last executing test programs: 4.64252697s ago: executing program 3 (id=3520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @random="b92e35ac622e"}, 0x0, @default, 0xb, @void, @void, @val={0x3, 0x1, 0x95}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.113616773s ago: executing program 3 (id=3523): syz_emit_vhci(0x0, 0x7) 3.917699297s ago: executing program 3 (id=3524): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x7, 0x2, 0x5, 0x41, 0x4, 0x8, 0x10, 0x6, 0x1, 0x2, 0xb, 0x2, 0x6, 0x10}, 0xe) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x6, 0x7, 0x89d2, 0x401, 0x4c74, 0x80000000, 0x40000, 0x2, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x9, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x30f, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0xdc9, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x7, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x6, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x4, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d694, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.389013573s ago: executing program 3 (id=3531): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06400e"], 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6c}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.699882619s ago: executing program 3 (id=3536): socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ff"], 0x0) 1.619492501s ago: executing program 1 (id=3537): socket(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.575502382s ago: executing program 0 (id=3539): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 1.428843216s ago: executing program 2 (id=3540): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) chdir(&(0x7f0000000000)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) 1.428609576s ago: executing program 1 (id=3541): io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a9", 0x96}, {&(0x7f0000000ac0)="3fe4", 0x2}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.27033481s ago: executing program 2 (id=3542): io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a9", 0x96}, {&(0x7f0000000ac0)="3fe4", 0x2}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.211117181s ago: executing program 0 (id=3543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.002408996s ago: executing program 0 (id=3544): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06400e"], 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6c}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 853.065939ms ago: executing program 1 (id=3545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) 730.008462ms ago: executing program 2 (id=3546): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r1, &(0x7f0000000240)="5cb0", 0x2) 692.901663ms ago: executing program 1 (id=3547): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='file0', 0x5) 592.014856ms ago: executing program 0 (id=3548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) 517.729657ms ago: executing program 2 (id=3549): socket(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 511.626207ms ago: executing program 1 (id=3550): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) 438.014279ms ago: executing program 2 (id=3551): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000f00), 0x0) close(r4) write(0xffffffffffffffff, &(0x7f0000001100)='0\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') 347.058211ms ago: executing program 0 (id=3552): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 259.116614ms ago: executing program 2 (id=3553): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x131) write$tcp_congestion(r4, 0x0, 0x0) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 192.852095ms ago: executing program 1 (id=3554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') 82.763407ms ago: executing program 0 (id=3555): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x4202c78) write$ppp(r1, &(0x7f0000000200)='\x00\x00', 0x2) 0s ago: executing program 3 (id=3556): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06400e"], 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x6c}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0xf, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 3072,1024B). Runtime 150 seconds [ 649.020091][ T5792] block nbd26: Receive control failed (result -32) [ 649.055157][T14980] syz.1.2727 (14980) used greatest stack depth: 19640 bytes left [ 649.472364][T13353] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 120 seconds [ 649.503387][T13353] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 120 seconds [ 649.544334][T13353] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 120 seconds [ 649.585285][T13353] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 120 seconds [ 652.039841][T13463] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 120 seconds [ 652.051297][T13463] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 120 seconds [ 652.083032][T13463] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 120 seconds [ 652.152897][T13463] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 120 seconds [ 652.377268][T14991] nbd27: detected capacity change from 0 to 63 [ 652.507900][ T5792] block nbd27: Receive control failed (result -32) [ 652.649724][T15008] syzkaller0: entered promiscuous mode [ 652.662289][T15008] syzkaller0: entered allmulticast mode [ 653.211645][T13623] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 653.413678][T13623] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 653.432056][ T5846] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 653.450395][T13623] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 653.471399][T13623] usb 4-1: config 220 has no interface number 2 [ 653.491851][T13623] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 653.516738][T13623] usb 4-1: config 220 interface 0 has no altsetting 0 [ 653.527065][T13623] usb 4-1: config 220 interface 76 has no altsetting 0 [ 653.540541][T13623] usb 4-1: config 220 interface 1 has no altsetting 0 [ 653.561664][T13623] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 653.579121][T13623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.597505][T13623] usb 4-1: Product: syz [ 653.605679][T13623] usb 4-1: Manufacturer: syz [ 653.610438][T13623] usb 4-1: SerialNumber: syz [ 653.653896][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.674692][ T5846] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 653.702131][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.717649][ T5846] usb 3-1: config 0 descriptor?? [ 653.737694][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 653.895046][T13623] usb 4-1: selecting invalid altsetting 0 [ 653.950420][T13623] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 654.055635][T13623] usb 4-1: No valid video chain found. [ 654.309212][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 654.412731][ T5846] pwc: recv_control_msg error -32 req 02 val 2700 [ 654.422972][T13623] usb 4-1: selecting invalid altsetting 0 [ 654.508450][T13623] usbtest: probe of 4-1:220.1 failed with error -22 [ 654.563998][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 654.617549][T13353] block nbd1: Possible stuck request ffff888022318000: control (read@0,1024B). Runtime 150 seconds [ 654.651710][T13353] block nbd1: Possible stuck request ffff888022318200: control (read@1024,1024B). Runtime 150 seconds [ 654.678916][ T5846] pwc: recv_control_msg error -32 req 04 val 1000 [ 654.701646][T13353] block nbd1: Possible stuck request ffff888022318400: control (read@2048,1024B). Runtime 150 seconds [ 654.706368][T13623] usb 4-1: USB disconnect, device number 87 [ 654.745333][T13353] block nbd1: Possible stuck request ffff888022318600: control (read@3072,1024B). Runtime 150 seconds [ 654.772114][ T5846] pwc: recv_control_msg error -32 req 04 val 1300 [ 654.849703][ T5846] pwc: recv_control_msg error -32 req 04 val 1400 [ 654.939341][ T5846] pwc: recv_control_msg error -32 req 02 val 2000 [ 655.042611][ T5846] pwc: recv_control_msg error -32 req 02 val 2100 [ 655.127736][ T5846] pwc: recv_control_msg error -32 req 04 val 1500 [ 655.219202][ T5846] pwc: recv_control_msg error -32 req 02 val 2500 [ 655.308801][ T5846] pwc: recv_control_msg error -32 req 02 val 2400 [ 655.379937][ T5846] pwc: recv_control_msg error -32 req 02 val 2600 [ 655.693173][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 655.771046][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 655.856068][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 655.872363][ T1062] block nbd8: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 120 seconds [ 655.883662][ T1062] block nbd8: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 120 seconds [ 655.895184][ T1062] block nbd8: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 120 seconds [ 655.906936][ T1062] block nbd8: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 120 seconds [ 656.034121][ T5846] pwc: Registered as video103. [ 656.137818][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 656.393019][ T5846] usb 3-1: USB disconnect, device number 114 [ 659.331560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 659.619445][T15059] binder: 15058:15059 ioctl c0306201 200000000080 returned -14 [ 659.631226][T15059] binder: 15058:15059 ioctl c0306201 2000000003c0 returned -14 [ 660.380205][ T1062] block nbd9: Possible stuck request ffff888022538000: control (read@0,1024B). Runtime 120 seconds [ 660.393020][ T1062] block nbd9: Possible stuck request ffff888022538200: control (read@1024,1024B). Runtime 120 seconds [ 660.416086][ T1062] block nbd9: Possible stuck request ffff888022538400: control (read@2048,1024B). Runtime 120 seconds [ 660.471723][ T5846] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 660.757689][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.915128][ T5846] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 661.024173][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.050305][T15079] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 661.057412][T15079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.234362][ T5846] usb 2-1: config 0 descriptor?? [ 661.340103][T15079] vhci_hcd vhci_hcd.0: Device attached [ 661.393455][ T5822] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 661.438797][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 661.652718][T14032] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 661.776130][ T5822] usb 4-1: config 0 has no interfaces? [ 661.831100][ T5822] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 661.921918][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 661.947002][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.001213][ T5846] pwc: recv_control_msg error -32 req 02 val 2700 [ 662.086016][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 662.117788][ T5822] usb 4-1: config 0 descriptor?? [ 662.180282][ T5846] pwc: recv_control_msg error -32 req 04 val 1000 [ 662.270235][ T5846] pwc: recv_control_msg error -32 req 04 val 1300 [ 662.334671][ T5846] pwc: recv_control_msg error -32 req 04 val 1400 [ 662.429778][ T5846] pwc: recv_control_msg error -32 req 02 val 2000 [ 662.536453][ T5846] pwc: recv_control_msg error -32 req 02 val 2100 [ 662.614380][ T1062] block nbd9: Possible stuck request ffff888022538600: control (read@3072,1024B). Runtime 120 seconds [ 662.699893][ T5846] pwc: recv_control_msg error -32 req 04 val 1500 [ 662.800449][ T5846] pwc: recv_control_msg error -32 req 02 val 2500 [ 662.899226][ T5846] pwc: recv_control_msg error -32 req 02 val 2400 [ 662.987592][ T5822] usb 4-1: USB disconnect, device number 88 [ 663.010498][ T5846] pwc: recv_control_msg error -32 req 02 val 2600 [ 663.038422][T15084] vhci_hcd: connection closed [ 663.075303][ T49] vhci_hcd: stop threads [ 663.172037][T14032] usb 39-1: device descriptor read/64, error -71 [ 663.243247][ T49] vhci_hcd: release socket [ 663.267134][ T49] vhci_hcd: disconnect device [ 663.362859][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 663.399635][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 663.440048][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 663.457720][T14032] vhci_hcd: vhci_device speed not set [ 663.474376][ T5846] pwc: Registered as video103. [ 663.495401][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 663.550374][ T5846] usb 2-1: USB disconnect, device number 105 [ 664.081961][T15107] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 664.088559][T15107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 664.131058][T15107] vhci_hcd vhci_hcd.0: Device attached [ 664.391979][T13623] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 664.401582][ T5822] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 664.624400][T13623] usb 3-1: config 0 has no interfaces? [ 664.658009][T13623] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 664.686805][T13623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.733118][T13623] usb 3-1: config 0 descriptor?? [ 665.024366][ T8] usb 3-1: USB disconnect, device number 115 [ 665.030766][T15111] vhci_hcd: connection closed [ 665.032945][T14940] vhci_hcd: stop threads [ 665.073263][T14940] vhci_hcd: release socket [ 665.091954][T14940] vhci_hcd: disconnect device [ 665.111694][ T5822] vhci_hcd: vhci_device speed not set [ 665.391653][T14032] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 665.473010][T13463] block nbd3: Possible stuck request ffff888022380000: control (read@0,1024B). Runtime 150 seconds [ 665.485976][ T1062] block nbd2: Possible stuck request ffff888022348000: control (read@0,1024B). Runtime 150 seconds [ 665.497098][T13463] block nbd3: Possible stuck request ffff888022380200: control (read@1024,1024B). Runtime 150 seconds [ 665.508864][ T1062] block nbd2: Possible stuck request ffff888022348200: control (read@1024,1024B). Runtime 150 seconds [ 665.520716][T13463] block nbd3: Possible stuck request ffff888022380400: control (read@2048,1024B). Runtime 150 seconds [ 665.532265][ T1062] block nbd2: Possible stuck request ffff888022348400: control (read@2048,1024B). Runtime 150 seconds [ 665.545215][T13463] block nbd3: Possible stuck request ffff888022380600: control (read@3072,1024B). Runtime 150 seconds [ 665.561796][ T1062] block nbd2: Possible stuck request ffff888022348600: control (read@3072,1024B). Runtime 150 seconds [ 665.644236][T14032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.659478][T14032] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 665.669836][T14032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.684447][T14032] usb 4-1: config 0 descriptor?? [ 665.708954][T14032] pwc: Askey VC010 type 2 USB webcam detected. [ 666.118850][T14032] pwc: recv_control_msg error -32 req 02 val 2b00 [ 666.138202][T15153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 666.170348][T14032] pwc: recv_control_msg error -32 req 02 val 2700 [ 666.222128][T14032] pwc: recv_control_msg error -32 req 02 val 2c00 [ 666.235402][T15155] bond1: (slave geneve2): making interface the new active one [ 666.252132][T14032] pwc: recv_control_msg error -32 req 04 val 1000 [ 666.271659][T14032] pwc: recv_control_msg error -32 req 04 val 1300 [ 666.283930][T15155] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 666.300923][T14032] pwc: recv_control_msg error -32 req 04 val 1400 [ 666.325158][T14032] pwc: recv_control_msg error -32 req 02 val 2000 [ 666.365430][T14032] pwc: recv_control_msg error -32 req 02 val 2100 [ 666.404026][T14032] pwc: recv_control_msg error -32 req 04 val 1500 [ 666.424592][T14032] pwc: recv_control_msg error -32 req 02 val 2500 [ 666.446954][T14032] pwc: recv_control_msg error -32 req 02 val 2400 [ 666.474365][T14032] pwc: recv_control_msg error -32 req 02 val 2600 [ 666.582678][T15155] syz.0.2781 (15155) used greatest stack depth: 19272 bytes left [ 666.684053][T14032] pwc: recv_control_msg error -71 req 02 val 2800 [ 666.714620][T14032] pwc: recv_control_msg error -71 req 04 val 1100 [ 666.738757][T14032] pwc: recv_control_msg error -71 req 04 val 1200 [ 666.776221][T14032] pwc: Registered as video103. [ 666.804404][T14032] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63 [ 666.861583][T14032] usb 4-1: USB disconnect, device number 89 [ 667.551704][T13628] Bluetooth: hci0: command 0x0406 tx timeout [ 667.717236][T15186] jffs2: notice: (15186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 670.608227][T13353] block nbd10: Possible stuck request ffff888022618000: control (read@0,1024B). Runtime 120 seconds [ 670.619294][ T55] block nbd4: Possible stuck request ffff888022410000: control (read@0,1024B). Runtime 150 seconds [ 670.630368][T13353] block nbd10: Possible stuck request ffff888022618200: control (read@1024,1024B). Runtime 