last executing test programs: 35.806104574s ago: executing program 1 (id=4310): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 34.650991362s ago: executing program 1 (id=4311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000005) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x300fff2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="038016c5489372aadc4d8a608fd587b547023707e9488ddffff9"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) 31.398285032s ago: executing program 1 (id=4316): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000140)={0x8, 0x2f3d}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) 26.891759456s ago: executing program 1 (id=4323): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 20.236025015s ago: executing program 1 (id=4334): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x7, 0xfffffffffffffff4, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x200000000006, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [{@uid_eq}], 0x2c}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x40384708, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 18.227468003s ago: executing program 1 (id=4338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() close_range(r0, 0xffffffffffffffff, 0x0) 9.39535392s ago: executing program 2 (id=4351): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000140)={0x8, 0x2f3d}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) 9.363483781s ago: executing program 3 (id=4352): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03e, 0x30}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8749ee0d3f510c764131b4218a46cd7c2d3c99ef99d5442a6472f74c677c431784c317607750b0f88b7575faf59a9f3d0cc346d0b5a7dd8949753cf51cb7b70eb86bd53a19b0661b0ec33ad3b24e8bd3ddfe2546ebd4ea346", 0xb2}, {0x0}], 0x2, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x160) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 8.336023972s ago: executing program 2 (id=4353): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000005) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x300fff2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="038016c5489372aadc4d8a608fd587b547023707e9488ddffff9"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) 8.276667555s ago: executing program 0 (id=4354): syz_open_dev$MSR(0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x40104d14, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0}) 8.19096708s ago: executing program 2 (id=4355): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x40000094}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000e40)='ramfs\x00', 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 7.907231487s ago: executing program 0 (id=4356): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(0x0, 0x17) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0981) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x9, {0x3, 0x103}, 0x0, 0x9}) 7.155107551s ago: executing program 2 (id=4357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 6.3123348s ago: executing program 0 (id=4358): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb08, 0x38c1, 0x0, 0xf0}) io_uring_setup(0x3275, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0xfffffffd}) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a0010000100000905"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x2d, 0x0, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/122) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.454392461s ago: executing program 2 (id=4359): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xffff, 0x1800}], 0x1f4, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) tee(r5, r4, 0x9, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="50400079df9d171a2bf80fbd0c41f7b2a5c550998136a86805e56b677583bb86338ed0117eb79deeed3ff1fcc1b676dadb28f532dd91dce8a75b121292ce3d984d2dc431a0590ade8fa6a088129d06742d0656d9703959c8067bcccdf5c3d336e6676e966b0a77b72e68a8da1432ef1feef55c76886a88e44fc792b12af9d82b9055dd5b24d1928ded7029ac980e706083c1aebef0ccf0ebfdb8aa85df52bd5a8bea770042ea04000000f81dd6fc10ae8f5ecc43c24079a907de"], 0x4) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x3, 0x60000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x922, 0x12) bind$alg(r6, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)={0x4f4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf, 0x0, "40f677d84a270de3f128fe"}, @NL80211_BAND_6GHZ={0x35, 0x3, "1e95da2b40d214d450d80bd1f72f7a114b2ab44d5a362fe138df2f1e0df942b800c9f826298cb79f849fddad64cdbabe9d"}, @NL80211_BAND_5GHZ={0x19, 0x1, "246fc18703aa0341d1b86209d908fc7598ddd58110"}, @NL80211_BAND_2GHZ={0x46f, 0x0, "b7eabb560ef997731bf54f785a86562b6802079ebfd91e2c965e0e6695c89948aa6e3183d4d73c224f583dd38577d31f630ad60ce93e4bab9ca51b05a56031c7c0f5c9cfc7e8d5d010a5fa952f26906888a60a5e8f0f6e75c9cd0f716e830e230b7c1dea96826de539b85fc9d4c8d2e9b61f1b909795bfec648767d534a8dcb6284beebc6a32c999c647042aac9ec996a139ee0ed59bebf8c0ef2cbb988bf1450b095598ddf358dfa99df49273fe18adeb6c2de23cfbb31959ae631457cdda5bbba3042e27ab35b7769596923f7539e99cd195c274867e9406979c6c0528d7a952bf870f54891079a8712ecadb813b37ef6a4f4bc13b6639436507ecda6519fc488c4c9459a9ba2b10ba7530aa7c04dfc4e12ab2cee644be80fee7787625ec24ffa5aa469f0ef97b58873eadaa271753f2662a2b93f6c4a9a6324b02c3451608fc24492036db513446947a9a68bd2cfbff36fc15cfb334a5794e73ec01e0256e609636cebda4efac357a427ebaed52e4dfef00cdb8e6662a784e138fe27556daa02befa602c11332a05b68ccd1ff37e092ae1d76c3a4fd034767bc69b5a2b4bd4ff60b24021149b99c0f6006800db5c54d95bab898642b2be9f35dc655f201260a25333a94b1a0993d148ea3918ba2eda3f26fe4ec6f186599e77a43c238a9b60d554645f0ee7403c78600ba10ed52676bb7af0e79d52e6b49437aa1567fd74bf7eb70d4bee47a9a58d840332cac7aee4d21971d8b8824cb773a6fc38ae1ace617a31148bfc728fcbf4af60da102dd8ba89e8257aa6cc9b8184c79eed5c69c9000098b9aec1bf96eace8040464cc1f1e0471bc27f5b7ecd6f30411521ad3e0e3e5ba8d0a0e66264f9bc8c6ce73580b8e706834f6a8dcd1860a44e0d8475436fd531173d5a5f408b583b5229906b694b9e57737d9e54e6db0d8bc600e2d03c6f7d55b7de45f99750da942fcec8f450a3c6459549a3370861286ab81ce8a8f30c0416b7f503b054a64e348bd328e28dbb84525b5cbd0539e0421a5e9c24c6d41cb3991afda16b608dfad9e1126e28cce4aeffc641ce0dce635f3f342984602325d71c0508c02d1b5d8093ed6ee9f6e2cc2b725cdaccf72fed349bbed9700070836915150bfc9c0409a610dccae38c4cb49b7ad6585cf3d5b2f935bb7fc3579ac2f4b30aed6e1bbe6722a4617557011fe8cfb4f554dd553553cd3b3d5de6a7ec868aa510515d0b0e3fc916835bccf1fb2a4c5106c5bf05225a74e82413df35f7d0a331aaed405a257290d48f28aff5fa828647e3d07cb699dafe8cfb7e5df1cbf90de2e986eb53683b3445256c9cb5afec52ed1704d98933eee5c1d2ffeccb5b46bd29b28123e231cbc8cc92a3cbcdc740fb042383736a230c2b3f7d79fa7e5037ce335ccb88ce3853e608972bbc2834ed47a5608727e14b94f466907c6c9964a1d40fa20662d2995824553f9c3a5fbc77ff32b78e9f12dfc9ecb67042ce0a09437e7eb5f615e6f0b3ce8d75f7e23a3f4ab2901363d2ee226d981db508fe6e17bd89efef25573444022b59416c7ea87e117e7fa3f27ac10272fb6a4e76dd4475cf6776b23133150edad1513e6"}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0x40, 0x98, 0x8, 0xc2e, 0x720, 0x9bf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x83, 0x4b, 0x3c, 0x0, [], [{}]}}]}}]}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 4.930051451s ago: executing program 3 (id=4360): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000005) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000002200)=0xf1eb) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) 3.799146488s ago: executing program 3 (id=4361): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000140)={0x8, 0x2f3d}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) 2.663686794s ago: executing program 32 (id=4338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() close_range(r0, 0xffffffffffffffff, 0x0) 2.652836024s ago: executing program 3 (id=4363): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000005) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x300fff2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="038016c5489372aadc4d8a608fd587b547023707e9488ddffff9"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) 2.524084042s ago: executing program 0 (id=4364): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000004c0)={0xe7, 0x1, @raw_data=[0x4, 0x3, 0x2, 0x4, 0xfffeffff, 0x8a, 0x3, 0x0, 0x6, 0x6, 0x4, 0x6, 0x4, 0x20, 0x4, 0x8]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2020}, 0x40000c0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.351077342s ago: executing program 3 (id=4365): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='gadgetfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) 1.347757091s ago: executing program 2 (id=4366): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3}) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x14, r7, 0x607}, 0x14}}, 0x40000) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB="341e0000", @ANYRES16=r8], 0xfd10}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 1.303922474s ago: executing program 0 (id=4367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 1.209941519s ago: executing program 3 (id=4368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 0s ago: executing program 0 (id=4369): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffff9c, 0x0, 0x800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000005) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000002200)=0xf1eb) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x3, 0x0) kernel console output (not intermixed with test programs): ing dummy_hcd [ 1862.461990][T19404] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1862.484774][T19404] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1862.508501][T19404] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1862.538380][T19404] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1862.546563][T19404] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1862.563012][T19404] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1862.578838][T19404] syztnl1: entered allmulticast mode [ 1862.663230][T12299] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1862.699163][T12299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.707890][T12299] usb 4-1: Product: syz [ 1862.712628][T12299] usb 4-1: Manufacturer: syz [ 1862.717465][T12299] usb 4-1: SerialNumber: syz [ 1862.736676][T12299] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1862.760174][T15264] usb 2-1: can't set config #0, error -71 [ 1862.778243][T15264] usb 2-1: USB disconnect, device number 71 [ 1862.791539][T13672] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1862.970588][T19426] serio: Serial port ttyS3 [ 1863.098771][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 1863.567760][T15264] usb 4-1: USB disconnect, device number 88 [ 1863.714328][T19432] overlayfs: missing 'lowerdir' [ 1864.822790][T13672] usb 4-1: Service connection timeout for: 256 [ 1864.829038][T13672] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1864.837781][T13672] ath9k_htc: Failed to initialize the device [ 1864.862397][T15264] usb 4-1: ath9k_htc: USB layer deinitialized [ 1865.095540][T19449] syz.2.3711: attempt to access beyond end of device [ 1865.095540][T19449] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1865.960677][T13679] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1866.437961][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 1866.446235][T13679] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1866.599052][T13679] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1866.639974][T13679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.699109][T13679] usb 3-1: config 0 descriptor?? [ 1866.718087][T13679] metro_usb 3-1:0.0: required endpoints missing [ 1866.782852][T19462] syzkaller0: entered promiscuous mode [ 1866.788414][T19462] syzkaller0: entered allmulticast mode [ 1866.827333][T19465] serio: Serial port ttyS3 [ 1867.010258][T13672] usb 3-1: USB disconnect, device number 106 [ 1868.319838][T13679] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1868.790699][T13667] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1868.831297][T13679] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1868.840103][T13679] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.850958][T13679] usb 4-1: config 0 has no interface number 0 [ 1868.857286][T13679] usb 4-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1868.868635][T13679] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1868.886397][T13679] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1868.896248][T13679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.909465][T13679] usb 4-1: Product: syz [ 1868.920234][T13679] usb 4-1: Manufacturer: syz [ 1868.924915][T13679] usb 4-1: SerialNumber: syz [ 1868.933092][T13679] usb 4-1: config 0 descriptor?? [ 1868.986512][T13667] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1869.001231][T13667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.019184][T13667] usb 2-1: Product: syz [ 1869.023516][T13667] usb 2-1: Manufacturer: syz [ 1869.028211][T13667] usb 2-1: SerialNumber: syz [ 1869.045755][T13667] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1869.083072][T13679] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1870.281983][T13672] usb 4-1: USB disconnect, device number 89 [ 1870.653859][T13672] usb 2-1: USB disconnect, device number 72 [ 1870.928408][T19490] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1871.037212][T16391] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 1871.217952][T13679] usb 2-1: Service connection timeout for: 256 [ 1871.298179][T13679] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1871.466164][T13679] ath9k_htc: Failed to initialize the device [ 1871.556747][T13672] usb 2-1: ath9k_htc: USB layer deinitialized [ 1873.079595][T19507] serio: Serial port ttyS3 [ 1873.217488][T19511] syz.1.3729: attempt to access beyond end of device [ 1873.217488][T19511] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1874.345169][T19522] lo: entered allmulticast mode [ 1874.352166][T19522] tunl0: entered allmulticast mode [ 1874.359373][T19522] gre0: entered allmulticast mode [ 1874.365894][T19522] gretap0: entered allmulticast mode [ 1874.373283][T19522] erspan0: entered allmulticast mode [ 1874.379510][T19522] ip_vti0: entered allmulticast mode [ 1874.386071][T19522] ip6_vti0: entered allmulticast mode [ 1874.414425][T19522] sit0: entered allmulticast mode [ 1874.439144][T19522] ip6tnl0: entered allmulticast mode [ 1874.462509][T19522] ip6gre0: entered allmulticast mode [ 1874.470061][T19522] syz_tun: entered allmulticast mode [ 1874.476416][T19522] ip6gretap0: entered allmulticast mode [ 1874.482844][T19522] bridge0: entered allmulticast mode [ 1874.489752][T19522] vcan0: entered allmulticast mode [ 1874.496622][T19522] bond0: entered allmulticast mode [ 1874.503236][T19522] team0: entered allmulticast mode [ 1874.510367][T19522] dummy0: entered allmulticast mode [ 1874.516849][T19522] nlmon0: entered allmulticast mode [ 1874.523048][T19522] caif0: entered allmulticast mode [ 1874.530250][T19522] batadv0: entered allmulticast mode [ 1874.538094][T19522] vxcan0: entered allmulticast mode [ 1874.545364][T19522] vxcan1: entered allmulticast mode [ 1874.554195][T13672] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 1874.557777][T19522] veth0: entered allmulticast mode [ 1874.570286][T19522] veth1: entered allmulticast mode [ 1874.582184][T19522] wg0: entered allmulticast mode [ 1874.594644][T19522] wg1: entered allmulticast mode [ 1874.600574][T19522] wg2: entered allmulticast mode [ 1874.607002][T19522] veth0_to_bridge: entered allmulticast mode [ 1874.660552][T19521] syz.3.3730: attempt to access beyond end of device [ 1874.660552][T19521] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1874.807938][T13672] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1874.834026][T13672] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1874.864058][T13672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.879941][T13672] usb 2-1: config 0 descriptor?? [ 1875.085720][T19522] bridge_slave_0: entered allmulticast mode [ 1875.092411][T19522] veth1_to_bridge: entered allmulticast mode [ 1875.099018][T19522] bridge_slave_1: entered allmulticast mode [ 1875.105163][T19522] veth0_to_bond: entered allmulticast mode [ 1875.113461][T19522] bond_slave_0: entered allmulticast mode [ 1875.120050][T19522] veth1_to_bond: entered allmulticast mode [ 1875.126422][T19522] bond_slave_1: entered allmulticast mode [ 1875.132459][T19522] veth0_to_team: entered allmulticast mode [ 1875.140051][T19522] team_slave_0: entered allmulticast mode [ 1875.146414][T19522] veth1_to_team: entered allmulticast mode [ 1875.152890][T19522] team_slave_1: entered allmulticast mode [ 1875.159800][T19522] veth0_to_batadv: entered allmulticast mode [ 1875.194106][T19522] batadv_slave_0: entered allmulticast mode [ 1875.200613][T13672] metro_usb 2-1:0.0: required endpoints missing [ 1875.226879][T13667] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1875.236185][T19522] veth1_to_batadv: entered allmulticast mode [ 1875.244801][T19522] batadv_slave_1: entered allmulticast mode [ 1875.267683][T19522] xfrm0: entered allmulticast mode [ 1875.273124][T19522] veth0_to_hsr: entered allmulticast mode [ 1875.306134][T19522] hsr_slave_0: entered allmulticast mode [ 1875.322633][T19522] veth1_to_hsr: entered allmulticast mode [ 1875.342861][T19522] hsr_slave_1: entered allmulticast mode [ 1875.360815][T19522] hsr0: entered allmulticast mode [ 1875.370967][T19522] veth1_virt_wifi: entered allmulticast mode [ 1875.382561][T19522] veth0_virt_wifi: entered allmulticast mode [ 1875.403874][T19522] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1875.415168][T19522] veth1_vlan: entered allmulticast mode [ 1875.429822][T19522] veth0_vlan: entered allmulticast mode [ 1875.436220][T13672] usb 2-1: USB disconnect, device number 73 [ 1875.451793][T19522] vlan0: entered allmulticast mode [ 1875.461320][T19522] vlan1: entered allmulticast mode [ 1875.467115][T19522] macvlan0: entered allmulticast mode [ 1875.469014][T13667] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1875.496045][T13667] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1875.517335][T19522] macvlan1: entered allmulticast mode [ 1875.522881][T19522] ipvlan0: entered allmulticast mode [ 1875.530367][T19522] ipvlan1: entered allmulticast mode [ 1875.536799][T13667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.537053][T19522] veth1_macvtap: entered allmulticast mode [ 1875.551795][T19522] veth0_macvtap: entered allmulticast mode [ 1875.559035][T19522] macvtap0: entered allmulticast mode [ 1875.564711][T19522] macsec0: entered allmulticast mode [ 1875.570729][T19522] geneve0: entered allmulticast mode [ 1875.576348][T19522] geneve1: entered allmulticast mode [ 1875.581968][T19522] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1875.590523][T19522] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1875.600578][T19522] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1875.609147][T19522] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1875.616572][T13667] usb 4-1: config 0 descriptor?? [ 1875.626131][T19522] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 1875.636087][T13667] metro_usb 4-1:0.0: required endpoints missing [ 1875.642510][T19522] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1875.650593][T19522] syztnl1: entered allmulticast mode [ 1875.656034][T13679] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1875.837522][T13679] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.848282][T13679] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1875.857953][T13679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.882212][T13679] usb 3-1: config 0 descriptor?? [ 1875.888298][T13672] usb 4-1: USB disconnect, device number 90 [ 1875.905958][T13679] pwc: Askey VC010 type 2 USB webcam detected. [ 1875.995771][T13667] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1876.092152][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 1876.182425][T13667] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1876.199427][T13667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.208843][T13667] usb 1-1: Product: syz [ 1876.213337][T13667] usb 1-1: Manufacturer: syz [ 1876.219437][T13667] usb 1-1: SerialNumber: syz [ 1876.386356][T13679] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1876.438874][T13667] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1876.451528][T13679] pwc: recv_control_msg error -32 req 02 val 2700 [ 1876.462037][T13679] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1876.472115][T19375] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1876.494194][T13679] pwc: recv_control_msg error -32 req 04 val 1000 [ 1876.573983][T13679] pwc: recv_control_msg error -32 req 04 val 1300 [ 1876.674432][T13679] pwc: recv_control_msg error -32 req 04 val 1400 [ 1876.736615][T13679] pwc: recv_control_msg error -32 req 02 val 2000 [ 1877.196420][T13679] pwc: recv_control_msg error -32 req 02 val 2100 [ 1877.205672][T13679] pwc: recv_control_msg error -32 req 04 val 1500 [ 1877.222615][T13679] pwc: recv_control_msg error -32 req 02 val 2500 [ 1877.243303][T13679] pwc: recv_control_msg error -32 req 02 val 2400 [ 1877.733581][T13679] pwc: recv_control_msg error -71 req 02 val 2900 [ 1877.957825][T13679] pwc: recv_control_msg error -71 req 02 val 2800 [ 1877.965490][T13679] pwc: recv_control_msg error -71 req 04 val 1100 [ 1877.972646][T13679] pwc: recv_control_msg error -71 req 04 val 1200 [ 1877.984887][T13679] pwc: Registered as video103. [ 1878.036404][T13679] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 1878.245548][ T8734] usb 1-1: USB disconnect, device number 99 [ 1878.269987][T13679] usb 3-1: USB disconnect, device number 107 [ 1878.344352][T19375] usb 1-1: Service connection timeout for: 256 [ 1878.350665][T19375] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1878.405302][T19375] ath9k_htc: Failed to initialize the device [ 1878.412298][ T8734] usb 1-1: ath9k_htc: USB layer deinitialized [ 1879.641508][T19560] serio: Serial port ttyS3 [ 1880.315376][T19571] syz.3.3745: attempt to access beyond end of device [ 1880.315376][T19571] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1880.400677][T19573] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1881.488877][T13672] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 1882.446663][T19375] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1882.654700][T13672] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1882.665748][T13672] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1882.675286][T13672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.713596][T13672] usb 4-1: config 0 descriptor?? [ 1882.741243][T13672] metro_usb 4-1:0.0: required endpoints missing [ 1882.922269][T19375] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.115223][T19375] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1883.151432][T19375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.173205][T19375] usb 2-1: config 0 descriptor?? [ 1883.178477][ T8734] usb 4-1: USB disconnect, device number 91 [ 1883.660824][T19375] pwc: Askey VC010 type 2 USB webcam detected. [ 1884.162199][T19375] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1884.180822][T19599] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1884.196772][T19375] pwc: recv_control_msg error -32 req 02 val 2700 [ 1884.212228][T19375] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1884.227842][T19375] pwc: recv_control_msg error -32 req 04 val 1000 [ 1884.237884][T19375] pwc: recv_control_msg error -32 req 04 val 1300 [ 1884.267458][T19375] pwc: recv_control_msg error -32 req 04 val 1400 [ 1884.276352][T19375] pwc: recv_control_msg error -32 req 02 val 2000 [ 1884.289885][T19375] pwc: recv_control_msg error -32 req 02 val 2100 [ 1884.300897][T19375] pwc: recv_control_msg error -32 req 04 val 1500 [ 1884.317664][T19375] pwc: recv_control_msg error -32 req 02 val 2500 [ 1884.329186][T19375] pwc: recv_control_msg error -32 req 02 val 2400 [ 1884.556025][T19375] pwc: recv_control_msg error -71 req 02 val 2900 [ 1884.588977][T19375] pwc: recv_control_msg error -71 req 02 val 2800 [ 1884.624407][T19375] pwc: recv_control_msg error -71 req 04 val 1100 [ 1884.644849][T19375] pwc: recv_control_msg error -71 req 04 val 1200 [ 1884.665591][T19375] pwc: Registered as video103. [ 1884.864300][T19375] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 1885.233508][T19375] usb 2-1: USB disconnect, device number 74 [ 1886.210602][T12299] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1886.436018][T12299] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1886.444514][T12299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.512356][T12299] usb 3-1: config 0 has no interface number 0 [ 1886.540958][T19621] syz.1.3763: attempt to access beyond end of device [ 1886.540958][T19621] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1886.568500][T12299] usb 3-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1886.641041][T12299] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1886.748471][T12299] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1886.822653][T12299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.840227][T13672] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1886.935603][T12299] usb 3-1: Product: syz [ 1886.983004][T12299] usb 3-1: Manufacturer: syz [ 1887.027123][T12299] usb 3-1: SerialNumber: syz [ 1887.125596][T12299] usb 3-1: config 0 descriptor?? [ 1887.183053][T13672] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1887.291751][T13672] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1887.383991][T13672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.546557][T13672] usb 2-1: config 0 descriptor?? [ 1887.587530][T13672] metro_usb 2-1:0.0: required endpoints missing [ 1887.705471][T19633] syzkaller0: entered promiscuous mode [ 1887.715103][T19633] syzkaller0: entered allmulticast mode [ 1887.789299][ T8734] usb 2-1: USB disconnect, device number 75 [ 1888.951532][T19646] serio: Serial port ttyS3 [ 1889.499136][T13672] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1889.708586][T13672] usb 2-1: Using ep0 maxpacket: 8 [ 1889.722779][T13672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1889.733480][T13672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1889.746673][T13672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1889.808528][T13672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1889.820611][T13672] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1889.835958][T13672] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1889.847159][T13672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.874206][T12299] usb 3-1: USB disconnect, device number 108 [ 1889.999846][T13672] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1891.733163][T12299] usb 2-1: USB disconnect, device number 76 [ 1891.772760][T19667] syzkaller0: entered promiscuous mode [ 1891.778870][T19667] syzkaller0: entered allmulticast mode [ 1892.903154][T19678] syz.2.3780: attempt to access beyond end of device [ 1892.903154][T19678] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1892.946965][T19679] serio: Serial port ttyS3 [ 1893.187236][T13672] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 1893.409528][T13672] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1893.509556][T13672] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1893.600330][T13672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.708566][T13672] usb 3-1: config 0 descriptor?? [ 1893.833129][T13672] metro_usb 3-1:0.0: required endpoints missing [ 1894.414236][ T8734] usb 3-1: USB disconnect, device number 109 [ 1896.132209][T19703] syzkaller0: entered promiscuous mode [ 1896.138595][T19703] syzkaller0: entered allmulticast mode [ 1896.425450][T13672] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1896.635436][T13672] usb 2-1: Using ep0 maxpacket: 8 [ 1897.410752][T13672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1897.475053][T13672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1897.550104][T13672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1897.581004][T13672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1897.617239][T13672] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1897.675395][T13672] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1897.692835][T13672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.843363][T13672] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1897.938152][T19718] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1899.620124][T19726] overlayfs: missing 'workdir' [ 1899.746822][ T8734] usb 2-1: USB disconnect, device number 77 [ 1900.865444][T19734] syz.1.3798: attempt to access beyond end of device [ 1900.865444][T19734] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1901.012578][T19738] syzkaller0: entered promiscuous mode [ 1901.018492][T19738] syzkaller0: entered allmulticast mode [ 1901.163357][T13672] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1901.367237][T13672] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1901.400362][T13672] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1901.435990][T13672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.577511][T13672] usb 2-1: config 0 descriptor?? [ 1901.724841][T13672] metro_usb 2-1:0.0: required endpoints missing [ 1902.235413][T13672] usb 2-1: USB disconnect, device number 78 [ 1902.631913][T19752] syztnl1: entered allmulticast mode [ 1902.637584][T19752] syztnl0: entered allmulticast mode [ 1902.645742][T19752] syz.0.3807: attempt to access beyond end of device [ 1902.645742][T19752] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1902.672207][T12299] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1902.862151][T12299] usb 3-1: Using ep0 maxpacket: 8 [ 1902.870296][T12299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1902.880955][T12299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1902.891233][T12299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1902.901456][T12299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1902.912098][T12299] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1902.926316][T12299] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1902.935651][T12299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.943885][T13663] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 1902.958993][T12299] usbtmc: probe of 3-1:16.0 failed with error -22 [ 1903.072089][T13672] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1903.139879][T13663] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1903.150809][T13663] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1903.164692][T13663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.324002][T13672] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1903.449350][T13663] usb 1-1: config 0 descriptor?? [ 1903.454535][T13672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.465239][T13672] usb 2-1: config 0 has no interface number 0 [ 1903.473978][T13663] metro_usb 1-1:0.0: required endpoints missing [ 1903.480422][T13672] usb 2-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1905.467082][T13663] usb 1-1: USB disconnect, device number 100 [ 1905.473423][T13672] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1905.496203][T13672] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1905.506944][T13672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.515254][T13672] usb 2-1: Product: syz [ 1905.519623][T13672] usb 2-1: Manufacturer: syz [ 1905.524526][T13672] usb 2-1: SerialNumber: syz [ 1905.533654][T13672] usb 2-1: config 0 descriptor?? [ 1905.654629][T19375] usb 3-1: USB disconnect, device number 110 [ 1905.666484][T19762] syzkaller0: entered promiscuous mode [ 1905.679652][T19762] syzkaller0: entered allmulticast mode [ 1905.776289][T19765] serio: Serial port ttyS3 [ 1907.040634][T19780] syz.3.3816: attempt to access beyond end of device [ 1907.040634][T19780] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1907.469930][T13672] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 