last executing test programs: 2m41.786915883s ago: executing program 4 (id=383): socket$inet6(0xa, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) io_submit(0x0, 0x0, &(0x7f0000002700)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2m41.577238952s ago: executing program 4 (id=385): unshare(0x2000400) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) 2m41.465461032s ago: executing program 4 (id=387): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 2m41.424594535s ago: executing program 4 (id=389): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000003c0)='0x', 0x2) 2m37.90400576s ago: executing program 4 (id=407): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/223, 0xdf}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x8902) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) setns(r5, 0x80) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000300)={0x4a, 0x2, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) sendfile(r3, r6, 0x0, 0x5) unshare(0x24060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x4, [0xa, 0x5, 0x7, 0x80000000]}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) 2m35.646571312s ago: executing program 4 (id=420): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000002240), 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000480)=0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 2m20.568700061s ago: executing program 32 (id=420): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000002240), 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1000}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000480)=0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 8.748099128s ago: executing program 2 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xfa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) 7.769399035s ago: executing program 2 (id=1297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmmsg$inet(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}], 0x1, 0x4001) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x0, 0x10d, 0x0, 0x8f, 0x7}, {0xa, 0xf, 0x6, 0x2, 0x80000, 0x5f2b, 0x9}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x2c, &(0x7f00000000c0), 0x4) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="f30fbd020f060f001966b80d010f00d066bad00466ed0f2382d9c8c4e17d50f80f8c8c2e000066ba4200ed"}], 0x1, 0x6a, 0x0, 0x39) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000580)={0x6}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.5974823s ago: executing program 2 (id=1304): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="40f4ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) 6.211127394s ago: executing program 5 (id=1307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x8, 0xca, 0x0, 0x1000, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x9, 0x401}, @generic={0x5, 0xc, "97134cb6ce50e935f628"}, @fastopen={0x22, 0xf, "9d3a9dde0400d9e4abc694aaf9"}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "2d81beae8e1b8eb60abcdc4551439c70"}]}}}}}}}, 0x0) 6.060746268s ago: executing program 5 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 5.761495095s ago: executing program 5 (id=1310): syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5.36733004s ago: executing program 1 (id=1313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000140)=@ethernet={0x306, @random="e67b24ed7571"}, 0x80, &(0x7f00000000c0)}}], 0x1, 0x4000010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sctp\x00') unlinkat(r4, &(0x7f0000000000)='./file1\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) ftruncate(r5, 0x80000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0xfd7f, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x34}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_setup(0xffff, &(0x7f0000001100)=0x0) io_submit(r7, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) 5.085541555s ago: executing program 5 (id=1315): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x8404) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x380020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x20000041) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xa}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8008801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.833249678s ago: executing program 5 (id=1316): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x10}, [], {0x4, 0x6}}, 0x24, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/143, 0x8f}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009054243"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) r4 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x408000, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8180001}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x6, 0x6, 0x200, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000000)={0x0, 0x1fbf, [0x10, 0xffffffffffffffff, 0xff, 0x5, 0x100000001, 0xed]}) 3.91437224s ago: executing program 0 (id=1319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) 3.736027575s ago: executing program 1 (id=1321): unshare(0x22020600) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000}) syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40) syz_open_dev$usbmon(&(0x7f00000000c0), 0x200, 0x81) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x100005, 0x0, 0x800, 0x0, 0x8000000000000001, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 3.505439147s ago: executing program 2 (id=1322): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) sendmsg$unix(r0, &(0x7f0000010040)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x404c0c8}, 0x2) 3.437015823s ago: executing program 2 (id=1323): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.452577201s ago: executing program 2 (id=1324): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000940)={0x40, 0xf, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.254293978s ago: executing program 1 (id=1325): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r2, &(0x7f00000046c0)={0x2020}, 0x2020) 2.178649425s ago: executing program 0 (id=1326): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x8404) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x380020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x20000041) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xa}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8008801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.11595362s ago: executing program 3 (id=1327): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x8404) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x380020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x20000041) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xa}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8008801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.980813732s ago: executing program 0 (id=1328): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmmsg$inet(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}], 0x1, 0x4001) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x10004, 0x4, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x6}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0x1, 0x0, 0x10d, 0x0, 0x8f, 0x7}, {0xa, 0xf, 0x6, 0x2, 0x80000, 0x5f2b, 0x9}]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x2c, &(0x7f00000000c0), 0x4) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="f30fbd020f060f001966b80d010f00d066bad00466ed0f2382d9c8c4e17d50f80f8c8c2e000066ba4200ed"}], 0x1, 0x6a, 0x0, 0x39) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000580)={0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.980302673s ago: executing program 3 (id=1329): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) io_submit(0x0, 0x0, &(0x7f0000002700)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 1.889075091s ago: executing program 3 (id=1330): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.651250832s ago: executing program 3 (id=1331): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x11, r1, 0x0) 1.627820594s ago: executing program 5 (id=1332): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="40f4ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r1, 0x0, 0x0) 1.058844095s ago: executing program 1 (id=1333): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3168049, 0x0, 0xfe, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 974.054403ms ago: executing program 3 (id=1334): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4a37", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}}, 0x2000800) 973.560993ms ago: executing program 0 (id=1335): unshare(0x22020600) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000}) syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40) syz_open_dev$usbmon(&(0x7f00000000c0), 0x200, 0x81) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) pselect6(0x40, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x100005, 0x0, 0x800, 0x0, 0x8000000000000001, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 798.448578ms ago: executing program 3 (id=1336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000091) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4de2, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000440)={0x5, r7}) 340.185729ms ago: executing program 1 (id=1337): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) 274.233115ms ago: executing program 0 (id=1338): r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xfffffffd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x8404) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x380020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x20000041) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xa}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8008801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.245156ms ago: executing program 1 (id=1339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000140)=@ethernet={0x306, @random="e67b24ed7571"}, 0x80, &(0x7f00000000c0)}}], 0x1, 0x4000010) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xce, 0x0, 0x2}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sctp\x00') unlinkat(r4, &(0x7f0000000000)='./file1\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) ftruncate(r5, 