120 seconds [ 670.641694][ T55] block nbd4: Possible stuck request ffff888022410200: control (read@1024,1024B). Runtime 150 seconds [ 670.653052][T13353] block nbd10: Possible stuck request ffff888022618400: control (read@2048,1024B). Runtime 120 seconds [ 670.664409][ T55] block nbd4: Possible stuck request ffff888022410400: control (read@2048,1024B). Runtime 150 seconds [ 670.675514][T13353] block nbd10: Possible stuck request ffff888022618600: control (read@3072,1024B). Runtime 120 seconds [ 670.686930][ T55] block nbd4: Possible stuck request ffff888022410600: control (read@3072,1024B). Runtime 150 seconds [ 670.704539][ T5143] udevd[5143]: worker [13759] /devices/virtual/block/nbd6 is taking a long time [ 670.822315][ T5143] udevd[5143]: worker [13683] /devices/virtual/block/nbd5 is taking a long time [ 670.879824][ T5143] udevd[5143]: worker [5859] /devices/virtual/block/nbd0 is taking a long time [ 670.890572][ T5143] udevd[5143]: worker [6287] /devices/virtual/block/nbd1 is taking a long time [ 670.991702][ T5143] udevd[5143]: worker [5857] /devices/virtual/block/nbd2 is taking a long time [ 671.000921][ T5143] udevd[5143]: worker [9044] /devices/virtual/block/nbd4 is taking a long time [ 671.061731][ T5143] udevd[5143]: worker [13718] /devices/virtual/block/nbd7 is taking a long time [ 671.083830][ T5143] udevd[5143]: worker [5787] /devices/virtual/block/nbd3 is taking a long time [ 671.141628][ T5143] udevd[5143]: worker [5784] /devices/virtual/block/nbd9 is taking a long time [ 671.153276][ T5143] udevd[5143]: worker [5793] /devices/virtual/block/nbd8 is taking a long time [ 671.701583][T11701] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 672.518428][ T1062] block nbd5: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 150 seconds [ 672.529579][ T1062] block nbd5: Possible stuck request ffff888022440200: control (read@1024,1024B). Runtime 150 seconds [ 672.541767][ T1062] block nbd5: Possible stuck request ffff888022440400: control (read@2048,1024B). Runtime 150 seconds [ 672.553379][ T1062] block nbd5: Possible stuck request ffff888022440600: control (read@3072,1024B). Runtime 150 seconds [ 673.112655][T11701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.473740][T11701] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.483366][T11701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.496471][T11701] usb 2-1: config 0 descriptor?? [ 674.608761][T11701] usb 2-1: can't set config #0, error -71 [ 674.628778][T11701] usb 2-1: USB disconnect, device number 106 [ 676.998993][T13463] block nbd11: Possible stuck request ffff888022698000: control (read@0,4096B). Runtime 120 seconds [ 677.029995][T14693] block nbd0: Possible stuck request ffff8880222a0000: control (read@0,1024B). Runtime 180 seconds [ 677.066442][T14693] block nbd0: Possible stuck request ffff8880222a0200: control (read@1024,1024B). Runtime 180 seconds [ 677.646836][T15226] Mass Storage Function, version: 2009/09/11 [ 677.676457][T15226] LUN: removable file: (no medium) [ 677.791872][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 678.256639][T15246] binder: 15245:15246 ioctl c0306201 200000000080 returned -14 [ 678.281077][T15246] binder: 15245:15246 ioctl c0306201 2000000003c0 returned -14 [ 678.351711][ T5843] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 678.497561][T15254] dvmrp0: entered allmulticast mode [ 678.556172][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.566801][ T5843] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 678.576525][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.597296][ T5843] usb 1-1: config 0 descriptor?? [ 678.615114][ T5843] pwc: Askey VC010 type 2 USB webcam detected. [ 678.996121][ T1062] block nbd0: Possible stuck request ffff8880222a0400: control (read@2048,1024B). Runtime 180 seconds [ 679.008022][ T1062] block nbd0: Possible stuck request ffff8880222a0600: control (read@3072,1024B). Runtime 180 seconds [ 679.035571][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00 [ 679.056434][T15271] nbd28: detected capacity change from 0 to 63 [ 679.580001][T13353] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 150 seconds [ 679.611318][T13353] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 150 seconds [ 680.372295][T13353] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 150 seconds [ 680.403659][T13353] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 150 seconds [ 680.742478][ T5843] pwc: recv_control_msg error -32 req 02 val 2700 [ 682.157394][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00 [ 682.525409][T13628] block nbd28: Receive control failed (result -32) [ 682.755702][ T5143] udevd[5143]: worker [5859] /devices/virtual/block/nbd0 timeout; kill it [ 682.930184][ T5143] udevd[5143]: seq 19490 '/devices/virtual/block/nbd0' killed [ 684.040194][ T5843] pwc: recv_control_msg error -71 req 04 val 1000 [ 684.165040][ T5843] pwc: recv_control_msg error -71 req 04 val 1300 [ 684.286079][ T5843] pwc: recv_control_msg error -71 req 04 val 1400 [ 684.410536][ T5843] pwc: recv_control_msg error -71 req 02 val 2000 [ 684.475754][T14693] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 150 seconds [ 684.486614][T14693] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 150 seconds [ 684.497775][ T5843] pwc: recv_control_msg error -71 req 02 val 2100 [ 684.502167][T14693] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 150 seconds [ 684.515635][T14693] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 150 seconds [ 684.574483][ T5843] pwc: recv_control_msg error -71 req 04 val 1500 [ 684.616088][ T5843] pwc: recv_control_msg error -71 req 02 val 2500 [ 684.681355][ T55] block nbd1: Possible stuck request ffff888022318000: control (read@0,1024B). Runtime 180 seconds [ 684.693485][ T5843] pwc: recv_control_msg error -71 req 02 val 2400 [ 684.700522][ T5843] pwc: recv_control_msg error -71 req 02 val 2600 [ 684.708110][ T5843] pwc: recv_control_msg error -71 req 02 val 2900 [ 684.716652][ T5843] pwc: recv_control_msg error -71 req 02 val 2800 [ 684.723260][ T55] block nbd1: Possible stuck request ffff888022318200: control (read@1024,1024B). Runtime 180 seconds [ 684.739422][ T5843] pwc: recv_control_msg error -71 req 04 val 1100 [ 684.746815][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 684.756362][ T55] block nbd1: Possible stuck request ffff888022318400: control (read@2048,1024B). Runtime 180 seconds [ 684.768586][ T5843] pwc: Registered as video103. [ 684.776418][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input64 [ 684.791130][ T5843] usb 1-1: USB disconnect, device number 103 [ 684.798795][ T55] block nbd1: Possible stuck request ffff888022318600: control (read@3072,1024B). Runtime 180 seconds [ 684.924353][T12761] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 685.122188][T12761] usb 3-1: no configurations [ 685.127056][T12761] usb 3-1: can't read configurations, error -22 [ 685.161562][ T5822] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 685.292390][T12761] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 685.355427][ T5822] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 685.380299][ T5822] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 685.409210][ T5822] usb 2-1: config 220 has no interface number 2 [ 685.416108][ T5822] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 685.438741][ T5822] usb 2-1: config 220 interface 0 has no altsetting 0 [ 685.449502][ T5822] usb 2-1: config 220 interface 76 has no altsetting 0 [ 685.468356][ T5822] usb 2-1: config 220 interface 1 has no altsetting 0 [ 685.496742][ T5822] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 685.511358][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.520082][T12761] usb 3-1: no configurations [ 685.524958][T12761] usb 3-1: can't read configurations, error -22 [ 685.531320][ T5822] usb 2-1: Product: syz [ 685.543720][T12761] usb usb3-port1: attempt power cycle [ 685.551322][ T5822] usb 2-1: Manufacturer: syz [ 685.566904][ T5822] usb 2-1: SerialNumber: syz [ 685.802948][ T5822] usb 2-1: selecting invalid altsetting 0 [ 685.821627][ T5843] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 685.822488][ T5822] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 685.856017][ T5822] usb 2-1: No valid video chain found. [ 685.874757][ T5822] usb 2-1: selecting invalid altsetting 0 [ 685.896656][ T5822] usbtest: probe of 2-1:220.1 failed with error -22 [ 685.913669][ T5822] usb 2-1: USB disconnect, device number 107 [ 685.970663][T14693] block nbd8: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 150 seconds [ 685.974701][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.984785][T14693] block nbd8: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 150 seconds [ 685.993629][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.999444][T14693] block nbd8: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 150 seconds [ 686.016302][T12761] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 686.024253][T14693] block nbd8: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 150 seconds [ 686.038405][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.063131][T12761] usb 3-1: no configurations [ 686.067969][T12761] usb 3-1: can't read configurations, error -22 [ 686.076944][ T5843] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 686.091848][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.112569][ T5843] usb 1-1: config 0 descriptor?? [ 686.126884][ T5843] pwc: Askey VC010 type 2 USB webcam detected. [ 686.231656][T12761] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 686.272075][T12761] usb 3-1: no configurations [ 686.279623][T12761] usb 3-1: can't read configurations, error -22 [ 686.290105][T12761] usb usb3-port1: unable to enumerate USB device [ 686.544525][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00 [ 686.552510][ T5843] pwc: recv_control_msg error -32 req 02 val 2700 [ 686.559896][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00 [ 686.582097][ T5843] pwc: recv_control_msg error -32 req 04 val 1000 [ 686.607271][ T5843] pwc: recv_control_msg error -32 req 04 val 1300 [ 686.632256][ T5843] pwc: recv_control_msg error -32 req 04 val 1400 [ 686.643253][ T5843] pwc: recv_control_msg error -32 req 02 val 2000 [ 686.673833][ T5843] pwc: recv_control_msg error -32 req 02 val 2100 [ 686.681386][ T5843] pwc: recv_control_msg error -32 req 04 val 1500 [ 686.703038][ T5843] pwc: recv_control_msg error -32 req 02 val 2500 [ 686.710468][ T5843] pwc: recv_control_msg error -32 req 02 val 2400 [ 686.722335][ T5843] pwc: recv_control_msg error -32 req 02 val 2600 [ 686.937418][ T5843] pwc: recv_control_msg error -71 req 02 val 2800 [ 686.962370][ T5843] pwc: recv_control_msg error -71 req 04 val 1100 [ 686.980148][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 687.002205][ T5843] pwc: Registered as video103. [ 687.015779][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 687.050623][ T5843] usb 1-1: USB disconnect, device number 104 [ 687.062166][T15347] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 687.068745][T15347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 687.111810][T15347] vhci_hcd vhci_hcd.0: Device attached [ 687.381581][T12761] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 687.382458][T11701] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 687.587658][T11701] usb 4-1: config 0 has no interfaces? [ 687.599965][T11701] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 687.619388][T11701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.647650][T11701] usb 4-1: config 0 descriptor?? [ 687.915061][T15349] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 687.937557][T11701] usb 4-1: USB disconnect, device number 90 [ 687.954211][T14940] vhci_hcd: stop threads [ 687.961973][T14940] vhci_hcd: release socket [ 687.981248][T14940] vhci_hcd: disconnect device [ 688.061953][ T5823] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 688.284878][ T5823] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 688.327333][ T5823] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 688.354523][ T5823] usb 2-1: config 220 has no interface number 2 [ 688.360921][ T5823] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 688.421941][ T5823] usb 2-1: config 220 interface 0 has no altsetting 0 [ 688.428827][ T5823] usb 2-1: config 220 interface 76 has no altsetting 0 [ 688.461489][ T5823] usb 2-1: config 220 interface 1 has no altsetting 0 [ 688.485796][ T5823] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 688.515647][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.535938][ T5823] usb 2-1: Product: syz [ 688.540195][ T5823] usb 2-1: Manufacturer: syz [ 688.581492][ T5823] usb 2-1: SerialNumber: syz [ 688.829955][ T5823] usb 2-1: selecting invalid altsetting 0 [ 688.856323][ T5823] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 688.879092][ T5823] usb 2-1: No valid video chain found. [ 688.898234][ T5823] usb 2-1: selecting invalid altsetting 0 [ 688.911868][ T5823] usbtest: probe of 2-1:220.1 failed with error -22 [ 688.941824][ T5823] usb 2-1: USB disconnect, device number 108 [ 689.121826][T11701] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 689.221943][ T5846] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 689.343660][T11701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.372480][T11701] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 689.396920][T11701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.432414][ T5846] usb 1-1: no configurations [ 689.499929][T11701] usb 4-1: config 0 descriptor?? [ 689.625118][T15393] nbd29: detected capacity change from 0 to 63 [ 689.689766][T11701] pwc: Askey VC010 type 2 USB webcam detected. [ 690.216614][T11701] pwc: recv_control_msg error -32 req 02 val 2b00 [ 690.293061][T11701] pwc: recv_control_msg error -32 req 02 val 2700 [ 690.348189][T11701] pwc: recv_control_msg error -32 req 02 val 2c00 [ 690.426098][T11701] pwc: recv_control_msg error -32 req 04 val 1000 [ 690.490677][T11701] pwc: recv_control_msg error -32 req 04 val 1300 [ 690.556476][T11701] pwc: recv_control_msg error -32 req 04 val 1400 [ 690.577356][ T5846] usb 1-1: can't read configurations, error -22 [ 690.589074][ T1062] block nbd9: Possible stuck request ffff888022538000: control (read@0,1024B). Runtime 150 seconds [ 690.617908][ T1062] block nbd9: Possible stuck request ffff888022538200: control (read@1024,1024B). Runtime 150 seconds [ 690.617958][T11701] pwc: recv_control_msg error -32 req 02 val 2000 [ 690.660194][ T1062] block nbd9: Possible stuck request ffff888022538400: control (read@2048,1024B). Runtime 150 seconds [ 690.777356][T11701] pwc: recv_control_msg error -32 req 02 val 2100 [ 690.839183][T11701] pwc: recv_control_msg error -32 req 04 val 1500 [ 690.911379][T11701] pwc: recv_control_msg error -32 req 02 val 2500 [ 690.977235][T11701] pwc: recv_control_msg error -32 req 02 val 2400 [ 691.045173][T11701] pwc: recv_control_msg error -32 req 02 val 2600 [ 691.432665][T11701] pwc: recv_control_msg error -71 req 02 val 2800 [ 691.516389][T11701] pwc: recv_control_msg error -71 req 04 val 1100 [ 691.609542][T11701] pwc: recv_control_msg error -71 req 04 val 1200 [ 691.707658][T11701] pwc: Registered as video103. [ 691.828067][T11701] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 692.081781][T11701] usb 4-1: USB disconnect, device number 91 [ 692.422595][ T5846] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 692.511588][T12761] vhci_hcd: vhci_device speed not set [ 692.611663][T15399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.624413][T13628] block nbd29: Receive control failed (result -32) [ 692.679369][T14693] block nbd9: Possible stuck request ffff888022538600: control (read@3072,1024B). Runtime 150 seconds [ 693.082022][T11701] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 693.307201][T11701] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 693.316974][T11701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.331790][T11701] usb 4-1: Product: syz [ 693.336046][T11701] usb 4-1: Manufacturer: syz [ 693.344911][T11701] usb 4-1: SerialNumber: syz [ 693.352831][T11701] usb 4-1: config 0 descriptor?? [ 693.451998][T14342] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 693.557605][T15430] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 693.571567][T11701] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 693.584902][ T5846] usb 1-1: device descriptor read/64, error -71 [ 693.596494][T15430] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 693.672544][T14342] usb 3-1: no configurations [ 693.677696][T14342] usb 3-1: can't read configurations, error -22 [ 693.704411][ T5846] usb usb1-port1: attempt power cycle [ 693.831996][T14342] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 694.033050][T14342] usb 3-1: no configurations [ 694.047244][T14342] usb 3-1: can't read configurations, error -22 [ 694.063891][T14342] usb usb3-port1: attempt power cycle [ 694.131795][ T5846] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 694.174521][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.201580][ T5846] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 694.210689][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.243777][ T5846] usb 1-1: config 0 descriptor?? [ 694.272067][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 694.530147][T14342] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 694.592168][T14342] usb 3-1: no configurations [ 694.607448][T14342] usb 3-1: can't read configurations, error -22 [ 694.675256][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 694.688011][ T5846] pwc: recv_control_msg error -32 req 02 val 2700 [ 694.702433][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 694.710061][ T5846] pwc: recv_control_msg error -32 req 04 val 1000 [ 694.723686][ T5846] pwc: recv_control_msg error -32 req 04 val 1300 [ 694.734484][ T5846] pwc: recv_control_msg error -32 req 04 val 1400 [ 694.748300][ T5846] pwc: recv_control_msg error -32 req 02 val 2000 [ 694.756912][ T5846] pwc: recv_control_msg error -32 req 02 val 2100 [ 694.774389][ T5846] pwc: recv_control_msg error -32 req 04 val 1500 [ 694.788037][ T5846] pwc: recv_control_msg error -32 req 02 val 2500 [ 694.801784][T14342] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 694.801830][ T5846] pwc: recv_control_msg error -32 req 02 val 2400 [ 694.816919][ T5846] pwc: recv_control_msg error -32 req 02 val 2600 [ 694.830145][T11701] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 694.856241][T11701] usb 4-1: USB disconnect, device number 92 [ 694.864820][T14342] usb 3-1: no configurations [ 694.869470][T14342] usb 3-1: can't read configurations, error -22 [ 694.887709][T14342] usb usb3-port1: unable to enumerate USB device [ 695.039976][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 695.048827][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 695.064750][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 695.081889][ T5846] pwc: Registered as video103. [ 695.090496][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input67 [ 695.130437][ T5846] usb 1-1: USB disconnect, device number 107 [ 695.505008][T15450] nbd30: detected capacity change from 0 to 63 [ 695.606231][ T1062] block nbd2: Possible stuck request ffff888022348000: control (read@0,1024B). Runtime 180 seconds [ 695.621241][T14693] block nbd3: Possible stuck request ffff888022380000: control (read@0,1024B). Runtime 180 seconds [ 695.632831][ T1062] block nbd2: Possible stuck request ffff888022348200: control (read@1024,1024B). Runtime 180 seconds [ 695.647419][T14693] block nbd3: Possible stuck request ffff888022380200: control (read@1024,1024B). Runtime 180 seconds [ 695.661114][T14693] block nbd3: Possible stuck request ffff888022380400: control (read@2048,1024B). Runtime 180 seconds [ 695.691952][ T1062] block nbd2: Possible stuck request ffff888022348400: control (read@2048,1024B). Runtime 180 seconds [ 695.704328][ T1062] block nbd2: Possible stuck request ffff888022348600: control (read@3072,1024B). Runtime 180 seconds [ 695.716419][T14693] block nbd3: Possible stuck request ffff888022380600: control (read@3072,1024B). Runtime 180 seconds [ 697.561822][T12761] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 697.964198][T12761] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 698.063955][T12761] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 698.163820][T12761] usb 4-1: config 220 has no interface number 2 [ 698.227545][T12761] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 698.333111][T13628] block nbd30: Receive control failed (result -32) [ 698.366658][T12761] usb 4-1: config 220 interface 0 has no altsetting 0 [ 698.401791][T12761] usb 4-1: config 220 interface 76 has no altsetting 0 [ 698.408725][T12761] usb 4-1: config 220 interface 1 has no altsetting 0 [ 698.437440][T12761] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 698.485009][T12761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.512403][T12761] usb 4-1: Product: syz [ 698.521830][T12761] usb 4-1: Manufacturer: syz [ 698.526680][T12761] usb 4-1: SerialNumber: syz [ 698.836866][T12761] usb 4-1: selecting invalid altsetting 0 [ 698.927712][T12761] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 699.018472][T12761] usb 4-1: No valid video chain found. [ 699.047224][T15481] nbd31: detected capacity change from 0 to 63 [ 699.239688][T12761] usb 4-1: selecting invalid altsetting 0 [ 699.314495][T12761] usbtest: probe of 4-1:220.1 failed with error -22 [ 699.511333][T12761] usb 4-1: USB disconnect, device number 93 [ 700.082084][ T8] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 700.469925][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 700.566448][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.689862][T13353] block nbd10: Possible stuck request ffff888022618000: control (read@0,1024B). Runtime 150 seconds [ 700.701819][ T8] usb 1-1: Product: syz [ 700.701844][ T8] usb 1-1: Manufacturer: syz [ 700.701863][ T8] usb 1-1: SerialNumber: syz [ 700.714711][ T8] usb 1-1: config 0 descriptor?? [ 700.717969][ T24] block nbd4: Possible stuck request ffff888022410000: control (read@0,1024B). Runtime 180 seconds [ 700.781749][ T24] block nbd4: Possible stuck request ffff888022410200: control (read@1024,1024B). Runtime 180 seconds [ 700.796741][T13353] block nbd10: Possible stuck request ffff888022618200: control (read@1024,1024B). Runtime 150 seconds [ 700.835618][ T24] block nbd4: Possible stuck request ffff888022410400: control (read@2048,1024B). Runtime 180 seconds [ 700.850704][T13353] block nbd10: Possible stuck request ffff888022618400: control (read@2048,1024B). Runtime 150 seconds [ 700.891757][ T24] block nbd4: Possible stuck request ffff888022410600: control (read@3072,1024B). Runtime 180 seconds [ 700.937579][T13353] block nbd10: Possible stuck request ffff888022618600: control (read@3072,1024B). Runtime 150 seconds [ 701.106833][T12761] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 701.195119][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 701.472308][T12761] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.632687][T12761] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 701.721747][T12761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.775381][T13628] block nbd31: Receive control failed (result -32) [ 701.813116][T12761] usb 4-1: config 0 descriptor?? [ 701.846845][T12761] pwc: Askey VC010 type 2 USB webcam detected. [ 702.111695][ T5822] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 702.261249][T12761] pwc: recv_control_msg error -32 req 02 val 2b00 [ 702.280113][T12761] pwc: recv_control_msg error -32 req 02 val 2700 [ 702.292069][T12761] pwc: recv_control_msg error -32 req 02 val 2c00 [ 702.311760][T12761] pwc: recv_control_msg error -32 req 04 val 1000 [ 702.320376][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.341606][T12761] pwc: recv_control_msg error -32 req 04 val 1300 [ 702.348351][ T5822] usb 3-1: config 0 has no interfaces? [ 702.361582][T12761] pwc: recv_control_msg error -32 req 04 val 1400 [ 702.368361][ T5822] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 702.391532][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.400627][T12761] pwc: recv_control_msg error -32 req 02 val 2000 [ 702.421592][T12761] pwc: recv_control_msg error -32 req 02 val 2100 [ 702.429976][ T5822] usb 3-1: config 0 descriptor?? [ 702.441557][T12761] pwc: recv_control_msg error -32 req 04 val 1500 [ 702.461616][T12761] pwc: recv_control_msg error -32 req 02 val 2500 [ 702.478936][T12761] pwc: recv_control_msg error -32 req 02 val 2400 [ 702.490326][T12761] pwc: recv_control_msg error -32 req 02 val 2600 [ 702.501954][ T8] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 702.513432][ T8] usb 1-1: USB disconnect, device number 108 [ 702.592921][T14693] block nbd5: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 180 seconds [ 702.604061][T14693] block nbd5: Possible stuck request ffff888022440200: control (read@1024,1024B). Runtime 180 seconds [ 702.617392][T14693] block nbd5: Possible stuck request ffff888022440400: control (read@2048,1024B). Runtime 180 seconds [ 702.628465][T14693] block nbd5: Possible stuck request ffff888022440600: control (read@3072,1024B). Runtime 180 seconds [ 702.714554][T12761] pwc: recv_control_msg error -71 req 02 val 2800 [ 702.729770][T12761] pwc: recv_control_msg error -71 req 04 val 1100 [ 702.741827][T12761] pwc: recv_control_msg error -71 req 04 val 1200 [ 702.766313][T12761] pwc: Registered as video103. [ 702.773215][T12761] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input68 [ 702.787950][T12761] usb 4-1: USB disconnect, device number 94 [ 703.073463][T15502] nbd32: detected capacity change from 0 to 63 [ 703.408147][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 705.472351][T14342] usb 3-1: USB disconnect, device number 124 [ 705.910523][T11701] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 705.980971][T13628] block nbd32: Receive control failed (result -32) [ 706.141650][T11701] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 706.160385][T11701] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 706.191197][T11701] usb 1-1: config 220 has no interface number 2 [ 706.222221][T11701] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 706.238069][T11701] usb 1-1: config 220 interface 0 has no altsetting 0 [ 706.247470][T11701] usb 1-1: config 220 interface 76 has no altsetting 0 [ 706.255441][T11701] usb 1-1: config 220 interface 1 has no altsetting 0 [ 706.265518][T11701] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 706.282501][T11701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.300961][T11701] usb 1-1: Product: syz [ 706.305898][T11701] usb 1-1: Manufacturer: syz [ 706.310542][T11701] usb 1-1: SerialNumber: syz [ 706.583013][T11701] usb 1-1: selecting invalid altsetting 0 [ 706.589461][T11701] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 706.611766][T11701] usb 1-1: No valid video chain found. [ 706.621719][ T5846] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 706.648607][T11701] usb 1-1: selecting invalid altsetting 0 [ 706.665478][T11701] usbtest: probe of 1-1:220.1 failed with error -22 [ 706.688352][T11701] usb 1-1: USB disconnect, device number 109 [ 706.825088][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.851950][ T5846] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 706.861229][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.874671][ T5846] usb 3-1: config 0 descriptor?? [ 706.887041][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 707.076284][T14693] block nbd11: Possible stuck request ffff888022698000: control (read@0,4096B). Runtime 150 seconds [ 707.090314][ T1062] block nbd0: Possible stuck request ffff8880222a0000: control (read@0,1024B). Runtime 210 seconds [ 707.111955][ T1062] block nbd0: Possible stuck request ffff8880222a0200: control (read@1024,1024B). Runtime 210 seconds [ 707.332330][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 707.347932][ T5846] pwc: recv_control_msg error -32 req 02 val 2700 [ 707.359144][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 707.367213][ T5846] pwc: recv_control_msg error -32 req 04 val 1000 [ 707.376701][ T5846] pwc: recv_control_msg error -32 req 04 val 1300 [ 707.394933][ T5846] pwc: recv_control_msg error -32 req 04 val 1400 [ 707.412333][ T5846] pwc: recv_control_msg error -32 req 02 val 2000 [ 707.425480][ T5846] pwc: recv_control_msg error -32 req 02 val 2100 [ 707.442484][ T5846] pwc: recv_control_msg error -32 req 04 val 1500 [ 707.451940][ T5846] pwc: recv_control_msg error -32 req 02 val 2500 [ 707.470053][ T8] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 707.479509][ T5846] pwc: recv_control_msg error -32 req 02 val 2400 [ 707.503597][ T5846] pwc: recv_control_msg error -32 req 02 val 2600 [ 707.673993][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.694663][ T8] usb 2-1: config 0 has no interfaces? [ 707.700326][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 707.722734][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 707.730312][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.738979][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 707.745976][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 707.761052][ T8] usb 2-1: config 0 descriptor?? [ 707.769276][ T5846] pwc: Registered as video103. [ 707.789778][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 707.832234][ T5846] usb 3-1: USB disconnect, device number 125 [ 708.070233][T15558] nbd33: detected capacity change from 0 to 63 [ 709.075499][ T1062] block nbd0: Possible stuck request ffff8880222a0400: control (read@2048,1024B). Runtime 210 seconds [ 709.090678][ T1062] block nbd0: Possible stuck request ffff8880222a0600: control (read@3072,1024B). Runtime 210 seconds [ 709.647912][T13353] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 180 seconds [ 711.408536][T13353] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 180 seconds [ 711.412404][T13628] block nbd33: Receive control failed (result -32) [ 711.433297][T13353] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 180 seconds [ 711.444453][T13353] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 180 seconds [ 711.513433][T15569] nbd34: detected capacity change from 0 to 63 [ 711.549791][T13628] block nbd34: Receive control failed (result -32) [ 711.579267][ T8] usb 2-1: USB disconnect, device number 109 [ 711.903083][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'. [ 712.301607][ T5846] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 712.375787][T15600] nbd35: detected capacity change from 0 to 63 [ 712.406781][T15592] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 712.413342][T15592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 712.567239][T15592] vhci_hcd vhci_hcd.0: Device attached [ 712.682615][ T5823] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 713.731471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 713.760862][ T5823] usb 4-1: config 0 has no interfaces? [ 714.717882][T11701] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 714.771288][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.049914][T14693] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 180 seconds [ 715.066264][T14693] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 180 seconds [ 715.117497][T14693] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 180 seconds [ 715.173333][T14693] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 180 seconds [ 715.449047][T15608] nbd36: detected capacity change from 0 to 63 [ 715.643705][ T5846] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 715.824267][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.932221][T13628] block nbd35: Receive control failed (result -32) [ 716.013462][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.037776][ T1062] block nbd8: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 180 seconds [ 716.048790][ T1062] block nbd8: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 180 seconds [ 716.061322][ T1062] block nbd8: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 180 seconds [ 716.072796][ T1062] block nbd8: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 180 seconds [ 716.144215][ T5846] usb 1-1: config 0 descriptor?? [ 716.410401][ T5846] usb 1-1: can't set config #0, error -71 [ 716.558469][T15602] vhci_hcd: connection closed [ 716.569689][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.584693][ T5846] usb 1-1: USB disconnect, device number 110 [ 716.601514][ T144] vhci_hcd: stop threads [ 716.640246][ T5782] block nbd36: Receive control failed (result -32) [ 716.661502][ T144] vhci_hcd: release socket [ 716.667296][ T5823] usb 4-1: config 0 descriptor?? [ 716.682024][ T24] block nbd1: Possible stuck request ffff888022318000: control (read@0,1024B). Runtime 210 seconds [ 716.692934][ T24] block nbd1: Possible stuck request ffff888022318200: control (read@1024,1024B). Runtime 210 seconds [ 716.721536][ T24] block nbd1: Possible stuck request ffff888022318400: control (read@2048,1024B). Runtime 210 seconds [ 716.736265][ T24] block nbd1: Possible stuck request ffff888022318600: control (read@3072,1024B). Runtime 210 seconds [ 716.748348][ T144] vhci_hcd: disconnect device [ 716.752450][ T5823] usb 4-1: can't set config #0, error -71 [ 716.760398][ T5823] usb 4-1: USB disconnect, device