1907.708495][T13672] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1907.775660][T13672] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1907.805497][T13672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.819660][T19375] usb 2-1: USB disconnect, device number 79 [ 1907.853283][T13672] usb 4-1: config 0 descriptor?? [ 1907.907042][T13672] metro_usb 4-1:0.0: required endpoints missing [ 1907.986201][T19786] syz.0.3818: attempt to access beyond end of device [ 1907.986201][T19786] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1908.109781][T19375] usb 4-1: USB disconnect, device number 92 [ 1908.289324][T13672] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 1908.899757][T13663] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1909.032006][T19793] syzkaller0: entered promiscuous mode [ 1909.037572][T19793] syzkaller0: entered allmulticast mode [ 1909.136307][T13663] usb 3-1: Using ep0 maxpacket: 8 [ 1909.144104][T13672] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1909.161338][T13663] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1909.171347][T13672] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1909.180733][T13663] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1909.190784][T13672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.200732][T13663] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1909.212325][T13663] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1909.223536][T13672] usb 1-1: config 0 descriptor?? [ 1909.228855][T13663] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1909.244858][T13672] metro_usb 1-1:0.0: required endpoints missing [ 1909.268945][T13663] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1909.278076][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.323897][T13663] usbtmc: probe of 3-1:16.0 failed with error -22 [ 1909.446440][T19375] usb 1-1: USB disconnect, device number 101 [ 1909.658961][ T8734] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1911.232269][T13663] usb 3-1: USB disconnect, device number 111 [ 1911.367753][T19806] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1911.471138][ T8734] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1911.563711][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.656565][ T8734] usb 4-1: Product: syz [ 1911.687253][ T8734] usb 4-1: Manufacturer: syz [ 1911.816952][ T8734] usb 4-1: SerialNumber: syz [ 1911.843443][ T8734] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1911.907322][T19375] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1913.776754][T19375] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1914.887060][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.257850][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.373282][T19375] ath9k_htc: Failed to initialize the device [ 1924.031912][ T8734] usb 4-1: USB disconnect, device number 93 [ 1924.051736][ T8734] usb 4-1: ath9k_htc: USB layer deinitialized [ 1924.069976][T19859] syz.1.3835: attempt to access beyond end of device [ 1924.069976][T19859] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1924.090120][T19849] syzkaller0: entered promiscuous mode [ 1924.130658][T19849] syzkaller0: entered allmulticast mode [ 1924.532280][ T8734] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1924.540823][T15264] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 1924.822386][T15264] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1924.861090][T15264] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1924.911899][T15264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.941943][T15264] usb 2-1: config 0 descriptor?? [ 1924.969497][T15264] metro_usb 2-1:0.0: required endpoints missing [ 1925.320847][ T8734] usb 4-1: device descriptor read/64, error -71 [ 1925.880849][T15264] usb 2-1: USB disconnect, device number 80 [ 1925.960506][ T8734] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1926.088968][T19872] overlayfs: missing 'lowerdir' [ 1926.160365][ T8734] usb 4-1: Using ep0 maxpacket: 8 [ 1926.167626][ T8734] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1926.190371][ T8734] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1926.230353][ T8734] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1926.293630][ T8734] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1926.310551][ T8734] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1926.355643][ T8734] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1926.380273][ T8734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.546153][ T8734] usbtmc: probe of 4-1:16.0 failed with error -22 [ 1926.631188][T13672] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1926.887656][T13672] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1926.912897][T13672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.007851][T13672] usb 2-1: Product: syz [ 1927.013246][T13672] usb 2-1: Manufacturer: syz [ 1927.018020][T13672] usb 2-1: SerialNumber: syz [ 1927.069309][T13672] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1927.114664][T13663] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1928.236465][T13663] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1928.605491][T13663] ath9k_htc: Failed to initialize the device [ 1928.615357][T13672] usb 2-1: USB disconnect, device number 81 [ 1928.652495][T13672] usb 2-1: ath9k_htc: USB layer deinitialized [ 1931.422424][T13672] usb 4-1: USB disconnect, device number 95 [ 1932.079369][T19901] syz.2.3844: attempt to access beyond end of device [ 1932.079369][T19901] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1932.483252][T13672] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1932.628085][T13663] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 1932.742525][T13672] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1932.789434][T13672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.840070][T13663] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1932.880033][T13672] usb 2-1: config 0 has no interface number 0 [ 1932.917424][T13663] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1932.939441][T13672] usb 2-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1932.991500][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.018622][T13672] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1933.105234][T13663] usb 3-1: config 0 descriptor?? [ 1933.168140][T13672] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1933.253062][T13663] metro_usb 3-1:0.0: required endpoints missing [ 1933.292730][T13672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.391367][T13672] usb 2-1: Product: syz [ 1933.446370][T13672] usb 2-1: Manufacturer: syz [ 1933.458983][T13663] usb 3-1: USB disconnect, device number 112 [ 1933.491869][T13672] usb 2-1: SerialNumber: syz [ 1933.521722][T13672] usb 2-1: config 0 descriptor?? [ 1933.564494][T19914] syz.3.3849: attempt to access beyond end of device [ 1933.564494][T19914] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1933.816608][T15264] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1933.856613][T13672] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 1933.996699][T15264] usb 1-1: Using ep0 maxpacket: 8 [ 1934.016228][T15264] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1934.026665][T15264] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1934.037404][T15264] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1934.041100][T13672] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1934.056473][T15264] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1934.075869][T15264] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1934.075893][T13672] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1934.075920][T13672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.100205][T15264] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1934.116655][T15264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.126497][T13672] usb 4-1: config 0 descriptor?? [ 1934.144460][T13672] metro_usb 4-1:0.0: required endpoints missing [ 1934.151183][T15264] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1934.337081][T15264] usb 4-1: USB disconnect, device number 96 [ 1935.578814][T13672] usb 2-1: USB disconnect, device number 82 [ 1936.345520][T13663] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1936.555355][T13663] usb 4-1: Using ep0 maxpacket: 8 [ 1936.567702][T13663] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1936.610849][T15264] usb 1-1: USB disconnect, device number 102 [ 1936.645489][T13663] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1936.691917][T13663] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1936.725815][T13663] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1936.732626][T19929] syzkaller0: entered promiscuous mode [ 1936.743962][T19929] syzkaller0: entered allmulticast mode [ 1936.757146][T13663] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1936.795796][T13663] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1936.805374][T13663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.836861][T13663] usbtmc: probe of 4-1:16.0 failed with error -22 [ 1938.100755][T13663] usb 4-1: USB disconnect, device number 97 [ 1940.956129][T19957] syz.1.3858: attempt to access beyond end of device [ 1940.956129][T19957] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1941.332895][T15264] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 1942.372815][T19966] overlay: Unknown parameter 'uid' [ 1943.216867][T15264] usb 2-1: device descriptor read/all, error -71 [ 1944.481450][T19375] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1944.542740][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1944.579403][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1944.631324][T15264] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1944.671172][T19375] usb 1-1: Using ep0 maxpacket: 8 [ 1944.711341][T19375] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1944.768203][T19375] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1944.824112][T19375] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1944.898261][T15264] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1944.913511][T19375] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1944.946052][T15264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.993337][T19375] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1945.055548][T15264] usb 2-1: config 0 has no interface number 0 [ 1945.109825][T15264] usb 2-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1945.139309][T19375] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1945.189935][T15264] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1945.204364][T19375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.224774][T19375] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1945.234197][T15264] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1945.302300][T15264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.338119][T15264] usb 2-1: Product: syz [ 1945.351337][T15264] usb 2-1: Manufacturer: syz [ 1945.367151][T15264] usb 2-1: SerialNumber: syz [ 1945.390609][T15264] usb 2-1: config 0 descriptor?? [ 1945.670623][T19375] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1947.566036][T13663] usb 2-1: USB disconnect, device number 84 [ 1947.996478][T19375] usb 4-1: Using ep0 maxpacket: 8 [ 1948.156962][T19375] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1949.476556][T15264] usb 1-1: USB disconnect, device number 103 [ 1949.493062][T19375] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1949.584402][T19375] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1949.638642][T19375] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1949.674338][T19375] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1949.713509][T19375] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1949.734228][T19375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.748797][T19375] usb 4-1: can't set config #16, error -71 [ 1950.406374][T19375] usb 4-1: USB disconnect, device number 98 [ 1950.448435][T20008] syz.2.3871: attempt to access beyond end of device [ 1950.448435][T20008] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1950.558733][T15264] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1950.805209][T20012] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1950.838397][T15264] usb 1-1: Using ep0 maxpacket: 8 [ 1950.849822][T15264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1950.859872][T15264] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1950.881481][T15264] usb 1-1: string descriptor 0 read error: -22 [ 1950.900844][T15264] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1950.917078][T15264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.940670][T15264] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1950.958872][T13663] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 1950.972185][T15264] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1951.017528][T15264] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1951.058157][T19375] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1951.077555][T15264] usb 1-1: media controller created [ 1951.287993][T19375] usb 4-1: Using ep0 maxpacket: 8 [ 1951.411860][T19375] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 1951.544827][T19375] usb 4-1: config 0 has no interface number 0 [ 1951.664843][T20001] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1951.720957][T19375] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1951.803430][T19375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.841786][T15264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1951.871054][T19375] usb 4-1: Product: syz [ 1951.890921][T19375] usb 4-1: Manufacturer: syz [ 1951.919050][T19375] usb 4-1: SerialNumber: syz [ 1951.984737][T19375] usb 4-1: config 0 descriptor?? [ 1951.996069][T15264] zl10353_read_register: readreg error (reg=127, ret==0) [ 1952.009345][T19375] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1952.011123][T13663] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1952.028067][T19375] pctv452e: pctv452e_power_ctrl: 1 [ 1952.028067][T19375] [ 1952.028113][T19375] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1952.028113][T19375] [ 1952.028137][T19375] dvb-usb: bulk message failed: -22 (5/0) [ 1952.043804][T19375] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1952.097886][T13663] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1952.107694][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.130424][T13663] usb 3-1: config 0 descriptor?? [ 1952.136224][T19375] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1952.160787][T13663] metro_usb 3-1:0.0: required endpoints missing [ 1952.184570][T19375] usb 4-1: media controller created [ 1952.260885][T15264] usb 1-1: USB disconnect, device number 104 [ 1952.286555][T19375] dvb-usb: bulk message failed: -22 (8/0) [ 1952.316505][T19375] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1952.341573][T19375] dvb-usb: MAC address reading failed. [ 1952.359198][T19550] usb 3-1: USB disconnect, device number 113 [ 1952.405799][T19375] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1952.579896][T19375] DVB: Unable to find symbol stb0899_attach() [ 1952.586365][T19375] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1952.727382][T19375] rc_core: IR keymap rc-tt-1500 not found [ 1952.827144][T13663] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1953.555506][T19375] Registered IR keymap rc-empty [ 1953.938028][T13663] usb 2-1: Using ep0 maxpacket: 8 [ 1954.666255][T13663] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1954.686186][T13663] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1954.696201][T13663] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1954.697552][T19375] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1954.709485][T13663] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1954.726607][T13663] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1954.739955][T13663] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1954.749150][T13663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.779678][T13663] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1954.800054][T19375] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input61 [ 1954.887255][T19375] dvb-usb: schedule remote query interval to 100 msecs. [ 1954.915177][T19375] pctv452e: pctv452e_power_ctrl: 0 [ 1954.915177][T19375] [ 1954.936302][T19375] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1954.962608][T19375] usb 4-1: USB disconnect, device number 99 [ 1955.103409][T19550] dvb-usb: bulk message failed: -22 (4/0) [ 1955.112901][T19550] dvb-usb: error -22 while querying for an remote control event. [ 1955.214576][T13663] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1955.222793][T13672] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1955.457502][T13672] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1955.470639][T13672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.550254][T13663] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.599690][T13672] usb 1-1: config 0 has no interface number 0 [ 1955.612464][T13663] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1955.650174][T13672] usb 1-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1955.685420][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.737502][T13672] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1955.804403][T13663] usb 3-1: config 0 descriptor?? [ 1955.913567][T13672] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1955.958093][T13663] pwc: Askey VC010 type 2 USB webcam detected. [ 1955.987407][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.064683][T13672] usb 1-1: Product: syz [ 1956.111828][T13672] usb 1-1: Manufacturer: syz [ 1956.172409][T13672] usb 1-1: SerialNumber: syz [ 1956.281687][T13672] usb 1-1: config 0 descriptor?? [ 1956.386533][T13663] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1956.422776][T13663] pwc: recv_control_msg error -32 req 02 val 2700 [ 1956.451666][T19375] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1956.459531][T13663] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1956.472883][T13672] usb 2-1: USB disconnect, device number 85 [ 1956.530159][T13663] pwc: recv_control_msg error -32 req 04 val 1000 [ 1956.556519][T13663] pwc: recv_control_msg error -32 req 04 val 1300 [ 1956.576725][T13663] pwc: recv_control_msg error -32 req 04 val 1400 [ 1956.595271][T13663] pwc: recv_control_msg error -32 req 02 val 2000 [ 1956.606529][T13663] pwc: recv_control_msg error -32 req 02 val 2100 [ 1956.616104][T13663] pwc: recv_control_msg error -32 req 04 val 1500 [ 1956.623488][T13663] pwc: recv_control_msg error -32 req 02 val 2500 [ 1956.641786][T13663] pwc: recv_control_msg error -32 req 02 val 2400 [ 1956.763381][T20041] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1956.843335][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 1956.846840][T19375] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1956.869081][T13663] pwc: recv_control_msg error -71 req 02 val 2900 [ 1956.878560][T13663] pwc: recv_control_msg error -71 req 02 val 2800 [ 1956.893179][T13663] pwc: recv_control_msg error -71 req 04 val 1100 [ 1956.903704][T13663] pwc: recv_control_msg error -71 req 04 val 1200 [ 1956.935214][T13663] pwc: Registered as video103. [ 1956.948369][T13663] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 1956.980840][T13663] usb 3-1: USB disconnect, device number 114 [ 1957.054952][T19375] usb 4-1: Using ep0 maxpacket: 8 [ 1957.848842][T19375] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1957.859317][T19375] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1957.870076][T19375] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1957.880059][T19375] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1957.890014][T19375] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1957.903275][T19375] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1957.912606][T19375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.049755][T19375] usb 4-1: can't set config #16, error -71 [ 1958.075754][T19375] usb 4-1: USB disconnect, device number 100 [ 1958.101408][T20052] syz.2.3888: attempt to access beyond end of device [ 1958.101408][T20052] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1958.394291][T13663] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1960.240121][T13663] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1960.359727][T13663] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1960.385306][T20061] netlink: 'syz.3.3889': attribute type 4 has an invalid length. [ 1960.393232][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.403862][T13663] usb 3-1: config 0 descriptor?? [ 1960.410937][T13663] metro_usb 3-1:0.0: required endpoints missing [ 1960.433525][T15264] usb 1-1: USB disconnect, device number 105 [ 1960.620738][T13672] usb 3-1: USB disconnect, device number 115 [ 1960.873039][T13663] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1961.732771][T13663] usb 2-1: Using ep0 maxpacket: 8 [ 1961.757228][T13663] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1961.783729][T13663] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1961.794128][T13663] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1961.805700][T13663] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1961.816156][T13663] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1961.829655][T13663] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1961.842200][T13663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.892890][T13663] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1961.955213][T20071] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1961.984721][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 1965.061860][T13663] usb 2-1: USB disconnect, device number 86 [ 1965.543642][T20090] fuse: Unknown parameter 'grou00000000000000000000' [ 1967.311806][T20102] syz.3.3902: attempt to access beyond end of device [ 1967.311806][T20102] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1967.599666][T13663] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 1967.781572][T13663] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1967.813329][T13663] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1967.832013][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 1967.839164][T13663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.879737][T13663] usb 4-1: config 0 descriptor?? [ 1967.911404][T13663] metro_usb 4-1:0.0: required endpoints missing [ 1967.953963][T20106] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3904'. [ 1967.963337][T20106] bridge0: left allmulticast mode [ 1968.093238][T19375] usb 4-1: USB disconnect, device number 101 [ 1968.329409][T13663] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1968.329409][T15264] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1968.511724][T15264] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1968.539220][T15264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.559261][T13663] usb 3-1: Using ep0 maxpacket: 16 [ 1968.566996][T13663] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.572053][T15264] usb 1-1: config 0 descriptor?? [ 1968.577723][T13663] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1968.599505][T13663] usb 3-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1968.657637][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.688765][T13663] usb 3-1: config 0 descriptor?? [ 1968.698890][T15264] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1968.703286][T13663] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1969.039247][T19375] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1969.219129][T19375] usb 4-1: Using ep0 maxpacket: 8 [ 1969.250471][T19375] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1969.288879][T19375] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1969.335371][T19375] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1969.348766][T19375] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1969.388738][T19375] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1969.414195][T19375] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1969.427211][T19375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.460932][T19375] usbtmc: probe of 4-1:16.0 failed with error -22 [ 1969.828855][T15264] gspca_sunplus: reg_w_riv err -110 [ 1969.852237][T13663] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1969.852288][T15264] sunplus: probe of 1-1:0.0 failed with error -110 [ 1970.471039][T13663] usb 2-1: Using ep0 maxpacket: 8 [ 1970.731879][T13663] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1970.789940][T13663] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1971.082463][T13663] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1971.178767][T13663] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1971.284638][T13663] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1971.412894][T13663] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1971.465280][T13663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.704525][T15264] usb 1-1: USB disconnect, device number 106 [ 1971.717789][T13663] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1972.102229][T13663] usb 4-1: USB disconnect, device number 102 [ 1972.255382][T15264] usb 2-1: USB disconnect, device number 87 [ 1972.457649][T13672] usb 3-1: USB disconnect, device number 116 [ 1972.470246][T20139] fuse: Unknown parameter 'grou00000000000000000000' [ 1973.422588][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 1973.601885][T20148] syz.2.3915: attempt to access beyond end of device [ 1973.601885][T20148] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1975.515845][T13672] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1975.605746][T13663] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1975.717916][T13672] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1975.735821][T13672] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1975.746269][T13672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.772006][T13672] usb 3-1: config 0 descriptor?? [ 1975.827622][T13672] metro_usb 3-1:0.0: required endpoints missing [ 1975.834747][T13663] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1975.856588][T13663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.866451][T13663] usb 1-1: Product: syz [ 1975.870705][T13663] usb 1-1: Manufacturer: syz [ 1975.875351][T13663] usb 1-1: SerialNumber: syz [ 1975.893096][T13663] usb 1-1: config 0 descriptor?? [ 1976.010387][T13672] usb 3-1: USB disconnect, device number 117 [ 1976.210874][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.217815][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.326803][T13663] usb 1-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 1976.529550][T13663] usb 1-1: failed to fetch extended address, random address set [ 1976.645365][T15264] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1976.654764][T13663] usb 1-1: USB disconnect, device number 107 [ 1976.862919][T15264] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1976.875038][T15264] usb 4-1: config 0 has no interface number 0 [ 1976.881302][T15264] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 1976.927918][T15264] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1976.938021][T15264] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1976.946897][T15264] usb 4-1: Product: syz [ 1976.951636][T15264] usb 4-1: SerialNumber: syz [ 1976.984622][T15264] usb 4-1: config 0 descriptor?? [ 1977.023992][T15264] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1977.168489][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 1977.524720][T13663] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1977.754702][T13663] usb 1-1: Using ep0 maxpacket: 8 [ 1977.756679][T13663] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1977.756710][T13663] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1977.756739][T13663] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1977.756763][T13663] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1977.756788][T13663] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1977.756833][T13663] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1977.756858][T13663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.769752][T13663] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1978.362316][T13672] usb 1-1: USB disconnect, device number 108 [ 1980.119162][T15264] usb 4-1: USB disconnect, device number 103 [ 1980.153446][T13663] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1980.207764][T20189] syz.3.3928: attempt to access beyond end of device [ 1980.207764][T20189] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1980.375814][T13663] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1980.393385][T13663] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.414354][T13663] usb 2-1: config 0 has no interface number 0 [ 1980.420775][T13663] usb 2-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.452937][T13663] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1980.496212][T13663] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1980.513341][T13663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.521436][T13663] usb 2-1: Product: syz [ 1980.543159][T13663] usb 2-1: Manufacturer: syz [ 1980.547851][T13663] usb 2-1: SerialNumber: syz [ 1980.572759][T13663] usb 2-1: config 0 descriptor?? [ 1980.663248][T15264] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 1980.871914][T15264] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1980.908070][T15264] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1980.939579][T15264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.130546][T15264] usb 4-1: config 0 descriptor?? [ 1981.306242][T15264] metro_usb 4-1:0.0: required endpoints missing [ 1981.503233][T15264] usb 4-1: USB disconnect, device number 104 [ 1981.513679][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 1983.072905][T19375] usb 2-1: USB disconnect, device number 88 [ 1984.918681][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 1985.296704][T19375] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1985.389283][T15264] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1985.590707][T15264] usb 1-1: device descriptor read/64, error -71 [ 1985.680800][T19375] usb 2-1: Using ep0 maxpacket: 8 [ 1985.693413][T19375] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1985.718529][T19375] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1985.760547][T19375] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1985.790995][T19375] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1985.810550][T19375] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1985.851248][T19375] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1985.861558][T15264] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1985.905338][T19375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.950958][T19375] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1986.060468][T15264] usb 1-1: device descriptor read/64, error -71 [ 1986.190866][T15264] usb usb1-port1: attempt power cycle [ 1986.379552][T20240] Bluetooth: MGMT ver 1.22 [ 1987.552223][T17104] usb 2-1: USB disconnect, device number 89 [ 1987.613115][T20244] syz.2.3946: attempt to access beyond end of device [ 1987.613115][T20244] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1987.899471][T13663] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 1988.751768][T13663] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1988.771785][T13663] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1988.785980][T13663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.801070][T13663] usb 3-1: config 0 descriptor?? [ 1988.820286][T13663] metro_usb 3-1:0.0: required endpoints missing [ 1988.932637][T16391] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 1989.017742][T17104] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1989.040631][T13663] usb 3-1: USB disconnect, device number 118 [ 1990.636994][T17104] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1990.648224][T17104] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.659313][T17104] usb 