0x80000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0xfd7f, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x34}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') link(&(0x7f00000019c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) io_setup(0x6, &(0x7f00000003c0)) io_setup(0xffff, &(0x7f0000001100)=0x0) io_submit(r7, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) 0s ago: executing program 0 (id=1340): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) kernel console output (not intermixed with test programs): cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.712609][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.719855][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.725526][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.731606][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.737234][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.743014][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.752703][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.758330][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.768869][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.774524][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.786599][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.792253][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.801542][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.807192][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.846250][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.851917][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.861157][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 169.866802][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 169.879355][ T4401] usb 2-1: USB disconnect, device number 6 [ 170.678292][ C0] blk_print_req_error: 25 callbacks suppressed [ 170.678303][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.693605][ C0] buffer_io_error: 25 callbacks suppressed [ 170.693612][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 170.723430][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.732601][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 170.774578][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.783754][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 170.925027][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.934186][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 170.964358][ T6366] loop0: detected capacity change from 0 to 2048 [ 170.976771][ T6371] netlink: 'syz.3.585': attribute type 21 has an invalid length. [ 171.037720][ T6371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.585'. [ 171.041856][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.056017][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.703557][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.712900][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.721740][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.730903][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.740364][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.749557][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.759394][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.768593][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 171.783095][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.792304][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 172.233760][ T6402] tipc: Started in network mode [ 172.268533][ T6402] tipc: Node identity 4, cluster identity 4711 [ 172.310747][ T6402] tipc: Node number set to 4 [ 172.527194][ T6409] fuse: Bad value for 'fd' [ 172.852345][ T6420] loop3: detected capacity change from 0 to 2048 [ 173.139992][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.149852][ T6430] loop2: detected capacity change from 0 to 7 [ 173.159527][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.169488][ T4258] Dev loop2: unable to read RDB block 7 [ 173.183638][ T4258] loop2: AHDI p1 p2 p3 [ 173.193530][ T4258] loop2: partition table partially beyond EOD, truncated [ 173.238733][ T4258] loop2: p1 start 1601398130 is beyond EOD, truncated [ 173.268291][ T4258] loop2: p2 start 1702059890 is beyond EOD, truncated [ 173.288776][ T6430] Dev loop2: unable to read RDB block 7 [ 173.295246][ T6430] loop2: AHDI p1 p2 p3 [ 173.303413][ T6430] loop2: partition table partially beyond EOD, truncated [ 173.313630][ T6430] loop2: p1 start 1601398130 is beyond EOD, truncated [ 173.336929][ T6430] loop2: p2 start 1702059890 is beyond EOD, truncated [ 173.577601][ T6437] fuse: Bad value for 'fd' [ 173.592548][ T3533] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 173.782979][ T3533] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x78, skipping [ 173.827770][ T3533] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 173.897186][ T3533] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 173.934305][ T3533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.966789][ T6433] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.979963][ T6433] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 173.996272][ T3533] usb 6-1: invalid MIDI in EP 0 [ 174.051865][ T3533] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 174.108926][ T4500] udevd[4500]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.673831][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.609'. [ 175.569010][ T6472] fuse: Bad value for 'fd' [ 175.703635][ T6475] loop0: detected capacity change from 0 to 2048 [ 176.339660][ T4345] usb 6-1: USB disconnect, device number 3 [ 176.888236][ T6492] netlink: 'syz.2.627': attribute type 13 has an invalid length. [ 178.713064][ T33] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 178.912832][ T33] usb 4-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 178.939252][ T33] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.980246][ T33] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.994508][ T33] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 179.005894][ T33] usb 4-1: Product: syz [ 179.023610][ T33] usb 4-1: Manufacturer: syz [ 179.028281][ T33] usb 4-1: SerialNumber: syz [ 179.058648][ T33] usb 4-1: config 0 descriptor?? [ 179.136425][ T33] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 179.150413][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.233887][ C1] blk_print_req_error: 45 callbacks suppressed [ 179.233902][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.249288][ C1] buffer_io_error: 45 callbacks suppressed [ 179.249301][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.311264][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.320457][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.359879][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.369102][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.394001][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.403203][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.425371][ T6513] loop5: detected capacity change from 0 to 2048 [ 179.463166][ T6492] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.472461][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.481601][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.496426][ T6492] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.505971][ T6492] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.516060][ T6492] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.648208][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.657390][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.697279][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.706435][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.766163][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.775337][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.785719][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.794909][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 179.824229][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.833388][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 180.811228][ T4401] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.001482][ T4401] usb 6-1: Using ep0 maxpacket: 16 [ 181.012592][ T4401] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.048981][ T4401] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.069032][ T4401] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 181.088450][ T4401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.114940][ T4401] usb 6-1: config 0 descriptor?? [ 181.541396][ T4401] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 181.828666][ T33] usb 6-1: USB disconnect, device number 4 [ 182.073564][ T6564] loop0: detected capacity change from 0 to 2048 [ 182.454372][ T5200] usb 4-1: USB disconnect, device number 8 [ 184.083174][ T6603] netlink: 'syz.1.663': attribute type 13 has an invalid length. [ 184.341177][ T3533] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.531064][ T3533] usb 4-1: Using ep0 maxpacket: 16 [ 184.546722][ T3533] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.594875][ T3533] usb 4-1: config 0 interface 0 has no altsetting 0 [ 184.640415][ T3533] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 184.682192][ T3533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.721750][ T3533] usb 4-1: config 0 descriptor?? [ 184.887624][ C0] blk_print_req_error: 20 callbacks suppressed [ 184.887641][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.902971][ C0] buffer_io_error: 20 callbacks suppressed [ 184.902978][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 184.999093][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.008279][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.017374][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.026551][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.053549][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.062729][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.077557][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.086731][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.127373][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.667'. [ 185.169362][ T6612] kernel