last executing test programs: 14.985304387s ago: executing program 3 (id=1359): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r2 = open(0x0, 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) eventfd2(0x1, 0x1) 13.380993755s ago: executing program 0 (id=1362): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="400f1100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 11.727400127s ago: executing program 1 (id=1365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x5) listen(r5, 0x3) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(0xffffffffffffffff, 0x3841b273) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="d0000000190001000000000000000000000000000000000000000000000000010a010102000000000000000000000000000000840f5afb594a9a1e3f00000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f"], 0xd0}, 0x1, 0x0, 0x0, 0x2001}, 0x40040041) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r3) close(0x4) 11.340570155s ago: executing program 3 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@private, @in=@multicast1}}, {{@in6}, 0x0, @in=@empty}}, 0x0) 11.09094761s ago: executing program 3 (id=1369): r0 = socket(0x29, 0x2, 0x6) connect$rxrpc(r0, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, 0x0, 0x40040) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x2, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)='K', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x44) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) 10.504605477s ago: executing program 0 (id=1370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400706"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000e40)={0x40, 0x3, 0x2, "83e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.07424835s ago: executing program 3 (id=1371): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x300, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 9.944623583s ago: executing program 3 (id=1372): ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000800)={'vlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(0x0, 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 8.636765981s ago: executing program 1 (id=1373): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) 7.633966239s ago: executing program 1 (id=1376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6.867700285s ago: executing program 2 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000580)={{{@in=@private, @in=@multicast1}}, {{@in6}, 0x0, @in=@empty}}, 0x0) 6.804496861s ago: executing program 0 (id=1378): mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae1", @ANYBLOB=',rootmo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.463242425s ago: executing program 2 (id=1379): r0 = socket(0x29, 0x2, 0x6) connect$rxrpc(r0, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, 0x0, 0x40040) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x2, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)='K', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x44) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) 6.354475586s ago: executing program 1 (id=1380): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000004c0)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)='^', 0x1}, {&(0x7f0000000500)="a2a5a3a9abbd71acfdbd0235645d4849582f311deb9c3f66833ed7b860053597db975838258a8d382816ffb52bc596bc5d6436b6463c2dc120fdb5501ee1d88da673e6dee8d3f4ab5d897204382e56cf916f31b199b7ee11f91230f036f6d2437b111d4b05cdec25b8ce4d", 0x6b}], 0x2}, 0x64) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x2000000000000000, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r4}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 3.472471678s ago: executing program 1 (id=1381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x5) listen(r5, 0x3) bind$unix(r4, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r4, 0x3841b273) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)=ANY=[@ANYBLOB="d0000000190001000000000000000000000000000000000000000000000000010a010102000000000000000000000000000000840f5afb594a9a1e3f00000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f"], 0xd0}, 0x1, 0x0, 0x0, 0x2001}, 0x40040041) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r3) close(0x4) 3.471769449s ago: executing program 3 (id=1382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r7, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, &(0x7f0000001100), 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.404540375s ago: executing program 0 (id=1383): ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x200040c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x41, 0x24c, &(0x7f00000007c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x400000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x4861c0, 0x129) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffcb) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="0100fefffffffcffffff010000000c0002000940000000000000340007800c00018008000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRESOCT=r6, @ANYRES32=r5, @ANYBLOB="0c0001800800", @ANYRES32=r5, @ANYBLOB], 0x54}}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 3.309197685s ago: executing program 2 (id=1384): open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.294995093s ago: executing program 2 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) close(r3) 1.273939645s ago: executing program 1 (id=1386): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400706"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000e40)={0x40, 0x3, 0x2, "83e7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 354.404835ms ago: executing program 2 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in=@private, @in=@multicast1}}, {{@in6}, 0x0, @in=@empty}}, 0x0) 295.470071ms ago: executing program 0 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 116.629859ms ago: executing program 2 (id=1389): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x20000880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) timer_gettime(0x0, &(0x7f00000005c0)) 0s ago: executing program 0 (id=1390): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 236.591900][ T5835] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 236.602908][ T5835] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 238.040856][ T5792] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 239.106752][ T5835] usb 1-1: USB disconnect, device number 21 [ 239.221610][ T8] usb 3-1: USB disconnect, device number 23 [ 239.527409][ T7408] ubi: mtd0 is already attached to ubi31 [ 241.564736][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 30 seconds [ 241.687395][ T5792] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 242.702543][ T7447] ubi: mtd0 is already attached to ubi31 [ 242.759166][ T5787] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 243.054319][ T5787] usb 2-1: Using ep0 maxpacket: 16 [ 243.141127][ T5787] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 243.159714][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.200740][ T5787] usb 2-1: config 0 descriptor?? [ 243.220537][ T5787] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 243.496424][ T7458] netlink: 80 bytes leftover after parsing attributes in process `syz.0.444'. [ 243.914527][ T5835] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 244.124135][ T5792] Bluetooth: hci0: unexpected event for opcode 0x042c [ 245.360976][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 60 seconds [ 245.474199][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 245.482236][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.492476][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.503535][ T5835] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.512676][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.520748][ T5835] usb 3-1: Product: syz [ 245.524995][ T5835] usb 3-1: Manufacturer: syz [ 245.529600][ T5835] usb 3-1: SerialNumber: syz [ 245.631378][ T5916] usb 2-1: USB disconnect, device number 20 [ 245.744628][ T5835] usb 3-1: 0:2 : does not exist [ 245.759164][ T5835] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 245.790193][ T5835] usb 3-1: USB disconnect, device number 24 [ 245.829038][ T7266] udevd[7266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.993415][ T7482] loop9: detected capacity change from 0 to 7 [ 246.016797][ C1] blk_print_req_error: 27 callbacks suppressed [ 246.016817][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.032328][ C1] buffer_io_error: 27 callbacks suppressed [ 246.032342][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.098073][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.107369][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.155042][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.164348][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.183943][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.193238][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.215605][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.224890][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.265713][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.274988][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.285052][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.294317][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.310098][ T7482] ldm_validate_partition_table(): Disk read failed. [ 246.341082][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.350372][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.418500][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.427803][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.449396][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.458680][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 246.467967][ T7482] Dev loop9: unable to read RDB block 0 [ 246.477253][ T7482] loop9: unable to read partition table [ 246.489759][ T7482] loop9: partition table beyond EOD, truncated [ 246.516868][ T7482] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 246.516868][ T7482] ) failed (rc=-5) [ 247.054453][ T7495] ubi: mtd0 is already attached to ubi31 [ 248.596916][ T10] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 30 seconds [ 248.909907][ T7520] loop2: detected capacity change from 0 to 512 [ 248.936402][ T7520] FAT-fs (loop2): count of clusters too big (2147483660) [ 248.945045][ T7520] FAT-fs (loop2): Can't find a valid FAT filesystem [ 249.024042][ T1869] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 249.094659][ T7521] netlink: 18 bytes leftover after parsing attributes in process `syz.2.461'. [ 249.106689][ T7521] nbd7: detected capacity change from 0 to 32 [ 249.750518][ T5792] block nbd7: Receive control failed (result -104) [ 250.110760][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 60 seconds [ 250.748159][ T1869] usb 2-1: Using ep0 maxpacket: 16 [ 251.892999][ T1869] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 251.900685][ T1869] usb 2-1: can't read configurations, error -71 [ 253.084082][ T1869] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 253.224040][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 253.274000][ T1869] usb 2-1: Using ep0 maxpacket: 16 [ 253.281252][ T1869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.290092][ T1869] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 253.298361][ T1869] usb 2-1: config 13 has no interface number 0 [ 253.304711][ T1869] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 253.314989][ T1869] usb 2-1: config 13 interface 50 has no altsetting 0 [ 253.323429][ T1869] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 253.332582][ T1869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.340607][ T1869] usb 2-1: Product: syz [ 253.344828][ T1869] usb 2-1: Manufacturer: syz [ 253.349422][ T1869] usb 2-1: SerialNumber: syz [ 253.356672][ T7543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.394412][ T9] usb 4-1: device descriptor read/64, error -71 [ 253.580022][ T1869] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 253.587375][ T1869] usb 2-1: MIDIStreaming interface descriptor not found [ 253.613380][ T1869] usb 2-1: USB disconnect, device number 22 [ 253.664500][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 253.681756][ T7241] udevd[7241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.794004][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 253.844157][ T9] usb 4-1: device descriptor read/64, error -71 [ 253.964532][ T9] usb usb4-port1: attempt power cycle [ 253.974187][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 253.982021][ T5916] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 253.991220][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.003271][ T5916] usb 3-1: config 0 descriptor?? [ 254.011524][ T5916] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 254.394553][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 254.430082][ T9] usb 4-1: device descriptor read/8, error -71 [ 255.554834][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 255.618410][ T9] usb 4-1: device descriptor read/8, error -71 [ 255.749528][ T9] usb usb4-port1: unable to enumerate USB device [ 256.678741][ T1869] usb 3-1: USB disconnect, device number 25 [ 258.053995][ T1869] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 258.334011][ T1869] usb 3-1: Using ep0 maxpacket: 8 [ 258.342639][ T1869] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 258.366327][ T1869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.381154][ T1869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.392573][ T1869] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.438644][ T1869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.452306][ T1869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.483293][ T1869] usbtmc 3-1:16.0: bulk endpoints not found [ 258.574055][ T5850] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 258.775986][ T5850] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 258.785392][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.826182][ T5850] usb 2-1: config 0 descriptor?? [ 259.037077][ T5850] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 259.274081][ T1869] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 259.432754][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 259.438658][ T5850] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 259.451930][ T5850] asix: probe of 2-1:0.0 failed with error -32 [ 259.458686][ T1869] usb 1-1: Using ep0 maxpacket: 16 [ 259.478313][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.479181][ T1869] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 259.484739][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.508057][ T1869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.536826][ T1869] usb 1-1: config 0 descriptor?? [ 259.542117][ T7630] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 259.552714][ T1869] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 259.567121][ T7630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 260.819788][ T8] usb 3-1: USB disconnect, device number 26 [ 260.982635][ T7656] loop2: detected capacity change from 0 to 512 [ 260.997082][ T7656] FAT-fs (loop2): count of clusters too big (2147483660) [ 261.009780][ T7656] FAT-fs (loop2): Can't find a valid FAT filesystem [ 261.134610][ T7657] netlink: 18 bytes leftover after parsing attributes in process `syz.2.503'. [ 261.146593][ T7657] nbd8: detected capacity change from 0 to 32 [ 261.204104][ T5850] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 261.633628][ T5916] usb 2-1: USB disconnect, device number 23 [ 261.843700][ T5792] block nbd8: Receive control failed (result -104) [ 262.418014][ T9] usb 1-1: USB disconnect, device number 22 [ 262.910223][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 264.053649][ T5850] usb 4-1: device descriptor read/all, error -71 [ 265.334260][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 265.524132][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 265.530841][ T8] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 265.541491][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 265.551909][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 265.562618][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.575656][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.584789][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.600267][ T8] usbtmc 1-1:16.0: bulk endpoints not found [ 265.714109][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 265.897908][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 265.907077][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.917664][ T9] usb 2-1: config 0 descriptor?? [ 266.129535][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 266.531059][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 266.541441][ T9] asix: probe of 2-1:0.0 failed with error -32 [ 266.726323][ T5787] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 266.926352][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 266.932969][ T5787] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 266.941396][ T5787] usb 3-1: config 0 has no interface number 0 [ 266.947675][ T5787] usb 3-1: config 0 interface 184 has no altsetting 0 [ 266.957009][ T5787] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.966239][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.974436][ T5787] usb 3-1: Product: syz [ 266.978703][ T5787] usb 3-1: Manufacturer: syz [ 266.983363][ T5787] usb 3-1: SerialNumber: syz [ 266.990968][ T5787] usb 3-1: config 0 descriptor?? [ 266.998023][ T5787] smsc75xx v1.0.0 [ 267.001670][ T5787] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 267.011930][ T5787] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 267.986427][ T5787] usb 1-1: USB disconnect, device number 23 [ 268.092776][ T7709] loop0: detected capacity change from 0 to 512 [ 268.102611][ T7709] FAT-fs (loop0): count of clusters too big (2147483660) [ 268.117166][ T7709] FAT-fs (loop0): Can't find a valid FAT filesystem [ 268.244643][ T7710] netlink: 18 bytes leftover after parsing attributes in process `syz.0.517'. [ 268.258615][ T7710] nbd9: detected capacity change from 0 to 32 [ 268.944200][ T5792] block nbd9: Receive control failed (result -104) [ 269.199090][ T23] usb 2-1: USB disconnect, device number 24 [ 271.751485][ T5956] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 60 seconds [ 273.114254][ T34] usb 3-1: USB disconnect, device number 27 [ 273.516304][ T27] audit: type=1326 audit(1761209358.501:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.574173][ T27] audit: type=1326 audit(1761209358.501:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.613319][ T27] audit: type=1326 audit(1761209358.501:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.659534][ T27] audit: type=1326 audit(1761209358.511:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.692295][ T27] audit: type=1326 audit(1761209358.511:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.731193][ T27] audit: type=1326 audit(1761209358.541:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.788375][ T27] audit: type=1326 audit(1761209358.541:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.814000][ T5787] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 273.851099][ T27] audit: type=1326 audit(1761209358.541:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe3a678efc9 code=0x7ffc0000 [ 273.896060][ T27] audit: type=1326 audit(1761209358.541:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3a678f003 code=0x7ffc0000 [ 273.920868][ T27] audit: type=1326 audit(1761209358.541:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.3.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3a678f003 code=0x7ffc0000 [ 274.056728][ T5787] usb 1-1: Using ep0 maxpacket: 8 [ 274.187739][ T5787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.416953][ T5787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.448290][ T5787] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 274.614065][ T5787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.697139][ T5787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.839939][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.282284][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bcfa000: rx timeout, send abort [ 275.293961][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bcfa000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.502285][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 90 seconds [ 275.526238][ T5787] usbtmc 1-1:16.0: bulk endpoints not found [ 276.534546][ T5787] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 276.942174][ T5787] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.952427][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.317408][ T5787] usb 3-1: config 0 descriptor?? [ 277.492616][ T8] usb 1-1: USB disconnect, device number 24 [ 277.624164][ T5787] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 278.714482][ T5787] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 278.856024][ T10] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 60 seconds [ 279.048188][ T5787] asix: probe of 3-1:0.0 failed with error -32 [ 279.314230][ T10] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 30 seconds [ 280.076648][ T5787] usb 3-1: USB disconnect, device number 28 [ 280.455384][ T5792] Bluetooth: hci0: unexpected event for opcode 0x042c [ 281.292303][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 281.332503][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 282.113259][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 90 seconds [ 283.344060][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 283.437588][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 283.525344][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 283.534387][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.554110][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.577057][ T8] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 283.591831][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.609868][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.620290][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.642910][ T8] usbtmc 1-1:16.0: bulk endpoints not found [ 283.670510][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.694640][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.703437][ T9] usb 2-1: Product: syz [ 283.709979][ T9] usb 2-1: Manufacturer: syz [ 283.716980][ T9] usb 2-1: SerialNumber: syz [ 283.732277][ T9] usb 2-1: config 0 descriptor?? [ 283.851766][ T7799] random: crng reseeded on system resumption [ 284.015419][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.242226][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 285.250005][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 285.257924][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 285.277858][ T9] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 285.293094][ T9] usb 2-1: USB disconnect, device number 25 [ 285.527072][ T5835] usb 1-1: USB disconnect, device number 25 [ 287.079846][ T8] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 287.405341][ T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 287.519043][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.708690][ T8] usb 1-1: config 0 descriptor?? [ 288.252140][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 288.660921][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 288.706303][ T8] asix: probe of 1-1:0.0 failed with error -32 [ 289.378345][ T5792] Bluetooth: hci2: unexpected event for opcode 0x042c [ 289.803115][ T9] usb 1-1: USB disconnect, device number 26 [ 290.119961][ T7840] syzkaller0: create flow: hash 4152844890 index 2 [ 290.450951][ T7838] syzkaller0: delete flow: hash 4152844890 index 2 [ 291.211159][ T7848] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 291.255847][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 291.369395][ T34] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 291.468942][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 291.625209][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 30 seconds [ 291.626643][ T34] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.644216][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.658690][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 291.674306][ T9] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 291.678504][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.693149][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.713849][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.724034][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.728107][ T34] usb 2-1: Product: syz [ 291.736482][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 291.801728][ T34] usb 2-1: Manufacturer: syz [ 291.824156][ T34] usb 2-1: SerialNumber: syz [ 291.845122][ T34] usb 2-1: config 0 descriptor?? [ 292.077039][ T34] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 294.429740][ T9] usb 3-1: USB disconnect, device number 29 [ 294.664195][ T34] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 296.197573][ T34] usb 2-1: USB disconnect, device number 26 [ 296.593410][ T8] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 297.579717][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 297.605988][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.354547][ T8] usb 4-1: config 0 descriptor?? [ 298.461432][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 298.514653][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 30 seconds [ 298.620630][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 298.659861][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 298.970078][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 299.021842][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 299.973427][ T8] asix: probe of 4-1:0.0 failed with error -32 [ 300.125959][ T34] usb 4-1: USB disconnect, device number 28 [ 300.401662][ T8] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 301.056769][ T7898] netlink: 'syz.3.567': attribute type 10 has an invalid length. [ 301.606945][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 301.632770][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.657653][ T8] usb 1-1: Product: syz [ 301.676929][ T8] usb 1-1: Manufacturer: syz [ 301.703528][ T8] usb 1-1: SerialNumber: syz [ 301.743536][ T8] usb 1-1: config 0 descriptor?? [ 301.815807][ T7903] ubi: mtd0 is already attached to ubi31 [ 302.435578][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 90 seconds [ 303.361365][ T8] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 303.391468][ T8] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 303.470268][ T8] usb 1-1: USB disconnect, device number 27 [ 303.531692][ T7915] syzkaller0: create flow: hash 4152844890 index 2 [ 304.722252][ T42] syzkaller0: tun_net_xmit 76 [ 304.727886][ T42] syzkaller0: tun_net_xmit 48 [ 304.732981][ T7909] syzkaller0: delete flow: hash 4152844890 index 2 [ 304.925051][ T8] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 305.118642][ T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 305.130833][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.193826][ T8] usb 1-1: config 0 descriptor?? [ 305.423074][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 305.839750][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 305.856172][ T8] asix: probe of 1-1:0.0 failed with error -32 [ 306.108461][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 120 seconds [ 308.868996][ T23] usb 1-1: USB disconnect, device number 28 [ 309.397389][ T6349] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 60 seconds [ 309.408103][ T10] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 90 seconds [ 309.548245][ T7945] syz.2.578 uses obsolete (PF_INET,SOCK_PACKET) [ 309.694033][ T7959] ubi: mtd0 is already attached to ubi31 [ 311.500278][ T7963] syz.0.583 (7963) used greatest stack depth: 16720 bytes left [ 311.694295][ T7983] syzkaller0: create flow: hash 4152844890 index 2 [ 311.833509][ T7981] syzkaller0: delete flow: hash 4152844890 index 2 [ 311.844102][ T5916] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 311.994164][ T23] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 312.187488][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 312.203820][ T5916] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 312.212569][ T23] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 312.219002][ T5916] usb 1-1: config 0 has no interface number 0 [ 312.227830][ T5916] usb 1-1: config 0 interface 184 has no altsetting 0 [ 312.235059][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.245820][ T5916] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 312.263370][ T23] usb 2-1: config 0 descriptor?? [ 312.548892][ T23] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 312.806577][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 120 seconds [ 312.824547][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.832684][ T5916] usb 1-1: Product: syz [ 312.844323][ T5916] usb 1-1: Manufacturer: syz [ 312.939698][ T5916] usb 1-1: SerialNumber: syz [ 312.965405][ T5916] usb 1-1: config 0 descriptor?? [ 312.971593][ T23] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 312.972792][ T5916] smsc75xx v1.0.0 [ 313.006870][ T23] asix: probe of 2-1:0.0 failed with error -61 [ 313.597653][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 313.608897][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.237763][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 314.245716][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 314.257285][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 314.267505][ T5916] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 314.285454][ T5916] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 314.444180][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 314.452493][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.463272][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.488314][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.498026][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.506239][ T9] usb 3-1: Product: syz [ 314.510428][ T9] usb 3-1: Manufacturer: syz [ 314.515256][ T9] usb 3-1: SerialNumber: syz [ 314.749766][ T9] usb 3-1: 0:2 : does not exist [ 314.756703][ T9] usb 3-1: unit 6 not found! [ 314.762476][ T23] usb 2-1: USB disconnect, device number 27 [ 314.802021][ T9] usb 3-1: USB disconnect, device number 30 [ 314.865529][ T8004] ubi: mtd0 is already attached to ubi31 [ 314.900180][ T7266] udevd[7266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.549129][ T9] usb 1-1: USB disconnect, device number 29 [ 318.612746][ T8038] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 318.620693][ T8038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'. [ 318.631063][ T8038] batadv0: entered promiscuous mode [ 318.636514][ T8038] batadv0: entered allmulticast mode [ 318.648859][ T8038] bridge0: port 3(batadv0) entered blocking state [ 318.657745][ T8038] bridge0: port 3(batadv0) entered disabled state [ 318.697791][ T8038] bridge0: port 3(batadv0) entered blocking state [ 318.704782][ T8038] bridge0: port 3(batadv0) entered forwarding state [ 319.133160][ T7202] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 319.142907][ T7202] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 319.229775][ T8045] ubi: mtd0 is already attached to ubi31 [ 319.274163][ T9] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 319.475829][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 319.485671][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.502556][ T9] usb 4-1: config 0 descriptor?? [ 319.644144][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 319.727031][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 319.835159][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 319.843186][ T8] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 319.862898][ T8] usb 3-1: config 0 has no interface number 0 [ 319.878246][ T8] usb 3-1: config 0 interface 184 has no altsetting 0 [ 319.889216][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.909260][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.917547][ T8] usb 3-1: Product: syz [ 319.932431][ T8] usb 3-1: Manufacturer: syz [ 319.937678][ T8] usb 3-1: SerialNumber: syz [ 319.961479][ T8] usb 3-1: config 0 descriptor?? [ 319.977217][ T8] smsc75xx v1.0.0 [ 320.143155][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 320.170443][ T9] asix: probe of 4-1:0.0 failed with error -61 [ 320.400144][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 320.428736][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.592501][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 320.603493][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 320.918385][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.924911][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.228912][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 321.257701][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 321.305304][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 321.338371][ T8] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 322.022289][ T8] usb 4-1: USB disconnect, device number 29 [ 322.204525][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 60 seconds [ 322.968366][ T34] usb 3-1: USB disconnect, device number 31 [ 323.043994][ T8083] ubi: mtd0 is already attached to ubi31 [ 323.584002][ T34] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 323.780560][ T34] usb 2-1: config 1 interface 0 has no altsetting 0 [ 323.794346][ T34] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.820882][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.842813][ T34] usb 2-1: Product: syz [ 323.849710][ T34] usb 2-1: Manufacturer: syz [ 323.854904][ T34] usb 2-1: SerialNumber: syz [ 324.126953][ T34] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 324.161997][ T34] usb 2-1: USB disconnect, device number 28 [ 324.320420][ T34] usblp0: removed [ 325.213137][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'. [ 325.420486][ T8125] ubi: mtd0 is already attached to ubi31 [ 327.974857][ T8150] input: syz1 as /devices/virtual/input/input5 [ 329.178036][ T5956] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 60 seconds [ 329.724287][ T5792] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 333.072575][ T8192] ubi: mtd0 is already attached to ubi31 [ 333.079250][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 120 seconds [ 333.308957][ T8201] loop0: detected capacity change from 0 to 512 [ 333.323378][ T8201] FAT-fs (loop0): count of clusters too big (2147483660) [ 333.336219][ T8201] FAT-fs (loop0): Can't find a valid FAT filesystem [ 334.638102][ T8202] netlink: 18 bytes leftover after parsing attributes in process `syz.0.649'. [ 334.651503][ T5792] block nbd10: Receive control failed (result -32) [ 334.660809][ T8202] nbd10: detected capacity change from 0 to 32 [ 334.715664][ T6349] block nbd10: Dead connection, failed to find a fallback [ 334.723948][ T6349] block nbd10: shutting down sockets [ 334.729296][ T6349] blk_print_req_error: 9 callbacks suppressed [ 334.729310][ T6349] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.778195][ T6349] buffer_io_error: 9 callbacks suppressed [ 334.778209][ T6349] Buffer I/O error on dev nbd10, logical block 0, async page read [ 334.847491][ T6349] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.882823][ T6349] Buffer I/O error on dev nbd10, logical block 0, async page read [ 334.930891][ T6349] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 334.965577][ T6349] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.014683][ T6349] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.023862][ T6349] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.108684][ T6349] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.139639][ T6349] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.194562][ T1054] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.205222][ T1054] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.217355][ T1054] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.229554][ T1054] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.243077][ T1054] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.254732][ T1054] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.270671][ T5925] ldm_validate_partition_table(): Disk read failed. [ 335.365072][ T1054] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.375842][ T1054] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.414144][ T1054] I/O error, dev nbd10, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 335.423603][ T1054] Buffer I/O error on dev nbd10, logical block 0, async page read [ 335.435271][ T5925] Dev nbd10: unable to read RDB block 0 [ 335.538788][ T5925] nbd10: unable to read partition table [ 335.899679][ T5925] ldm_validate_partition_table(): Disk read failed. [ 335.917649][ T5925] Dev nbd10: unable to read RDB block 0 [ 335.924574][ T5925] nbd10: unable to read partition table [ 335.926405][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 337.015969][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 150 seconds [ 337.358711][ T5792] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 337.474042][ T5916] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 337.657982][ T5916] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 337.681315][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.712983][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.739214][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 337.765585][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 337.788743][ T5916] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 337.813716][ T5916] usb 3-1: Manufacturer: syz [ 337.829540][ T5916] usb 3-1: config 0 descriptor?? [ 338.247605][ T5916] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 338.258483][ T8234] mmap: syz.1.660 (8234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 338.262455][ T5916] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 338.387344][ T5916] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 339.672399][ T6349] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 120 seconds [ 339.683313][ T10] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 90 seconds [ 339.794263][ T8251] tipc: Started in network mode [ 339.855320][ T8251] tipc: Node identity 36151cacc5b2, cluster identity 4711 [ 339.882017][ T8251] tipc: Enabled bearer , priority 0 [ 339.913016][ T8252] syzkaller0: entered promiscuous mode [ 339.929812][ T8252] syzkaller0: entered allmulticast mode [ 340.023014][ T8251] tipc: Resetting bearer [ 340.072758][ T8250] tipc: Resetting bearer [ 340.158303][ T8250] tipc: Disabling bearer [ 340.784030][ T5787] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 340.973990][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 340.979933][ T5787] usb 2-1: no configurations [ 340.986140][ T5787] usb 2-1: can't read configurations, error -22 [ 341.014226][ T8] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 341.135785][ T5787] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 341.600620][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 341.614189][ T23] usb 3-1: USB disconnect, device number 32 [ 341.659728][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.689400][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.744044][ T8] usb 4-1: Product: syz [ 341.758777][ T8] usb 4-1: Manufacturer: syz [ 341.769964][ T8] usb 4-1: SerialNumber: syz [ 341.785400][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 341.796796][ T8] usb 4-1: config 0 descriptor?? [ 341.803125][ T8262] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 341.958834][ T5787] usb 2-1: no configurations [ 341.965296][ T5787] usb 2-1: can't read configurations, error -22 [ 341.979557][ T5787] usb usb2-port1: attempt power cycle [ 342.404909][ T5787] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 342.639561][ T8] usb 4-1: USB disconnect, device number 30 [ 342.724183][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 342.749385][ T5787] usb 2-1: no configurations [ 342.769799][ T5787] usb 2-1: can't read configurations, error -22 [ 343.036528][ T5787] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 343.203634][ T5787] usb 2-1: device descriptor read/8, error -71 [ 343.314292][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 150 seconds [ 343.364161][ T5787] usb usb2-port1: unable to enumerate USB device [ 343.393623][ T5792] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 344.719925][ T8299] loop3: detected capacity change from 0 to 512 [ 344.757189][ T8299] FAT-fs (loop3): count of clusters too big (2147483660) [ 344.780070][ T8299] FAT-fs (loop3): Can't find a valid FAT filesystem [ 345.204593][ T8307] netlink: 18 bytes leftover after parsing attributes in process `syz.3.681'. [ 345.220063][ T8307] nbd11: detected capacity change from 0 to 32 [ 345.613485][ T5792] block nbd11: Receive control failed (result -104) [ 348.204158][ T34] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 348.414224][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 348.442858][ T34] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 348.451414][ T34] usb 3-1: config 0 has no interface number 0 [ 348.458003][ T34] usb 3-1: config 0 interface 184 has no altsetting 0 [ 348.472860][ T34] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 348.482169][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.524521][ T34] usb 3-1: Product: syz [ 348.528789][ T34] usb 3-1: Manufacturer: syz [ 348.533651][ T34] usb 3-1: SerialNumber: syz [ 348.602431][ T34] usb 3-1: config 0 descriptor?? [ 348.625554][ T34] smsc75xx v1.0.0 [ 349.256523][ T34] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 349.274072][ T34] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 349.292363][ T34] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 349.954644][ T5850] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 350.005692][ T34] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 350.154271][ T5850] usb 4-1: device descriptor read/64, error -71 [ 350.440349][ T5850] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 350.604002][ T5850] usb 4-1: device descriptor read/64, error -71 [ 350.725476][ T5850] usb usb4-port1: attempt power cycle [ 351.000613][ T8] usb 3-1: USB disconnect, device number 33 [ 351.224275][ T5850] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 351.286853][ T5850] usb 4-1: device descriptor read/8, error -71 [ 351.566808][ T5850] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 351.615284][ T5850] usb 4-1: device descriptor read/8, error -71 [ 351.747860][ T5850] usb usb4-port1: unable to enumerate USB device [ 351.770666][ T8355] loop1: detected capacity change from 0 to 512 [ 351.791562][ T8355] FAT-fs (loop1): count of clusters too big (2147483660) [ 351.809129][ T8355] FAT-fs (loop1): Can't find a valid FAT filesystem [ 352.178426][ T8360] comedi comedi0: Minor 3 could not be opened [ 352.589455][ T8361] netlink: 18 bytes leftover after parsing attributes in process `syz.1.697'. [ 352.603013][ T8361] nbd12: detected capacity change from 0 to 32 [ 352.697424][ T5792] block nbd12: Receive control failed (result -32) [ 352.880156][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 90 seconds [ 352.895838][ T10] block nbd12: Dead connection, failed to find a fallback [ 352.910302][ T10] block nbd12: shutting down sockets [ 352.917895][ T10] blk_print_req_error: 27 callbacks suppressed [ 352.917940][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.934667][ T10] buffer_io_error: 27 callbacks suppressed [ 352.934679][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 352.956130][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.968728][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 352.979528][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.989899][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.003007][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.013305][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.027775][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.038139][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.047651][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.076657][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.090201][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.100638][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.111000][ T10] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.127636][ T10] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.136642][ T5925] ldm_validate_partition_table(): Disk read failed. [ 353.246833][ T6349] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.257476][ T6349] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.268862][ T6349] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.282281][ T6349] Buffer I/O error on dev nbd12, logical block 0, async page read [ 353.292454][ T5925] Dev nbd12: unable to read RDB block 0 [ 353.360039][ T5925] nbd12: unable to read partition table [ 353.590969][ T5925] ldm_validate_partition_table(): Disk read failed. [ 354.757693][ T5925] Dev nbd12: unable to read RDB block 0 [ 354.764017][ T5925] nbd12: unable to read partition table [ 356.436696][ T8374] random: crng reseeded on system resumption [ 356.556657][ T34] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 356.814020][ T34] usb 1-1: Using ep0 maxpacket: 32 [ 356.835473][ T34] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 356.875130][ T34] usb 1-1: config 0 has no interface number 0 [ 356.911883][ T34] usb 1-1: config 0 interface 184 has no altsetting 0 [ 356.937722][ T34] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 356.957382][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.982971][ T34] usb 1-1: Product: syz [ 356.990508][ T34] usb 1-1: Manufacturer: syz [ 357.004472][ T34] usb 1-1: SerialNumber: syz [ 357.028713][ T34] usb 1-1: config 0 descriptor?? [ 357.041487][ T34] smsc75xx v1.0.0 [ 357.061226][ T8393] loop2: detected capacity change from 0 to 512 [ 357.085661][ T8393] FAT-fs (loop2): count of clusters too big (2147483660) [ 357.092813][ T8393] FAT-fs (loop2): Can't find a valid FAT filesystem [ 357.281344][ T8395] nbd13: detected capacity change from 0 to 32 [ 357.304807][ T5895] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 357.619824][ T34] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 357.900750][ T5792] block nbd13: Receive control failed (result -104) [ 359.086016][ T5895] usb 4-1: device descriptor read/64, error -71 [ 359.175362][ T34] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 359.224141][ T34] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 359.317214][ T34] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 359.424571][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 90 seconds [ 359.464012][ T5895] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 359.481202][ T34] usb 1-1: USB disconnect, device number 30 [ 359.624185][ T5895] usb 4-1: device descriptor read/64, error -71 [ 359.744879][ T5895] usb usb4-port1: attempt power cycle [ 360.214181][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 360.246575][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 360.248270][ T5895] usb 4-1: device descriptor read/8, error -32 [ 360.924943][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 361.625081][ T5895] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 361.756503][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 361.783749][ T5895] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 361.814603][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.884100][ T5895] usb 4-1: Product: syz [ 361.888512][ T5895] usb 4-1: Manufacturer: syz [ 361.895004][ T5895] usb 4-1: SerialNumber: syz [ 361.910681][ T5895] usb 4-1: config 0 descriptor?? [ 362.126624][ T5895] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 362.194125][ T5895] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 362.233429][ T5895] usb 4-1: USB disconnect, device number 38 [ 363.420919][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 150 seconds [ 363.701982][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 364.548910][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 364.548957][ T27] audit: type=1800 audit(1761209449.531:22): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.726" name="file0" dev="overlay" ino=843 res=0 errno=0 [ 364.869237][ T8456] Illegal XDP return value 4046612902 on prog (id 36) dev syz_tun, expect packet loss! [ 365.004540][ T8460] ubi: mtd0 is already attached to ubi31 [ 365.104178][ T5787] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 365.564106][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 365.571214][ T5787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 365.580530][ T5787] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 365.589243][ T5787] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 365.601839][ T5787] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 365.611232][ T5787] usb 2-1: config 128 has no interface number 0 [ 365.624536][ T5787] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 365.671894][ T5787] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.689277][ T5787] usb 2-1: config 128 interface 127 has no altsetting 0 [ 365.730978][ T5787] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 365.740226][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.750766][ T5787] usb 2-1: Product: syz [ 365.756803][ T5787] usb 2-1: Manufacturer: syz [ 365.761483][ T5787] usb 2-1: SerialNumber: syz [ 366.368725][ T5787] usb 2-1: USB disconnect, device number 33 [ 366.895664][ T7266] udevd[7266]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.648373][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 