/0x110 [ 522.718998][ C1] ? load_image+0x3b0/0x3b0 [ 522.719021][ C1] bt_err+0x10c/0x160 [ 522.719042][ C1] ? bt_warn+0x160/0x160 [ 522.719059][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 522.719083][ C1] hci_cmd_timeout+0xd8/0x1e0 [ 522.719103][ C1] ? process_scheduled_works+0x957/0x15b0 [ 522.719122][ C1] process_scheduled_works+0xa45/0x15b0 [ 522.719155][ C1] ? assign_work+0x400/0x400 [ 522.719175][ C1] ? assign_work+0x39e/0x400 [ 522.719195][ C1] worker_thread+0xa55/0xfc0 [ 522.719225][ C1] kthread+0x2fa/0x390 [ 522.719238][ C1] ? pr_cont_work+0x560/0x560 [ 522.719256][ C1] ? kthread_blkcg+0xd0/0xd0 [ 522.719270][ C1] ret_from_fork+0x48/0x80 [ 522.719287][ C1] ? kthread_blkcg+0xd0/0xd0 [ 522.719301][ C1] ret_from_fork_asm+0x11/0x20 [ 522.719339][ C1] [ 522.720417][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 522.720430][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 522.720450][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 522.720463][ T29] Call Trace: [ 522.720471][ T29] [ 522.720479][ T29] dump_stack_lvl+0x16c/0x230 [ 522.720513][ T29] ? show_regs_print_info+0x20/0x20 [ 522.720541][ T29] ? load_image+0x3b0/0x3b0 [ 522.720596][ T29] panic+0x2c0/0x710 [ 522.720618][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 522.720655][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 522.720678][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 522.720707][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 522.720749][ T29] watchdog+0xf80/0xf80 [ 522.720778][ T29] ? watchdog+0x1e1/0xf80 [ 522.720812][ T29] kthread+0x2fa/0x390 [ 522.720831][ T29] ? hungtask_pm_notify+0x90/0x90 [ 522.720867][ T29] ? kthread_blkcg+0xd0/0xd0 [ 522.720888][ T29] ret_from_fork+0x48/0x80 [ 522.720911][ T29] ? kthread_blkcg+0xd0/0xd0 [ 522.720932][ T29] ret_from_fork_asm+0x11/0x20 [ 522.720981][ T29] [ 522.725051][ T29] Kernel Offset: disabled