number 95 [ 716.987558][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2942'. [ 718.582315][T15642] binder: 15641:15642 ioctl c0306201 200000000080 returned -14 [ 718.699503][T15642] binder: 15641:15642 ioctl c0306201 2000000003c0 returned -14 [ 718.746361][T15644] binder_alloc: 15641: binder_alloc_buf, no vma [ 720.434003][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2955'. [ 720.521658][ T5846] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 720.752347][ T5846] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 720.781016][ T5846] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 720.816230][ T5846] usb 2-1: config 220 has no interface number 2 [ 720.833508][ T5846] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 720.854857][ T5846] usb 2-1: config 220 interface 0 has no altsetting 0 [ 720.866297][ T5846] usb 2-1: config 220 interface 76 has no altsetting 0 [ 720.885885][ T5846] usb 2-1: config 220 interface 1 has no altsetting 0 [ 720.900344][ T5846] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 720.925157][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.941615][ T5846] usb 2-1: Product: syz [ 720.947343][ T5846] usb 2-1: Manufacturer: syz [ 720.958393][ T5846] usb 2-1: SerialNumber: syz [ 721.160003][ T1062] block nbd9: Possible stuck request ffff888022538000: control (read@0,1024B). Runtime 180 seconds [ 721.171600][ T1062] block nbd9: Possible stuck request ffff888022538200: control (read@1024,1024B). Runtime 180 seconds [ 721.185361][ T1062] block nbd9: Possible stuck request ffff888022538400: control (read@2048,1024B). Runtime 180 seconds [ 721.208330][ T5846] usb 2-1: selecting invalid altsetting 0 [ 721.222064][ T5846] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 721.223425][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2964'. [ 721.228452][ T5846] usb 2-1: No valid video chain found. [ 721.253339][ T5846] usb 2-1: selecting invalid altsetting 0 [ 721.259137][ T5846] usbtest: probe of 2-1:220.1 failed with error -22 [ 721.270637][ T5846] usb 2-1: USB disconnect, device number 110 [ 721.699121][ T5782] Bluetooth: hci3: unexpected event for opcode 0x000e [ 721.715814][T11701] vhci_hcd: vhci_device speed not set [ 722.241632][ T8] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 722.433419][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 722.443818][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 722.455742][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 722.467080][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 722.478504][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 722.489667][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 722.505017][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 722.519981][ T8] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 722.531581][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.549633][ T8] usb 2-1: Product: syz [ 722.554169][ T8] usb 2-1: Manufacturer: syz [ 722.558882][ T8] usb 2-1: SerialNumber: syz [ 722.576512][T15705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.584591][T15705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.594644][T15705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.609878][T15705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.619751][T15705] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.646759][ T8] usb 2-1: USB2VGA dongle found at address 111 [ 722.654502][ T8] usb 2-1: Allocated 8 output buffers [ 722.660012][ T8] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 722.752018][ T1062] block nbd9: Possible stuck request ffff888022538600: control (read@3072,1024B). Runtime 180 seconds [ 722.857554][ T8] usb 2-1: USB disconnect, device number 111 [ 723.868289][ T5822] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 724.058967][ T5822] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 724.067384][ T5822] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 724.078022][ T5822] usb 2-1: config 220 has no interface number 2 [ 724.084510][ T5822] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 724.097762][ T5822] usb 2-1: config 220 interface 0 has no altsetting 0 [ 724.104791][ T5822] usb 2-1: config 220 interface 76 has no altsetting 0 [ 724.111782][ T5822] usb 2-1: config 220 interface 1 has no altsetting 0 [ 724.122217][ T5822] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 724.131313][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.139446][ T5822] usb 2-1: Product: syz [ 724.143707][ T5822] usb 2-1: Manufacturer: syz [ 724.148360][ T5822] usb 2-1: SerialNumber: syz [ 724.382666][ T5822] usb 2-1: selecting invalid altsetting 0 [ 724.398167][ T5822] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 724.405695][ T5822] usb 2-1: No valid video chain found. [ 724.423036][ T5822] usb 2-1: selecting invalid altsetting 0 [ 724.428839][ T5822] usbtest: probe of 2-1:220.1 failed with error -22 [ 724.438619][ T5822] usb 2-1: USB disconnect, device number 112 [ 724.656958][T15699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.980505][T15733] nbd37: detected capacity change from 0 to 63 [ 725.296551][T13628] Bluetooth: hci1: unexpected event for opcode 0x000e [ 726.278631][T14693] block nbd2: Possible stuck request ffff888022348000: control (read@0,1024B). Runtime 210 seconds [ 726.289748][ T1062] block nbd3: Possible stuck request ffff888022380000: control (read@0,1024B). Runtime 210 seconds [ 726.303508][T14693] block nbd2: Possible stuck request ffff888022348200: control (read@1024,1024B). Runtime 210 seconds [ 726.317536][ T1062] block nbd3: Possible stuck request ffff888022380200: control (read@1024,1024B). Runtime 210 seconds [ 726.330027][T14693] block nbd2: Possible stuck request ffff888022348400: control (read@2048,1024B). Runtime 210 seconds [ 726.342542][ T1062] block nbd3: Possible stuck request ffff888022380400: control (read@2048,1024B). Runtime 210 seconds [ 726.355933][T14693] block nbd2: Possible stuck request ffff888022348600: control (read@3072,1024B). Runtime 210 seconds [ 726.367181][ T1062] block nbd3: Possible stuck request ffff888022380600: control (read@3072,1024B). Runtime 210 seconds [ 727.876044][ T5782] block nbd37: Receive control failed (result -32) [ 727.928131][T15754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2989'. [ 728.241809][ T5846] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 728.442797][ T5846] usb 1-1: not running at top speed; connect to a high speed hub [ 728.453986][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 728.480421][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 728.493157][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 728.515824][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 728.527192][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 728.541751][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 728.556417][ T5846] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 728.566247][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.581531][ T5846] usb 1-1: Product: syz [ 728.585786][ T5846] usb 1-1: Manufacturer: syz [ 728.597580][ T5846] usb 1-1: SerialNumber: syz [ 728.612347][T15748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.625066][T15748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.632931][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2999'. [ 728.648069][T15748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.667028][T15748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.701681][T15748] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.741978][ T5846] usb 1-1: USB2VGA dongle found at address 111 [ 728.772737][ T5846] usb 1-1: Allocated 8 output buffers [ 728.778208][ T5846] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 728.979578][ T5822] usb 1-1: USB disconnect, device number 111 [ 729.141673][T11701] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 729.326002][T15811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3010'. [ 729.342925][T11701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.361487][T11701] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 729.380476][T11701] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 729.389989][T11701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.401123][T11701] usb 3-1: config 0 descriptor?? [ 731.392052][T13353] block nbd4: Possible stuck request ffff888022410000: control (read@0,1024B). Runtime 210 seconds [ 731.403053][ T24] block nbd10: Possible stuck request ffff888022618000: control (read@0,1024B). Runtime 180 seconds [ 731.414237][T13353] block nbd4: Possible stuck request ffff888022410200: control (read@1024,1024B). Runtime 210 seconds [ 731.427468][ T24] block nbd10: Possible stuck request ffff888022618200: control (read@1024,1024B). Runtime 180 seconds [ 731.438673][T13353] block nbd4: Possible stuck request ffff888022410400: control (read@2048,1024B). Runtime 210 seconds [ 731.449752][ T24] block nbd10: Possible stuck request ffff888022618400: control (read@2048,1024B). Runtime 180 seconds [ 731.460955][T13353] block nbd4: Possible stuck request ffff888022410600: control (read@3072,1024B). Runtime 210 seconds [ 731.472152][ T24] block nbd10: Possible stuck request ffff888022618600: control (read@3072,1024B). Runtime 180 seconds [ 731.876151][ T8] usb 3-1: USB disconnect, device number 126 [ 732.315337][T15809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.703729][ T1062] block nbd5: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 210 seconds [ 732.716646][ T1062] block nbd5: Possible stuck request ffff888022440200: control (read@1024,1024B). Runtime 210 seconds [ 732.727789][ T1062] block nbd5: Possible stuck request ffff888022440400: control (read@2048,1024B). Runtime 210 seconds [ 732.739606][ T1062] block nbd5: Possible stuck request ffff888022440600: control (read@3072,1024B). Runtime 210 seconds [ 732.776461][T15854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3020'. [ 732.872551][ T5782] Bluetooth: hci3: unexpected event for opcode 0x000e [ 736.080693][T15864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.514833][T15894] nbd38: detected capacity change from 0 to 63 [ 737.167409][ T1062] block nbd11: Possible stuck request ffff888022698000: control (read@0,4096B). Runtime 180 seconds [ 737.182935][T14693] block nbd0: Possible stuck request ffff8880222a0000: control (read@0,1024B). Runtime 240 seconds [ 737.197271][T14693] block nbd0: Possible stuck request ffff8880222a0200: control (read@1024,1024B). Runtime 240 seconds [ 738.458381][T15908] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 738.560833][T15911] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 739.152086][T14693] block nbd0: Possible stuck request ffff8880222a0400: control (read@2048,1024B). Runtime 240 seconds [ 739.163392][T14693] block nbd0: Possible stuck request ffff8880222a0600: control (read@3072,1024B). Runtime 240 seconds [ 739.441679][ T5782] block nbd38: Receive control failed (result -32) [ 739.711767][T13353] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 210 seconds [ 739.850751][T15931] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 739.884321][T15933] nbd39: detected capacity change from 0 to 63 [ 740.065499][T15936] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 741.511844][T13353] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 210 seconds [ 741.554322][T13353] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 210 seconds [ 741.594259][T13353] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 210 seconds [ 741.859622][T15947] fuse: Bad value for 'user_id' [ 742.822337][ T5782] block nbd39: Receive control failed (result -32) [ 743.254387][T15969] nbd40: detected capacity change from 0 to 63 [ 745.514511][ T1062] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 210 seconds [ 745.533041][ T1062] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 210 seconds [ 745.574763][ T1062] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 210 seconds [ 745.614951][ T1062] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 210 seconds [ 746.084349][ T5782] block nbd40: Receive control failed (result -32) [ 746.125075][T14693] block nbd8: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 210 seconds [ 746.137286][T14693] block nbd8: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 210 seconds [ 746.148526][T14693] block nbd8: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 210 seconds [ 746.160406][T14693] block nbd8: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 210 seconds [ 746.567079][T16001] autofs4:pid:16001:autofs_fill_super: called with bogus options [ 746.767141][ T24] block nbd1: Possible stuck request ffff888022318000: control (read@0,1024B). Runtime 240 seconds [ 746.778289][ T24] block nbd1: Possible stuck request ffff888022318200: control (read@1024,1024B). Runtime 240 seconds [ 746.791116][ T24] block nbd1: Possible stuck request ffff888022318400: control (read@2048,1024B). Runtime 240 seconds [ 746.802346][ T24] block nbd1: Possible stuck request ffff888022318600: control (read@3072,1024B). Runtime 240 seconds [ 746.961549][T14342] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 747.145334][T14342] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 747.158946][T14342] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 747.169683][T14342] usb 4-1: config 220 has no interface number 2 [ 747.178001][T14342] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 747.194838][T14342] usb 4-1: config 220 interface 0 has no altsetting 0 [ 747.202200][T14342] usb 4-1: config 220 interface 76 has no altsetting 0 [ 747.209333][T14342] usb 4-1: config 220 interface 1 has no altsetting 0 [ 747.219669][T14342] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 747.229283][T14342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.240359][T14342] usb 4-1: Product: syz [ 747.250024][T14342] usb 4-1: Manufacturer: syz [ 747.257092][T14342] usb 4-1: SerialNumber: syz [ 747.398282][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.404807][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.476739][T14342] usb 4-1: selecting invalid altsetting 0 [ 747.493007][T14342] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 747.502436][T14342] usb 4-1: No valid video chain found. [ 747.516721][T14342] usb 4-1: selecting invalid altsetting 0 [ 747.527470][T14342] usbtest: probe of 4-1:220.1 failed with error -22 [ 747.541375][T14342] usb 4-1: USB disconnect, device number 96 [ 748.320817][T15984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.223524][T16024] autofs4:pid:16024:autofs_fill_super: called with bogus options [ 749.583240][T16028] nbd41: detected capacity change from 0 to 63 [ 749.611574][T12761] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 749.657561][ T5782] block nbd41: Receive control failed (result -32) [ 749.824640][T12761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.844147][T12761] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 749.855177][T12761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.863808][T16031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 749.870398][T16031] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 749.894542][T12761] usb 2-1: config 0 descriptor?? [ 749.903924][T16031] vhci_hcd vhci_hcd.0: Device attached [ 749.912611][T16038] vhci_hcd: connection closed [ 749.913947][T14994] vhci_hcd: stop threads [ 749.932695][T12761] pwc: Askey VC010 type 2 USB webcam detected. [ 749.937742][T14994] vhci_hcd: release socket [ 749.957451][T14994] vhci_hcd: disconnect device [ 750.449707][T12761] pwc: recv_control_msg error -32 req 02 val 2b00 [ 750.457292][T12761] pwc: recv_control_msg error -32 req 02 val 2700 [ 750.471801][T12761] pwc: recv_control_msg error -32 req 02 val 2c00 [ 750.479299][T12761] pwc: recv_control_msg error -32 req 04 val 1000 [ 750.492500][T12761] pwc: recv_control_msg error -32 req 04 val 1300 [ 750.499944][T12761] pwc: recv_control_msg error -32 req 04 val 1400 [ 750.511019][T16045] nbd42: detected capacity change from 0 to 63 [ 750.521264][T12761] pwc: recv_control_msg error -32 req 02 val 2000 [ 750.529395][T12761] pwc: recv_control_msg error -32 req 02 val 2100 [ 750.538289][T12761] pwc: recv_control_msg error -32 req 04 val 1500 [ 750.571564][T12761] pwc: recv_control_msg error -32 req 02 val 2500 [ 750.578826][T12761] pwc: recv_control_msg error -32 req 02 val 2400 [ 750.587220][T12761] pwc: recv_control_msg error -32 req 02 val 2600 [ 750.667669][ T5782] block nbd42: Receive control failed (result -32) [ 750.797450][T12761] pwc: recv_control_msg error -71 req 02 val 2800 [ 750.859670][T12761] pwc: recv_control_msg error -71 req 04 val 1100 [ 750.867049][T12761] pwc: recv_control_msg