1-1: config 0 has no interface number 0 [ 1990.665572][T17104] usb 1-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1990.688430][T17104] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1990.722674][T17104] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1990.738349][T17104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.766846][T17104] usb 1-1: Product: syz [ 1990.771849][T17104] usb 1-1: Manufacturer: syz [ 1990.776555][T17104] usb 1-1: SerialNumber: syz [ 1990.792709][T17104] usb 1-1: config 0 descriptor?? [ 1992.117149][T20275] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.3956'. [ 1992.733757][T17104] usb 1-1: USB disconnect, device number 112 [ 1993.719445][T20282] fuse: Bad value for 'fd' [ 1993.867190][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 1993.919737][T20286] bridge0: entered allmulticast mode [ 1993.933561][T20286] ip6tnl1: entered allmulticast mode [ 1993.939049][T20286] gtp0: entered allmulticast mode [ 1993.946445][T20286] syz.0.3960: attempt to access beyond end of device [ 1993.946445][T20286] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1994.226330][T13672] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1995.958068][T13672] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1995.975643][T13672] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1995.984975][T13672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.016574][T13672] usb 1-1: config 0 descriptor?? [ 1996.051708][T13672] metro_usb 1-1:0.0: required endpoints missing [ 1996.243051][T15264] usb 1-1: USB disconnect, device number 113 [ 1998.035210][T20310] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1998.277350][T16391] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 1998.602909][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3971'. [ 1998.646081][T20315] tipc: Started in network mode [ 1998.661453][T20315] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1998.674486][T20315] tipc: Enabling of bearer rejected, failed to enable media [ 2000.503207][T20325] fuse: Unknown parameter 'group_i00000000000000000000' [ 2001.353318][T16391] Bluetooth: hci0: unexpected event for opcode 0x200a [ 2001.429547][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 2003.965098][T20359] fuse: Unknown parameter 'group_i00000000000000000000' [ 2008.394467][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 2008.764919][T20404] fuse: Unknown parameter 'group_id00000000000000000000' [ 2009.858337][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2009.887901][T20431] ªªªªªª: renamed from lo [ 2010.010615][T20434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2011.064830][T20448] fuse: Unknown parameter 'group_id00000000000000000000' [ 2011.300368][T20450] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2011.862295][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 2012.407200][T13672] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2012.609502][T13672] usb 2-1: config 0 has no interfaces? [ 2012.616031][T13672] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2012.626152][T13672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.678787][T13672] usb 2-1: config 0 descriptor?? [ 2012.797038][T17104] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2012.925897][T13672] usb 2-1: USB disconnect, device number 90 [ 2013.013101][T17104] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 2013.033593][T17104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.046956][T17104] usb 1-1: Product: syz [ 2013.051260][T17104] usb 1-1: Manufacturer: syz [ 2013.055983][T17104] usb 1-1: SerialNumber: syz [ 2013.090149][T17104] usb 1-1: config 0 descriptor?? [ 2013.349403][T17104] cx82310_eth: probe of 1-1:0.0 failed with error -22 [ 2013.404159][T17104] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2013.424323][T17104] usb 1-1: USB disconnect, device number 114 [ 2014.302715][T16391] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 2014.642706][T20487] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2015.312067][T20505] fuse: Unknown parameter 'group_id00000000000000000000' [ 2016.585189][T15264] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2016.768648][T15264] usb 4-1: Using ep0 maxpacket: 32 [ 2016.799588][T15264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.836474][T15264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.881761][T15264] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2016.925816][T15264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.962507][T15264] usb 4-1: config 0 descriptor?? [ 2016.996070][T15264] hub 4-1:0.0: USB hub found [ 2017.382747][T15264] hub 4-1:0.0: 29 ports detected [ 2017.397817][T15264] hub 4-1:0.0: insufficient power available to use all downstream ports [ 2019.274677][T15264] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 2019.281543][T15264] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 2019.302572][T15264] usbhid 4-1:0.0: can't add hid device: -32 [ 2019.308988][T15264] usbhid: probe of 4-1:0.0 failed with error -32 [ 2019.515998][T15264] usb 4-1: USB disconnect, device number 105 [ 2019.541343][T16391] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 2019.936199][T20528] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2021.688412][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2021.730590][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'. [ 2021.800041][T20545] ipvlan1: left allmulticast mode [ 2022.191914][T20561] syz.1.4054: attempt to access beyond end of device [ 2022.191914][T20561] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2022.598640][T20562] fuse: Bad value for 'fd' [ 2022.742254][T15264] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 2023.039078][T15264] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2023.074979][T15264] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2023.261940][T15264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.302514][T15264] usb 2-1: config 0 descriptor?? [ 2024.046496][T15264] metro_usb 2-1:0.0: required endpoints missing [ 2024.315071][T17104] usb 2-1: USB disconnect, device number 91 [ 2024.589480][T20575] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2025.367366][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2026.716773][T20596] bridge1: entered promiscuous mode [ 2026.730387][T20596] bridge1: entered allmulticast mode [ 2028.014800][T20605] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2028.093587][T20608] ipvlan1: entered allmulticast mode [ 2028.100798][T20608] bridge1: left promiscuous mode [ 2028.282540][T20607] syz.2.4069: attempt to access beyond end of device [ 2028.282540][T20607] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2028.505677][T20616] fuse: Bad value for 'user_id' [ 2028.569344][T19375] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 2028.752703][T19375] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2028.776630][T19375] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2028.787903][T19375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.816782][T19375] usb 3-1: config 0 descriptor?? [ 2028.833308][T19375] metro_usb 3-1:0.0: required endpoints missing [ 2028.912621][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 2029.038085][T17104] usb 3-1: USB disconnect, device number 119 [ 2031.508025][T17104] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2031.789881][T17104] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2031.819368][T17104] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2031.841817][T17104] usb 3-1: config 0 has no interface number 0 [ 2031.854848][T17104] usb 3-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2031.876693][T17104] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2031.921211][T17104] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2031.951219][T17104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.967677][T17104] usb 3-1: Product: syz [ 2031.977473][T17104] usb 3-1: Manufacturer: syz [ 2031.982142][T17104] usb 3-1: SerialNumber: syz [ 2032.008495][T17104] usb 3-1: config 0 descriptor?? [ 2032.033730][T20639] syzkaller0: entered promiscuous mode [ 2032.044659][T20639] syzkaller0: entered allmulticast mode [ 2032.798681][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2034.124894][T17104] usb 3-1: USB disconnect, device number 120 [ 2034.611765][T20663] fuse: Bad value for 'user_id' [ 2037.106388][T20670] syz.2.4087: attempt to access beyond end of device [ 2037.106388][T20670] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2038.678664][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.686903][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.093888][T15264] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 2039.347279][T15264] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2039.408769][T15264] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2039.428256][T15264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.457335][T15264] usb 3-1: config 0 descriptor?? [ 2039.487506][T15264] metro_usb 3-1:0.0: required endpoints missing [ 2040.155155][T17104] usb 3-1: USB disconnect, device number 121 [ 2040.206247][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2041.105705][T20699] syzkaller0: entered promiscuous mode [ 2041.159293][T20699] syzkaller0: entered allmulticast mode [ 2041.313004][T15264] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2041.557985][T15264] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2041.614959][T15264] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.662777][T15264] usb 3-1: config 0 has no interface number 0 [ 2041.683355][T15264] usb 3-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2041.700375][T15264] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2041.723850][T15264] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2041.738923][T15264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.759698][T15264] usb 3-1: Product: syz [ 2041.771091][T15264] usb 3-1: Manufacturer: syz [ 2041.784218][T15264] usb 3-1: SerialNumber: syz [ 2041.821221][T15264] usb 3-1: config 0 descriptor?? [ 2043.583409][T20715] fuse: Bad value for 'fd' [ 2045.323389][T13672] usb 3-1: USB disconnect, device number 122 [ 2047.402271][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2048.036402][T20741] syz.2.4106: attempt to access beyond end of device [ 2048.036402][T20741] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2049.238764][T13672] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 2049.491497][T13672] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2049.507471][T13672] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2049.524065][T13672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.566230][T13672] usb 3-1: config 0 descriptor?? [ 2049.612097][T13672] metro_usb 3-1:0.0: required endpoints missing [ 2051.682883][T15264] usb 3-1: USB disconnect, device number 123 [ 2051.820017][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 2052.003659][T20777] fuse: Bad value for 'fd' [ 2052.250605][T20780] syzkaller0: entered promiscuous mode [ 2052.265036][T20780] syzkaller0: entered allmulticast mode [ 2055.171190][T17104] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2055.373202][T17104] usb 4-1: Using ep0 maxpacket: 32 [ 2055.381166][T17104] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 2055.390039][T17104] usb 4-1: config 0 has no interface number 0 [ 2055.396687][T17104] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=31.20 [ 2055.406431][T17104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.417524][T17104] usb 4-1: config 0 descriptor?? [ 2055.664234][T17104] usb 4-1: USB disconnect, device number 106 [ 2060.075038][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 2060.201005][T20829] fuse: Bad value for 'fd' [ 2060.207838][T20827] syz.3.4122: attempt to access beyond end of device [ 2060.207838][T20827] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2062.112735][T17104] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2062.202898][T15264] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 2062.332560][T17104] usb 2-1: Using ep0 maxpacket: 32 [ 2062.453302][T17104] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 2062.492525][T15264] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2062.504129][T17104] usb 2-1: config 2 has no interface number 0 [ 2062.510325][T17104] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 2062.525567][T15264] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2062.533527][T17104] usb 2-1: config 2 interface 88 has no altsetting 0 [ 2062.587881][T15264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.602262][T17104] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 2062.623307][T15264] usb 4-1: config 0 descriptor?? [ 2062.636086][T17104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.652170][T17104] usb 2-1: Product: syz [ 2062.662492][T17104] usb 2-1: Manufacturer: syz [ 2062.699527][T17104] usb 2-1: SerialNumber: syz [ 2062.706207][T15264] metro_usb 4-1:0.0: required endpoints missing [ 2062.763824][T20831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2063.174345][T20831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2063.531935][T15264] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2063.691805][T15264] usb 3-1: device descriptor read/64, error -71 [ 2063.705795][T19375] usb 4-1: USB disconnect, device number 107 [ 2064.201288][T15264] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2065.081031][T15264] usb 3-1: device descriptor read/64, error -71 [ 2065.211084][T15264] usb usb3-port1: attempt power cycle [ 2065.301148][T17104] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2065.357110][T17104] asix 2-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2065.402861][T17104] asix: probe of 2-1:2.88 failed with error -71 [ 2065.450482][T17104] usb 2-1: USB disconnect, device number 92 [ 2065.548892][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4132'. [ 2065.660695][T15264] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2065.722151][T15264] usb 3-1: device descriptor read/8, error -71 [ 2065.879529][T16391] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 2066.971478][T15264] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2067.023049][T20877] fuse: Bad value for 'fd' [ 2067.299752][T15264] usb 3-1: device not accepting address 127, error -71 [ 2067.313284][T15264] usb usb3-port1: unable to enumerate USB device [ 2067.642116][T20884] syz.2.4140: attempt to access beyond end of device [ 2067.642116][T20884] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2067.699580][T13672] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2067.922003][T13672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.972579][T13672] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2068.009583][T15264] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 2068.013028][T13672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.070631][T13672] usb 1-1: config 0 descriptor?? [ 2068.131669][T13672] pwc: Askey VC010 type 2 USB webcam detected. [ 2068.243039][T15264] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2068.279521][T15264] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2068.314322][T15264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.355776][T15264] usb 3-1: config 0 descriptor?? [ 2068.388310][T15264] metro_usb 3-1:0.0: required endpoints missing [ 2068.544374][T13672] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2068.565538][T13672] pwc: recv_control_msg error -32 req 02 val 2700 [ 2068.582250][T13672] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2068.590892][T13672] pwc: recv_control_msg error -32 req 04 val 1000 [ 2068.600046][T13672] pwc: recv_control_msg error -32 req 04 val 1300 [ 2068.612797][T13672] pwc: recv_control_msg error -32 req 04 val 1400 [ 2068.630582][T13672] pwc: recv_control_msg error -32 req 02 val 2000 [ 2068.641318][T13672] pwc: recv_control_msg error -32 req 02 val 2100 [ 2068.649097][T13672] pwc: recv_control_msg error -32 req 04 val 1500 [ 2068.669439][T13672] pwc: recv_control_msg error -32 req 02 val 2500 [ 2068.687180][T13672] pwc: recv_control_msg error -32 req 02 val 2400 [ 2068.715062][T20888] overlayfs: failed to resolve './file0': -2 [ 2068.814617][T20890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4143'. [ 2068.824132][T20890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4143'. [ 2068.871160][T15264] usb 3-1: USB disconnect, device number 2 [ 2068.910439][T13672] pwc: recv_control_msg error -71 req 02 val 2900 [ 2068.928121][T13672] pwc: recv_control_msg error -71 req 02 val 2800 [ 2068.945279][T13672] pwc: recv_control_msg error -71 req 04 val 1100 [ 2068.972545][T13672] pwc: recv_control_msg error -71 req 04 val 1200 [ 2068.995831][T13672] pwc: Registered as video103. [ 2069.020279][T13672] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63 [ 2069.072729][T13672] usb 1-1: USB disconnect, device number 115 [ 2069.100418][T16391] Bluetooth: hci4: unexpected event 0x08 length: 11 > 4 [ 2069.558720][T15264] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2069.772391][T15264] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2070.497281][T15264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.653765][T15264] usb 2-1: config 0 descriptor?? [ 2070.868028][T20912] fuse: Bad value for 'fd' [ 2070.891919][T15264] [drm] vendor descriptor length:6 data:06 5f 00 00 bc 2e 00 00 00 00 00 [ 2070.909158][T15264] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2070.958133][T13672] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2071.137983][T15264] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 2071.158187][T15264] [drm] Initialized udl on minor 2 [ 2071.186900][T13672] usb 1-1: config 0 has an invalid interface number: 142 but max is 1 [ 2071.210157][T13672] usb 1-1: config 0 has no interface number 0 [ 2071.229263][T13672] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2071.252380][T13672] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 2071.278502][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.296469][T13672] usb 1-1: Product: syz [ 2071.309173][T15264] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2071.337697][T13672] usb 1-1: Manufacturer: syz [ 2071.340848][T15264] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2071.363650][T13672] usb 1-1: SerialNumber: syz [ 2071.407209][T13672] usb 1-1: config 0 descriptor?? [ 2071.531654][T19550] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2071.562258][T19550] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2071.569362][T15264] usb 2-1: USB disconnect, device number 93 [ 2071.718047][T13672] msi2500 1-1:0.1: Registered as swradio24 [ 2071.718074][T13672] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 2072.405737][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 2072.929344][T20932] syz.1.4157: attempt to access beyond end of device [ 2072.929344][T20932] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2073.247149][T15264] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 2073.440226][T20909] Process accounting resumed [ 2074.307271][T15264] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2074.355475][T15264] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2074.401357][T15264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.449981][T15264] usb 2-1: config 0 descriptor?? [ 2074.492077][T20946] fuse: Bad value for 'fd' [ 2074.505093][T15264] metro_usb 2-1:0.0: required endpoints missing [ 2074.522893][T13672] videodev: could not get a free minor [ 2074.561152][T13672] msi2500 1-1:0.142: Failed to register as video device (-23) [ 2074.652514][T13672] msi2500: probe of 1-1:0.142 failed with error -23 [ 2074.721776][T13672] usb 1-1: USB disconnect, device number 116 [ 2074.735243][T16391] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 2077.057871][T13672] usb 2-1: USB disconnect, device number 94 [ 2077.823962][ T5781] Bluetooth: hci1: unexpected event 0x08 length: 11 > 4 [ 2077.869941][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.537616][T20992] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2078.544969][T13672] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2078.811410][T13672] usb 1-1: config 0 has no interfaces? [ 2078.828698][T13672] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 2078.838437][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.934048][T13672] usb 1-1: Product: syz [ 2078.938456][T13672] usb 1-1: Manufacturer: syz [ 2078.950405][T13672] usb 1-1: SerialNumber: syz [ 2079.008539][T13672] usb 1-1: config 0 descriptor?? [ 2079.441819][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 2079.464845][T13672] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2079.674125][T13672] usb 3-1: device descriptor read/64, error -71 [ 2079.873308][T20983] netlink: 'syz.0.4175': attribute type 17 has an invalid length. [ 2079.888371][T20983] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2079.940181][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2079.953496][T13672] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2079.981727][T15264] usb 1-1: USB disconnect, device number 117 [ 2080.147674][T13672] usb 3-1: device descriptor read/64, error -71 [ 2080.160176][T21004] syz.3.4180: attempt to access beyond end of device [ 2080.160176][T21004] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2080.273789][T13672] usb usb3-port1: attempt power cycle [ 2080.633417][T15264] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 2080.724625][T13672] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2080.763075][T19550] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2080.774163][T13672] usb 3-1: device descriptor read/8, error -71 [ 2080.866589][T15264] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2080.902965][T15264] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2080.943216][T15264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.953339][T19550] usb 2-1: Using ep0 maxpacket: 8 [ 2080.966582][T19550] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 2080.977548][T15264] usb 4-1: config 0 descriptor?? [ 2080.991927][T19550] usb 2-1: config 0 has no interface number 0 [ 2081.016776][T15264] metro_usb 4-1:0.0: required endpoints missing [ 2081.026947][T19550] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2081.053018][T13672] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2081.053234][T19550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.078983][T19550] usb 2-1: Product: syz [ 2081.085094][T19550] usb 2-1: Manufacturer: syz [ 2081.089796][T19550] usb 2-1: SerialNumber: syz [ 2081.104955][T13672] usb 3-1: device descriptor read/8, error -71 [ 2081.121160][T19550] usb 2-1: config 0 descriptor?? [ 2081.177829][T19550] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2081.206488][T19550] pctv452e: pctv452e_power_ctrl: 1 [ 2081.206488][T19550] [ 2081.223107][T13672] usb usb3-port1: unable to enumerate USB device [ 2081.248139][T19550] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2081.248139][T19550] [ 2081.282313][T19550] dvb-usb: bulk message failed: -22 (5/0) [ 2081.337653][T19550] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2081.360538][T19550] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2081.392169][T19550] usb 2-1: media controller created [ 2081.405494][T21006] dvb-usb: bulk message failed: -22 (8/0) [ 2081.413838][T21006] pctv452e: I2C error -22; AA 01 00 01 00 -> aa 01 31 04 00 01 00 [ 2081.426461][T19550] dvb-usb: bulk message failed: -22 (8/0) [ 2081.432946][T19550] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 2081.482475][T19550] dvb-usb: MAC address reading failed. [ 2081.581133][T19550] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2081.646790][T15264] usb 4-1: USB disconnect, device number 108 [ 2081.763255][T19550] DVB: Unable to find symbol stb0899_attach() [ 2081.769636][T19550] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2081.883235][T19550] rc_core: IR keymap rc-tt-1500 not found [ 2081.889136][T19550] Registered IR keymap rc-empty [ 2081.895938][T19550] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2081.909064][T19550] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input65 [ 2081.924196][T19550] dvb-usb: schedule remote query interval to 100 msecs. [ 2081.932014][T19550] pctv452e: pctv452e_power_ctrl: 0 [ 2081.932014][T19550] [ 2081.939676][T19550] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2081.973016][T19550] usb 2-1: USB disconnect, device number 95 [ 2082.150471][T19550] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2082.388429][ T5781] Bluetooth: hci2: unexpected event 0x08 length: 11 > 4 [ 2082.557299][T21022] overlayfs: failed to resolve './file1': -2 [ 2083.257597][T21028] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2085.240992][T13672] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2085.400943][T13672] usb 2-1: device descriptor read/64, error -71 [ 2085.523279][T21049] syz.2.4194: attempt to access beyond end of device [ 2085.523279][T21049] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2085.690642][T13672] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2085.820523][T17104] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 2085.840530][T13672] usb 2-1: device descriptor read/64, error -71 [ 2085.980908][T13672] usb usb2-port1: attempt power cycle [ 2086.033154][T17104] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2086.066028][T17104] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2086.091040][T17104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.112939][T17104] usb 3-1: config 0 descriptor?? [ 2086.121544][T17104] metro_usb 3-1:0.0: required endpoints missing [ 2086.323588][T19550] usb 3-1: USB disconnect, device number 7 [ 2086.605022][T13672] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2086.643979][T13672] usb 2-1: device descriptor read/8, error -71 [ 2087.770987][T13672] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2087.810266][T13672] usb 2-1: device descriptor read/8, error -71 [ 2087.939933][T13672] usb usb2-port1: unable to enumerate USB device [ 2088.060531][T19550] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2088.414320][T19550] usb 4-1: Using ep0 maxpacket: 8 [ 2088.889814][T19550] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.995192][T21079] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2089.170971][T19550] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2089.383537][T19550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.885236][T19550] usb 4-1: USB disconnect, device number 109 [ 2092.187479][T13672] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2092.357351][T13672] usb 3-1: device descriptor read/64, error -71 [ 2092.647155][T19550] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2092.669298][T13672] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2094.646119][T13672] usb 3-1: device descriptor read/64, error -71 [ 2094.727213][T19550] usb 2-1: device descriptor read/64, error -71 [ 2094.778335][T13672] usb usb3-port1: attempt power cycle [ 2096.575158][T15264] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 2096.676215][T19550] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2097.063684][T21126] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2097.422513][T21127] syz.1.4219: attempt to access beyond end of device [ 2097.422513][T21127] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2098.085060][T19550] usb usb2-port1: attempt power cycle [ 2098.514140][T19550] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 2099.047346][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.228755][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.407023][T19550] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2099.438300][T19550] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2099.473953][T19550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.516053][T19550] usb 2-1: config 0 descriptor?? [ 2099.548708][T19550] metro_usb 2-1:0.0: required endpoints missing [ 2099.638921][T21145] syzkaller0: entered promiscuous mode [ 2099.648303][T21145] syzkaller0: entered allmulticast mode [ 2099.728472][T13672] usb 2-1: USB disconnect, device number 102 [ 2099.883418][T19550] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2100.174631][T21152] syz.0.4226: attempt to access beyond end of device [ 2100.174631][T21152] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2100.276262][T19550] usb 3-1: Using ep0 maxpacket: 8 [ 2100.363208][T19550] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.513333][T19550] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2100.522533][T19550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.653176][T15264] usb 1-1: new low-speed USB device number 119 using dummy_hcd [ 2100.901648][T15264] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2101.187711][T19550] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2102.293692][T15264] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2102.619613][T15264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.647040][T15264] usb 1-1: config 0 descriptor?? [ 2102.668761][T15264] metro_usb 1-1:0.0: required endpoints missing [ 2102.681157][T17104] usb 3-1: USB disconnect, device number 11 [ 2102.763294][T19550] usb 2-1: device descriptor read/64, error -71 [ 2102.852226][T13672] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2102.876341][T15264] usb 1-1: USB disconnect, device number 119 [ 2103.031938][T19550] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2103.040518][T13672] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 2103.049672][T13672] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2103.059786][T13672] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2103.070066][T13672] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2103.078733][T13672] usb 4-1: Product: syz [ 2103.083331][T13672] usb 4-1: Manufacturer: syz [ 2103.088348][T13672] usb 4-1: SerialNumber: syz [ 2103.096704][T13672] usb 4-1: config 0 descriptor?? [ 2103.108632][T13672] hub 4-1:0.0: bad descriptor, ignoring hub [ 2103.115479][T13672] hub: probe of 4-1:0.0 failed with error -5 [ 2103.125933][T13672] usb 4-1: selecting invalid altsetting 0 [ 2103.132183][T17104] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2103.181915][T19550] usb 2-1: device descriptor read/64, error -71 [ 2103.322018][T19550] usb usb2-port1: attempt power cycle [ 2103.341765][T17104] usb 3-1: Using ep0 maxpacket: 8 [ 2103.349558][T17104] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.360368][T17104] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2103.381371][T17104] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2103.390814][T17104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.418653][T17104] usbtmc 3-1:16.0: bulk endpoints not found [ 2103.472201][T15264] usb 4-1: USB disconnect, device number 110 [ 2103.521471][T21163] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2104.601113][T19550] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2104.883591][T19550] usb 2-1: device not accepting address 105, error -71 [ 2106.588408][T21175] netlink: 'syz.3.4234': attribute type 17 has an invalid length. [ 2108.724386][T21175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2108.746237][T21175] 8021q: adding VLAN 0 to HW filter on device team0 [ 2108.809011][T21175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2108.857673][T15264] usb 3-1: USB disconnect, device number 12 [ 2109.096153][T21180] netlink: 'syz.0.4235': attribute type 4 has an invalid length. [ 2111.733649][T21196] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2116.026476][T15264] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2116.364216][T15264] usb 4-1: Using ep0 maxpacket: 8 [ 2116.372621][T15264] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.403782][T15264] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2117.234814][T15264] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2117.254376][T15264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.275446][T15264] usbtmc 