180 seconds [ 367.885997][ T8496] loop3: detected capacity change from 0 to 512 [ 367.937579][ T8496] FAT-fs (loop3): count of clusters too big (2147483660) [ 367.964043][ T8496] FAT-fs (loop3): Can't find a valid FAT filesystem [ 368.124821][ T8501] nbd14: detected capacity change from 0 to 32 [ 368.722021][ T5792] block nbd14: Receive control failed (result -32) [ 369.914721][ T8500] ubi: mtd0 is already attached to ubi31 [ 369.944970][ T10] block nbd14: Dead connection, failed to find a fallback [ 369.952236][ T10] block nbd14: shutting down sockets [ 369.958090][ T10] blk_print_req_error: 27 callbacks suppressed [ 369.958102][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.973972][ T10] buffer_io_error: 27 callbacks suppressed [ 369.973992][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 369.991213][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.002000][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.010458][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.019838][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.027956][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.037675][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.045846][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.055037][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.063006][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.072191][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.080209][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.089370][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.097370][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.107168][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.115171][ T5925] ldm_validate_partition_table(): Disk read failed. [ 370.122056][ T10] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.131232][ T10] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.178210][ T1054] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.187677][ T1054] Buffer I/O error on dev nbd14, logical block 0, async page read [ 370.197623][ T5925] Dev nbd14: unable to read RDB block 0 [ 370.197887][ T10] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 150 seconds [ 370.218185][ T6349] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 120 seconds [ 370.235175][ T5925] nbd14: unable to read partition table [ 370.708106][ T5925] ldm_validate_partition_table(): Disk read failed. [ 370.734810][ T5925] Dev nbd14: unable to read RDB block 0 [ 370.741169][ T5925] nbd14: unable to read partition table [ 371.120044][ T8517] random: crng reseeded on system resumption [ 371.127400][ T34] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 371.214331][ T5895] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 371.334177][ T34] usb 1-1: device descriptor read/64, error -71 [ 371.413998][ T5895] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 371.424399][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.445552][ T5895] usb 4-1: config 0 descriptor?? [ 371.624045][ T34] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 371.659699][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 371.814049][ T34] usb 1-1: device descriptor read/64, error -71 [ 371.934688][ T34] usb usb1-port1: attempt power cycle [ 372.354469][ T34] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 372.448762][ T34] usb 1-1: device descriptor read/8, error -71 [ 372.725183][ T34] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 372.764798][ T34] usb 1-1: device descriptor read/8, error -71 [ 372.888344][ T34] usb usb1-port1: unable to enumerate USB device [ 373.564011][ T6349] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 180 seconds [ 373.590618][ T8538] ubi: mtd0 is already attached to ubi31 [ 373.755321][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 373.818619][ T5895] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 373.840785][ T5895] asix: probe of 4-1:0.0 failed with error -71 [ 373.869867][ T5895] usb 4-1: USB disconnect, device number 39 [ 375.227447][ T5104] Bluetooth: hci2: unexpected event for opcode 0x042c [ 375.383979][ T5916] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 375.565282][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 375.576297][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.604815][ T5916] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 375.612952][ T5916] usb 3-1: config 4 has no interface number 0 [ 375.649835][ T5916] usb 3-1: config 4 interface 30 has no altsetting 0 [ 375.668393][ T5916] usb 3-1: string descriptor 0 read error: -22 [ 375.675983][ T5916] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 375.703480][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.727090][ T5916] dw2102: su3000_identify_state [ 375.732030][ T5916] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 375.767909][ T5916] dw2102: su3000_power_ctrl: 1, initialized 0 [ 375.787436][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 375.819772][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.847981][ T5916] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 375.865350][ T5916] usb 3-1: media controller created [ 375.879589][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 375.894270][ T5916] dw2102: i2c transfer failed. [ 375.904964][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 375.917298][ T5916] dw2102: i2c transfer failed. [ 375.926607][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 375.939127][ T5916] dw2102: i2c transfer failed. [ 375.954632][ T6349] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 30 seconds [ 375.967201][ T8565] dw2102: i2c wr: len=66 is too big! [ 375.967201][ T8565] [ 376.001980][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 376.008209][ T5916] dw2102: i2c transfer failed. [ 376.014463][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 376.021180][ T5916] dw2102: i2c transfer failed. [ 376.026138][ T8] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 376.035243][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 376.049437][ T5916] dw2102: i2c transfer failed. [ 376.054323][ T5916] dvb-usb: MAC address: 02:02:02:02:02:02 [ 376.088710][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.145437][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 376.162836][ T5916] dw2102: command 0x0e transfer failed. [ 376.179410][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 376.185425][ T8] usb 2-1: device descriptor read/64, error -71 [ 376.191882][ T5916] dw2102: command 0x0e transfer failed. [ 376.454016][ T8] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 376.821255][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 378.099082][ T5916] dw2102: command 0x0e transfer failed. [ 378.526012][ T8586] dvmrp0: entered allmulticast mode [ 378.878562][ T8] usb 2-1: device descriptor read/64, error -71 [ 379.271537][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 379.283251][ T5916] dw2102: command 0x0e transfer failed. [ 379.293805][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 379.300708][ T5916] dw2102: command 0x51 transfer failed. [ 379.306477][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 379.312308][ T5916] dw2102: i2c probe for address 0x68 failed. [ 379.319527][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 379.325835][ T5916] dw2102: i2c probe for address 0x69 failed. [ 379.332001][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 379.344008][ T5916] dw2102: i2c probe for address 0x6a failed. [ 379.350311][ T5916] dw2102: probing for demodulator failed. Is the external power switched on? [ 379.359326][ T5916] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 379.408731][ T8] usb usb2-port1: attempt power cycle [ 379.519998][ T5916] rc_core: IR keymap rc-tt-1500 not found [ 379.529183][ T5916] Registered IR keymap rc-empty [ 379.558704][ T5916] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 379.576264][ T5916] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 379.625632][ T5916] dvb-usb: schedule remote query interval to 250 msecs. [ 379.632640][ T5916] dw2102: su3000_power_ctrl: 0, initialized 1 [ 379.735665][ T5916] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 379.896703][ T5787] dvb-usb: bulk message failed: -22 (1/0) [ 379.948452][ T5787] dw2102: i2c transfer failed. [ 380.102393][ T5916] usb 3-1: USB disconnect, device number 34 [ 380.311555][ T5104] Bluetooth: hci1: unexpected event for opcode 0x042c [ 380.341708][ T5916] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 380.386137][ T27] audit: type=1326 audit(1761209465.371:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.424396][ T27] audit: type=1326 audit(1761209465.371:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.451839][ T27] audit: type=1326 audit(1761209465.421:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.474986][ T27] audit: type=1326 audit(1761209465.421:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.505282][ T27] audit: type=1326 audit(1761209465.421:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.528449][ T27] audit: type=1326 audit(1761209465.421:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.634781][ T27] audit: type=1326 audit(1761209465.431:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 380.694223][ T27] audit: type=1326 audit(1761209465.431:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.0.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d41d8efc9 code=0x7ffc0000 [ 381.076813][ T8617] overlayfs: missing 'lowerdir' [ 382.367822][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.377014][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.994410][ T6349] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 120 seconds [ 384.408048][ T8648] loop0: detected capacity change from 0 to 512 [ 384.717473][ T8648] FAT-fs (loop0): count of clusters too big (2147483660) [ 384.870328][ T8648] FAT-fs (loop0): Can't find a valid FAT filesystem [ 386.974150][ T5916] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 387.214088][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 387.268809][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.361386][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.406794][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 387.475995][ T6349] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 30 seconds [ 387.517674][ T5916] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 388.401176][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.459354][ T5916] usb 2-1: config 0 descriptor?? [ 388.804125][ T34] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 389.014151][ T34] usb 3-1: Using ep0 maxpacket: 8 [ 389.016097][ T5916] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 389.021292][ T34] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 389.099228][ T34] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 389.108588][ T34] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 389.119129][ T34] usb 3-1: Product: syz [ 389.123424][ T34] usb 3-1: Manufacturer: syz [ 389.133539][ T34] usb 3-1: SerialNumber: syz [ 389.156405][ T5916] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 389.176382][ T8657] netlink: 'syz.1.793': attribute type 2 has an invalid length. [ 389.191681][ T5916] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 389.212422][ T8657] netlink: 244 bytes leftover after parsing attributes in process `syz.1.793'. [ 389.223199][ T5916] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 389.262878][ T5916] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 389.387634][ T5916] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 389.442071][ T34] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 389.469403][ T34] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 389.483453][ T5916] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 389.495825][ T5916] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 389.516036][ T34] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 389.528564][ T34] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 389.598771][ T5916] usb 2-1: USB disconnect, device number 37 [ 389.636673][ T8] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.642094][ T34] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 389.687919][ T8] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.690942][ T34] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 389.729839][ T8] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.758675][ T34] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 389.762145][ T8] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.792554][ T34] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 389.813004][ T34] usb 3-1: USB disconnect, device number 35 [ 389.824899][ T34] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 389.843456][ T34] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 389.894728][ T34] visor 3-1:1.0: device disconnected [ 390.759250][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 120 seconds [ 391.749138][ T8722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.815'. [ 392.253997][ T8] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 392.414002][ T8] usb 2-1: device descriptor read/64, error -71 [ 392.704185][ T8] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 392.864271][ T8] usb 2-1: device descriptor read/64, error -71 [ 392.991613][ T8] usb usb2-port1: attempt power cycle [ 393.423976][ T8] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 393.517668][ T8] usb 2-1: device descriptor read/8, error -71 [ 393.827438][ T8] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 393.896406][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 180 seconds [ 393.897130][ T8] usb 2-1: device descriptor read/8, error -71 [ 394.054272][ T8] usb usb2-port1: unable to enumerate USB device [ 397.304093][ T34] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 397.464161][ T34] usb 1-1: device descriptor read/64, error -71 [ 397.734503][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 210 seconds [ 397.745582][ T34] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 397.915518][ T34] usb 1-1: device descriptor read/64, error -71 [ 398.034962][ T34] usb usb1-port1: attempt power cycle [ 398.453974][ T34] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 398.494800][ T34] usb 1-1: device descriptor read/8, error -71 [ 398.598469][ T8798] ubi: mtd0 is already attached to ubi31 [ 398.764042][ T34] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 398.804761][ T34] usb 1-1: device descriptor read/8, error -71 [ 398.934223][ T34] usb usb1-port1: unable to enumerate USB device [ 400.458714][ T6349] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 180 seconds [ 400.470191][ T10] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 150 seconds [ 401.375947][ T8827] ubi: mtd0 is already attached to ubi31 [ 402.272700][ T8847] Bluetooth: MGMT ver 1.22 [ 402.299893][ T8847] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 402.414084][ T5916] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 403.354016][ T5916] usb 1-1: device descriptor read/64, error -71 [ 403.518164][ T8867] ubi: mtd0 is already attached to ubi31 [ 403.634350][ T5916] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 403.794938][ T5916] usb 1-1: device descriptor read/64, error -71 [ 403.915167][ T5916] usb usb1-port1: attempt power cycle [ 403.954605][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 404.133582][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 210 seconds [ 404.247676][ T23] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 404.258724][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.285062][ T23] usb 4-1: config 0 descriptor?? [ 404.411295][ T5916] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 404.485756][ T5916] usb 1-1: device descriptor read/8, error -71 [ 404.727412][ T8878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.735059][ T8878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.741393][ T8878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.773980][ T5916] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 405.549254][ T5916] usb 1-1: device descriptor read/8, error -71 [ 405.561382][ T8840] [U]  [ 405.684211][ T5916] usb usb1-port1: unable to enumerate USB device [ 405.721519][ T23] usb 4-1: Cannot set autoneg [ 405.745429][ T23] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 405.784905][ T23] usb 4-1: USB disconnect, device number 40 [ 405.850630][ T8899] netlink: 'syz.0.879': attribute type 4 has an invalid length. [ 406.029920][ T8902] netlink: 'syz.0.879': attribute type 4 has an invalid length. [ 406.053828][ T10] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 60 seconds [ 406.304120][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 406.764048][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 406.770235][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 406.872340][ T8906] ubi: mtd0 is already attached to ubi31 [ 407.061442][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'. [ 407.183095][ T8920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.887'. [ 407.266923][ T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 407.433982][ T8] usb 1-1: device descriptor read/64, error -71 [ 407.755529][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 408.315477][ T8] usb 1-1: device descriptor read/64, error -71 [ 408.444442][ T8] usb usb1-port1: attempt power cycle [ 408.664056][ T34] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 408.876683][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.907980][ T34] usb 3-1: config 0 has no interfaces? [ 408.964807][ T8] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 408.965331][ T34] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.013073][ T8] usb 1-1: device descriptor read/8, error -71 [ 409.037073][ T34] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.055719][ T34] usb 3-1: Product: syz [ 409.080122][ T34] usb 3-1: Manufacturer: syz [ 409.085260][ T34] usb 3-1: SerialNumber: syz [ 409.101275][ T34] usb 3-1: config 0 descriptor?? [ 409.284127][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 409.331359][ T34] usb 3-1: USB disconnect, device number 36 [ 409.334761][ T8] usb 1-1: device descriptor read/8, error -71 [ 409.347888][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'. [ 409.474501][ T8] usb usb1-port1: unable to enumerate USB device [ 409.610165][ T5104] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 410.224050][ T34] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 410.359065][ T8974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.907'. [ 410.414021][ T34] usb 4-1: Using ep0 maxpacket: 32 [ 410.428311][ T34] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.447228][ T34] usb 4-1: config 0 has no interface number 0 [ 410.453389][ T34] usb 4-1: config 0 interface 184 has no altsetting 0 [ 410.481384][ T34] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.503345][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.522491][ T34] usb 4-1: Product: syz [ 410.542231][ T34] usb 4-1: Manufacturer: syz [ 410.559033][ T34] usb 4-1: SerialNumber: syz [ 410.573337][ T34] usb 4-1: config 0 descriptor?? [ 410.588801][ T34] smsc75xx v1.0.0 [ 411.201649][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 411.218597][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 411.230715][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 411.271302][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 411.286203][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 411.301472][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 411.322837][ T34] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 411.582766][ T8989] process 'syz.2.912' launched './file0' with NULL argv: empty string added [ 412.174188][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 412.263311][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.916'. [ 412.345569][ T8] usb 3-1: device descriptor read/64, error -71 [ 412.455014][ T9010] ubi: mtd0 is already attached to ubi31 [ 412.624001][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 412.794031][ T8] usb 3-1: device descriptor read/64, error -71 [ 412.924413][ T8] usb usb3-port1: attempt power cycle [ 413.074234][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 150 seconds [ 413.074597][ T34] usb 4-1: USB disconnect, device number 41 [ 413.434078][ T8] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 413.474666][ T8] usb 3-1: device descriptor read/8, error -71 [ 413.512338][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 413.535007][ T34] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 413.636086][ T5104] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 413.644987][ T5104] Bluetooth: hci3: Injecting HCI hardware error event [ 413.653332][ T5792] Bluetooth: hci3: hardware error 0x00 [ 413.764405][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 413.804069][ T34] usb 4-1: Using ep0 maxpacket: 32 [ 413.826670][ T34] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 413.837535][ T34] usb 4-1: config 0 has no interface number 0 [ 413.844123][ T34] usb 4-1: config 0 interface 184 has no altsetting 0 [ 413.847420][ T8] usb 3-1: device descriptor read/8, error -71 [ 413.853200][ T34] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 413.870727][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.879391][ T34] usb 4-1: Product: syz [ 413.883651][ T34] usb 4-1: Manufacturer: syz [ 413.888780][ T34] usb 4-1: SerialNumber: syz [ 413.897227][ T34] usb 4-1: config 0 descriptor?? [ 413.917185][ T34] smsc75xx v1.0.0 [ 413.984206][ T8] usb usb3-port1: unable to enumerate USB device [ 414.574233][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 414.590139][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 414.937362][ T9050] ubi: mtd0 is already attached to ubi31 [ 415.004002][ T23] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 415.272284][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.293553][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.319991][ T23] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.333370][ T23] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.348249][ T23] usb 1-1: Product: syz [ 415.356783][ T23] usb 1-1: Manufacturer: syz [ 415.363507][ T23] usb 1-1: SerialNumber: syz [ 415.539006][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 415.550585][ T23] usb 1-1: config 0 descriptor?? [ 415.556788][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 415.576468][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 415.586880][ T34] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 415.714181][ T5792] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 415.797527][ T34] usb 1-1: USB disconnect, device number 47 [ 416.094070][ T8] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 416.287817][ T8] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 416.297535][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.315219][ T8] usb 3-1: config 0 descriptor?? [ 416.684096][ T23] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 416.816742][ T5916] usb 4-1: USB disconnect, device number 42 [ 416.874149][ T23] usb 1-1: device descriptor read/64, error -71 [ 417.163083][ T23] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 417.414322][ T23] usb 1-1: device descriptor read/64, error -71 [ 417.553775][ T23] usb usb1-port1: attempt power cycle [ 417.559850][ T6349] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 60 seconds [ 417.625420][ T8] usb 3-1: Cannot set autoneg [ 417.854129][ T8] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 417.870517][ T8] usb 3-1: USB disconnect, device number 41 [ 418.381646][ T23] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 418.424870][ T23] usb 1-1: device descriptor read/8, error -71 [ 418.707116][ T23] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 418.807340][ T23] usb 1-1: device descriptor read/8, error -71 [ 418.984192][ T23] usb usb1-port1: unable to enumerate USB device [ 419.406017][ T23] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 423.462241][ T5159] udevd[5159]: worker [5774] /devices/virtual/block/nbd1 timeout; kill it [ 423.485502][ T5159] udevd[5159]: seq 11407 '/devices/virtual/block/nbd1' killed [ 423.493351][ T5159] udevd[5159]: worker [5981] /devices/virtual/block/nbd7 is taking a long time [ 423.503574][ T5159] udevd[5159]: worker [5881] /devices/virtual/block/nbd2 timeout; kill it [ 423.512940][ T5159] udevd[5159]: seq 11451 '/devices/virtual/block/nbd2' killed [ 423.520547][ T5159] udevd[5159]: worker [6275] /devices/virtual/block/nbd5 timeout; kill it [ 423.529283][ T5159] udevd[5159]: seq 11674 '/devices/virtual/block/nbd5' killed [ 423.538598][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 423.546098][ T5159] udevd[5159]: worker [7681] /devices/virtual/block/nbd9 is taking a long time [ 423.556178][ T5159] udevd[5159]: worker [5776] /devices/virtual/block/nbd8 is taking a long time [ 423.569101][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 150 seconds [ 423.604931][ T23] usb 3-1: device descriptor read/all, error -71 [ 423.657241][ T5159] udevd[5159]: worker [7150] /devices/virtual/block/nbd6 timeout; kill it [ 424.044682][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 210 seconds [ 425.324153][ T5916] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 425.638240][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.676666][ T5916] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 425.694274][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 425.712738][ T5916] usb 4-1: Product: syz [ 425.717318][ T5916] usb 4-1: Manufacturer: syz [ 425.721936][ T5916] usb 4-1: SerialNumber: syz [ 425.745604][ T5916] usb 4-1: config 0 descriptor?? [ 425.970031][ T5916] usb 4-1: USB disconnect, device number 43 [ 427.797869][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 240 seconds [ 427.874677][ T5104] Bluetooth: hci4: command 0x1003 tx timeout [ 427.884264][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 428.808014][ T9202] ubi: mtd0 is already attached to ubi31 [ 431.000486][ T6349] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 210 seconds [ 431.045170][ T6349] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 180 seconds [ 431.695821][ T9227] ubi: mtd0 is already attached to ubi31 [ 435.551059][ T6349] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 240 seconds [ 436.114516][ T10] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 90 seconds [ 436.881196][ T9266] ubi: mtd0 is already attached to ubi31 [ 437.043410][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 441.245398][ T34] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 441.407407][ T2195] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 441.722627][ T2195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 441.798872][ T2195] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 441.847991][ T2195] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 441.868585][ T34] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.875188][ T2195] usb 1-1: Product: syz [ 441.923549][ T2195] usb 1-1: Manufacturer: syz [ 441.966268][ T2195] usb 1-1: SerialNumber: syz [ 442.114948][ T2195] usb 1-1: config 0 descriptor?? [ 442.836946][ T2195] usb 1-1: USB disconnect, device number 52 [ 443.157806][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 180 seconds [ 443.807621][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.815340][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.215561][ T34] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 444.223305][ T34] usb 2-1: can't read configurations, error -71 [ 444.554720][ T23] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 444.726505][ T5792] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 445.012533][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 445.019857][ T23] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.028292][ T23] usb 1-1: config 0 has no interface number 0 [ 445.035272][ T23] usb 1-1: config 0 interface 184 has no altsetting 0 [ 445.044774][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.053835][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.062510][ T23] usb 1-1: Product: syz [ 445.067284][ T23] usb 1-1: Manufacturer: syz [ 445.072434][ T23] usb 1-1: SerialNumber: syz [ 445.087995][ T23] usb 1-1: config 0 descriptor?? [ 445.104058][ T5916] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 445.104915][ T23] smsc75xx v1.0.0 [ 445.300890][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 445.314154][ T5916] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 445.333182][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 445.344309][ T5916] usb 4-1: Product: syz [ 445.348591][ T5916] usb 4-1: Manufacturer: syz [ 445.353277][ T5916] usb 4-1: SerialNumber: syz [ 445.370059][ T5916] usb 4-1: config 0 descriptor?? [ 445.588499][ T2195] usb 4-1: USB disconnect, device number 44 [ 445.674218][ T5916] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 445.735903][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 445.747022][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.774677][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 445.791005][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 445.801192][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 445.813408][ T23] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 445.829045][ T23] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 445.897998][ T5916] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 445.908331][ T5916] usb 3-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 445.919275][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.931014][ T5916] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 445.940212][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.948411][ T5916] usb 3-1: Product: syz [ 445.953023][ T5916] usb 3-1: Manufacturer: syz [ 445.958188][ T5916] usb 3-1: SerialNumber: syz [ 445.971441][ T5916] usb 3-1: config 0 descriptor?? [ 446.421959][ T2195] usb 3-1: USB disconnect, device number 44 [ 448.678317][ T10] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 90 seconds [ 448.713668][ T8] usb 1-1: USB disconnect, device number 53 [ 448.723307][ T2195] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 448.845865][ T9382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 448.852208][ T9382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.957166][ T2195] usb 2-1: Using ep0 maxpacket: 16 [ 449.077267][ T2195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.273851][ T2195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.340990][ T2195] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.353792][ T2195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.364869][ T2195] usb 2-1: Product: syz [ 449.369102][ T2195] usb 2-1: Manufacturer: syz [ 449.374302][ T2195] usb 2-1: SerialNumber: syz [ 449.609427][ T2195] usb 2-1: 0:2 : does not exist [ 449.672801][ T2195] usb 2-1: USB disconnect, device number 44 [ 450.754104][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 450.924250][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 451.054472][ T34] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 451.158521][ T5916] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 451.383979][ T34] usb 4-1: Using ep0 maxpacket: 32 [ 451.405494][ T34] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 451.412562][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 451.414624][ T34] usb 4-1: config 0 has no interface number 0 [ 451.993537][ T34] usb 4-1: config 0 interface 184 has no altsetting 0 [ 452.002981][ T34] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 452.058438][ T5916] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 452.087149][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 452.112349][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.121028][ T34] usb 4-1: Product: syz [ 452.126164][ T34] usb 4-1: Manufacturer: syz [ 452.130803][ T34] usb 4-1: SerialNumber: syz [ 452.144140][ T5916] usb 1-1: Product: syz [ 452.145002][ T34] usb 4-1: config 0 descriptor?? [ 452.156186][ T34] smsc75xx v1.0.0 [ 452.157962][ T5916] usb 1-1: Manufacturer: syz [ 452.194056][ T5916] usb 1-1: SerialNumber: syz [ 452.209896][ T5916] usb 1-1: config 0 descriptor?? [ 452.476856][ T5916] usb 1-1: USB disconnect, device number 54 [ 452.794708][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 452.818728][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 452.840991][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 452.888778][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 452.927776][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 453.120097][ T34] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 453.134429][ T34] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 454.225920][ T5916] usb 4-1: USB disconnect, device number 45 [ 454.315910][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 180 seconds [ 454.704137][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 240 seconds [ 454.930742][ T9466] syz.1.1072: attempt to access beyond end of device [ 454.930742][ T9466] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 454.944294][ T9466] MINIX-fs: unable to read