error -71 req 04 val 1200 [ 750.875239][T12761] pwc: Registered as video103. [ 750.883259][T12761] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 750.896903][T12761] usb 2-1: USB disconnect, device number 113 [ 751.212223][T16054] nbd43: detected capacity change from 0 to 63 [ 751.232028][T14693] block nbd9: Possible stuck request ffff888022538000: control (read@0,1024B). Runtime 210 seconds [ 751.243097][T14693] block nbd9: Possible stuck request ffff888022538200: control (read@1024,1024B). Runtime 210 seconds [ 751.254389][T14693] block nbd9: Possible stuck request ffff888022538400: control (read@2048,1024B). Runtime 210 seconds [ 751.353282][ T5782] block nbd43: Receive control failed (result -32) [ 751.502465][T16060] autofs4:pid:16060:autofs_fill_super: called with bogus options [ 752.188994][T16084] binder: 16083:16084 ioctl c0306201 200000000080 returned -14 [ 752.234897][T16084] binder: BINDER_SET_CONTEXT_MGR already set [ 752.241395][T16084] binder: 16083:16084 ioctl 4018620d 200000000040 returned -16 [ 752.286577][T16085] binder: 16083:16085 ioctl c0306201 2000000003c0 returned -14 [ 752.833433][T14693] block nbd9: Possible stuck request ffff888022538600: control (read@3072,1024B). Runtime 210 seconds [ 753.912113][ T5782] Bluetooth: hci1: unexpected event for opcode 0x000e [ 753.964667][T16125] nbd44: detected capacity change from 0 to 63 [ 754.029688][ T5782] block nbd44: Receive control failed (result -32) [ 755.163253][T16167] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 755.169853][T16167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 755.193124][T16167] vhci_hcd vhci_hcd.0: Device attached [ 755.461591][T11701] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 755.491543][ T5823] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 755.696662][ T5823] usb 3-1: config 0 has no interfaces? [ 755.713456][ T5823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 755.753765][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.800282][ T5823] usb 3-1: config 0 descriptor?? [ 756.075129][T16171] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 756.084772][T14342] usb 3-1: USB disconnect, device number 127 [ 756.092384][ T12] vhci_hcd: stop threads [ 756.100300][ T12] vhci_hcd: release socket [ 756.131623][ T12] vhci_hcd: disconnect device [ 756.353189][ T1062] block nbd3: Possible stuck request ffff888022380000: control (read@0,1024B). Runtime 240 seconds [ 756.364293][T14693] block nbd2: Possible stuck request ffff888022348000: control (read@0,1024B). Runtime 240 seconds [ 756.375426][ T1062] block nbd3: Possible stuck request ffff888022380200: control (read@1024,1024B). Runtime 240 seconds [ 756.391638][T14693] block nbd2: Possible stuck request ffff888022348200: control (read@1024,1024B). Runtime 240 seconds [ 756.403091][T14693] block nbd2: Possible stuck request ffff888022348400: control (read@2048,1024B). Runtime 240 seconds [ 756.415786][ T1062] block nbd3: Possible stuck request ffff888022380400: control (read@2048,1024B). Runtime 240 seconds [ 756.427002][ T1062] block nbd3: Possible stuck request ffff888022380600: control (read@3072,1024B). Runtime 240 seconds [ 756.438805][T14693] block nbd2: Possible stuck request ffff888022348600: control (read@3072,1024B). Runtime 240 seconds [ 756.722654][T16198] nbd45: detected capacity change from 0 to 63 [ 756.828660][ T5782] block nbd45: Receive control failed (result -32) [ 759.082976][T12761] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 759.293902][T12761] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 759.302512][T12761] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 759.315137][T12761] usb 3-1: config 220 has no interface number 2 [ 759.324057][T12761] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 759.351159][T12761] usb 3-1: config 220 interface 0 has no altsetting 0 [ 759.377649][T12761] usb 3-1: config 220 interface 76 has no altsetting 0 [ 759.388448][T12761] usb 3-1: config 220 interface 1 has no altsetting 0 [ 759.407729][T12761] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 759.428075][T12761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.441395][T12761] usb 3-1: Product: syz [ 759.456214][T12761] usb 3-1: Manufacturer: syz [ 759.465813][T12761] usb 3-1: SerialNumber: syz [ 759.724663][T12761] usb 3-1: selecting invalid altsetting 0 [ 759.744053][T12761] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 759.750505][T12761] usb 3-1: No valid video chain found. [ 759.773250][T12761] usb 3-1: selecting invalid altsetting 0 [ 759.801597][T12761] usbtest: probe of 3-1:220.1 failed with error -22 [ 759.821091][T12761] usb 3-1: USB disconnect, device number 2 [ 760.482345][T12761] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 760.591628][T11701] vhci_hcd: vhci_device speed not set [ 760.675197][T16306] nbd46: detected capacity change from 0 to 63 [ 760.773283][T12761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.884613][T12761] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 760.975073][T12761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.144168][T12761] usb 1-1: config 0 descriptor?? [ 761.323884][T12761] pwc: Askey VC010 type 2 USB webcam detected. [ 761.839530][T12761] pwc: recv_control_msg error -32 req 02 val 2b00 [ 761.949861][T12761] pwc: recv_control_msg error -32 req 02 val 2700 [ 761.984088][T13353] block nbd4: Possible stuck request ffff888022410000: control (read@0,1024B). Runtime 240 seconds [ 761.995243][ T55] block nbd10: Possible stuck request ffff888022618000: control (read@0,1024B). Runtime 210 seconds [ 762.010083][ T55] block nbd10: Possible stuck request ffff888022618200: control (read@1024,1024B). Runtime 210 seconds [ 762.028909][T13353] block nbd4: Possible stuck request ffff888022410200: control (read@1024,1024B). Runtime 240 seconds [ 762.054755][T12761] pwc: recv_control_msg error -32 req 02 val 2c00 [ 762.065268][ T55] block nbd10: Possible stuck request ffff888022618400: control (read@2048,1024B). Runtime 210 seconds [ 762.084046][T13353] block nbd4: Possible stuck request ffff888022410400: control (read@2048,1024B). Runtime 240 seconds [ 762.104051][T12761] pwc: recv_control_msg error -32 req 04 val 1000 [ 762.125729][ T55] block nbd10: Possible stuck request ffff888022618600: control (read@3072,1024B). Runtime 210 seconds [ 762.154146][T13353] block nbd4: Possible stuck request ffff888022410600: control (read@3072,1024B). Runtime 240 seconds [ 762.168385][T12761] pwc: recv_control_msg error -32 req 04 val 1300 [ 762.272357][T12761] pwc: recv_control_msg error -32 req 04 val 1400 [ 762.376734][T12761] pwc: recv_control_msg error -32 req 02 val 2000 [ 762.461157][T12761] pwc: recv_control_msg error -32 req 02 val 2100 [ 762.535703][T12761] pwc: recv_control_msg error -32 req 04 val 1500 [ 762.621210][T12761] pwc: recv_control_msg error -32 req 02 val 2500 [ 762.698357][T12761] pwc: recv_control_msg error -32 req 02 val 2400 [ 762.784567][T12761] pwc: recv_control_msg error -32 req 02 val 2600 [ 762.792148][T14693] block nbd5: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 240 seconds [ 762.803144][T14693] block nbd5: Possible stuck request ffff888022440200: control (read@1024,1024B). Runtime 240 seconds [ 762.814456][T14693] block nbd5: Possible stuck request ffff888022440400: control (read@2048,1024B). Runtime 240 seconds [ 762.825824][T14693] block nbd5: Possible stuck request ffff888022440600: control (read@3072,1024B). Runtime 240 seconds [ 763.135843][T12761] pwc: recv_control_msg error -71 req 02 val 2800 [ 763.246935][T12761] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.353262][T12761] pwc: recv_control_msg error -71 req 04 val 1200 [ 763.488766][ T5782] block nbd46: Receive control failed (result -32) [ 763.507308][T12761] pwc: Registered as video103. [ 763.554146][T12761] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input71 [ 763.630554][T12761] usb 1-1: USB disconnect, device number 112 [ 763.891570][ T2135] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 764.113852][ T2135] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 764.148846][ T2135] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 764.169673][ T2135] usb 2-1: config 220 has no interface number 2 [ 764.189792][ T2135] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 764.212805][ T2135] usb 2-1: config 220 interface 0 has no altsetting 0 [ 764.230081][ T2135] usb 2-1: config 220 interface 76 has no altsetting 0 [ 764.243924][ T2135] usb 2-1: config 220 interface 1 has no altsetting 0 [ 764.275520][ T2135] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 764.293254][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.310164][ T2135] usb 2-1: Product: syz [ 764.318133][ T2135] usb 2-1: Manufacturer: syz [ 764.326107][ T2135] usb 2-1: SerialNumber: syz [ 764.764249][T16347] nbd47: detected capacity change from 0 to 63 [ 765.850225][ T2135] usb 2-1: selecting invalid altsetting 0 [ 766.992725][ T2135] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 766.999282][ T2135] usb 2-1: No valid video chain found. [ 767.232698][T14693] block nbd11: Possible stuck request ffff888022698000: control (read@0,4096B). Runtime 210 seconds [ 767.244210][ T1062] block nbd0: Possible stuck request ffff8880222a0000: control (read@0,1024B). Runtime 270 seconds [ 767.255999][ T1062] block nbd0: Possible stuck request ffff8880222a0200: control (read@1024,1024B). Runtime 270 seconds [ 767.533944][ T2135] usb 2-1: selecting invalid altsetting 0 [ 767.547761][ T2135] usbtest: probe of 2-1:220.1 failed with error -22 [ 767.568532][ T2135] usb 2-1: USB disconnect, device number 114 [ 767.651138][ T5782] block nbd47: Receive control failed (result -32) [ 767.741801][ T28] audit: type=1800 audit(1787193485.573:30): pid=16366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3190" name="file" dev="configfs" ino=169061 res=0 errno=0 [ 767.889503][T14342] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 767.942137][ T2135] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 768.037656][ T28] audit: type=1800 audit(1787193485.873:31): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3195" name="cdrom" dev="configfs" ino=169084 res=0 errno=0 [ 768.066433][ T28] audit: type=1800 audit(1787193485.873:32): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3195" name="file" dev="configfs" ino=169085 res=0 errno=0 [ 768.104844][T14342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.131245][T14342] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 768.154075][ T2135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.171140][T14342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.179749][ T2135] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 768.202391][T14342] usb 1-1: config 0 descriptor?? [ 768.221348][ T2135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.242175][T14342] pwc: Askey VC010 type 2 USB webcam detected. [ 768.270307][ T2135] usb 2-1: config 0 descriptor?? [ 768.301183][ T2135] pwc: Askey VC010 type 2 USB webcam detected. [ 768.481534][ T5846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 768.623907][T14342] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.644274][T14342] pwc: recv_control_msg error -32 req 02 val 2700 [ 768.657297][T14342] pwc: recv_control_msg error -32 req 02 val 2c00 [ 768.689890][T14342] pwc: recv_control_msg error -32 req 04 val 1000 [ 768.703877][T14342] pwc: recv_control_msg error -32 req 04 val 1300 [ 768.711036][ T5846] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 768.720677][ T2135] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.730101][ T5846] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 768.741766][ T2135] pwc: recv_control_msg error -32 req 02 val 2700 [ 768.748493][T14342] pwc: recv_control_msg error -32 req 04 val 1400 [ 768.752441][ T5846] usb 3-1: config 220 has no interface number 2 [ 768.761341][ T5846] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 768.775682][T14342] pwc: recv_control_msg error -32 req 02 val 2000 [ 768.782445][ T2135] pwc: recv_control_msg error -32 req 02 val 2c00 [ 768.801264][ T5846] usb 3-1: config 220 interface 0 has no altsetting 0 [ 768.809653][ T2135] pwc: recv_control_msg error -32 req 04 val 1000 [ 768.817071][ T5846] usb 3-1: config 220 interface 76 has no altsetting 0 [ 768.822232][T14342] pwc: recv_control_msg error -32 req 02 val 2100 [ 768.831828][T14342] pwc: recv_control_msg error -32 req 04 val 1500 [ 768.838413][ T2135] pwc: recv_control_msg error -32 req 04 val 1300 [ 768.852145][T14342] pwc: recv_control_msg error -71 req 02 val 2500 [ 768.862160][ T2135] pwc: recv_control_msg error -32 req 04 val 1400 [ 768.862481][ T5846] usb 3-1: config 220 interface 1 has no altsetting 0 [ 768.874463][T14342] pwc: recv_control_msg error -71 req 02 val 2400 [ 768.883793][ T2135] pwc: recv_control_msg error -32 req 02 val 2000 [ 768.902258][ T2135] pwc: recv_control_msg error -32 req 02 val 2100 [ 768.908499][ T5846] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 768.910472][T14342] pwc: recv_control_msg error -71 req 02 val 2600 [ 768.928760][ T2135] pwc: recv_control_msg error -32 req 04 val 1500 [ 768.936732][ T2135] pwc: recv_control_msg error -32 req 02 val 2500 [ 768.943673][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.943747][T14342] pwc: recv_control_msg error -71 req 02 val 2900 [ 768.959231][ T2135] pwc: recv_control_msg error -32 req 02 val 2400 [ 768.966837][T14342] pwc: recv_control_msg error -71 req 02 val 2800 [ 768.971851][ T5846] usb 3-1: Product: syz [ 768.974294][ T2135] pwc: recv_control_msg error -32 req 02 val 2600 [ 768.981957][ T5846] usb 3-1: Manufacturer: syz [ 768.987435][T14342] pwc: recv_control_msg error -71 req 04 val 1100 [ 768.997434][ T5846] usb 3-1: SerialNumber: syz [ 768.998678][T14342] pwc: recv_control_msg error -71 req 04 val 1200 [ 769.042284][T14342] pwc: Registered as video103. [ 769.050168][T14342] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 769.121348][T14342] usb 1-1: USB disconnect, device number 113 [ 769.197968][ T2135] pwc: recv_control_msg error -71 req 02 val 2800 [ 769.210786][ T2135] pwc: recv_control_msg error -71 req 04 val 1100 [ 769.228507][ T2135] pwc: recv_control_msg error -71 req 04 val 1200 [ 769.242221][ T1062] block nbd0: Possible stuck request ffff8880222a0400: control (read@2048,1024B). Runtime 270 seconds [ 769.250314][ T2135] pwc: Registered as video103. [ 769.253460][ T1062] block nbd0: Possible stuck request ffff8880222a0600: control (read@3072,1024B). Runtime 270 seconds [ 769.272383][ T5846] usb 3-1: selecting invalid altsetting 0 [ 769.290255][ T5846] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 769.299802][ T5846] usb 3-1: No valid video chain found. [ 769.315537][ T5846] usb 3-1: selecting invalid altsetting 0 [ 769.321614][ T5846] usbtest: probe of 3-1:220.1 failed with error -22 [ 769.331249][ T5846] usb 3-1: USB disconnect, device number 3 [ 769.351764][ T2135] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input73 [ 769.422173][ T2135] usb 2-1: USB disconnect, device number 115 [ 769.784684][T16389] nbd48: detected capacity change from 0 to 63 [ 769.973696][ T24] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 240 seconds [ 772.121214][ T24] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 240 seconds [ 772.132929][ T24] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 240 seconds [ 772.145660][ T24] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 240 seconds [ 772.647781][ T5782] block nbd48: Receive control failed (result -32) [ 773.029465][ T5782] Bluetooth: hci0: unexpected event for opcode 0x000e [ 773.261626][ T5822] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 773.286757][ T5782] Bluetooth: hci0: unexpected event for opcode 0x000e [ 773.483695][ T5822] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 773.497382][ T5822] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 773.516962][ T5822] usb 2-1: config 220 has no interface number 2 [ 773.561615][ T5822] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 773.597491][ T5822] usb 2-1: config 220 interface 0 has no altsetting 0 [ 773.624998][ T5822] usb 2-1: config 220 interface 76 has no altsetting 0 [ 773.641698][ T5822] usb 2-1: config 220 interface 1 has no altsetting 0 [ 773.662145][ T5822] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 773.681650][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.692310][ T5822] usb 2-1: Product: syz [ 773.696542][ T5822] usb 2-1: Manufacturer: syz [ 773.701188][ T5822] usb 2-1: SerialNumber: syz [ 773.953115][ T5822] usb 2-1: selecting invalid altsetting 0 [ 773.994279][ T5822] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 774.049214][ T5822] usb 2-1: No valid video chain found. [ 774.204959][T16443] nbd49: detected capacity change from 0 to 63 [ 774.324012][ T5822] usb 2-1: selecting invalid altsetting 0 [ 774.413472][ T5822] usbtest: probe of 2-1:220.1 failed with error -22 [ 774.607112][ T5822] usb 2-1: USB disconnect, device number 116 [ 775.552602][ T1062] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 240 seconds [ 775.582267][ T1062] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 240 seconds [ 775.633166][ T1062] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 240 seconds [ 775.683549][ T1062] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 240 seconds [ 776.211360][ T1062] block nbd8: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 240 seconds [ 776.222587][ T1062] block nbd8: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 240 seconds [ 776.235152][ T1062] block nbd8: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 240 seconds [ 776.247552][ T1062] block nbd8: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 240 seconds [ 776.951513][T13353] block nbd1: Possible stuck request ffff888022318000: control (read@0,1024B). Runtime 270 seconds [ 776.962648][T13353] block nbd1: Possible stuck request ffff888022318200: control (read@1024,1024B). Runtime 270 seconds [ 776.974060][T13353] block nbd1: Possible stuck request ffff888022318400: control (read@2048,1024B). Runtime 270 seconds [ 776.985283][T13353] block nbd1: Possible stuck request ffff888022318600: control (read@3072,1024B). Runtime 270 seconds [ 777.095424][ T5782] block nbd49: Receive control failed (result -32) [ 777.468985][T16473] nbd50: detected capacity change from 0 to 63 [ 779.999520][T13628] Bluetooth: hci1: unexpected event for opcode 0x000e [ 780.317054][ T28] audit: type=1800 audit(1787193498.093:33): pid=16491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3231" name="cdrom" dev="configfs" ino=168939 res=0 errno=0 [ 780.337885][ T28] audit: type=1800 audit(1787193498.103:34): pid=16491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3231" name="file" dev="configfs" ino=168940 res=0 errno=0 [ 780.361604][ T28] audit: type=1800 audit(1787193498.123:35): pid=16489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3230" name="file" dev="configfs" ino=168941 res=0 errno=0 [ 780.439193][ T5782] block nbd50: Receive control failed (result -32) [ 780.556163][T16496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 780.562775][T16496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 780.583876][T16496] vhci_hcd vhci_hcd.0: Device attached [ 780.691542][ T28] audit: type=1800 audit(1787193498.513:36): pid=16505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3235" name="file" dev="configfs" ino=168956 res=0 errno=0 [ 780.781521][ T2135] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 780.861584][ T5823] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 780.871728][ T5846] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 780.992351][ T2135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.021294][ T2135] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 781.051022][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.077426][ T5846] usb 2-1: config 0 has no interfaces? [ 781.087178][ T2135] usb 3-1: config 0 descriptor?? [ 781.092177][ T5846] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 781.092209][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.099051][ T5846] usb 2-1: config 0 descriptor?? [ 781.136865][ T2135] pwc: Askey VC010 type 2 USB webcam detected. [ 781.312364][ T1062] block nbd9: Possible stuck request ffff888022538000: control (read@0,1024B). Runtime 240 seconds [ 781.323411][ T1062] block nbd9: Possible stuck request ffff888022538200: control (read@1024,1024B). Runtime 240 seconds [ 781.334592][ T1062] block nbd9: Possible stuck request ffff888022538400: control (read@2048,1024B). Runtime 240 seconds [ 781.420999][ T27] usb 2-1: USB disconnect, device number 117 [ 781.429808][T16498] vhci_hcd: connection closed [ 781.431778][T13924] vhci_hcd: stop threads [ 781.463076][T13924] vhci_hcd: release socket [ 781.469051][T13924] vhci_hcd: disconnect device [ 781.562768][ T2135] pwc: recv_control_msg error -32 req 02 val 2b00 [ 781.574763][ T2135] pwc: recv_control_msg error -32 req 02 val 2700 [ 781.592452][ T2135] pwc: recv_control_msg error -32 req 02 val 2c00 [ 781.612711][ T2135] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.622587][ T2135] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.630163][ T2135] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.642330][ T2135] pwc: recv_control_msg error -32 req 02 val 2000 [ 781.651392][ T2135] pwc: recv_control_msg error -32 req 02 val 2100 [ 781.658942][ T2135] pwc: recv_control_msg error -32 req 04 val 1500 [ 781.670552][ T2135] pwc: recv_control_msg error -32 req 02 val 2500 [ 781.689412][ T2135] pwc: recv_control_msg error -32 req 02 val 2400 [ 781.697164][ T2135] pwc: recv_control_msg error -32 req 02 val 2600 [ 781.781709][ T5846] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 781.910140][ T2135] pwc: recv_control_msg error -71 req 02 val 2800 [ 781.917625][ T2135] pwc: recv_control_msg error -71 req 04 val 1100 [ 781.925156][ T2135] pwc: recv_control_msg error -71 req 04 val 1200 [ 781.933916][ T2135] pwc: Registered as video103. [ 781.940751][ T2135] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input74 [ 781.968264][ T2135] usb 3-1: USB disconnect, device number 4 [ 781.985507][ T5846] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 782.011715][ T5846] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 782.051473][ T5846] usb 4-1: config 220 has no interface number 2 [ 782.057868][ T5846] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 782.095924][ T5846] usb 4-1: config 220 interface 0 has no altsetting 0 [ 782.105865][T16531] bond1: (slave geneve2): making interface the new active one [ 782.119210][T16531] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 782.128033][ T5846] usb 4-1: config 220 interface 76 has no altsetting 0 [ 782.128062][ T5846] usb 4-1: config 220 interface 1 has no altsetting 0 [ 782.134840][ T5846] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 782.180272][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.201746][ T5846] usb 4-1: Product: syz [ 782.212378][ T5846] usb 4-1: Manufacturer: syz [ 782.217052][ T5846] usb 4-1: SerialNumber: syz [ 782.449608][ T5846] usb 4-1: selecting invalid altsetting 0 [ 782.473127][ T5846] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 782.479562][ T5846] usb 4-1: No valid video chain found. [ 782.513785][ T5846] usb 4-1: selecting invalid altsetting 0 [ 782.561706][ T5846] usbtest: probe of 4-1:220.1 failed with error -22 [ 782.595188][ T5846] usb 4-1: USB disconnect, device number 97 [ 782.668353][ T28] audit: type=1800 audit(1787193500.503:37): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3248" name="cdrom" dev="configfs" ino=170176 res=0 errno=0 [ 782.742105][ T28] audit: type=1800 audit(1787193500.503:38): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3248" name="file" dev="configfs" ino=170177 res=0 errno=0 [ 782.919168][ T1062] block nbd9: Possible stuck request ffff888022538600: control (read@3072,1024B). Runtime 240 seconds [ 783.142585][ T5782] Bluetooth: hci1: unexpected event for opcode 0x000e [ 783.694784][T16566] nbd51: detected capacity change from 0 to 63 [ 784.621113][T16571] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3259'. [ 786.441834][ T1062] block nbd2: Possible stuck request ffff888022348000: control (read@0,1024B). Runtime 270 seconds [ 786.453907][T14693] block nbd3: Possible stuck request ffff888022380000: control (read@0,1024B). Runtime 270 seconds [ 786.465058][ T1062] block nbd2: Possible stuck request ffff888022348200: control (read@1024,1024B). Runtime 270 seconds [ 786.478732][T14693] block nbd3: Possible stuck request ffff888022380200: control (read@1024,1024B). Runtime 270 seconds [ 786.490065][ T1062] block nbd2: Possible stuck request ffff888022348400: control (read@2048,1024B). Runtime 270 seconds [ 786.501493][T14693] block nbd3: Possible stuck request ffff888022380400: control (read@2048,1024B). Runtime 270 seconds [ 786.523855][ T1062] block nbd2: Possible stuck request ffff888022348600: control (read@3072,1024B). Runtime 270 seconds [ 786.535278][T14693] block nbd3: Possible stuck request ffff888022380600: control (read@3072,1024B). Runtime 270 seconds [ 786.566295][ T5782] block nbd51: Receive control failed (result -32) [ 786.970475][ T5782] Bluetooth: hci4: unexpected event for opcode 0x000e [ 787.285616][T16601] nbd52: detected capacity change from 0 to 63 [ 788.024514][ T5782] block nbd52: Receive control failed (result -32) [ 788.449141][T16622] bridge_slave_0: left allmulticast mode [ 788.491494][T16622] bridge_slave_0: left promiscuous mode [ 788.516366][T16622] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.562721][T16622] bridge_slave_1: left allmulticast mode [ 788.568445][T16622] bridge_slave_1: left promiscuous mode [ 788.606608][T16622] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.645599][T16622] bond0: (slave bond_slave_0): Releasing backup interface [ 788.676506][T16622] bond0: (slave bond_slave_1): Releasing backup interface [ 788.707782][ T5782] Bluetooth: hci1: unexpected event for opcode 0x000e [ 788.768901][T16622] team0: Port device team_slave_0 removed [ 788.790505][T16622] team0: Port device team_slave_1 removed [ 788.798200][T16622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.807321][T16622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.826065][T16622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.833950][T16622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.854811][T16626] team0: Mode changed to "random" [ 788.862639][T16627] vlan0: entered promiscuous mode [ 788.914310][T16627] team0: Port device vlan0 added [ 789.414133][T16642] nbd53: detected capacity change from 0 to 63 [ 790.141573][ T5782] block nbd53: Receive control failed (result -32) [ 790.678377][T16662] bridge_slave_0: left allmulticast mode [ 790.691914][T16662] bridge_slave_0: left promiscuous mode [ 790.706886][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.747816][T16662] bridge_slave_1: left allmulticast mode [ 790.764340][T16662] bridge_slave_1: left promiscuous mode [ 790.791159][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.805095][T16662] bond0: (slave bond_slave_0): Releasing backup interface [ 790.830560][ T5782] Bluetooth: hci4: unexpected event for opcode 0x000e [ 790.848826][T16662] bond0: (slave bond_slave_1): Releasing backup interface [ 790.899940][T16662] team0: Port device team_slave_0 removed [ 790.925723][T16662] team0: Port device team_slave_1 removed [ 790.933073][T16662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.948423][T16662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.957427][T16662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.967088][T16662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.986982][T16662] bond1: (slave geneve2): Releasing active interface [ 791.000924][T16670] team0: Mode changed to "random" [ 791.083271][T16673] vlan0: entered promiscuous mode [ 791.130316][T16673] team0: Port device vlan0 added [ 791.425617][T16681] nbd54: detected capacity change from 0 to 63 [ 792.209020][ T24] block nbd4: Possible stuck request ffff888022410000: control (read@0,1024B). Runtime 270 seconds [ 792.220501][ T55] block nbd10: Possible stuck request ffff888022618000: control (read@0,1024B). Runtime 240 seconds [ 792.238749][ T55] block nbd10: Possible stuck request ffff888022618200: control (read@1024,1024B). Runtime 240 seconds [ 792.263277][ T24] block nbd4: Possible stuck request ffff888022410200: control (read@1024,1024B). Runtime 270 seconds [ 792.293970][ T55] block nbd10: Possible stuck request ffff888022618400: control (read@2048,1024B). Runtime 240 seconds [ 792.314792][T13628] Bluetooth: hci0: unexpected event for opcode 0x000e [ 792.316820][ T24] block nbd4: Possible stuck request ffff888022410400: control (read@2048,1024B). Runtime 270 seconds [ 792.357110][ T55] block nbd10: Possible stuck request ffff888022618600: control (read@3072,1024B). Runtime 240 seconds [ 792.390065][ T24] block nbd4: Possible stuck request ffff888022410600: control (read@3072,1024B). Runtime 270 seconds [ 792.857933][T14693] block nbd5: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 270 seconds [ 792.870323][T14693] block nbd5: Possible stuck request ffff888022440200: control (read@1024,1024B). Runtime 270 seconds [ 792.883441][T14693] block nbd5: Possible stuck request ffff888022440400: control (read@2048,1024B). Runtime 270 seconds [ 792.894814][T14693] block nbd5: Possible stuck request ffff888022440600: control (read@3072,1024B). Runtime 270 seconds [ 794.350022][ T5782] block nbd54: Receive control failed (result -32) [ 794.614366][T16701] nbd55: detected capacity change from 0 to 63 [ 795.088040][T13628] Bluetooth: hci3: unexpected event for opcode 0x000e [ 797.041972][ T28] audit: type=1800 audit(1787193514.873:39): pid=16715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3307" name="cdrom" dev="configfs" ino=172256 res=0 errno=0 [ 797.355786][ T28] audit: type=1800 audit(1787193514.983:40): pid=16715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3307" name="file" dev="configfs" ino=172257 res=0 errno=0 [ 797.381654][T14693] block nbd11: Possible stuck request ffff888022698000: control (read@0,4096B). Runtime 240 seconds [ 797.392721][ T1062] block nbd0: Possible stuck request ffff8880222a0000: control (read@0,1024B). Runtime 300 seconds [ 797.411743][ T1062] block nbd0: Possible stuck request ffff8880222a0200: control (read@1024,1024B). Runtime 300 seconds [ 797.527383][ T28] audit: type=1800 audit(1787193515.363:41): pid=16720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3310" name="cdrom" dev="configfs" ino=171806 res=0 errno=0 [ 797.569268][ T28] audit: type=1800 audit(1787193515.383:42): pid=16720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3310" name="file" dev="configfs" ino=171807 res=0 errno=0 [ 797.640821][ T5782] block nbd55: Receive control failed (result -32) [ 797.904527][T16734] nbd: must specify a size in bytes for the device [ 797.991533][ T27] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 798.172901][ T27] usb 2-1: device descriptor read/64, error -71 [ 798.191112][T16742] team0: Port device vlan0 removed [ 798.234785][T16744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.245177][T16745] team0: Unable to change to the same mode the team is in [ 798.266857][T16747] bond1: (slave geneve2): making interface the new active one [ 798.303677][T16747] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 798.328847][T16742] team0: Port device vlan0 added [ 798.471758][ T27] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 798.671804][ T27] usb 2-1: device descriptor read/64, error -71 [ 798.885303][ T27] usb usb2-port1: attempt power cycle [ 799.312049][T14693] block nbd0: Possible stuck request ffff8880222a0400: control (read@2048,1024B). Runtime 300 seconds [ 799.323360][T14693] block nbd0: Possible stuck request ffff8880222a0600: control (read@3072,1024B). Runtime 300 seconds [ 799.441879][ T27] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 799.573815][ T27] usb 2-1: device descriptor read/8, error -71 [ 799.981798][ T27] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 800.093104][ T27] usb 2-1: device descriptor read/8, error -71 [ 800.284361][ T27] usb usb2-port1: unable to enumerate USB device [ 800.522947][T13353] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 270 seconds [ 801.515812][T16763] nbd: must specify a size in bytes for the device [ 802.252985][T13353] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 270 seconds [ 802.265463][T13353] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 270 seconds [ 802.282269][T13353] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 270 seconds [ 803.311624][ T27] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 803.477909][ T27] usb 2-1: device descriptor read/64, error -71 [ 803.752030][ T27] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 803.911912][ T27] usb 2-1: device descriptor read/64, error -71 [ 804.041935][ T27] usb usb2-port1: attempt power cycle [ 804.451628][ T27] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 804.482557][ T27] usb 2-1: device descriptor read/8, error -71 [ 804.724134][T16773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.752583][ T27] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 804.810939][ T27] usb 2-1: device descriptor read/8, error -71 [ 804.942196][ T27] usb usb2-port1: unable to