4-1:16.0: bulk endpoints not found [ 2117.508337][T21233] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2117.655090][T17104] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2118.559260][T17104] usb 2-1: Using ep0 maxpacket: 8 [ 2118.606894][T17104] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.844603][T17104] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2120.944355][T17104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.023153][T17104] usb 4-1: USB disconnect, device number 111 [ 2121.233990][T15264] usb 2-1: USB disconnect, device number 107 [ 2126.042851][T21277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2126.790780][T15264] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2127.218367][T15264] usb 2-1: Using ep0 maxpacket: 8 [ 2127.241626][T15264] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.259889][T15264] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2127.283856][T15264] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2127.311601][T15264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.381330][T15264] usbtmc 2-1:16.0: bulk endpoints not found [ 2127.857278][T15264] usb 2-1: USB disconnect, device number 108 [ 2127.999438][T17104] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2128.293687][T17104] usb 3-1: Using ep0 maxpacket: 8 [ 2128.343050][T17104] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.356889][T17104] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2128.370288][T17104] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2128.409393][T17104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.462968][T17104] usbtmc 3-1:16.0: bulk endpoints not found [ 2128.740940][T21304] syz.3.4267: attempt to access beyond end of device [ 2128.740940][T21304] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2131.465012][T17104] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 2133.713995][T21314] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2133.763240][T13672] usb 3-1: USB disconnect, device number 13 [ 2136.458203][T21332] syz.2.4274: attempt to access beyond end of device [ 2136.458203][T21332] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2136.765483][T17104] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 2137.767439][T17104] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2137.780291][T17104] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2137.789978][T17104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.798486][T21323] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2137.809019][T17104] usb 3-1: config 0 descriptor?? [ 2137.818256][T17104] metro_usb 3-1:0.0: required endpoints missing [ 2138.049616][T19375] usb 3-1: USB disconnect, device number 14 [ 2138.214469][T21323] usb 4-1: Using ep0 maxpacket: 8 [ 2139.475671][T21323] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2139.521780][T21323] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2139.574161][T21323] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2139.603305][T21323] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2139.814792][T21364] syz.2.4283: attempt to access beyond end of device [ 2139.814792][T21364] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2139.863694][T21323] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2139.875445][T21323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.150026][T21363] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2140.198808][T21323] usb 4-1: can't set config #16, error -71 [ 2140.243485][T21323] usb 4-1: USB disconnect, device number 113 [ 2142.968868][T19375] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 2144.361948][T21389] nbd0: detected capacity change from 0 to 63 [ 2144.488453][ T5781] block nbd0: Receive control failed (result -104) [ 2144.668062][ T5781] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 2145.713099][T21396] syz.2.4291: attempt to access beyond end of device [ 2145.713099][T21396] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2146.370269][T19550] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 2146.510321][T21323] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2146.638713][T19550] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2146.669010][T19550] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2146.690425][T19550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.718502][T21323] usb 4-1: Using ep0 maxpacket: 8 [ 2146.731297][T21323] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.740658][T19550] usb 3-1: config 0 descriptor?? [ 2146.753414][T19550] metro_usb 3-1:0.0: required endpoints missing [ 2146.768481][T21323] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2146.811193][T21323] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2146.848888][T21323] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2146.883279][T21323] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2146.911472][T21323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.061303][T21323] usbtmc 4-1:16.0: bulk endpoints not found [ 2147.835453][T19550] usb 3-1: USB disconnect, device number 16 [ 2148.410551][T21415] syz.1.4296: attempt to access beyond end of device [ 2148.410551][T21415] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2149.253848][T21323] usb 4-1: USB disconnect, device number 114 [ 2149.378758][T19375] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 2149.423853][ T5781] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 2149.872346][T19375] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2149.888731][T19375] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2149.897850][T19375] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.920060][T19375] usb 2-1: config 0 descriptor?? [ 2150.767106][T19375] metro_usb 2-1:0.0: required endpoints missing [ 2151.565668][T19375] usb 2-1: USB disconnect, device number 109 [ 2152.057588][T21323] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2152.987215][T19375] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2153.176923][T19375] usb 1-1: Using ep0 maxpacket: 8 [ 2153.625749][T19375] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2153.690828][T21323] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2153.725120][T21323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2153.727171][T19375] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2153.745934][T21323] usb 3-1: config 0 has no interface number 0 [ 2153.753141][T21323] usb 3-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2153.769442][T21323] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2153.802958][T21323] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2153.813077][T21323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.825918][T21323] usb 3-1: Product: syz [ 2153.834080][T21323] usb 3-1: Manufacturer: syz [ 2153.842259][T21323] usb 3-1: SerialNumber: syz [ 2153.924091][T21323] usb 3-1: config 0 descriptor?? [ 2153.991289][T19375] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2154.065716][T21448] syz.3.4307: attempt to access beyond end of device [ 2154.065716][T21448] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2154.194254][T19375] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2154.320318][T19375] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2154.376192][T19375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.406341][ T8734] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 2154.430793][T19375] usbtmc 1-1:16.0: bulk endpoints not found [ 2154.446516][T21323] usb 3-1: can't set config #0, error -71 [ 2154.474332][T21323] usb 3-1: USB disconnect, device number 17 [ 2154.746413][ T8734] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2154.899007][ T8734] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2154.908446][ T8734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.645882][ T8734] usb 4-1: config 0 descriptor?? [ 2155.662070][ T8734] metro_usb 4-1:0.0: required endpoints missing [ 2157.024330][ T8734] usb 4-1: USB disconnect, device number 115 [ 2158.692694][T17104] usb 1-1: USB disconnect, device number 120 [ 2159.014710][T13672] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 2159.229760][T13672] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2159.241798][T13672] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2159.341192][T13672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.378304][T13672] usb 3-1: config 0 descriptor?? [ 2159.396075][T13672] metro_usb 3-1:0.0: required endpoints missing [ 2159.770192][T19375] usb 3-1: USB disconnect, device number 18 [ 2160.312297][ T8734] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2160.439825][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.446697][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.120640][ T8734] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2162.139487][ T8734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.180490][ T8734] usb 4-1: config 0 has no interface number 0 [ 2162.215088][ T8734] usb 4-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2162.322179][ T8734] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2162.551938][ T8734] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2162.691485][ T8734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.747964][T21496] syz.0.4321: attempt to access beyond end of device [ 2162.747964][T21496] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2162.780350][ T8734] usb 4-1: Product: syz [ 2162.823551][ T8734] usb 4-1: Manufacturer: syz [ 2162.862049][ T8734] usb 4-1: SerialNumber: syz [ 2162.883286][ T8734] usb 4-1: config 0 descriptor?? [ 2163.004148][ T8734] usb 4-1: USB disconnect, device number 116 [ 2163.391953][T13672] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 2164.303174][T13672] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2164.321300][T13672] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2164.330437][T13672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.382155][T13672] usb 1-1: config 0 descriptor?? [ 2164.393363][T13672] metro_usb 1-1:0.0: required endpoints missing [ 2164.712062][T13672] usb 1-1: USB disconnect, device number 121 [ 2166.119927][ T5781] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 2168.019448][T13672] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2169.099425][T13672] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 2169.107678][T13672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2169.905639][T13672] usb 1-1: config 0 has no interface number 0 [ 2169.912863][T13672] usb 1-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2169.924292][T13672] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2169.959517][T13672] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2169.988650][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.996758][T13672] usb 1-1: Product: syz [ 2170.028525][T13672] usb 1-1: Manufacturer: syz [ 2170.033234][T13672] usb 1-1: SerialNumber: syz [ 2170.056953][T13672] usb 1-1: config 0 descriptor?? [ 2170.714781][T21548] overlay: Unknown parameter 'uid' [ 2171.823331][T13672] usb 1-1: USB disconnect, device number 122 [ 2172.427447][T13672] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 2172.748499][T13672] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2172.806186][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.859655][T13672] usb 1-1: Product: syz [ 2172.891375][T13672] usb 1-1: Manufacturer: syz [ 2172.924702][T13672] usb 1-1: SerialNumber: syz [ 2173.035558][T13672] usb 1-1: config 0 descriptor?? [ 2173.341828][T13672] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2173.964650][T13672] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 2174.586125][T13787] block nbd0: Possible stuck request ffff888022158000: control (read@0,1024B). Runtime 30 seconds [ 2174.601180][T13787] block nbd0: Possible stuck request ffff888022158200: control (read@1024,1024B). Runtime 30 seconds [ 2174.612615][T13787] block nbd0: Possible stuck request ffff888022158400: control (read@2048,1024B). Runtime 30 seconds [ 2174.623830][T13787] block nbd0: Possible stuck request ffff888022158600: control (read@3072,1024B). Runtime 30 seconds [ 2175.317813][T19375] usb 1-1: USB disconnect, device number 123 [ 2177.394835][T19375] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2178.427655][T19375] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 2178.472275][T19375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.519140][T19375] usb 1-1: config 0 has no interface number 0 [ 2178.556998][T19375] usb 1-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2178.619442][T19375] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2178.716153][T19375] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2178.776344][T19375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.000705][T19375] usb 1-1: Product: syz [ 2179.023640][T19375] usb 1-1: Manufacturer: syz [ 2179.030187][T19375] usb 1-1: SerialNumber: syz [ 2179.864128][T21604] overlay: Unknown parameter 'uid' [ 2180.847318][T19375] usb 1-1: config 0 descriptor?? [ 2180.906834][T19375] usb 1-1: can't set config #0, error -71 [ 2180.984735][T19375] usb 1-1: USB disconnect, device number 124 [ 2182.500059][T21627] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2185.018615][T21644] syz.2.4359: attempt to access beyond end of device [ 2185.018615][T21644] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2185.033296][T13672] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2185.238560][T13672] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 2185.256533][T13672] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.271088][T13672] usb 1-1: config 0 has no interface number 0 [ 2185.277762][T13672] usb 1-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2185.289077][T13672] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2185.308916][T13672] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2185.318950][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.328570][T13672] usb 1-1: Product: syz [ 2185.333286][T13672] usb 1-1: Manufacturer: syz [ 2185.338053][T13672] usb 1-1: SerialNumber: syz [ 2185.361586][T13672] usb 1-1: config 0 descriptor?? [ 2185.380922][T17104] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 2186.366230][T17104] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2186.384852][T17104] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2186.396143][T17104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.443619][T17104] usb 3-1: config 0 descriptor?? [ 2186.475932][T17104] metro_usb 3-1:0.0: required endpoints missing [ 2187.707872][T17104] usb 1-1: USB disconnect, device number 125 [ 2188.933564][T17104] usb 3-1: USB disconnect, device number 19 [ 2189.253205][T21668] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2190.389716][T20989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2190.403773][T20989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2190.414109][T20989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2190.564756][T20989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2190.578249][T20989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2190.589821][T20989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2191.889725][T21690] syzkaller0: entered promiscuous mode [ 2191.907593][T21690] syzkaller0: entered allmulticast mode [ 2192.487108][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.514908][T17104] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2192.568541][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.668674][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.717441][ T5781] Bluetooth: hci3: command tx timeout [ 2192.728865][T17104] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 2192.740812][T17104] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.761098][T17104] usb 1-1: config 0 has no interface number 0 [ 2192.775772][T17104] usb 1-1: config 0 interface 117 