superblock [ 456.204004][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 456.434158][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 456.448032][ T8] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 456.466322][ T8] usb 3-1: config 0 has no interface number 0 [ 456.481456][ T8] usb 3-1: config 0 interface 184 has no altsetting 0 [ 456.516533][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 456.551532][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.570255][ T8] usb 3-1: Product: syz [ 456.575993][ T8] usb 3-1: Manufacturer: syz [ 456.580784][ T8] usb 3-1: SerialNumber: syz [ 456.593758][ T8] usb 3-1: config 0 descriptor?? [ 456.615853][ T8] smsc75xx v1.0.0 [ 457.512355][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 457.523517][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 457.544102][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 457.563554][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 457.573754][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 457.584459][ T8] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 457.594513][ T8] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 457.882814][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 270 seconds [ 457.933852][ T9500] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 457.953290][ T9500] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 459.054213][ T34] usb 3-1: USB disconnect, device number 45 [ 461.685652][ T6349] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 240 seconds [ 461.714323][ T6349] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 210 seconds [ 462.214102][ T2195] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 462.444081][ T2195] usb 4-1: Using ep0 maxpacket: 16 [ 462.459276][ T2195] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 462.501414][ T2195] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 462.520879][ T2195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.536630][ T2195] usb 4-1: Product: syz [ 462.553963][ T2195] usb 4-1: Manufacturer: syz [ 462.570759][ T2195] usb 4-1: SerialNumber: syz [ 462.667458][ T2195] usb 4-1: config 0 descriptor?? [ 465.001194][ T2195] usb 4-1: USB disconnect, device number 46 [ 466.177170][ T34] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 466.320580][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 270 seconds [ 466.334461][ T6349] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 120 seconds [ 466.641647][ T34] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 466.679920][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.711942][ T34] usb 1-1: Product: syz [ 466.717437][ T34] usb 1-1: Manufacturer: syz [ 466.722353][ T34] usb 1-1: SerialNumber: syz [ 466.758318][ T34] usb 1-1: config 0 descriptor?? [ 466.977118][ T34] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 467.204588][ T2195] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 467.394106][ T2195] usb 4-1: Using ep0 maxpacket: 16 [ 467.408398][ T2195] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 467.418269][ T2195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.428423][ T2195] usb 4-1: Product: syz [ 467.432761][ T2195] usb 4-1: Manufacturer: syz [ 467.438717][ T2195] usb 4-1: SerialNumber: syz [ 467.449895][ T2195] usb 4-1: config 0 descriptor?? [ 467.879199][ T2195] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 467.897400][ T2195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.910111][ T2195] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 467.922342][ T2195] usb 4-1: media controller created [ 467.999065][ T2195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.192078][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 468.200287][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 468.207753][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 468.215167][ T34] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 468.237093][ T34] usb 1-1: USB disconnect, device number 55 [ 468.625180][ T2195] zl10353_read_register: readreg error (reg=127, ret==0) [ 468.625200][ T9622] dtv5100: wlen = 65, aborting. [ 468.661978][ T2195] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 468.753958][ T2195] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 469.049849][ T2195] usb 4-1: USB disconnect, device number 47 [ 469.166396][ T2195] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 473.242857][ T6349] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 210 seconds [ 479.027193][ T6349] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 120 seconds [ 479.437934][ T9719] random: crng reseeded on system resumption [ 483.083997][ T1869] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 483.323981][ T1869] usb 2-1: Using ep0 maxpacket: 16 [ 483.351505][ T1869] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 483.391636][ T1869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.416501][ T1869] usb 2-1: Product: syz [ 483.424336][ T1869] usb 2-1: Manufacturer: syz [ 483.442976][ T1869] usb 2-1: SerialNumber: syz [ 483.469679][ T1869] r8152-cfgselector 2-1: config 0 descriptor?? [ 483.734053][ T2195] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 483.911640][ T1869] r8152-cfgselector 2-1: Unknown version 0x0000 [ 483.925472][ T1869] r8152-cfgselector 2-1: USB disconnect, device number 45 [ 484.848121][ T2195] usb 1-1: Using ep0 maxpacket: 16 [ 484.863639][ T2195] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.873850][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 210 seconds [ 484.884807][ T9117] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 270 seconds [ 485.028698][ T2195] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.051211][ T2195] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.061615][ T2195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.089701][ T2195] usb 1-1: Product: syz [ 485.142218][ T2195] usb 1-1: Manufacturer: syz [ 485.192134][ T2195] usb 1-1: SerialNumber: syz [ 485.681969][ T2195] usb 1-1: 0:2 : does not exist [ 485.822957][ T2195] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 485.945138][ T2195] usb 1-1: USB disconnect, device number 56 [ 486.032326][ T7266] udevd[7266]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.324839][ T9791] 9pnet_fd: Insufficient options for proto=fd [ 487.924182][ T9790] 9pnet: Unknown protocol version 9p200 [ 488.081236][ T9117] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 300 seconds [ 488.479179][ T1869] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 488.682993][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 488.708725][ T1869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 488.718156][ T1869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.726358][ T1869] usb 4-1: Product: syz [ 488.730606][ T1869] usb 4-1: Manufacturer: syz [ 488.914745][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 488.990353][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 489.007334][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.015893][ T9] usb 2-1: Product: syz [ 489.243327][ T9] usb 2-1: Manufacturer: syz [ 489.534092][ T1869] usb 4-1: SerialNumber: syz [ 489.541211][ T1869] usb 4-1: config 0 descriptor?? [ 489.589325][ T9] usb 2-1: SerialNumber: syz [ 489.647153][ T1869] usb 4-1: can't set config #0, error -71 [ 489.657800][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 489.734215][ T1869] usb 4-1: USB disconnect, device number 48 [ 490.093822][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 490.120259][ T9] r8152-cfgselector 2-1: USB disconnect, device number 46 [ 490.231831][ T9808] syzkaller0: create flow: hash 4152844890 index 2 [ 490.309271][ T9807] syzkaller0: delete flow: hash 4152844890 index 2 [ 491.795388][ T6349] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 270 seconds [ 491.806292][ T10] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 240 seconds [ 494.206940][ T9843] ubi: mtd0 is already attached to ubi31 [ 494.362031][ T9853] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 494.426174][ T9856] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 495.033288][ T9862] loop9: detected capacity change from 0 to 7 [ 495.049853][ T9862] Dev loop9: unable to read RDB block 7 [ 495.062421][ T9862] loop9: unable to read partition table [ 495.078585][ T9862] loop9: partition table beyond EOD, truncated [ 495.106823][ T9862] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 495.345923][ T9877] syzkaller0: create flow: hash 4152844890 index 2 [ 496.362891][ T7723] syzkaller0: tun_net_xmit 76 [ 496.374637][ T7723] syzkaller0: tun_net_xmit 48 [ 496.384295][ T5895] syzkaller0: tun_net_xmit 76 [ 496.399637][ T9867] syzkaller0: delete flow: hash 4152844890 index 2 [ 496.738964][ T9895] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 496.924269][ T9225] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 150 seconds [ 496.935339][ T6349] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 300 seconds [ 497.622353][ T9905] ubi: mtd0 is already attached to ubi31 [ 498.948944][ T23] IPVS: starting estimator thread 0... [ 499.075697][ T9917] IPVS: using max 16 ests per chain, 38400 per kthread [ 503.744085][ T23] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 503.994130][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 503.994462][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 240 seconds [ 504.016616][ T23] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 504.061665][ T23] usb 2-1: config 0 has no interface number 0 [ 504.109882][ T23] usb 2-1: config 0 interface 184 has no altsetting 0 [ 504.175310][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 504.210592][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.218996][ T1120] syzkaller0: tun_net_xmit 76 [ 504.233659][ T1120] syzkaller0: tun_net_xmit 48 [ 504.239593][ T9979] syzkaller0: create flow: hash 4152844890 index 2 [ 504.242206][ T23] usb 2-1: Product: syz [ 504.251417][ T9] syzkaller0: tun_net_xmit 76 [ 504.306867][ T23] usb 2-1: Manufacturer: syz [ 504.311661][ T23] usb 2-1: SerialNumber: syz [ 504.401281][ T23] usb 2-1: config 0 descriptor?? [ 504.453576][ T23] smsc75xx v1.0.0 [ 504.734694][ T9] syzkaller0: tun_net_xmit 76 [ 504.991706][ T9977] syzkaller0: delete flow: hash 4152844890 index 2 [ 505.014556][ T1869] syzkaller0: tun_net_xmit 76 [ 505.098535][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 505.129878][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 505.237744][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.248762][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.347065][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 505.377171][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 505.399963][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 505.412146][ T23] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 505.904335][ T23] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 506.074621][ T23] usb 3-1: device descriptor read/64, error -71 [ 506.358439][ T23] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 506.456443][ T9] usb 2-1: USB disconnect, device number 47 [ 506.534655][ T23] usb 3-1: device descriptor read/64, error -71 [ 506.634103][ T8] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 506.660009][ T23] usb usb3-port1: attempt power cycle [ 506.824049][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 506.841823][ T8] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 506.853938][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.872228][ T8] usb 1-1: Product: syz [ 506.879157][ T8] usb 1-1: Manufacturer: syz [ 506.893952][ T8] usb 1-1: SerialNumber: syz [ 506.913074][ T8] usb 1-1: config 0 descriptor?? [ 507.086654][ T23] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 507.135026][ T23] usb 3-1: device descriptor read/8, error -71 [ 507.401229][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 507.422495][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.423996][ T23] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 507.465089][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 507.484020][ T8] usb 1-1: media controller created [ 507.491156][ T23] usb 3-1: device descriptor read/8, error -71 [ 507.541087][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.632810][ T23] usb usb3-port1: unable to enumerate USB device [ 507.634994][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 507.649024][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 507.684185][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 507.704378][ T8] usb 1-1: USB disconnect, device number 57 [ 507.807851][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 508.464841][T10031] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 509.005057][ T2195] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 509.077230][ T10] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 150 seconds [ 509.197084][ T2195] usb 1-1: Using ep0 maxpacket: 32 [ 509.213217][ T2195] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 509.223275][ T2195] usb 1-1: config 0 has no interface number 0 [ 509.230002][ T2195] usb 1-1: config 0 interface 184 has no altsetting 0 [ 509.269829][ T2195] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 509.282569][ T2195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.291178][ T2195] usb 1-1: Product: syz [ 509.300117][ T2195] usb 1-1: Manufacturer: syz [ 509.305036][ T2195] usb 1-1: SerialNumber: syz [ 509.323113][ T2195] usb 1-1: config 0 descriptor?? [ 509.340578][ T2195] smsc75xx v1.0.0 [ 510.022935][ T2195] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 510.156463][ T2195] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 510.318251][T10055] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 510.360537][ T2195] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 510.392825][ T2195] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 510.425077][ T2195] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 510.440218][ T2195] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 510.475225][ T1869] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 510.673989][ T1869] usb 3-1: Using ep0 maxpacket: 32 [ 510.680911][ T1869] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 510.689256][ T1869] usb 3-1: config 0 has no interface number 0 [ 510.697197][ T1869] usb 3-1: config 0 interface 184 has no altsetting 0 [ 510.708708][ T1869] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.721783][ T1869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.734024][ T2195] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 510.735570][ T1869] usb 3-1: Product: syz [ 510.748436][ T1869] usb 3-1: Manufacturer: syz [ 510.753064][ T1869] usb 3-1: SerialNumber: syz [ 510.761943][ T1869] usb 3-1: config 0 descriptor?? [ 510.773505][ T1869] smsc75xx v1.0.0 [ 510.893959][ T2195] usb 2-1: device descriptor read/64, error -71 [ 511.164480][ T2195] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 511.334092][ T2195] usb 2-1: device descriptor read/64, error -71 [ 511.381923][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 511.392981][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 511.454325][ T2195] usb usb2-port1: attempt power cycle [ 511.574141][ T23] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 511.769149][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 511.770196][ T9] usb 1-1: USB disconnect, device number 58 [ 511.803103][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 511.816343][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 511.834822][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.843143][ T23] usb 4-1: Product: syz [ 511.847541][ T23] usb 4-1: Manufacturer: syz [ 511.852192][ T23] usb 4-1: SerialNumber: syz [ 511.866756][ T23] usb 4-1: config 0 descriptor?? [ 511.874298][ T2195] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 511.903546][ T1141] syzkaller0: tun_net_xmit 76 [ 511.908857][ T1141] syzkaller0: tun_net_xmit 48 [ 511.908872][ T2195] usb 2-1: device descriptor read/8, error -71 [ 511.917008][T10081] syzkaller0: create flow: hash 4152844890 index 2 [ 511.927244][ T5850] syzkaller0: tun_net_xmit 76 [ 511.984207][T10080] syzkaller0: delete flow: hash 4152844890 index 2 [ 512.189051][ T2195] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 512.235013][ T2195] usb 2-1: device descriptor read/8, error -71 [ 512.295302][ T23] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 512.357028][ T2195] usb usb2-port1: unable to enumerate USB device [ 512.622177][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 512.635141][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 