enumerate USB device [ 805.487387][T16824] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 805.658570][ T1062] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 270 seconds [ 805.674317][T16822] nbd56: detected capacity change from 0 to 63 [ 805.683395][ T1062] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 270 seconds [ 805.697428][ T1062] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 270 seconds [ 805.713068][ T1062] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 270 seconds [ 806.266852][ T5782] block nbd56: Receive control failed (result -32) [ 806.363481][ T1062] block nbd8: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 270 seconds [ 806.375201][ T1062] block nbd8: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 270 seconds [ 806.387643][ T1062] block nbd8: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 270 seconds [ 806.398821][ T1062] block nbd8: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 270 seconds [ 806.533185][T16828] team0: Port device vlan0 removed [ 806.597059][T16828] bond1: (slave geneve2): Releasing active interface [ 806.679304][T16831] team0: Unable to change to the same mode the team is in [ 806.724934][T16834] team0: Port device vlan0 added [ 806.863253][ T28] audit: type=1800 audit(1787193524.693:43): pid=16844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3355" name="file" dev="configfs" ino=172542 res=0 errno=0 [ 806.870266][T16844] mass_storage.0/lun.0: file too small: file0 [ 807.555834][T13353] block nbd1: Possible stuck request ffff888022318000: control (read@0,1024B). Runtime 300 seconds [ 807.566963][T13353] block nbd1: Possible stuck request ffff888022318200: control (read@1024,1024B). Runtime 300 seconds [ 807.580467][T13353] block nbd1: Possible stuck request ffff888022318400: control (read@2048,1024B). Runtime 300 seconds [ 807.593697][T13353] block nbd1: Possible stuck request ffff888022318600: control (read@3072,1024B). Runtime 300 seconds [ 807.784402][T16873] nbd57: detected capacity change from 0 to 63 [ 808.491873][ T5782] block nbd57: Receive control failed (result -32) [ 808.844217][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.850608][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.886132][T16890] block device autoloading is deprecated and will be removed. [ 809.009063][T16896] syzkaller0: entered promiscuous mode [ 809.014793][T16896] syzkaller0: entered allmulticast mode [ 809.454343][T16905] nbd58: detected capacity change from 0 to 63 [ 809.920853][T16909] binder: 16908:16909 ioctl 4018620d 0 returned -22 [ 810.053202][T16909] binder: 16908:16909 ioctl c0306201 200000000080 returned -14 [ 810.189328][ T5782] block nbd58: Receive control failed (result -32) [ 810.193217][T16909] binder: 16908:16909 ioctl c0306201 2000000003c0 returned -14 [ 810.873661][T16940] binder: 16939:16940 ioctl 4018620d 0 returned -22 [ 810.881366][T16940] binder: 16939:16940 ioctl c0306201 200000000080 returned -14 [ 810.896380][T16940] binder: 16939:16940 ioctl c0306201 2000000003c0 returned -14 [ 811.085397][ T5782] Bluetooth: hci0: unexpected event for opcode 0x000e [ 811.192931][ T28] audit: type=1800 audit(1787193529.033:44): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3396" name="file" dev="configfs" ino=172891 res=0 errno=0 [ 811.215559][T16952] mass_storage.0/lun.0: unable to open backing file: file0 [ 811.411538][ T1062] block nbd9: Possible stuck request ffff888022538000: control (read@0,1024B). Runtime 270 seconds [ 811.422723][ T1062] block nbd9: Possible stuck request ffff888022538200: control (read@1024,1024B). Runtime 270 seconds [ 811.433874][ T1062] block nbd9: Possible stuck request ffff888022538400: control (read@2048,1024B). Runtime 270 seconds [ 811.539310][T16960] syz_tun: entered allmulticast mode [ 811.555830][T16960] dvmrp6: entered allmulticast mode [ 811.585243][T16959] syz_tun: left allmulticast mode [ 811.833486][T16968] fuse: Unknown parameter 'group_i00000000000000000000' [ 811.867481][T16970] binder: 16969:16970 ioctl 4018620d 0 returned -22 [ 811.892090][T16970] binder: 16969:16970 ioctl c0306201 200000000080 returned -14 [ 811.912841][T16970] binder: 16969:16970 ioctl c0306201 2000000003c0 returned -14 [ 812.992359][ T1062] block nbd9: Possible stuck request ffff888022538600: control (read@3072,1024B). Runtime 270 seconds [ 813.106072][T17004] fuse: Unknown parameter 'group_id00000000000000000000' [ 813.171747][ T27] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 813.180201][T17006] binder: BINDER_SET_CONTEXT_MGR already set [ 813.186843][T17006] binder: 17005:17006 ioctl 4018620d 200000000040 returned -16 [ 813.357318][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 813.373267][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 813.411777][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 813.433078][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 813.446769][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 813.470349][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 813.482025][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 813.506207][ T27] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 813.531510][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.539582][ T27] usb 1-1: Product: syz [ 813.551509][ T27] usb 1-1: Manufacturer: syz [ 813.556177][ T27] usb 1-1: SerialNumber: syz [ 813.573585][T16998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 813.580927][T16998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 813.621751][T16998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 813.629107][T16998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 813.658392][T16998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 813.674587][ T27] usb 1-1: USB2VGA dongle found at address 114 [ 813.705577][ T27] usb 1-1: Allocated 8 output buffers [ 813.711044][ T27] usb 1-1: Not attached to USB 2.0 hub, deferring init [ 813.873995][T17023] fuse: Unknown parameter 'group_id00000000000000000000' [ 813.918554][ T27] usb 1-1: USB disconnect, device number 114 [ 814.885526][T17028] binder: BINDER_SET_CONTEXT_MGR already set [ 814.932904][T17028] binder: 17027:17028 ioctl 4018620d 200000000040 returned -16 [ 815.214698][T17037] fuse: Bad value for 'fd' [ 816.531475][T14342] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 816.533609][ T1062] block nbd2: Possible stuck request ffff888022348000: control (read@0,1024B). Runtime 300 seconds [ 816.550423][T14693] block nbd3: Possible stuck request ffff888022380000: control (read@0,1024B). Runtime 300 seconds [ 816.563717][ T1062] block nbd2: Possible stuck request ffff888022348200: control (read@1024,1024B). Runtime 300 seconds [ 816.575024][T14693] block nbd3: Possible stuck request ffff888022380200: control (read@1024,1024B). Runtime 300 seconds [ 816.586400][ T1062] block nbd2: Possible stuck request ffff888022348400: control (read@2048,1024B). Runtime 300 seconds [ 816.597786][T14693] block nbd3: Possible stuck request ffff888022380400: control (read@2048,1024B). Runtime 300 seconds [ 816.609072][T14693] block nbd3: Possible stuck request ffff888022380600: control (read@3072,1024B). Runtime 300 seconds [ 816.622066][ T1062] block nbd2: Possible stuck request ffff888022348600: control (read@3072,1024B). Runtime 300 seconds [ 816.736944][T17054] nbd59: detected capacity change from 0 to 63 [ 816.784256][ T5782] block nbd59: Receive control failed (result -32) [ 816.873937][T14342] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 816.891542][T14342] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 816.900770][T14342] usb 3-1: config 220 interface 0 has no altsetting 0 [ 816.921780][T14342] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 816.934616][T14342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.942756][T14342] usb 3-1: Product: syz [ 816.948616][T14342] usb 3-1: Manufacturer: syz [ 816.953372][T14342] usb 3-1: SerialNumber: syz [ 817.014241][T17065] binder: BINDER_SET_CONTEXT_MGR already set [ 817.020295][T17065] binder: 17064:17065 ioctl 4018620d 200000000040 returned -16 [ 817.204266][T14342] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 817.210777][T14342] usb 3-1: No valid video chain found. [ 817.241754][ T28] audit: type=1800 audit(1787193535.063:45): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3442" name="cdrom" dev="configfs" ino=174447 res=0 errno=0 [ 817.252493][T14342] usb 3-1: USB disconnect, device number 5 [ 817.300395][ T28] audit: type=1800 audit(1787193535.063:46): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3442" name="file" dev="configfs" ino=174448 res=0 errno=0 [ 817.524999][T17075] team0: Port device vlan0 removed [ 817.585406][T17077] team0: Port device vlan0 added [ 817.966775][T17090] dvmrp6: entered allmulticast mode [ 818.146789][T17093] binder: 17092:17093 ioctl c0306201 0 returned -14 [ 818.192728][T17093] binder: 17092:17093 ioctl c0306201 2000000003c0 returned -14 [ 818.202895][T17083] nbd60: detected capacity change from 0 to 63 [ 818.275525][ T5782] block nbd60: Receive control failed (result -32) [ 818.462843][ T5782] Bluetooth: hci0: unexpected event for opcode 0x202d [ 818.730564][T17115] syz_tun: entered allmulticast mode [ 818.753468][T17115] dvmrp6: entered allmulticast mode [ 818.780531][T17113] syz_tun: left allmulticast mode [ 819.120664][T17120] binder: 17119:17120 ioctl c0306201 0 returned -14 [ 819.136266][T17120] binder: 17119:17120 ioctl c0306201 2000000003c0 returned -14 [ 819.601541][T12761] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 819.648472][ T5782] Bluetooth: hci0: unexpected event for opcode 0x000e [ 819.808949][ T28] audit: type=1800 audit(1787193537.643:47): pid=17134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3466" name="cdrom" dev="configfs" ino=175127 res=0 errno=0 [ 819.843380][T12761] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 819.871574][T12761] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 819.880702][T12761] usb 3-1: config 220 interface 0 has no altsetting 0 [ 819.950510][T12761] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 819.970264][T12761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.985017][T12761] usb 3-1: Product: syz [ 819.989258][T12761] usb 3-1: Manufacturer: syz [ 820.019221][T12761] usb 3-1: SerialNumber: syz [ 820.042427][T17139] binder: 17137:17139 ioctl c0306201 0 returned -14 [ 820.059566][T17139] binder: 17137:17139 ioctl c0306201 2000000003c0 returned -14 [ 820.372300][T12761] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 820.378832][T12761] usb 3-1: No valid video chain found. [ 820.491637][T12761] usb 3-1: USB disconnect, device number 6 [ 820.556192][T17143] nbd61: detected capacity change from 0 to 63 [ 820.607460][ T5782] block nbd61: Receive control failed (result -32) [ 821.122877][T12761] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 821.343925][T12761] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 821.431328][T12761] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 821.437840][ T5782] Bluetooth: hci1: unexpected event for opcode 0x000e [ 821.506535][T12761] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 821.513775][ T28] audit: type=1800 audit(1787193539.353:48): pid=17163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3476" name="cdrom" dev="configfs" ino=175242 res=0 errno=0 [ 821.578666][T12761] usb 2-1: config 220 has no interface number 1 [ 821.611537][T12761] usb 2-1: config 220 interface 0 has no altsetting 0 [ 821.618396][T12761] usb 2-1: config 220 interface 76 has no altsetting 0 [ 821.652967][T12761] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 821.691346][T12761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.699753][T12761] usb 2-1: Product: syz [ 821.711501][T12761] usb 2-1: Manufacturer: syz [ 821.716235][T12761] usb 2-1: SerialNumber: syz [ 821.794865][T17172] binder: 17170:17172 ioctl c0306201 2000000003c0 returned -14 [ 821.958164][T12761] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 821.977855][T12761] usb 2-1: No valid video chain found. [ 822.001829][T12761] usb 2-1: USB disconnect, device number 126 [ 822.272397][ T24] block nbd4: Possible stuck request ffff888022410000: control (read@0,1024B). Runtime 300 seconds [ 822.283705][T13353] block nbd10: Possible stuck request ffff888022618000: control (read@0,1024B). Runtime 270 seconds [ 822.307364][T13353] block nbd10: Possible stuck request ffff888022618200: control (read@1024,1024B). Runtime 270 seconds [ 822.322278][T13353] block nbd4: Possible stuck request ffff888022410200: control (read@1024,1024B). Runtime 300 seconds [ 822.365238][T13353] block nbd10: Possible stuck request ffff888022618400: control (read@2048,1024B). Runtime 270 seconds [ 822.395418][T13353] block nbd4: Possible stuck request ffff888022410400: control (read@2048,1024B). Runtime 300 seconds [ 822.422444][T13353] block nbd10: Possible stuck request ffff888022618600: control (read@3072,1024B). Runtime 270 seconds [ 822.434261][ T24] block nbd4: Possible stuck request ffff888022410600: control (read@3072,1024B). Runtime 300 seconds [ 822.913423][T14693] block nbd5: Possible stuck request ffff888022440000: control (read@0,1024B). Runtime 300 seconds [ 822.924356][T14693] block nbd5: Possible stuck request ffff888022440200: control (read@1024,1024B). Runtime 300 seconds [ 822.935881][T14693] block nbd5: Possible stuck request ffff888022440400: control (read@2048,1024B). Runtime 300 seconds [ 822.947365][T14693] block nbd5: Possible stuck request ffff888022440600: control (read@3072,1024B). Runtime 300 seconds [ 823.700076][ T28] audit: type=1800 audit(1787193541.533:49): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3484" name="cdrom" dev="configfs" ino=175044 res=0 errno=0 [ 823.721901][ T28] audit: type=1800 audit(1787193541.563:50): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3484" name="file" dev="configfs" ino=175045 res=0 errno=0 [ 823.726710][T17189] mass_storage.0/lun.0: unable to open backing file: file0 [ 824.283033][ T5782] Bluetooth: hci4: unexpected event for opcode 0x000e [ 824.467366][T17199] binder: BINDER_SET_CONTEXT_MGR already set [ 824.484173][T17199] binder: 17198:17199 ioctl 4018620d 200000000040 returned -16 [ 824.509695][T17199] binder: 17198:17199 ioctl c0306201 2000000003c0 returned -14 [ 824.604752][T17165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.895602][T17209] bridge_slave_0: left allmulticast mode [ 824.927340][T17209] bridge_slave_0: left promiscuous mode [ 824.949070][ T28] audit: type=1800 audit(1787193542.783:51): pid=17211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3493" name="cdrom" dev="configfs" ino=175447 res=0 errno=0 [ 824.962465][T17209] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.978398][T17211] mass_storage.0/lun.0: unable to open backing file: file0 [ 825.016702][ T28] audit: type=1800 audit(1787193542.803:52): pid=17211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3493" name="file" dev="configfs" ino=175450 res=0 errno=0 [ 825.065545][T17209] bridge_slave_1: left allmulticast mode [ 825.071284][T17209] bridge_slave_1: left promiscuous mode [ 825.098033][T17209] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.192283][T17209] bond0: (slave bond_slave_0): Releasing backup interface [ 825.283613][T17209] bond0: (slave bond_slave_1): Releasing backup interface [ 825.367565][T17209] team0: Port device team_slave_0 removed [ 825.454904][T17209] team0: Port device team_slave_1 removed [ 825.461571][ T8] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 825.490512][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.505648][T17209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.521752][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.572842][T17209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.675904][T17215] vlan0: entered promiscuous mode [ 825.734575][T17215] team0: Port device vlan0 added [ 825.769188][T17219] syz_tun: entered allmulticast mode [ 825.824381][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.930422][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 825.942677][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.950916][ T8] usb 2-1: Product: syz [ 825.955972][ T8] usb 2-1: Manufacturer: syz [ 825.960712][ T8] usb 2-1: SerialNumber: syz [ 825.968534][ T8] usb 2-1: config 0 descriptor?? [ 826.111644][T17216] syz_tun: left allmulticast mode [ 826.732246][T17249] team0: Port device vlan0 removed [ 826.805184][T17249] team0: Port device vlan0 added [ 827.086297][ T28] audit: type=1800 audit(1787193544.923:53): pid=17255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3506" name="file" dev="configfs" ino=175524 res=0 errno=0 [ 827.263562][ T5782] Bluetooth: hci3: unexpected event for opcode 0x000e [ 828.041783][T14693] block nbd11: Possible stuck request ffff888022698000: control (read@0,4096B). Runtime 270 seconds [ 828.052891][ T1062] block nbd0: Possible stuck request ffff8880222a0000: control (read@0,1024B). Runtime 330 seconds [ 828.064324][ T1062] block nbd0: Possible stuck request ffff8880222a0200: control (read@1024,1024B). Runtime 330 seconds [ 828.080781][ T5822] usb 2-1: USB disconnect, device number 127 [ 828.650137][ T28] audit: type=1800 audit(1787193546.483:54): pid=17285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3515" name="cdrom" dev="configfs" ino=175703 res=0 errno=0 [ 828.675203][T17285] mass_storage.0/lun.0: file too small: file0 [ 828.688565][ T28] audit: type=1800 audit(1787193546.513:55): pid=17285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3515" name="file" dev="configfs" ino=175704 res=0 errno=0 [ 829.392009][ T1062] block nbd0: Possible stuck request ffff8880222a0400: control (read@2048,1024B). Runtime 330 seconds [ 829.403405][ T1062] block nbd0: Possible stuck request ffff8880222a0600: control (read@3072,1024B). Runtime 330 seconds [ 830.592049][T13353] block nbd6: Possible stuck request ffff888022488000: control (read@0,1024B). Runtime 300 seconds [ 830.897613][T17268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.561517][ T8] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 831.763647][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.791440][ T8] usb 4-1: config 0 has no interfaces? [ 831.797031][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 831.821454][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.842289][ T8] usb 4-1: config 0 descriptor?? [ 832.095351][ T5822] usb 4-1: USB disconnect, device number 98 [ 832.272278][T13353] block nbd6: Possible stuck request ffff888022488200: control (read@1024,1024B). Runtime 300 seconds [ 832.292780][T13353] block nbd6: Possible stuck request ffff888022488400: control (read@2048,1024B). Runtime 300 seconds [ 832.304216][T13353] block nbd6: Possible stuck request ffff888022488600: control (read@3072,1024B). Runtime 300 seconds [ 832.383532][T17324] team0: Port device vlan0 removed [ 832.452455][T17325] team0: Port device vlan0 added [ 833.226370][ T5782] Bluetooth: hci0: unexpected event for opcode 0x000e [ 833.369861][T17342] binder: 17341:17342 ioctl c0306201 200000000080 returned -14 [ 833.380377][T17342] binder: 17341:17342 ioctl c0306201 2000000003c0 returned -14 [ 833.807847][T17357] overlayfs: failed to resolve './file1': -2 [ 833.871496][T12761] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 834.021958][T17365] binder: 17364:17365 ioctl c0306201 200000000080 returned -14 [ 834.054283][T17365] binder: 17364:17365 ioctl c0306201 2000000003c0 returned -14 [ 834.083558][T12761] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 834.130051][T12761] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 834.174888][T12761] usb 4-1: config 220 interface 0 has no altsetting 0 [ 834.212462][T12761] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 834.231519][T12761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.239581][T12761] usb 4-1: Product: syz [ 834.250649][T12761] usb 4-1: Manufacturer: syz [ 834.255696][T12761] usb 4-1: SerialNumber: syz [ 834.335234][ T5782] Bluetooth: hci1: unexpected event for opcode 0x000e [ 834.489866][T12761] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 834.498046][T12761] usb 4-1: No valid video chain found. [ 834.513824][T12761] usb 4-1: USB disconnect, device number 99 [ 834.914739][T17385] binder: 17384:17385 ioctl c0306201 200000000080 returned -14 [ 834.948750][T17385] binder: 17384:17385 ioctl c0306201 2000000003c0 returned -14 [ 835.031602][ T28] audit: type=1800 audit(1787193552.863:56): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3554" name="cdrom" dev="configfs" ino=176112 res=0 errno=0 [ 835.078498][ T29] INFO: task udevd:5859 blocked for more than 143 seconds. [ 835.094981][ T28] audit: type=1800 audit(1787193552.863:57): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3554" name="file" dev="configfs" ino=176113 res=0 errno=0 [ 835.109373][ T29] Not tainted syzkaller #0 [ 835.164853][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 835.194013][ T29] task:udevd state:D stack:23688 pid:5859 ppid:5143 flags:0x00004006 [ 835.234156][ T29] Call Trace: [ 835.246268][ T29] [ 835.252779][ T29] __schedule+0x15ae/0x4660 [ 835.266934][ T29] ? asan.module_dtor+0x20/0x20 [ 835.277369][ T29] ? mark_lock+0x94/0x320 [ 835.287500][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 835.312938][ T29] ? lock_chain_count+0x20/0x20 [ 835.324935][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 835.336910][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 835.346433][ T29] schedule+0xbd/0x170 [ 835.350617][ T29] io_schedule+0x80/0xd0 [ 835.364367][ T29] folio_wait_bit_common+0x881/0xfa0 [ 835.378857][ T29] ? folio_wait_bit+0x30/0x30 [ 835.384962][ T29] ? _compound_head+0x120/0x120 [ 835.389954][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 835.402597][ T5782] Bluetooth: hci0: unexpected event for opcode 0x000e [ 835.411722][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 835.416918][ T29] ? blkdev_writepage+0x30/0x30 [ 835.430233][ T29] read_part_sector+0xd2/0x350 [ 835.436364][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 835.450837][ T29] ? put_partition+0x360/0x360 [ 835.455918][ T29] bdev_disk_changed+0x755/0x1450 [ 835.463333][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 835.478404][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 835.483973][ T29] ? iput+0x33f/0x900 [ 835.488080][ T29] blkdev_get_whole+0x30d/0x390 [ 835.493308][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 835.498428][ T29] blkdev_open+0x14e/0x360 [ 835.503374][ T29] do_dentry_open+0x880/0x14b0 [ 835.508235][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 835.513078][ T29] path_openat+0x284f/0x3270 [ 835.517759][ T29] ? do_sys_openat2+0xda/0x1d0 [ 835.522729][ T29] ? __x64_sys_openat+0x139/0x160 [ 835.527931][ T29] ? verify_lock_unused+0x140/0x140 [ 835.533325][ T29] ? do_filp_open+0x430/0x430 [ 835.538201][ T29] do_filp_open+0x1f2/0x430 [ 835.543914][ T29] ? vfs_tmpfile+0x620/0x620 [ 835.548704][ T29] ? _raw_spin_unlock+0x28/0x40 [ 835.553845][ T29] ? alloc_fd+0x590/0x640 [ 835.558250][ T29] do_sys_openat2+0x134/0x1d0 [ 835.565072][ T29] ? do_sys_open+0xe0/0xe0 [ 835.569599][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 835.576868][ T29] ? lock_chain_count+0x20/0x20 [ 835.581950][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 835.588114][ T29] __x64_sys_openat+0x139/0x160 [ 835.593611][ T29] do_syscall_64+0x55/0xb0 [ 835.598100][ T29] ? clear_bhb_loop+0x40/0x90 [ 835.603295][ T29] ? clear_bhb_loop+0x40/0x90 [ 835.608037][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.614559][ T29] RIP: 0033:0x7f9cab4a7407 [ 835.619051][ T29] RSP: 002b:00007fffe9f30b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 835.628147][ T29] RAX: ffffffffffffffda RBX: 00007f9cabc73880 RCX: 00007f9cab4a7407 [ 835.636514][ T29] RDX: 00000000000a0800 RSI: 000055b9b6b01920 RDI: ffffffffffffff9c [ 835.645190][ T29] RBP: 000055b9b6ac9910 R08: 0000000000000000 R09: 0000000000000000 [ 835.665081][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b9b6ad1650 [ 835.673706][ T29] R13: 000055b9b6ae1410 R14: 0000000000000000 R15: 000055b9b6ad1650 [ 835.683108][ T29] [ 835.703002][ T29] [ 835.703002][ T29] Showing all locks held in the system: [ 835.710912][ T29] 3 locks held by kworker/u4:1/12: [ 835.721806][ T1062] block nbd7: Possible stuck request ffff8880224e0000: control (read@0,1024B). Runtime 300 seconds [ 835.732989][ T1062] block nbd7: Possible stuck request ffff8880224e0200: control (read@1024,1024B). Runtime 300 seconds [ 835.733743][ T29] #0: [ 835.744189][ T1062] block nbd7: Possible stuck request ffff8880224e0400: control (read@2048,1024B). Runtime 300 seconds [ 835.744227][ T1062] block nbd7: Possible stuck request ffff8880224e0600: control (read@3072,1024B). Runtime 300 seconds [ 835.801462][ T29] ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 835.822073][ T29] #1: ffffc90000117d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 835.835826][ T29] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: batadv_nc_process_nc_paths+0xba/0x380 [ 835.846979][ T29] 1 lock held by khungtaskd/29: [ 835.852151][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 835.862722][ T29] 2 locks held by getty/5535: [ 835.868691][ T29] #0: ffff88802d9cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 835.879071][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 835.890368][ T29] 1 lock held by udevd/5784: [ 835.895344][ T29] #0: ffff88802240f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 835.906013][ T29] 1 lock held by udevd/5787: [ 835.910727][ T29] #0: ffff888141f504c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 835.921302][ T29] 1 lock held by udevd/5793: [ 835.926388][ T29] #0: ffff88802240a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 835.937035][ T29] 1 lock held by udevd/5857: [ 835.941995][ T29] #0: ffff8880222db4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 835.952757][ T29] 1 lock held by udevd/5859: [ 835.957697][ T29] #0: ffff888141f354c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 835.968544][ T29] 1 lock held by udevd/6287: [ 835.976309][ T29] #0: ffff8880222804c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 835.987963][ T29] 1 lock held by udevd/9044: [ 835.993989][ T29] #0: ffff8880222fb4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 836.005392][ T29] 2 locks held by kworker/u4:6/13467: [ 836.010912][ T29] #0: ffff888142a94d38 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 836.022891][ T29] #1: ffffc9000539fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 836.043696][ T29] 1 lock held by udevd/13662: [ 836.050775][ T29] #0: ffff8880225d14c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 836.068289][ T29] 1 lock held by udevd/13683: [ 836.076699][ T29] #0: ffff8880223d84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 836.087554][ T29] 1 lock held by udevd/13718: [ 836.092706][ T29] #0: ffff8880222854c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 836.103303][ T29] 1 lock held by udevd/13758: [ 836.108158][ T29] #0: ffff8880224cc4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 836.128829][ T29] 1 lock held by udevd/13759: [ 836.138928][ T29] #0: ffff8880223dd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 836.159339][ T29] 1 lock held by syz.0.3555/17390: [ 836.164911][ T29] #0: ffffffff8d137640 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 836.177585][ T29] 1 lock held by syz.3.3556/17392: [ 836.183032][ T29] #0: ffffffff8d137640 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 836.202559][ T29] [ 836.205046][ T29] ============================================= [ 836.205046][ T29] [ 836.226262][ T29] NMI backtrace for cpu 1 [ 836.230667][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 836.237912][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.248028][ T29] Call Trace: [ 836.251400][ T29] [ 836.254386][ T29] dump_stack_lvl+0x18c/0x250 [ 836.259118][ T29] ? __wake_up_klogd+0xd9/0x100 [ 836.264032][ T29] ? show_regs_print_info+0x20/0x20 [ 836.269290][ T29] ? load_image+0x420/0x420 [ 836.273951][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 836.278964][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 836.285196][ T29] ? load_image+0x420/0x420 [ 836.289756][ T29] ? wq_watchdog_touch+0xef/0x170 [ 836.294850][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 836.300986][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 836.307035][ T29] watchdog+0xf59/0xfa0 [ 836.311259][ T29] ? watchdog+0x1e1/0xfa0 [ 836.315654][ T29] kthread+0x2fa/0x390 [ 836.319862][ T29] ? hungtask_pm_notify+0x50/0x50 [ 836.324957][ T29] ? kthread_blkcg+0xd0/0xd0 [ 836.329611][ T29] ret_from_fork+0x48/0x80 [ 836.334112][ T29] ? kthread_blkcg+0xd0/0xd0 [ 836.338760][ T29] ret_from_fork_asm+0x11/0x20 [ 836.343601][ T29] [ 836.349171][ T29] Sending NMI from CPU 1 to CPUs 0: [ 836.355720][ C0] NMI backtrace for cpu 0 [ 836.355732][ C0] CPU: 0 PID: 14940 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 836.355749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.355760][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 836.355822][ C0] RIP: 0010:deref_stack_reg+0x8c/0x230 [ 836.355843][ C0] Code: 67 10 4c 89 fb 48 c1 eb 03 0f b6 04 2b 84 c0 0f 85 76 01 00 00 41 8b 2f 31 ff 89 ee e8 7d a5 4b 00 85 ed 0f 95 c0 48 8b 2c 24 <49> 39 ee 0f 96 c1 20 c1 49 39 ec 0f 97 c0 84 c1 74 1e 48 8d 45 08 [ 836.355909][ C0] RSP: 0018:ffffc90005af7588 EFLAGS: 00000202 [ 836.355924][ C0] RAX: ffffffff813bd001 RBX: 1ffff92000b5eed5 RCX: 0000000000000000 [ 836.355936][ C0] RDX: ffff88802e6fbc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 836.355948][ C0] RBP: ffffc90005af7ed8 R08: ffff88802e6fbc00 R09: 0000000000000003 [ 836.355959][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90005af8000 [ 836.355971][ C0] R13: 1ffff92000b5eed7 R14: ffffc90005af0000 R15: ffffc90005af76a8 [ 836.355985][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 836.356000][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.356012][ C0] CR2: 00007ffe05191bd0 CR3: 000000000cf32000 CR4: 00000000003526f0 [ 836.356027][ C0] Call Trace: [ 836.356033][ C0] [ 836.356043][ C0] unwind_next_frame+0x1781/0x2990 [ 836.356066][ C0] ? worker_thread+0xa5e/0xfe0 [ 836.356089][ C0] ? worker_thread+0xa5e/0xfe0 [ 836.356109][ C0] ? stack_trace_save+0x100/0x100 [ 836.356132][ C0] arch_stack_walk+0x144/0x190 [ 836.356152][ C0] ? kthread+0x2fa/0x390 [ 836.356171][ C0] stack_trace_save+0xaa/0x100 [ 836.356192][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 836.356212][ C0] ? skb_release_data+0x609/0x7f0 [ 836.356234][ C0] ? worker_thread+0xa5e/0xfe0 [ 836.356253][ C0] ? kthread+0x2fa/0x390 [ 836.356269][ C0] ? ret_from_fork+0x48/0x80 [ 836.356290][ C0] ? ret_from_fork_asm+0x11/0x20 [ 836.356315][ C0] kasan_set_track+0x4e/0x70 [ 836.356334][ C0] ? kasan_set_track+0x4e/0x70 [ 836.356351][ C0] ? kasan_save_free_info+0x28/0x40 [ 836.356373][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 836.356393][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 836.356410][ C0] ? kmem_cache_free+0xf8/0x290 [ 836.356434][ C0] ? nsim_dev_trap_report_work+0x723/0xa90 [ 836.356451][ C0] ? process_scheduled_works+0xa60/0x1600 [ 836.356479][ C0] ? worker_thread+0xa5e/0xfe0 [ 836.356523][ C0] ? kmem_cache_free+0xf8/0x290 [ 836.356547][ C0] kasan_save_free_info+0x28/0x40 [ 836.356569][ C0] ____kasan_slab_free+0x126/0x1f0 [ 836.356591][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 836.356611][ C0] ? nsim_dev_trap_report_work+0x723/0xa90 [ 836.356629][ C0] kmem_cache_free+0xf8/0x290 [ 836.356656][ C0] nsim_dev_trap_report_work+0x723/0xa90 [ 836.356680][ C0] ? process_scheduled_works+0x975/0x1600 [ 836.356704][ C0] process_scheduled_works+0xa60/0x1600 [ 836.356740][ C0] ? worker_attach_to_pool+0x370/0x370 [ 836.356765][ C0] ? assign_work+0x3cc/0x5d0 [ 836.356789][ C0] worker_thread+0xa5e/0xfe0 [ 836.356817][ C0] ? _raw_spin_unlock+0x40/0x40 [ 836.356832][ C0] ? __kthread_parkme+0x71/0x1c0 [ 836.356853][ C0] kthread+0x2fa/0x390 [ 836.356870][ C0] ? pr_cont_work+0x550/0x550 [ 836.356891][ C0] ? kthread_blkcg+0xd0/0xd0 [ 836.356908][ C0] ret_from_fork+0x48/0x80 [ 836.356928][ C0] ? kthread_blkcg+0xd0/0xd0 [ 836.356944][ C0] ret_from_fork_asm+0x11/0x20 [ 836.356975][ C0] [ 836.369339][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 836.369382][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 836.369443][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.369470][ T29] Call Trace: [ 836.369486][ T29] [ 836.369508][ T29] dump_stack_lvl+0x18c/0x250 [ 836.369603][ T29] ? show_regs_print_info+0x20/0x20 [ 836.369671][ T29] ? load_image+0x420/0x420 [ 836.369760][ T29] panic+0x2ca/0x720 [ 836.369858][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 836.369935][ T29] ? nmi_backtrace_stall_check+0x41e/0x430 [ 836.370094][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 836.370193][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 836.370281][ T29] watchdog+0xf98/0xfa0 [ 836.370357][ T29] ? watchdog+0x1e1/0xfa0 [ 836.370451][ T29] kthread+0x2fa/0x390 [ 836.370512][ T29] ? hungtask_pm_notify+0x50/0x50 [ 836.370587][ T29] ? kthread_blkcg+0xd0/0xd0 [ 836.370642][ T29] ret_from_fork+0x48/0x80 [ 836.370707][ T29] ? kthread_blkcg+0xd0/0xd0 [ 836.370770][ T29] ret_from_fork_asm+0x11/0x20 [ 836.370877][ T29] [ 836.373674][ T29] Kernel Offset: disabled [ 836.815905][ T29] Rebooting in 86400 seconds..