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2192.826041][T17104] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2192.868861][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.888638][T17104] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2192.907836][T17104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.916045][T17104] usb 1-1: Product: syz [ 2192.951321][ C1] vkms_vblank_simulate: vblank timer overrun [ 2192.967023][T17104] usb 1-1: Manufacturer: syz [ 2192.971874][T17104] usb 1-1: SerialNumber: syz [ 2193.011727][T17104] usb 1-1: config 0 descriptor?? [ 2193.167569][ C1] vkms_vblank_simulate: vblank timer overrun [ 2193.237983][ C1] vkms_vblank_simulate: vblank timer overrun [ 2193.470745][ C1] vkms_vblank_simulate: vblank timer overrun [ 2193.602529][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.051081][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.236899][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.285286][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.350886][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.433408][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.569578][ C1] vkms_vblank_simulate: vblank timer overrun [ 2194.736293][ T5781] Bluetooth: hci3: command tx timeout [ 2194.886559][T21700] syz.3.4373: attempt to access beyond end of device [ 2194.886559][T21700] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2194.985342][ C1] vkms_vblank_simulate: vblank timer overrun [ 2195.033716][ C1] vkms_vblank_simulate: vblank timer overrun [ 2195.185807][ T8734] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 2195.429131][ T8734] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2195.439928][ T8734] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 2195.449252][ T8734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.477454][ T8734] usb 4-1: config 0 descriptor?? [ 2195.483084][ C1] vkms_vblank_simulate: vblank timer overrun [ 2195.526835][ T8734] metro_usb 4-1:0.0: required endpoints missing [ 2195.536806][ C1] vkms_vblank_simulate: vblank timer overrun [ 2196.828446][ T5781] Bluetooth: hci3: command tx timeout [ 2197.166403][ C1] vkms_vblank_simulate: vblank timer overrun [ 2197.249056][ C1] vkms_vblank_simulate: vblank timer overrun [ 2198.471009][T21674] chnl_net:caif_netlink_parms(): no params data found [ 2198.508502][ T8734] usb 1-1: USB disconnect, device number 126 [ 2198.894284][ T5781] Bluetooth: hci3: command tx timeout [ 2199.585605][T21674] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.616175][T21674] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.638733][T21674] bridge_slave_0: entered allmulticast mode [ 2199.672855][T21674] bridge_slave_0: entered promiscuous mode [ 2199.737847][T21674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.792491][T17104] usb 4-1: USB disconnect, device number 117 [ 2199.799354][T21674] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.827039][T21674] bridge_slave_1: entered allmulticast mode [ 2199.865314][T21674] bridge_slave_1: entered promiscuous mode [ 2199.963032][T21674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.989944][T21674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2200.082835][T21674] team0: Port device team_slave_0 added [ 2200.111033][T21674] team0: Port device team_slave_1 added [ 2200.141386][T21674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2200.148903][T21674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.175738][T21674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2200.191028][T21674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2200.198777][T21674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.225125][T21674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2200.239222][T21711] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2200.354341][T21674] hsr_slave_0: entered promiscuous mode [ 2200.369581][T21674] hsr_slave_1: entered promiscuous mode [ 2200.378751][T21674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2200.387333][T21674] Cannot create hsr debugfs directory [ 2200.594573][T21674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2200.605743][T21674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2200.621440][T21674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2200.633893][T21674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2200.731563][T21674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2200.769839][T21674] 8021q: adding VLAN 0 to HW filter on device team0 [ 2200.790418][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2200.797715][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2200.820842][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2200.828084][T12250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.087986][T21674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2201.376812][T21674] veth0_vlan: entered promiscuous mode [ 2201.392184][T21674] veth1_vlan: entered promiscuous mode [ 2201.431226][T21674] veth0_macvtap: entered promiscuous mode [ 2201.444866][T21674] veth1_macvtap: entered promiscuous mode [ 2201.468640][T21674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2201.486253][T21674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2201.498267][T21674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.507346][T21674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.517589][T21674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.527151][T21674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2201.660662][T19836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2201.669977][T19836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2201.724272][T12250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2201.733739][T12250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2204.909701][ T5139] udevd[5139]: worker [21284] /devices/virtual/block/nbd0 is taking a long time [ 2205.220835][T13787] block nbd0: Possible stuck request ffff888022158000: control (read@0,1024B). Runtime 60 seconds [ 2205.231950][T13787] block nbd0: Possible stuck request ffff888022158200: control (read@1024,1024B). Runtime 60 seconds [ 2205.243146][T13787] block nbd0: Possible stuck request ffff888022158400: control (read@2048,1024B). Runtime 60 seconds [ 2205.254183][T13787] block nbd0: Possible stuck request ffff888022158600: control (read@3072,1024B). Runtime 60 seconds [ 2221.846722][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.853439][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2235.276199][T13787] block nbd0: Possible stuck request ffff888022158000: control (read@0,1024B). Runtime 90 seconds [ 2235.287277][T13787] block nbd0: Possible stuck request ffff888022158200: control (read@1024,1024B). Runtime 90 seconds [ 2235.298377][T13787] block nbd0: Possible stuck request ffff888022158400: control (read@2048,1024B). Runtime 90 seconds [ 2235.309339][T13787] block nbd0: Possible stuck request ffff888022158600: control (read@3072,1024B). Runtime 90 seconds [ 2265.342146][T13787] block nbd0: Possible stuck request ffff888022158000: control (read@0,1024B). Runtime 120 seconds [ 2265.353222][T13787] block nbd0: Possible stuck request ffff888022158200: control (read@1024,1024B). Runtime 120 seconds [ 2265.367409][T13787] block nbd0: Possible stuck request ffff888022158400: control (read@2048,1024B). Runtime 120 seconds [ 2265.378709][T13787] block nbd0: Possible stuck request ffff888022158600: control (read@3072,1024B). Runtime 120 seconds [ 2283.257544][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.271661][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2295.405979][T13787] block nbd0: Possible stuck request ffff888022158000: control (read@0,1024B). Runtime 150 seconds [ 2295.417226][T13787] block nbd0: Possible stuck request ffff888022158200: control (read@1024,1024B). Runtime 150 seconds [ 2295.429006][T13787] block nbd0: Possible stuck request ffff888022158400: control (read@2048,1024B). Runtime 150 seconds [ 2295.441523][T13787] block nbd0: Possible stuck request ffff888022158600: control (read@3072,1024B). Runtime 150 seconds [ 2316.035519][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 2317.794914][ T29] INFO: task syz.1.4338:21565 blocked for more than 143 seconds. [ 2317.802713][ T29] Not tainted syzkaller #0 [ 2317.808000][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2317.816804][ T29] task:syz.1.4338 state:D stack:26696 pid:21565 ppid:13113 flags:0x00004006 [ 2317.826466][ T29] Call Trace: [ 2317.829802][ T29] [ 2317.832776][ T29] __schedule+0x1553/0x45a0 [ 2317.837614][ T29] ? finish_task_switch+0x326/0x8f0 [ 2317.842913][ T29] ? asan.module_dtor+0x20/0x20 [ 2317.847934][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 2317.858826][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 2317.864389][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2317.870618][ T29] schedule+0xbd/0x170 [ 2317.875557][ T29] schedule_preempt_disabled+0x13/0x20 [ 2317.881106][ T29] __mutex_lock+0x6a9/0xcc0 [ 2317.886503][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 2317.891388][ T29] ? sync_bdevs+0x1af/0x330 [ 2317.896865][ T29] ? mutex_lock_nested+0x20/0x20 [ 2317.901866][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 2317.907613][ T29] sync_bdevs+0x1af/0x330 [ 2317.912010][ T29] ksys_sync+0xc6/0x170 [ 2317.916544][ T29] ? sync_filesystem+0x220/0x220 [ 2317.921657][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 2317.928120][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 2317.933375][ T29] __ia32_sys_sync+0xe/0x20 [ 2317.938273][ T29] do_syscall_64+0x55/0xa0 [ 2317.942767][ T29] ? clear_bhb_loop+0x40/0x90 [ 2317.948113][ T29] ? clear_bhb_loop+0x40/0x90 [ 2317.952965][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2317.959472][ T29] RIP: 0033:0x7fae1979aeb9 [ 2317.963961][ T29] RSP: 002b:00007fae1a72b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2317.973002][ T29] RAX: ffffffffffffffda RBX: 00007fae19a15fa0 RCX: 00007fae1979aeb9 [ 2317.981497][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.989995][ T29] RBP: 00007fae19a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.998397][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2318.006933][ T29] R13: 00007fae19a16038 R14: 00007fae19a15fa0 R15: 00007ffdaca91498 [ 2318.015470][ T29] [ 2318.018613][ T29] [ 2318.018613][ T29] Showing all locks held in the system: [ 2318.026981][ T29] 1 lock held by khungtaskd/29: [ 2318.031878][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2318.042441][ T29] 2 locks held by getty/5529: [ 2318.047635][ T29] #0: ffff88814cc0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2318.057976][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2318.068542][ T29] 2 locks held by kworker/u4:10/16711: [ 2318.074265][ T29] 1 lock held by udevd/21284: [ 2318.084316][ T29] #0: ffff888141b634c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2318.095007][ T29] 1 lock held by syz.1.4338/21565: [ 2318.100261][ T29] #0: ffff888141b634c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 2318.109886][ T29] [ 2318.112247][ T29] ============================================= [ 2318.112247][ T29] [ 2318.121382][ T29] NMI backtrace for cpu 1 [ 2318.125781][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2318.133018][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2318.143146][ T29] Call Trace: [ 2318.146465][ T29] [ 2318.149433][ T29] dump_stack_lvl+0x18c/0x250 [ 2318.154166][ T29] ? show_regs_print_info+0x20/0x20 [ 2318.159412][ T29] ? load_image+0x400/0x400 [ 2318.163971][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2318.168972][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2318.175185][ T29] ? _printk+0xde/0x130 [ 2318.179387][ T29] ? load_image+0x400/0x400 [ 2318.183940][ T29] ? load_image+0x400/0x400 [ 2318.188590][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2318.194971][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2318.201017][ T29] watchdog+0xf3d/0xf80 [ 2318.205225][ T29] ? watchdog+0x1e1/0xf80 [ 2318.209625][ T29] kthread+0x2fa/0x390 [ 2318.213744][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2318.218906][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2318.223550][ T29] ret_from_fork+0x48/0x80 [ 2318.228015][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2318.232848][ T29] ret_from_fork_asm+0x11/0x20 [ 2318.238023][ T29] [ 2318.241887][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2318.247342][ C0] NMI backtrace for cpu 0 [ 2318.247354][ C0] CPU: 0 PID: 19843 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 2318.247372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2318.247385][ C0] Workqueue: bat_events batadv_nc_worker [ 2318.247499][ C0] RIP: 0010:check_preemption_disabled+0x3/0x110 [ 2318.247523][ C0] Code: ff ff ff cc cc cc cc f3 0f 1e fa 48 c7 c7 80 80 1c 8b 48 c7 c6 c0 80 1c 8b eb 0c 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 2318.247538][ C0] RSP: 0018:ffffc90003567a08 EFLAGS: 00000283 [ 2318.247552][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81682307 [ 2318.247564][ C0] RDX: 0000000000000000 RSI: ffffffff8b1c80c0 RDI: ffffffff8b1c8080 [ 2318.247577][ C0] RBP: ffffc90003567b48 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 2318.247589][ C0] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: 1ffff920006acf54 [ 2318.247602][ C0] R13: ffffffff8d131fe0 R14: 0000000000000000 R15: dffffc0000000000 [ 2318.247614][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2318.247629][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2318.247641][ C0] CR2: 000055a5b8dfe168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2318.247656][ C0] Call Trace: [ 2318.247664][ C0] [ 2318.247671][ C0] rcu_is_watching+0x15/0xb0 [ 2318.247698][ C0] lock_acquire+0xc6/0x420 [ 2318.247721][ C0] ? batadv_nc_worker+0xd2/0x610 [ 2318.247747][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2318.247767][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2318.247788][ C0] ? batadv_nc_worker+0xd2/0x610 [ 2318.247813][ C0] ? batadv_nc_worker+0xd2/0x610 [ 2318.247838][ C0] batadv_nc_worker+0xef/0x610 [ 2318.247862][ C0] ? batadv_nc_worker+0xd2/0x610 [ 2318.247889][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 2318.247912][ C0] process_scheduled_works+0xa5d/0x15d0 [ 2318.247949][ C0] ? assign_work+0x430/0x430 [ 2318.247973][ C0] ? assign_work+0x3d0/0x430 [ 2318.247996][ C0] worker_thread+0xa55/0xfc0 [ 2318.248018][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2318.248064][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2318.248079][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2318.248114][ C0] kthread+0x2fa/0x390 [ 2318.248130][ C0] ? pr_cont_work+0x560/0x560 [ 2318.248151][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2318.248168][ C0] ret_from_fork+0x48/0x80 [ 2318.248188][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2318.248205][ C0] ret_from_fork_asm+0x11/0x20 [ 2318.248236][ C0] [ 2318.498775][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2318.505684][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2318.513028][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2318.523390][ T29] Call Trace: [ 2318.526884][ T29] [ 2318.529852][ T29] dump_stack_lvl+0x18c/0x250 [ 2318.534599][ T29] ? show_regs_print_info+0x20/0x20 [ 2318.539885][ T29] ? load_image+0x400/0x400 [ 2318.544490][ T29] panic+0x2dc/0x730 [ 2318.548446][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2318.554136][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2318.558680][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2318.564271][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2318.570481][ T29] watchdog+0xf7c/0xf80 [ 2318.574686][ T29] ? watchdog+0x1e1/0xf80 [ 2318.579106][ T29] kthread+0x2fa/0x390 [ 2318.583223][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2318.588271][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2318.592878][ T29] ret_from_fork+0x48/0x80 [ 2318.597423][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2318.602285][ T29] ret_from_fork_asm+0x11/0x20 [ 2318.607112][ T29] [ 2318.610729][ T29] Kernel Offset: disabled [ 2318.615148][ T29] Rebooting in 86400 seconds..