512.647923][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 512.659197][ T1869] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 515.194390][ T5850] usb 3-1: USB disconnect, device number 50 [ 515.298844][T10094] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 515.475094][ T9117] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 240 seconds [ 515.489102][ T1054] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 300 seconds [ 516.104130][ T23] usb 4-1: USB disconnect, device number 49 [ 516.254053][ T5850] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 516.534000][ T5850] usb 2-1: device descriptor read/64, error -71 [ 516.894389][ T5850] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 517.274089][ T5850] usb 2-1: device descriptor read/64, error -71 [ 517.424470][ T5850] usb usb2-port1: attempt power cycle [ 518.698249][ T5850] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 518.744433][ T5850] usb 2-1: device descriptor read/8, error -71 [ 518.869904][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 330 seconds [ 519.034938][ T5850] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 519.232656][T10148] syzkaller0: create flow: hash 4152844890 index 2 [ 519.304084][ T5850] usb 2-1: device not accepting address 55, error -71 [ 519.314180][ T5850] usb usb2-port1: unable to enumerate USB device [ 519.524926][ T7723] syzkaller0: tun_net_xmit 76 [ 519.539077][ T7723] syzkaller0: tun_net_xmit 48 [ 519.554607][ T9] syzkaller0: tun_net_xmit 76 [ 519.564909][T10142] syzkaller0: delete flow: hash 4152844890 index 2 [ 519.641015][T10153] 9pnet_fd: Insufficient options for proto=fd [ 519.665757][T10153] 9pnet: Unknown protocol version 9p200 [ 521.879124][ T10] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 300 seconds [ 521.890161][ T6349] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 270 seconds [ 522.154277][ T5850] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 522.434291][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 522.548568][ T5850] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 522.680181][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.834370][ T5850] usb 1-1: Product: syz [ 522.869318][ T5850] usb 1-1: Manufacturer: syz [ 522.883789][ T5850] usb 1-1: SerialNumber: syz [ 522.908528][ T5850] usb 1-1: config 0 descriptor?? [ 523.339769][ T5850] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 523.352596][ T5850] usb 1-1: USB disconnect, device number 59 [ 525.784192][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 525.980810][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 526.020578][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.029206][ T9] usb 2-1: Product: syz [ 526.033526][ T9] usb 2-1: Manufacturer: syz [ 526.039482][ T9] usb 2-1: SerialNumber: syz [ 526.059766][ T9] usb 2-1: config 0 descriptor?? [ 526.609764][ T9] hso 2-1:0.0: Can't find BULK IN endpoint [ 526.652100][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 527.012323][ T10] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 330 seconds [ 527.023399][ T6349] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 180 seconds [ 527.112979][ T9] usb 2-1: USB disconnect, device number 56 [ 531.110785][T10254] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1299'. [ 531.473697][T10250] syzkaller0: delete flow: hash 4152844890 index 2 [ 532.989650][T10266] ubi: mtd0 is already attached to ubi31 [ 534.037527][ T6349] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 270 seconds [ 534.324033][ T34] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 534.524074][ T34] usb 1-1: Using ep0 maxpacket: 16 [ 534.550865][ T34] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 534.560522][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.569127][ T34] usb 1-1: Product: syz [ 534.573374][ T34] usb 1-1: Manufacturer: syz [ 534.578151][ T34] usb 1-1: SerialNumber: syz [ 534.593280][ T34] usb 1-1: config 0 descriptor?? [ 535.015691][ T34] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 535.044284][ T34] usb 1-1: USB disconnect, device number 60 [ 539.166566][ T5916] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 539.296978][ T6349] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 180 seconds [ 539.532625][ T5916] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 539.652829][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.764609][ T5916] usb 1-1: Product: syz [ 539.819885][ T5916] usb 1-1: Manufacturer: syz [ 539.879570][ T5916] usb 1-1: SerialNumber: syz [ 540.038365][ T5916] usb 1-1: config 0 descriptor?? [ 540.474347][ T5916] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.626653][T10313] syzkaller0: create flow: hash 4152844890 index 2 [ 540.816555][ T7723] syzkaller0: tun_net_xmit 76 [ 540.832499][ T7723] syzkaller0: tun_net_xmit 48 [ 540.841558][T10311] syzkaller0: delete flow: hash 4152844890 index 2 [ 540.848598][ T5850] syzkaller0: tun_net_xmit 76 [ 542.021327][ T5916] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 542.037067][ T5916] usb 1-1: USB disconnect, device number 61 [ 546.374276][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 270 seconds [ 546.401827][ T9117] block nbd5: Possible stuck request ffff888021aa0000: control (read@0,4096B). Runtime 330 seconds [ 546.746536][T10354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1332'. [ 550.054520][ T1054] block nbd1: Possible stuck request ffff888021960000: control (read@0,4096B). Runtime 360 seconds [ 550.068186][T10370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.094255][T10370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 550.399661][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1341'. [ 550.556050][T10390] syzkaller0: create flow: hash 4152844890 index 2 [ 552.043979][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 552.123992][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 552.226273][ T1141] syzkaller0: tun_net_xmit 76 [ 552.259810][ T23] syzkaller0: tun_net_xmit 76 [ 552.284458][ T1141] syzkaller0: tun_net_xmit 48 [ 552.318858][T10385] syzkaller0: delete flow: hash 4152844890 index 2 [ 553.469010][ T23] syzkaller0: tun_net_xmit 76 [ 553.474933][ T23] syzkaller0: tun_net_xmit 76 [ 553.522733][ T10] block nbd6: Possible stuck request ffff888021b00000: control (read@0,4096B). Runtime 330 seconds [ 553.533908][ T9225] block nbd7: Possible stuck request ffff888021b78000: control (read@0,4096B). Runtime 300 seconds [ 555.625113][ T5916] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 555.840931][ T5916] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 555.850290][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.859196][ T5916] usb 1-1: Product: syz [ 555.873456][ T5916] usb 1-1: Manufacturer: syz [ 555.878289][ T5916] usb 1-1: SerialNumber: syz [ 555.896174][ T5916] usb 1-1: config 0 descriptor?? [ 556.181344][ T5916] hso 1-1:0.0: Can't find BULK IN endpoint [ 556.187672][ T5916] usb-storage 1-1:0.0: USB Mass Storage device detected [ 556.419838][ T2195] usb 1-1: USB disconnect, device number 62 [ 557.109768][ T9225] block nbd2: Possible stuck request ffff8880219c0000: control (read@0,4096B). Runtime 360 seconds [ 557.121050][ T10] block nbd11: Possible stuck request ffff888021d58000: control (read@0,4096B). Runtime 210 seconds [ 558.264102][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 558.355380][T10433] ubi: mtd0 is already attached to ubi31 [ 558.444072][ T9] usb 1-1: device descriptor read/64, error -71 [ 558.766978][T10444] (null): rxe_set_mtu: Set mtu to 1024 [ 559.401355][T10444] infiniband syz2: set down [ 559.406330][T10444] infiniband syz2: added veth1_to_team [ 559.432121][T10444] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 559.445947][T10444] infiniband syz2: Couldn't open port 1 [ 559.476780][T10444] RDS/IB: syz2: added [ 559.481321][T10444] smc: adding ib device syz2 with port count 1 [ 559.487714][T10444] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 559.846382][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 560.194645][ T9] usb 1-1: device descriptor read/64, error -71 [ 561.354169][ T9] usb usb1-port1: attempt power cycle [ 561.667967][T10463] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 562.676352][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 563.158552][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 563.168240][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.176610][ T9] usb 1-1: Product: syz [ 563.181198][ T9] usb 1-1: Manufacturer: syz [ 563.186925][ T9] usb 1-1: SerialNumber: syz [ 563.200766][ T9] usb 1-1: config 0 descriptor?? [ 563.304451][T10472] syzkaller0: create flow: hash 4152844890 index 2 [ 563.422570][ T9] hso 1-1:0.0: Can't find BULK IN endpoint [ 563.430342][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 563.451424][T10471] syzkaller0: delete flow: hash 4152844890 index 2 [ 563.760428][ T1869] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 563.793453][ T2195] usb 1-1: USB disconnect, device number 65 [ 563.889711][T10482] ubi: mtd0 is already attached to ubi31 [ 563.963987][ T1869] usb 3-1: Using ep0 maxpacket: 32 [ 563.974207][ T1869] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 563.995087][ T1869] usb 3-1: config 0 has no interface number 0 [ 564.001826][ T1869] usb 3-1: config 0 interface 184 has no altsetting 0 [ 564.014796][ T1869] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 564.027312][ T1869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.036065][ T1869] usb 3-1: Product: syz [ 564.040273][ T1869] usb 3-1: Manufacturer: syz [ 564.046887][ T1869] usb 3-1: SerialNumber: syz [ 564.058040][ T1869] usb 3-1: config 0 descriptor?? [ 564.071208][ T1869] smsc75xx v1.0.0 [ 564.118749][ T10] block nbd8: Possible stuck request ffff888021c18000: control (read@0,4096B). Runtime 300 seconds [ 564.681929][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 564.697256][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 564.701462][ T2195] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 564.884530][ T2195] usb 1-1: device descriptor read/64, error -71 [ 564.908749][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 564.920145][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 564.935015][ T1869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 564.945307][ T1869] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 565.214561][ T2195] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 565.395749][ T2195] usb 1-1: device descriptor read/64, error -71 [ 565.546416][ T2195] usb usb1-port1: attempt power cycle [ 565.974626][ T2195] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 566.021100][ T2195] usb 1-1: device descriptor read/8, error -71 [ 566.294154][ T2195] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 566.760763][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.767972][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.804623][ T2195] usb 1-1: device descriptor read/8, error -71 [ 566.860042][ T5916] usb 3-1: USB disconnect, device number 51 [ 566.943056][ T2195] usb usb1-port1: unable to enumerate USB device [ 568.801095][T10519] veth0_to_team: entered promiscuous mode [ 571.227323][T10518] ubi: mtd0 is already attached to ubi31 [ 571.264167][ T10] block nbd13: Possible stuck request ffff888021de8000: control (read@0,4096B). Runtime 210 seconds [ 571.497210][T10530] loop0: detected capacity change from 0 to 512 [ 571.510524][T10530] FAT-fs (loop0): count of clusters too big (2147483660) [ 571.519561][T10530] FAT-fs (loop0): Can't find a valid FAT filesystem [ 571.587309][ T7266] blk_print_req_error: 27 callbacks suppressed [ 571.587322][ T7266] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 573.468654][T10536] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 574.675644][ T34] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 574.902707][ T34] usb 2-1: no configurations [ 574.948127][ T34] usb 2-1: can't read configurations, error -22 [ 574.968465][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1390'. [ 574.978171][T10554] team_slave_0: entered promiscuous mode [ 574.984283][T10554] team_slave_1: entered promiscuous mode [ 574.997732][ T28] INFO: task udevd:5774 blocked for more than 144 seconds. [ 575.010297][ T28] Not tainted syzkaller #0 [ 575.024021][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.041029][ T28] task:udevd state:D stack:23144 pid:5774 ppid:5159 flags:0x00004006 [ 575.062158][ T28] Call Trace: [ 575.075624][ T28] [ 575.082399][ T28] __schedule+0x14d2/0x44d0 [ 575.089915][ T28] ? asan.module_dtor+0x20/0x20 [ 575.095291][ T28] ? mark_lock+0x94/0x320 [ 575.099813][ T28] ? lock_chain_count+0x20/0x20 [ 575.105766][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 575.111126][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 575.121191][ T28] schedule+0xbd/0x170 [ 575.125698][ T34] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 575.134937][ T28] io_schedule+0x80/0xd0 [ 575.141432][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 575.147333][ T28] ? folio_wait_bit+0x30/0x30 [ 575.152204][ T28] ? _compound_head+0x120/0x120 [ 575.160129][ T28] ? filemap_add_folio+0x192/0x3c0 [ 575.168074][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 575.173546][ T28] ? blkdev_writepage+0x30/0x30 [ 575.179954][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 575.188296][ T28] ? blkdev_writepage+0x30/0x30 [ 575.193345][ T28] read_part_sector+0xd2/0x350 [ 575.198770][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 575.204593][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 575.210934][ T28] ? put_partition+0x350/0x350 [ 575.216650][ T28] bdev_disk_changed+0x73a/0x1410 [ 575.221947][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 575.227916][ T28] ? iput+0x347/0x920 [ 575.232206][ T28] blkdev_get_whole+0x30d/0x390 [ 575.237615][ T28] blkdev_get_by_dev+0x279/0x600 [ 575.242826][ T28] blkdev_open+0x152/0x360 [ 575.249102][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 575.254239][ T28] do_dentry_open+0x8c6/0x1500 [ 575.260329][ T28] path_openat+0x274b/0x3190 [ 575.265451][ T28] ? __schedule+0x14da/0x44d0 [ 575.270268][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 575.277366][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.283579][ T28] ? verify_lock_unused+0x140/0x140 [ 575.295849][ T28] ? do_filp_open+0x3d0/0x3d0 [ 575.300744][ T28] ? asan.module_dtor+0x20/0x20 [ 575.309281][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.318711][ T34] usb 2-1: no configurations [ 575.325613][ T34] usb 2-1: can't read configurations, error -22 [ 575.332051][ T28] do_filp_open+0x1c5/0x3d0 [ 575.340206][ T28] ? vfs_tmpfile+0x490/0x490 [ 575.345464][ T34] usb usb2-port1: attempt power cycle [ 575.355338][ T28] ? preempt_schedule_common+0x82/0xc0 [ 575.368841][ T28] ? _raw_spin_unlock+0x3a/0x40 [ 575.375206][ T28] ? alloc_fd+0x58f/0x630 [ 575.379767][ T28] do_sys_openat2+0x12c/0x1c0 [ 575.386847][ T28] ? do_sys_open+0xe0/0xe0 [ 575.391815][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.401458][ T28] ? lock_chain_count+0x20/0x20 [ 575.411754][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.421830][ T28] __x64_sys_openat+0x139/0x160 [ 575.428820][ T28] do_syscall_64+0x55/0xb0 [ 575.433433][ T28] ? clear_bhb_loop+0x40/0x90 [ 575.441811][ T28] ? clear_bhb_loop+0x40/0x90 [ 575.448765][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.456281][ T28] RIP: 0033:0x7ffb5cea7407 [ 575.461957][ T28] RSP: 002b:00007ffeda8f1b40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 575.473543][ T28] RAX: ffffffffffffffda RBX: 00007ffb5d60b880 RCX: 00007ffb5cea7407 [ 575.494625][ T28] RDX: 00000000000a0800 RSI: 000056116c3b3cb0 RDI: ffffffffffffff9c [ 575.502806][ T28] RBP: 000056116c393910 R08: 0000000000000000 R09: 0000000000000000 [ 575.514012][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000056116c39b010 [ 575.523063][ T28] R13: 000056116c3ab410 R14: 0000000000000000 R15: 000056116c39b010 [ 575.535299][ T28] [ 575.538880][ T28] INFO: task udevd:5881 blocked for more than 144 seconds. [ 575.547559][ T28] Not tainted syzkaller #0 [ 575.552610][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.563289][ T28] task:udevd state:D stack:25104 pid:5881 ppid:5159 flags:0x00004006 [ 575.574043][ T28] Call Trace: [ 575.577427][ T28] [ 575.580454][ T28] __schedule+0x14d2/0x44d0 [ 575.585497][ T28] ? asan.module_dtor+0x20/0x20 [ 575.590530][ T28] ? mark_lock+0x94/0x320 [ 575.598506][ T28] ? lock_chain_count+0x20/0x20 [ 575.605169][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 575.610409][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 575.619080][ T28] schedule+0xbd/0x170 [ 575.624771][ T28] io_schedule+0x80/0xd0 [ 575.629213][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 575.644255][ T28] ? folio_wait_bit+0x30/0x30 [ 575.649122][ T28] ? _compound_head+0x120/0x120 [ 575.662452][ T28] ? filemap_add_folio+0x192/0x3c0 [ 575.669234][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 575.678131][ T28] ? blkdev_writepage+0x30/0x30 [ 575.683202][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 575.688622][ T28] ? blkdev_writepage+0x30/0x30 [ 575.693589][ T28] read_part_sector+0xd2/0x350 [ 575.701532][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 575.707109][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 575.712531][ T28] ? put_partition+0x350/0x350 [ 575.721810][ T28] ? alloc_pages+0x4dc/0x740 [ 575.726638][ T28] bdev_disk_changed+0x73a/0x1410 [ 575.731709][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 575.740288][ T28] ? iput+0x347/0x920 [ 575.745001][ T28] blkdev_get_whole+0x30d/0x390 [ 575.749879][ T28] blkdev_get_by_dev+0x279/0x600 [ 575.754985][ T28] blkdev_open+0x152/0x360 [ 575.759415][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 575.764049][ T28] do_dentry_open+0x8c6/0x1500 [ 575.768833][ T28] path_openat+0x274b/0x3190 [ 575.773513][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 575.778638][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.784087][ T34] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 575.784956][ T28] ? verify_lock_unused+0x140/0x140 [ 575.797559][ T28] ? do_filp_open+0x3d0/0x3d0 [ 575.802258][ T28] ? __virt_addr_valid+0x18c/0x540 [ 575.807482][ T28] do_filp_open+0x1c5/0x3d0 [ 575.812007][ T28] ? vfs_tmpfile+0x490/0x490 [ 575.816876][ T28] ? _raw_spin_unlock+0x28/0x40 [ 575.821740][ T28] ? alloc_fd+0x58f/0x630 [ 575.826573][ T28] do_sys_openat2+0x12c/0x1c0 [ 575.831278][ T28] ? do_sys_open+0xe0/0xe0 [ 575.835428][ T34] usb 2-1: no configurations [ 575.835770][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.840939][ T34] usb 2-1: can't read configurations, error -22 [ 575.846329][ T28] ? lock_chain_count+0x20/0x20 [ 575.846354][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.846378][ T28] __x64_sys_openat+0x139/0x160 [ 575.846403][ T28] do_syscall_64+0x55/0xb0 [ 575.846423][ T28] ? clear_bhb_loop+0x40/0x90 [ 575.846439][ T28] ? clear_bhb_loop+0x40/0x90 [ 575.846457][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.888126][ T28] RIP: 0033:0x7ffb5cea7407 [ 575.892557][ T28] RSP: 002b:00007ffeda8f1b40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 575.901164][ T28] RAX: ffffffffffffffda RBX: 00007ffb5d60b880 RCX: 00007ffb5cea7407 [ 575.909205][ T28] RDX: 00000000000a0800 RSI: 000056116c39f820 RDI: ffffffffffffff9c [ 575.918422][ T28] RBP: 000056116c393910 R08: 0000000000000000 R09: 0000000000000000 [ 575.928429][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000056116c3a6e20 [ 575.937775][ T28] R13: 000056116c3ab410 R14: 0000000000000000 R15: 000056116c3a6e20 [ 575.945977][ T28] [ 575.949070][ T28] INFO: task udevd:6275 blocked for more than 144 seconds. [ 575.958978][ T28] Not tainted syzkaller #0 [ 575.964663][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.973418][ T28] task:udevd state:D stack:24840 pid:6275 ppid:5159 flags:0x00004006 [ 575.982786][ T28] Call Trace: [ 575.986108][ T28] [ 575.989049][ T28] __schedule+0x14d2/0x44d0 [ 575.993568][ T28] ? asan.module_dtor+0x20/0x20 [ 575.998511][ T28] ? mark_lock+0x94/0x320 [ 576.002952][ T28] ? lock_chain_count+0x20/0x20 [ 576.007991][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 576.013031][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 576.014128][ T34] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 576.018492][ T28] schedule+0xbd/0x170 [ 576.030568][ T28] io_schedule+0x80/0xd0 [ 576.034923][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 576.040260][ T28] ? folio_wait_bit+0x30/0x30 [ 576.045105][ T28] ? _compound_head+0x120/0x120 [ 576.049988][ T28] ? filemap_add_folio+0x192/0x3c0 [ 576.055316][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 576.060635][ T28] ? blkdev_writepage+0x30/0x30 [ 576.065574][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 576.066076][ T34] usb 2-1: no configurations [ 576.070684][ T28] ? blkdev_writepage+0x30/0x30 [ 576.070713][ T28] read_part_sector+0xd2/0x350 [ 576.080160][ T34] usb 2-1: can't read configurations, error -22 [ 576.080199][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 576.085595][ T34] usb usb2-port1: unable to enumerate USB device [ 576.091324][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 576.108394][ T28] ? put_partition+0x350/0x350 [ 576.113159][ T28] ? alloc_pages+0x4dc/0x740 [ 576.118074][ T28] bdev_disk_changed+0x73a/0x1410 [ 576.123144][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 576.128535][ T28] ? iput+0x347/0x920 [ 576.132878][ T28] blkdev_get_whole+0x30d/0x390 [ 576.137859][ T28] blkdev_get_by_dev+0x279/0x600 [ 576.142827][ T28] blkdev_open+0x152/0x360 [ 576.147313][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 576.151918][ T28] do_dentry_open+0x8c6/0x1500 [ 576.156761][ T28] path_openat+0x274b/0x3190 [ 576.161380][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 576.166502][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.172586][ T28] ? verify_lock_unused+0x140/0x140 [ 576.177881][ T28] ? do_filp_open+0x3d0/0x3d0 [ 576.182586][ T28] ? __virt_addr_valid+0x18c/0x540 [ 576.187772][ T28] do_filp_open+0x1c5/0x3d0 [ 576.192304][ T28] ? vfs_tmpfile+0x490/0x490 [ 576.197042][ T28] ? _raw_spin_unlock+0x28/0x40 [ 576.201912][ T28] ? alloc_fd+0x58f/0x630 [ 576.206554][ T28] do_sys_openat2+0x12c/0x1c0 [ 576.211261][ T28] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 576.217160][ T28] ? do_sys_open+0xe0/0xe0 [ 576.221595][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 576.227869][ T28] ? lock_chain_count+0x20/0x20 [ 576.233136][ T28] __x64_sys_openat+0x139/0x160 [ 576.238112][ T28] do_syscall_64+0x55/0xb0 [ 576.242548][ T28] ? clear_bhb_loop+0x40/0x90 [ 576.247283][ T28] ? clear_bhb_loop+0x40/0x90 [ 576.251974][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.257944][ T28] RIP: 0033:0x7ffb5cea7407 [ 576.262373][ T28] RSP: 002b:00007ffeda8f1b40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 576.270848][ T28] RAX: ffffffffffffffda RBX: 00007ffb5d60b880 RCX: 00007ffb5cea7407 [ 576.279013][ T28] RDX: 00000000000a0800 RSI: 000056116c3a1010 RDI: ffffffffffffff9c [ 576.287137][ T28] RBP: 000056116c393910 R08: 0000000000000000 R09: 0000000000000000 [ 576.295203][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000056116c3b64d0 [ 576.303188][ T28] R13: 000056116c3ab410 R14: 0000000000000000 R15: 000056116c3b64d0 [ 576.311408][ T28] [ 576.314502][ T28] INFO: task udevd:7150 blocked for more than 145 seconds. [ 576.321713][ T28] Not tainted syzkaller #0 [ 576.326799][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.336100][ T28] task:udevd state:D stack:25192 pid:7150 ppid:5159 flags:0x00004006 [ 576.345407][ T28] Call Trace: [ 576.348739][ T28] [ 576.351666][ T28] __schedule+0x14d2/0x44d0 [ 576.356345][ T28] ? asan.module_dtor+0x20/0x20 [ 576.361214][ T28] ? mark_lock+0x94/0x320 [ 576.365614][ T28] ? lock_chain_count+0x20/0x20 [ 576.370476][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 576.375590][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 576.380990][ T28] schedule+0xbd/0x170 [ 576.385154][ T28] io_schedule+0x80/0xd0 [ 576.389420][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 576.394854][ T28] ? folio_wait_bit+0x30/0x30 [ 576.399552][ T28] ? _compound_head+0x120/0x120 [ 576.404468][ T28] ? filemap_add_folio+0x192/0x3c0 [ 576.409599][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 576.414977][ T28] ? blkdev_writepage+0x30/0x30 [ 576.419846][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 576.425032][ T28] ? blkdev_writepage+0x30/0x30 [ 576.429914][ T28] read_part_sector+0xd2/0x350 [ 576.434782][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 576.440539][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 576.446033][ T28] ? put_partition+0x350/0x350 [ 576.450837][ T28] bdev_disk_changed+0x73a/0x1410 [ 576.455985][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 576.461307][ T28] ? iput+0x347/0x920 [ 576.465356][ T28] blkdev_get_whole+0x30d/0x390 [ 576.470219][ T28] blkdev_get_by_dev+0x279/0x600 [ 576.475262][ T28] blkdev_open+0x152/0x360 [ 576.479691][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 576.484351][ T28] do_dentry_open+0x8c6/0x1500 [ 576.489137][ T28] path_openat+0x274b/0x3190 [ 576.493809][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 576.498925][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.505050][ T28] ? verify_lock_unused+0x140/0x140 [ 576.510256][ T28] ? do_filp_open+0x3d0/0x3d0 [ 576.517025][ T28] ? __virt_addr_valid+0x18c/0x540 [ 576.522256][ T28] do_filp_open+0x1c5/0x3d0 [ 576.527108][ T28] ? vfs_tmpfile+0x490/0x490 [ 576.531774][ T28] ? _raw_spin_unlock+0x28/0x40 [ 576.536713][ T28] ? alloc_fd+0x58f/0x630 [ 576.541366][ T28] do_sys_openat2+0x12c/0x1c0 [ 576.546121][ T28] ? do_sys_open+0xe0/0xe0 [ 576.550549][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 576.556662][ T28] ? lock_chain_count+0x20/0x20 [ 576.561704][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 576.568578][ T28] __x64_sys_openat+0x139/0x160 [ 576.573449][ T28] do_syscall_64+0x55/0xb0 [ 576.577952][ T28] ? clear_bhb_loop+0x40/0x90 [ 576.582656][ T28] ? clear_bhb_loop+0x40/0x90 [ 576.587418][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.593334][ T28] RIP: 0033:0x7ffb5cea7407 [ 576.598200][ T28] RSP: 002b:00007ffeda8f1b40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 576.606784][ T28] RAX: ffffffffffffffda RBX: 00007ffb5d60b880 RCX: 00007ffb5cea7407 [ 576.614967][ T28] RDX: 00000000000a0800 RSI: 000056116c3a4650 RDI: ffffffffffffff9c [ 576.622960][ T28] RBP: 000056116c393910 R08: 0000000000000000 R09: 0000000000000000 [ 576.630988][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000056116c43d670 [ 576.639023][ T28] R13: 000056116c3ab410 R14: 0000000000000000 R15: 000056116c43d670 [ 576.647488][ T28] [ 576.650556][ T28] [ 576.650556][ T28] Showing all locks held in the system: [ 576.659136][ T28] 1 lock held by ksoftirqd/0/16: [ 576.664586][ T28] 1 lock held by khungtaskd/28: [ 576.669449][ T28] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 576.679526][ T28] 2 locks held by getty/5550: [ 576.684250][ T28] #0: ffff88814e0900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.694231][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 576.704485][ T28] 1 lock held by udevd/5774: [ 576.709080][ T28] #0: ffff8880213bf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.719241][ T28] 1 lock held by udevd/5776: [ 576.723951][ T28] #0: ffff888141f514c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.738795][ T28] 1 lock held by udevd/5881: [ 576.743484][ T28] #0: ffff88802181c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.759497][ T28] 1 lock held by udevd/5981: [ 576.764440][ T28] #0: ffff888141f384c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.779265][ T28] 1 lock held by udevd/6006: [ 576.784088][ T28] #0: ffff888021b4d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.794251][ T28] 1 lock held by udevd/6275: [ 576.798846][ T28] #0: ffff888141f184c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.809057][ T28] 1 lock held by udevd/7150: [ 576.813669][ T28] #0: ffff888021a134c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.823828][ T28] 1 lock held by udevd/7241: [ 576.828520][ T28] #0: ffff888021cbf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.840674][ T28] 1 lock held by udevd/7681: [ 576.845529][ T28] #0: ffff888021b2b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 576.856363][ T28] [ 576.858706][ T28] ============================================= [ 576.858706][ T28] [ 576.867284][ T28] NMI backtrace for cpu 0 [ 576.871725][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 576.879018][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.889068][ T28] Call Trace: [ 576.892337][ T28] [ 576.895258][ T28] dump_stack_lvl+0x16c/0x230 [ 576.899943][ T28] ? preempt_count_add+0x91/0x1a0 [ 576.904975][ T28] ? show_regs_print_info+0x20/0x20 [ 576.910183][ T28] ? load_image+0x3b0/0x3b0 [ 576.914720][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 576.919679][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 576.925844][ T28] ? _printk+0xd0/0x110 [ 576.930016][ T28] ? load_image+0x3b0/0x3b0 [ 576.934615][ T28] ? load_image+0x3b0/0x3b0 [ 576.939134][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 576.945206][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 576.951204][ T28] watchdog+0xf41/0xf80 [ 576.955450][ T28] ? watchdog+0x1e1/0xf80 [ 576.959782][ T28] kthread+0x2fa/0x390 [ 576.963842][ T28] ? hungtask_pm_notify+0x90/0x90 [ 576.968876][ T28] ? kthread_blkcg+0xd0/0xd0 [ 576.973473][ T28] ret_from_fork+0x48/0x80 [ 576.977928][ T28] ? kthread_blkcg+0xd0/0xd0 [ 576.982522][ T28] ret_from_fork_asm+0x11/0x20 [ 576.987306][ T28] [ 576.995156][ T28] Sending NMI from CPU 0 to CPUs 1: [ 577.000408][ C1] NMI backtrace for cpu 1 [ 577.000419][ C1] CPU: 1 PID: 5148 Comm: klogd Not tainted syzkaller #0 [ 577.000434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.000443][ C1] RIP: 0010:check_preemption_disabled+0x47/0x110 [ 577.000466][ C1] Code: 94 75 65 8b 0d 82 f9 94 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b <41> 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 [ 577.000479][ C1] RSP: 0018:ffffc90003277e78 EFLAGS: 00000082 [ 577.000493][ C1] RAX: 0000000000000001 RBX: ffffffff817289fc RCX: cf6a9369039b2000 [ 577.000504][ C1] RDX: 0000000000000000 RSI: ffffffff8aaabd80 RDI: ffffffff8afc67c0 [ 577.000515][ C1] RBP: ffffc90003277f48 R08: ffffffff8e4a8a6f R09: 1ffffffff1c9514d [ 577.000527][ C1] R10: dffffc0000000000 R11: fffffbfff1c9514e R12: 0000000000000000 [ 577.000537][ C1] R13: 0000000000000000 R14: ffff88807dcb8000 R15: ffff88807dcb8000 [ 577.000548][ C1] FS: 00007f1aff845c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 577.000566][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.000576][ C1] CR2: 00007f92799b4198 CR3: 000000002fd07000 CR4: 00000000003506e0 [ 577.000590][ C1] Call Trace: [ 577.000595][ C1] [ 577.000602][ C1] lockdep_hardirqs_off+0xab/0x100 [ 577.000624][ C1] ? exit_to_user_mode_loop+0xdc/0x110 [ 577.000650][ C1] trace_hardirqs_off+0x12/0x40 [ 577.000669][ C1] exit_to_user_mode_loop+0xdc/0x110 [ 577.000688][ C1] exit_to_user_mode_prepare+0xf6/0x180 [ 577.000707][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 577.000721][ C1] do_syscall_64+0x61/0xb0 [ 577.000739][ C1] ? clear_bhb_loop+0x40/0x90 [ 577.000754][ C1] ? clear_bhb_loop+0x40/0x90 [ 577.000770][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.000785][ C1] RIP: 0033:0x7f1aff995407 [ 577.000797][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 577.000810][ C1] RSP: 002b:00007ffc0e1bd630 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 577.000824][ C1] RAX: 000000000000004e RBX: 00007f1aff845c80 RCX: 00007f1aff995407 [ 577.000835][ C1] RDX: 000000000000004e RSI: 00007ffc0e1bd770 RDI: 0000000000000003 [ 577.000844][ C1] RBP: 00007ffc0e1bdba0 R08: 0000000000000000 R09: 0000000000000000 [ 577.000854][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc0e1bdbb8 [ 577.000864][ C1] R13: 00007ffc0e1bd770 R14: 0000000000000033 R15: 00007ffc0e1bd770 [ 577.000882][ C1] [ 577.001500][ T1054] block nbd9: Possible stuck request ffff888021c40000: control (read@0,4096B). Runtime 300 seconds [ 577.002721][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 577.002733][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 577.002749][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.002757][ T28] Call Trace: [ 577.002764][ T28] [ 577.002770][ T28] dump_stack_lvl+0x16c/0x230 [ 577.002796][ T28] ? show_regs_print_info+0x20/0x20 [ 577.002815][ T28] ? load_image+0x3b0/0x3b0 [ 577.002843][ T28] panic+0x2c0/0x710 [ 577.002857][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 577.002880][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 577.002900][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 577.002922][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 577.002948][ T28] watchdog+0xf80/0xf80 [ 577.002967][ T28] ? watchdog+0x1e1/0xf80 [ 577.002992][ T28] kthread+0x2fa/0x390 [ 577.003006][ T28] ? hungtask_pm_notify+0x90/0x90 [ 577.003024][ T28] ? kthread_blkcg+0xd0/0xd0 [ 577.003038][ T28] ret_from_fork+0x48/0x80 [ 577.003055][ T28] ? kthread_blkcg+0xd0/0xd0 [ 577.003070][ T28] ret_from_fork_asm+0x11/0x20 [ 577.003100][ T28] [ 577.005932][ T28] Kernel Offset: disabled