profiling enabled (shift: 63) [ 185.176713][ T6612] profiling shift: 63 too large [ 185.210891][ T3533] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 185.238996][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.248180][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.257653][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.266832][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.313604][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.322759][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.339837][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.348982][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.359834][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.369010][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 185.403951][ T3533] usb 4-1: USB disconnect, device number 9 [ 185.668516][ T6627] fido_id[6627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 185.951795][ T6635] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 185.962332][ T6635] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 186.000806][ T6635] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 186.132076][ T6644] netlink: 'syz.3.678': attribute type 13 has an invalid length. [ 186.880544][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.887941][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.589249][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.605266][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.991009][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 188.379983][ T6644] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.399674][ T6644] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.414389][ T6644] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.434083][ T6644] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.163516][ T6671] loop0: detected capacity change from 0 to 4096 [ 189.199363][ T6671] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 189.245062][ T6681] device batadv_slave_0 entered promiscuous mode [ 189.260626][ T6671] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 189.311449][ T6679] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 189.320382][ T6671] ntfs3: loop0: Failed to load $Extend. [ 189.339289][ T6679] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 189.394899][ T6679] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 190.031049][ T4513] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.041154][ T3598] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.058530][ C0] blk_print_req_error: 30 callbacks suppressed [ 190.058540][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.073863][ C0] buffer_io_error: 30 callbacks suppressed [ 190.073870][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.107253][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.116403][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.165626][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.174761][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.212136][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.221295][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.231935][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.241080][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.252401][ T4513] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.280501][ T4513] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.327400][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 190.340959][ T3598] usb 6-1: Using ep0 maxpacket: 8 [ 190.340960][ T4513] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.341001][ T4513] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 190.375652][ T3598] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 190.415428][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.426825][ T4513] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.440519][ T3598] usb 6-1: Product: syz [ 190.447247][ T3598] usb 6-1: Manufacturer: syz [ 190.458843][ T4513] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.472947][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.482112][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.498527][ T4513] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.507431][ T3598] usb 6-1: SerialNumber: syz [ 190.512481][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.521627][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.532129][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.535189][ T4513] usb 3-1: Product: syz [ 190.541307][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.554039][ T4513] usb 3-1: Manufacturer: syz [ 190.559927][ T3598] usb 6-1: config 0 descriptor?? [ 190.569095][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.578573][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.607567][ T4513] cdc_wdm 3-1:1.0: skipping garbage [ 190.616912][ T4513] cdc_wdm 3-1:1.0: skipping garbage [ 190.635489][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.644675][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 190.666100][ T4513] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 190.672426][ T4513] cdc_wdm 3-1:1.0: Unknown control protocol [ 190.822633][ T4513] usb 3-1: USB disconnect, device number 12 [ 190.837893][ T3598] go7007: probe of 6-1:0.0 failed with error -12 [ 191.161483][ T6726] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 191.500950][ T3598] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.620980][ T4382] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 191.712490][ T3598] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.732822][ T3598] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.791467][ T3598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.816539][ T3598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 191.835373][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 191.845518][ T4382] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 191.906876][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.945972][ T3598] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 191.958709][ T4382] usb 4-1: Product: syz [ 191.964318][ T4382] usb 4-1: Manufacturer: syz [ 191.969040][ T4382] usb 4-1: SerialNumber: syz [ 191.984637][ T3598] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.004890][ T4382] usb 4-1: config 0 descriptor?? [ 192.022303][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.044022][ T4382] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 192.060354][ T3598] usb 3-1: Product: syz [ 192.075709][ T4382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.085246][ T3598] usb 3-1: Manufacturer: syz [ 192.103052][ T3598] cdc_wdm 3-1:1.0: skipping garbage [ 192.108979][ T3598] cdc_wdm 3-1:1.0: skipping garbage [ 192.115343][ T4382] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 192.130707][ T3598] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 192.142966][ T4382] usb 4-1: media controller created [ 192.150713][ T3598] cdc_wdm 3-1:1.0: Unknown control protocol [ 192.183546][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.481511][ T4382] DVB: Unable to find symbol mt352_attach() [ 192.759364][ T3598] usb 6-1: USB disconnect, device number 5 [ 192.788174][ T4382] DVB: Unable to find symbol nxt6000_attach() [ 192.799220][ T4382] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 192.875567][ T4382] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 192.922612][ T4382] dvb-usb: schedule remote query interval to 1000 msecs. [ 192.929912][ T4382] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 192.940763][ T4382] dvb-usb: bulk message failed: -22 (7/0) [ 192.949757][ T4382] dvb-usb: bulk message failed: -22 (7/0) [ 192.973195][ T4382] usb 4-1: USB disconnect, device number 10 [ 193.037725][ T4382] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 193.111081][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 193.371758][ T4382] usb 3-1: USB disconnect, device number 13 [ 193.622714][ T6763] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 193.681397][ T6770] overlayfs: failed to resolve './file0': -2 [ 193.795580][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.723'. [ 194.084126][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090443][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.101100][ T4382] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 194.303846][ T4382] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 194.322691][ T4382] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.342593][ T4382] usb 3-1: Product: syz [ 194.348532][ T4382] usb 3-1: Manufacturer: syz [ 194.356980][ T4382] usb 3-1: SerialNumber: syz [ 194.369528][ T4382] usb 3-1: config 0 descriptor?? [ 194.396207][ T4382] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 194.429076][ T4382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.441158][ T4401] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.518623][ T4382] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 194.540378][ T4382] usb 3-1: media controller created [ 194.600044][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.691062][ T4401] usb 4-1: Using ep0 maxpacket: 8 [ 194.804802][ T4401] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 194.826111][ T4401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.844657][ T4382] DVB: Unable to find symbol mt352_attach() [ 194.853252][ T4401] usb 4-1: Product: syz [ 194.870304][ T4401] usb 4-1: Manufacturer: syz [ 194.876638][ T4401] usb 4-1: SerialNumber: syz [ 194.903091][ T4401] usb 4-1: config 0 descriptor?? [ 194.919503][ T4401] go7007: probe of 4-1:0.0 failed with error -12 [ 194.987618][ T4382] DVB: Unable to find symbol nxt6000_attach() [ 195.000539][ T4382] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 195.046177][ T4382] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 195.068773][ C0] blk_print_req_error: 45 callbacks suppressed [ 195.068787][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.084143][ C0] buffer_io_error: 45 callbacks suppressed [ 195.084151][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.158314][ T4382] dvb-usb: schedule remote query interval to 1000 msecs. [ 195.170937][ T4382] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 195.197612][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.207170][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.221040][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.230168][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.243770][ T4382] dvb-usb: bulk message failed: -22 (7/0) [ 195.257816][ T4382] dvb-usb: bulk message failed: -22 (7/0) [ 195.292665][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.301874][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.313240][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.322432][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 195.339702][ T4382] usb 3-1: USB disconnect, device number 14 [ 195.369793][ T4382] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 195.671114][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 196.388306][ T6848] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.551072][ T4513] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.744100][ T4513] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 196.769804][ T4513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.821693][ T4513] usb 3-1: Product: syz [ 196.850190][ T4513] usb 3-1: Manufacturer: syz [ 196.891148][ T4513] usb 3-1: SerialNumber: syz [ 196.937325][ T4513] usb 3-1: config 0 descriptor?? [ 196.974642][ T4513] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 197.018073][ T4513] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.048987][ T4513] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 197.078670][ T4513] usb 3-1: media controller created [ 197.155259][ T4513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.259388][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.268551][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 197.277359][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.286537][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 197.335002][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.344173][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 197.362527][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.371677][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 197.421089][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.430255][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 197.590769][ T4513] DVB: Unable to find symbol mt352_attach() [ 197.724849][ T4401] usb 4-1: USB disconnect, device number 11 [ 197.835935][ T4513] DVB: Unable to find symbol nxt6000_attach() [ 197.842634][ T4513] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 197.914527][ T4513] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 197.980345][ T4513] dvb-usb: schedule remote query interval to 1000 msecs. [ 198.020592][ T4513] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 198.066293][ T4513] dvb-usb: bulk message failed: -22 (7/0) [ 198.077194][ T4513] dvb-usb: bulk message failed: -22 (7/0) [ 198.108849][ T4513] usb 3-1: USB disconnect, device number 15 [ 198.201943][ T4513] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 198.456665][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 199.199449][ T6901] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 199.470965][ T4382] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 199.548281][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 199.710985][ T4382] usb 4-1: Using ep0 maxpacket: 8 [ 199.729982][ T4382] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 199.745219][ T4382] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 199.771503][ T4382] usb 4-1: string descriptor 0 read error: -22 [ 199.789473][ T4382] usb 4-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.40 [ 199.823310][ T4382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.144045][ T6936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.177545][ T6936] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.191975][ T6936] bond1: (slave macvlan2): making interface the new active one [ 200.277729][ T6936] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 200.307421][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 200.318794][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 200.339234][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 200.717053][ C0] blk_print_req_error: 50 callbacks suppressed [ 200.717064][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.732376][ C0] buffer_io_error: 50 callbacks suppressed [ 200.732384][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 200.842118][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.851309][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 200.901603][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.910749][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 200.964404][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.973588][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 201.014880][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.024035][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 201.287034][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.788'. [ 201.480169][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.489327][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 201.498418][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.507925][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 201.527142][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.536309][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 201.549970][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.559176][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 201.569110][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.578298][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 202.637779][ T3533] usb 4-1: USB disconnect, device number 12 [ 202.654139][ T6999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 202.840775][ T7008] device batadv_slave_0 entered promiscuous mode [ 202.916821][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.802'. [ 203.632502][ T7026] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 204.461083][ T4513] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 204.660957][ T3533] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.669714][ T4513] usb 6-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 204.695919][ T4513] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.722430][ T4513] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.747944][ T4513] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.757085][ T4513] usb 6-1: Product: syz [ 204.761795][ T4513] usb 6-1: Manufacturer: syz [ 204.766465][ T4513] usb 6-1: SerialNumber: syz [ 204.785559][ T4513] usb 6-1: config 0 descriptor?? [ 204.811354][ T4513] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 204.843811][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.931043][ T3533] usb 4-1: Using ep0 maxpacket: 8 [ 205.023006][ T3533] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 205.030808][ T3533] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 205.153361][ T3533] usb 4-1: string descriptor 0 read error: -22 [ 205.166651][ T3533] usb 4-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.40 [ 205.212067][ T3533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.601060][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 206.310402][ C1] blk_print_req_error: 35 callbacks suppressed [ 206.310415][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.325723][ C1] buffer_io_error: 35 callbacks suppressed [ 206.325730][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.344189][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.353379][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.364146][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.373332][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.401937][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.411105][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.442027][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.451195][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.788474][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.797664][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.806513][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.815673][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.843888][ T7089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.888093][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.897244][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 206.972511][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.981668][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 207.021626][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.030792][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 207.771723][ T4382] usb 4-1: USB disconnect, device number 13 [ 208.177627][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 208.220093][ T4513] usb 6-1: USB disconnect, device number 6 [ 208.597119][ T7124] loop2: detected capacity change from 0 to 4096 [ 208.618987][ T7124] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 208.667314][ T7124] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 208.674763][ T7124] ntfs3: loop2: Failed to load $Extend. [ 209.211378][ T7135] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 209.671052][ T4513] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 209.810960][ T3533] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.869237][ T4513] usb 6-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 209.888989][ T4513] usb 6-1: config 0 interface 0 has no altsetting 0 [ 209.908047][ T4513] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.947578][ T4513] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.972545][ T4513] usb 6-1: Product: syz [ 209.982468][ T4513] usb 6-1: Manufacturer: syz [ 209.987083][ T4513] usb 6-1: SerialNumber: syz [ 210.009364][ T4513] usb 6-1: config 0 descriptor?? [ 210.024911][ T3533] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 210.041235][ T3533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.079060][ T4513] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 210.104602][ T3533] usb 2-1: Product: syz [ 210.112134][ T3533] usb 2-1: Manufacturer: syz [ 210.134149][ T3533] usb 2-1: SerialNumber: syz [ 210.149622][ T3533] usb 2-1: config 0 descriptor?? [ 210.160573][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.192237][ T3533] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 210.211754][ T3533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.231357][ T3533] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 210.289763][ T3533] usb 2-1: media controller created [ 210.327437][ T3533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.447632][ T7164] loop0: detected capacity change from 0 to 4096 [ 210.483215][ T7164] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 210.500955][ T4513] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.512170][ T3533] DVB: Unable to find symbol mt352_attach() [ 210.605254][ T7164] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 210.627042][ T7164] ntfs3: loop0: Failed to load $Extend. [ 210.655488][ T3533] DVB: Unable to find symbol nxt6000_attach() [ 210.663326][ T3533] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 210.676893][ T3533] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 210.701349][ T4513] usb 4-1: Using ep0 maxpacket: 16 [ 210.708907][ T4513] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.731839][ T3533] dvb-usb: schedule remote query interval to 1000 msecs. [ 210.750044][ T4513] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.760214][ T3533] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 210.776007][ T4513] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 210.792781][ T3533] dvb-usb: bulk message failed: -22 (7/0) [ 210.807637][ T4513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.819112][ T3533] dvb-usb: bulk message failed: -22 (7/0) [ 210.885234][ T4513] usb 4-1: config 0 descriptor?? [ 210.890990][ T3533] usb 2-1: USB disconnect, device number 7 [ 211.030097][ T3533] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 211.191236][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 211.328296][ T4513] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 211.341436][ T7176] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 211.486535][ C0] blk_print_req_error: 55 callbacks suppressed [ 211.486546][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.501953][ C0] buffer_io_error: 55 callbacks suppressed [ 211.501961][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 211.526383][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.535572][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 211.547077][ T4382] usb 4-1: USB disconnect, device number 14 [ 211.554107][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.563306][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 211.604378][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.613563][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 211.669738][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.678935][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 211.727728][ T7180] fido_id[7180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 211.939007][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.948168][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 211.959274][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 211.968458][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 212.015394][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.024621][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 212.033872][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.043042][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 212.067312][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.076478][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 212.540936][ T4513] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.744185][ T4513] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 212.763461][ T4513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.823405][ T4513] usb 4-1: Product: syz [ 212.851042][ T4513] usb 4-1: Manufacturer: syz [ 212.881030][ T4513] usb 4-1: SerialNumber: syz [ 212.912814][ T4513] usb 4-1: config 0 descriptor?? [ 212.977683][ T4513] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 212.999403][ T4513] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.034121][ T4513] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 213.052521][ T4513] usb 4-1: media controller created [ 213.072748][ T4513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.173291][ T7201] loop2: detected capacity change from 0 to 7 [ 213.182220][ T7201] Dev loop2: unable to read RDB block 7 [ 213.187803][ T7201] loop2: AHDI p1 p2 p3 [ 213.229557][ T7201] loop2: partition table partially beyond EOD, truncated [ 213.244111][ T3533] usb 6-1: USB disconnect, device number 7 [ 213.297484][ T7201] loop2: p1 start 1601398130 is beyond EOD, truncated [ 213.323040][ T4513] DVB: Unable to find symbol mt352_attach() [ 213.350936][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 213.361411][ T7201] loop2: p2 start 1702059890 is beyond EOD, truncated [ 213.476395][ T4513] DVB: Unable to find symbol nxt6000_attach() [ 213.496476][ T4513] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 213.552007][ T4513] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 213.608940][ T4513] dvb-usb: schedule remote query interval to 1000 msecs. [ 213.645443][ T4513] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 213.695130][ T4513] dvb-usb: bulk message failed: -22 (7/0) [ 213.723629][ T4513] dvb-usb: bulk message failed: -22 (7/0) [ 213.791606][ T4513] usb 4-1: USB disconnect, device number 15 [ 213.896557][ T4513] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 214.369059][ T7224] loop5: detected capacity change from 0 to 7 [ 214.406879][ T7224] Dev loop5: unable to read RDB block 7 [ 214.430154][ T7224] loop5: AHDI p1 p2 p3 [ 214.449357][ T7224] loop5: partition table partially beyond EOD, truncated [ 214.479492][ T7224] loop5: p1 start 1601398130 is beyond EOD, truncated [ 214.539057][ T7224] loop5: p2 start 1702059890 is beyond EOD, truncated [ 215.550166][ T7256] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.611440][ T7255] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 216.577693][ C0] blk_print_req_error: 30 callbacks suppressed [ 216.577704][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.593048][ C0] buffer_io_error: 30 callbacks suppressed [ 216.593055][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 216.660386][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.669570][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 216.724090][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.733313][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 216.789134][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.798357][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 216.868991][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 216.878178][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 217.061278][ T7284] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 217.154361][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.163549][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 217.222629][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.231822][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 217.290228][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.299458][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 217.359927][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.369113][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 217.384810][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.394018][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 217.774289][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 218.253507][ T7318] loop5: detected capacity change from 0 to 7 [ 218.265489][ T7318] Dev loop5: unable to read RDB block 7 [ 218.274673][ T7318] loop5: AHDI p1 p2 p3 [ 218.278861][ T7318] loop5: partition table partially beyond EOD, truncated [ 218.287338][ T7318] loop5: p1 start 1601398130 is beyond EOD, truncated [ 218.306514][ T7318] loop5: p2 start 1702059890 is beyond EOD, truncated [ 218.320630][ T7321] netlink: 'syz.3.906': attribute type 13 has an invalid length. [ 218.448092][ T7324] netlink: 72 bytes leftover after parsing attributes in process `syz.5.904'. [ 218.517038][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 219.032333][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 219.388418][ T7358] loop5: detected capacity change from 0 to 7 [ 219.411907][ T7358] Dev loop5: unable to read RDB block 7 [ 219.429349][ T7358] loop5: AHDI p1 p2 p3 [ 219.475522][ T7358] loop5: partition table partially beyond EOD, truncated [ 219.503708][ T7358] loop5: p1 start 1601398130 is beyond EOD, truncated [ 219.510640][ T7358] loop5: p2 start 1702059890 is beyond EOD, truncated [ 219.560686][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'. [ 220.329858][ T7385] netlink: 'syz.2.929': attribute type 13 has an invalid length. [ 220.510954][ T4513] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 220.707213][ T4513] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 220.714872][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 220.716484][ T4513] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.741663][ T4513] usb 6-1: Product: syz [ 220.745859][ T4513] usb 6-1: Manufacturer: syz [ 220.750552][ T4513] usb 6-1: SerialNumber: syz [ 220.768412][ T4513] usb 6-1: config 0 descriptor?? [ 220.783643][ T4513] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 220.802741][ T4513] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.813804][ T4513] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 220.823384][ T4513] usb 6-1: media controller created [ 220.831283][ T7396] loop5: detected capacity change from 0 to 7 [ 220.838776][ T4260] Dev loop5: unable to read RDB block 7 [ 220.845427][ T4513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.847369][ T4260] loop5: AHDI p1 p2 p3 [ 220.860577][ T4260] loop5: partition table partially beyond EOD, truncated [ 220.869665][ T4260] loop5: p1 start 1601398130 is beyond EOD, truncated [ 220.879642][ T4260] loop5: p2 start 1702059890 is beyond EOD, truncated [ 220.895234][ T7396] Dev loop5: unable to read RDB block 7 [ 220.913967][ T7396] loop5: AHDI p1 p2 p3 [ 220.930662][ T7396] loop5: partition table partially beyond EOD, truncated [ 220.951402][ T7396] loop5: p1 start 1601398130 is beyond EOD, truncated [ 220.961203][ T4318] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 220.968482][ T7396] loop5: p2 start 1702059890 is beyond EOD, truncated [ 220.982197][ T4513] DVB: Unable to find symbol mt352_attach() [ 220.987052][ T7382] loop2: detected capacity change from 0 to 7 [ 221.029469][ T4259] Dev loop2: unable to read RDB block 7 [ 221.037003][ T4259] loop2: AHDI p1 p2 p3 [ 221.051436][ T4259] loop2: partition table partially beyond EOD, truncated [ 221.077171][ T4259] loop2: p1 start 1601398130 is beyond EOD, truncated [ 221.108591][ T4259] loop2: p2 start 1702059890 is beyond EOD, truncated [ 221.130217][ T7382] Dev loop2: unable to read RDB block 7 [ 221.152228][ T4318] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 221.161168][ T7382] loop2: AHDI p1 p2 p3 [ 221.167189][ T4513] DVB: Unable to find symbol nxt6000_attach() [ 221.171378][ T7382] loop2: partition table partially beyond EOD, truncated [ 221.183930][ T4513] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 221.194386][ T7382] loop2: p1 start 1601398130 is beyond EOD, truncated [ 221.196374][ T4318] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.206808][ T7382] loop2: p2 start 1702059890 is beyond EOD, truncated [ 221.210116][ T4513] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 221.250095][ T4318] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.259247][ T4513] dvb-usb: schedule remote query interval to 1000 msecs. [ 221.270917][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.280539][ T4513] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 221.292914][ T4318] usb 2-1: Product: syz [ 221.297163][ T4318] usb 2-1: Manufacturer: syz [ 221.302249][ T4513] dvb-usb: bulk message failed: -22 (7/0) [ 221.308449][ T4318] usb 2-1: SerialNumber: syz [ 221.313759][ T4513] dvb-usb: bulk message failed: -22 (7/0) [ 221.325215][ T4318] usb 2-1: config 0 descriptor?? [ 221.336095][ T4513] usb 6-1: USB disconnect, device number 8 [ 221.379117][ T4318] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 221.450278][ T4513] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 221.460360][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.477693][ T7410] netlink: 72 bytes leftover after parsing attributes in process `syz.3.936'. [ 222.258802][ T7432] loop0: detected capacity change from 0 to 4096 [ 222.357499][ T7432] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 222.585129][ T7432] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 222.619957][ T7432] ntfs3: loop0: Failed to load $Extend. [ 222.945606][ T7450] netlink: 'syz.0.947': attribute type 13 has an invalid length. [ 224.080930][ T4318] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 224.098919][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 224.250943][ T4318] usb 6-1: device descriptor read/64, error -32 [ 224.520970][ T4318] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 224.610704][ T7497] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 224.981199][ T4318] usb 6-1: Using ep0 maxpacket: 8 [ 225.566839][ T4318] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 225.584294][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.607087][ T4318] usb 6-1: Product: syz [ 225.623992][ T4318] usb 6-1: Manufacturer: syz [ 225.632544][ T4318] usb 6-1: SerialNumber: syz [ 225.687764][ T4318] usb 6-1: config 0 descriptor?? [ 225.718778][ T4318] go7007: probe of 6-1:0.0 failed with error -12 [ 225.742465][ T4401] usb 2-1: USB disconnect, device number 8 [ 225.816443][ C1] blk_print_req_error: 40 callbacks suppressed [ 225.816458][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.831836][ C1] buffer_io_error: 40 callbacks suppressed [ 225.831845][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 225.922541][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.931707][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 226.006852][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.016077][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 226.026909][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.036074][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 226.128878][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.138058][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 226.770275][ T7533] blktrace: Concurrent blktraces are not allowed on loop4 [ 227.407542][ T4318] usb 6-1: USB disconnect, device number 10 [ 227.913754][ T7581] input: syz1 as /devices/virtual/input/input19 [ 227.985062][ T7584] overlayfs: missing 'lowerdir' [ 229.070491][ T7595] loop5: detected capacity change from 0 to 7 [ 229.080290][ T4258] Dev loop5: unable to read RDB block 7 [ 229.088785][ T4258] loop5: AHDI p1 p2 p3 [ 229.095477][ T4258] loop5: partition table partially beyond EOD, truncated [ 229.109209][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 229.120448][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 229.130195][ T7595] Dev loop5: unable to read RDB block 7 [ 229.141015][ T7595] loop5: AHDI p1 p2 p3 [ 229.145304][ T7595] loop5: partition table partially beyond EOD, truncated [ 229.168273][ T7595] loop5: p1 start 1601398130 is beyond EOD, truncated [ 229.180974][ T7595] loop5: p2 start 1702059890 is beyond EOD, truncated [ 229.213976][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.223152][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.256389][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.265531][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.276056][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.285285][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.294993][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.304131][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.354709][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.363909][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 229.372054][ T4310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 229.585672][ T4310] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 229.606421][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.637892][ T4310] usb 4-1: Product: syz [ 229.691699][ T4310] usb 4-1: Manufacturer: syz [ 229.702765][ T4310] usb 4-1: SerialNumber: syz [ 229.719225][ T4310] usb 4-1: config 0 descriptor?? [ 229.735239][ T4310] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 229.768143][ T4310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.791639][ T4310] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 229.811116][ T4310] usb 4-1: media controller created [ 229.846647][ T4310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.929908][ T7593] loop2: detected capacity change from 0 to 7 [ 229.939843][ T4260] Dev loop2: unable to read RDB block 7 [ 229.945999][ T4260] loop2: unable to read partition table [ 229.962104][ T4260] loop2: partition table beyond EOD, truncated [ 229.980566][ T7593] Dev loop2: unable to read RDB block 7 [ 229.995400][ T7593] loop2: unable to read partition table [ 230.031086][ T7593] loop2: partition table beyond EOD, truncated [ 230.037534][ T7593] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.116550][ T4310] DVB: Unable to find symbol mt352_attach() [ 230.182259][ T7620] overlayfs: missing 'lowerdir' [ 230.300057][ T4310] DVB: Unable to find symbol nxt6000_attach() [ 230.307188][ T4310] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 230.318922][ T4310] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 230.331242][ T4513] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 230.951816][ T4310] dvb-usb: schedule remote query interval to 1000 msecs. [ 230.967502][ T4310] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 231.073091][ T4310] dvb-usb: bulk message failed: -22 (7/0) [ 231.078920][ T4310] dvb-usb: bulk message failed: -22 (7/0) [ 231.086758][ T4310] usb 4-1: USB disconnect, device number 16 [ 231.131075][ T4513] usb 2-1: Using ep0 maxpacket: 8 [ 231.147052][ T4513] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 231.221979][ T4513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.266123][ T4310] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 231.297509][ T4513] usb 2-1: Product: syz [ 231.307826][ T4513] usb 2-1: Manufacturer: syz [ 231.324545][ T4513] usb 2-1: SerialNumber: syz [ 231.354713][ T4513] usb 2-1: config 0 descriptor?? [ 231.443256][ T4513] go7007: probe of 2-1:0.0 failed with error -12 [ 231.834596][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.042406][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.203427][ T7651] loop5: detected capacity change from 0 to 7 [ 232.220647][ T7654] overlayfs: missing 'lowerdir' [ 232.225738][ T4258] Dev loop5: unable to read RDB block 7 [ 232.235226][ T4258] loop5: AHDI p1 p2 p3 [ 232.247172][ T4258] loop5: partition table partially beyond EOD, truncated [ 232.264142][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 232.279903][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 232.312255][ T7651] Dev loop5: unable to read RDB block 7 [ 232.320938][ T7651] loop5: AHDI p1 p2 p3 [ 232.325230][ T7651] loop5: partition table partially beyond EOD, truncated [ 232.336107][ T7651] loop5: p1 start 1601398130 is beyond EOD, truncated [ 232.343683][ T7651] loop5: p2 start 1702059890 is beyond EOD, truncated [ 233.220150][ T4310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 233.417395][ T4310] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.448495][ T4310] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.477321][ T4310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.508457][ T4310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 233.526812][ T4310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 233.571552][ T4310] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.636733][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.698883][ T4310] usb 3-1: Product: syz [ 233.709003][ T4310] usb 3-1: Manufacturer: syz [ 233.737266][ T4310] cdc_wdm 3-1:1.0: skipping garbage [ 233.757111][ T4310] cdc_wdm 3-1:1.0: skipping garbage [ 233.798030][ T4310] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 233.820954][ T4310] cdc_wdm 3-1:1.0: Unknown control protocol [ 233.945664][ T4310] usb 3-1: USB disconnect, device number 16 [ 233.996870][ T3598] usb 2-1: USB disconnect, device number 9 [ 234.043440][ T7677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 234.068941][ C1] blk_print_req_error: 15 callbacks suppressed [ 234.068956][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.084289][ C1] buffer_io_error: 15 callbacks suppressed [ 234.084297][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 234.106783][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.115948][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 234.126798][ T7678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1004'. [ 234.154275][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.163448][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 234.175280][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.184426][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 234.204590][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.213800][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 234.289300][ T7692] overlayfs: missing 'lowerdir' [ 235.502577][ T7702] loop5: detected capacity change from 0 to 7 [ 235.553565][ T4258] Dev loop5: unable to read RDB block 7 [ 235.559149][ T4258] loop5: AHDI p1 p2 p3 [ 235.576510][ T4258] loop5: partition table partially beyond EOD, truncated [ 235.596323][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 235.636311][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 235.662053][ T7702] Dev loop5: unable to read RDB block 7 [ 235.674669][ T7702] loop5: AHDI p1 p2 p3 [ 235.710116][ T7702] loop5: partition table partially beyond EOD, truncated [ 235.730194][ T7702] loop5: p1 start 1601398130 is beyond EOD, truncated [ 235.767990][ T7702] loop5: p2 start 1702059890 is beyond EOD, truncated [ 236.028047][ T7710] netlink: 'syz.5.1013': attribute type 13 has an invalid length. [ 236.070938][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 236.544179][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.553346][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 236.606577][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.615820][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 236.686143][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.695349][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 236.738580][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.747774][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 236.791292][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.798581][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.840608][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.849832][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 237.158703][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.178404][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.234643][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.480317][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.557233][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.610266][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.020552][ T7710] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.051465][ T7710] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.067329][ T7710] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.082541][ T7710] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.361283][ T7734] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 238.609266][ T7740] overlayfs: missing 'lowerdir' [ 239.400248][ C0] blk_print_req_error: 5 callbacks suppressed [ 239.400262][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.415549][ C0] buffer_io_error: 5 callbacks suppressed [ 239.415562][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 239.430506][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.439679][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 239.469787][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.479014][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 239.497245][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.506428][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 239.517581][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.526760][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 239.553743][ T7751] netlink: 'syz.5.1024': attribute type 10 has an invalid length. [ 239.673016][ T7751] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.692479][ T7751] bond0: (slave team0): Enslaving as an active interface with an up link [ 240.392179][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 240.778704][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.787916][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 240.837992][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.847155][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 240.858638][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.867768][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 240.876553][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.885771][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 240.897316][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.906558][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 241.071254][ T7713] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 241.275556][ T7713] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.284725][ T7780] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 241.284733][ T7713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.284753][ T7713] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.330915][ T7713] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 241.347152][ T7713] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.365677][ T7713] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.393023][ T7713] usb 6-1: Product: syz [ 241.403815][ T7713] usb 6-1: Manufacturer: syz [ 241.413275][ T7713] cdc_wdm 6-1:1.0: skipping garbage [ 241.418699][ T7713] cdc_wdm 6-1:1.0: skipping garbage [ 241.427154][ T7713] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 241.566303][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.595851][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.849260][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.860621][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.977789][ T7800] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1037'. [ 243.271068][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 243.470961][ T7713] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.522278][ T7829] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 243.660971][ T7713] usb 2-1: Using ep0 maxpacket: 8 [ 243.812216][ T7714] usb 6-1: USB disconnect, device number 11 [ 243.997921][ T7842] loop2: detected capacity change from 0 to 2048 [ 244.001523][ T7713] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 244.037854][ T7713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.174578][ T7713] usb 2-1: Product: syz [ 244.264807][ T7713] usb 2-1: Manufacturer: syz [ 244.274993][ T7713] usb 2-1: SerialNumber: syz [ 244.288835][ T7713] usb 2-1: config 0 descriptor?? [ 244.307784][ T7713] go7007: probe of 2-1:0.0 failed with error -12 [ 244.331594][ T7714] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 244.538404][ T7714] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.555896][ T7714] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 244.585303][ T7714] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.608674][ T7714] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 244.638409][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.656596][ T7714] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 244.670267][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.704252][ T7714] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.714972][ T7714] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.723273][ T7714] usb 6-1: Product: syz [ 244.727638][ T7714] usb 6-1: Manufacturer: syz [ 244.754776][ T7714] cdc_wdm 6-1:1.0: skipping garbage [ 244.766943][ T7714] cdc_wdm 6-1:1.0: skipping garbage [ 244.780804][ T7714] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 244.826126][ T7714] cdc_wdm 6-1:1.0: Unknown control protocol [ 244.956962][ T7714] usb 6-1: USB disconnect, device number 12 [ 245.511239][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 245.570971][ T7714] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 245.730922][ T7714] usb 6-1: device descriptor read/64, error -71 [ 246.000948][ T7714] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 246.161027][ T7714] usb 6-1: device descriptor read/64, error -71 [ 246.221065][ T7873] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 246.297071][ T7714] usb usb6-port1: attempt power cycle [ 246.377088][ T4311] usb 2-1: USB disconnect, device number 10 [ 246.397496][ C1] blk_print_req_error: 30 callbacks suppressed [ 246.397507][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.412866][ C1] buffer_io_error: 30 callbacks suppressed [ 246.412874][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 246.433753][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.442945][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 246.460931][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.470141][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 246.482108][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.491282][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 246.510125][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.519282][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 246.791666][ T7714] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 246.842191][ T7714] usb 6-1: device descriptor read/8, error -71 [ 246.971183][ T4311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.173159][ T4311] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 247.189619][ T4311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.205685][ T4311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 247.220091][ T4311] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 247.240063][ T4311] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 247.258717][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 247.268409][ T4311] usb 2-1: Product: syz [ 247.286928][ T4311] usb 2-1: Manufacturer: syz [ 247.328454][ T4311] cdc_wdm 2-1:1.0: skipping garbage [ 247.357022][ T4311] cdc_wdm 2-1:1.0: skipping garbage [ 247.367693][ T4311] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 247.472122][ T7910] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 247.577926][ T7914] loop5: detected capacity change from 0 to 7 [ 247.596212][ T4258] Dev loop5: unable to read RDB block 7 [ 247.602758][ T4258] loop5: AHDI p1 p2 p3 [ 247.607745][ T4258] loop5: partition table partially beyond EOD, truncated [ 247.619286][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 247.626983][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 247.640187][ T7914] Dev loop5: unable to read RDB block 7 [ 247.650377][ T7914] loop5: AHDI p1 p2 p3 [ 247.658208][ T7914] loop5: partition table partially beyond EOD, truncated [ 247.679921][ T7914] loop5: p1 start 1601398130 is beyond EOD, truncated [ 247.704883][ T7914] loop5: p2 start 1702059890 is beyond EOD, truncated [ 249.231128][ T3598] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 249.430928][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 249.453959][ T3598] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.462912][ T3598] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 249.478753][ T3598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.488548][ T3598] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 249.501249][ T3598] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 249.670545][ T3598] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.742618][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 249.809013][ T3598] usb 4-1: Product: syz [ 249.823938][ T3598] usb 4-1: Manufacturer: syz [ 249.845305][ T3598] cdc_wdm 4-1:1.0: skipping garbage [ 249.850642][ T3598] cdc_wdm 4-1:1.0: skipping garbage [ 249.867640][ T3598] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 249.895887][ T3598] cdc_wdm 4-1:1.0: Unknown control protocol [ 249.904614][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.913769][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 249.934199][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.943349][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 249.955270][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.964405][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 249.972621][ T4382] usb 2-1: USB disconnect, device number 11 [ 249.980411][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 249.989601][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 250.004243][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.013391][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 250.050363][ T4310] usb 4-1: USB disconnect, device number 17 [ 250.511086][ T4382] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.641069][ T4310] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 250.707294][ T4382] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 250.716689][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.725039][ T4382] usb 2-1: Product: syz [ 250.729304][ T4382] usb 2-1: Manufacturer: syz [ 250.734483][ T4382] usb 2-1: SerialNumber: syz [ 250.754911][ T4382] usb 2-1: config 0 descriptor?? [ 250.778125][ T4382] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 250.795617][ T4382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.808063][ T4310] usb 4-1: device descriptor read/64, error -71 [ 250.816836][ T7992] overlayfs: missing 'lowerdir' [ 250.824968][ T4382] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 250.834737][ T4382] usb 2-1: media controller created [ 250.849771][ T4382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.950238][ T4382] DVB: Unable to find symbol mt352_attach() [ 250.964425][ T7979] loop2: detected capacity change from 0 to 7 [ 250.975292][ T4260] Dev loop2: unable to read RDB block 7 [ 250.986024][ T4260] loop2: unable to read partition table [ 251.025068][ T4260] loop2: partition table beyond EOD, truncated [ 251.027757][ T4382] DVB: Unable to find symbol nxt6000_attach() [ 251.037777][ T4382] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 251.054805][ T7979] Dev loop2: unable to read RDB block 7 [ 251.066055][ T4382] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 251.071493][ T7979] loop2: unable to read partition table [ 251.087739][ T4382] dvb-usb: schedule remote query interval to 1000 msecs. [ 251.095411][ T4310] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 251.097829][ T7979] loop2: partition table beyond EOD, [ 251.103732][ T4382] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 251.122999][ T4382] dvb-usb: bulk message failed: -22 (7/0) [ 251.127597][ T7979] truncated [ 251.128975][ T4382] dvb-usb: bulk message failed: -22 (7/0) [ 251.138516][ T7979] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.200510][ T4382] usb 2-1: USB disconnect, device number 12 [ 251.253514][ T4382] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 251.280986][ T4310] usb 4-1: device descriptor read/64, error -71 [ 251.401201][ T4310] usb usb4-port1: attempt power cycle [ 251.746420][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.755662][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.779851][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.787864][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 251.789047][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.806919][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.816114][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.831319][ T4310] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 251.843321][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.852516][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.871419][ T4310] usb 4-1: device descriptor read/8, error -71 [ 251.882375][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.891565][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.920050][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.929206][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.938548][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.947746][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.960174][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.969381][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 251.996006][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.005194][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 252.027551][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.036742][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 252.331211][ T4382] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.391420][ T8029] overlayfs: missing 'lowerdir' [ 252.552261][ T4382] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.564305][ T4382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.606561][ T4382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.640712][ T4382] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 252.662400][ T4382] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.698634][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.718692][ T4382] usb 2-1: Product: syz [ 252.729050][ T4382] usb 2-1: Manufacturer: syz [ 252.746931][ T4382] cdc_wdm 2-1:1.0: skipping garbage [ 252.760311][ T4382] cdc_wdm 2-1:1.0: skipping garbage [ 252.769871][ T4382] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 252.786971][ T8037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1097'. [ 253.700966][ T4310] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 253.904177][ T4310] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 253.928897][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.970892][ T4310] usb 6-1: Product: syz [ 253.996953][ T4310] usb 6-1: Manufacturer: syz [ 254.005690][ T4310] usb 6-1: SerialNumber: syz [ 254.025286][ T4310] usb 6-1: config 0 descriptor?? [ 254.037558][ T4310] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 254.058326][ T4310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.069387][ T4310] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 254.083410][ T4310] usb 6-1: media controller created [ 254.107812][ T4310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.122558][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 254.238554][ T8046] loop2: detected capacity change from 0 to 7 [ 254.260778][ T4258] Dev loop2: unable to read RDB block 7 [ 254.269800][ T4258] loop2: unable to read partition table [ 254.287407][ T4310] DVB: Unable to find symbol mt352_attach() [ 254.300345][ T4258] loop2: partition table beyond EOD, truncated [ 254.328732][ T8046] Dev loop2: unable to read RDB block 7 [ 254.334587][ T8046] loop2: unable to read partition table [ 254.395894][ T8046] loop2: partition table beyond EOD, truncated [ 254.431533][ T8046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.527392][ T4310] DVB: Unable to find symbol nxt6000_attach() [ 254.538440][ T4310] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 254.559961][ T4310] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 254.585196][ T4310] dvb-usb: schedule remote query interval to 1000 msecs. [ 254.597558][ T4310] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 254.613039][ T4310] dvb-usb: bulk message failed: -22 (7/0) [ 254.619386][ T4310] dvb-usb: bulk message failed: -22 (7/0) [ 254.635227][ T4310] usb 6-1: USB disconnect, device number 17 [ 254.695854][ T4310] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 254.762011][ T7714] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 254.942460][ T7714] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.952440][ T7714] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.964309][ T7714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.974159][ T7714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 254.987755][ T8067] overlayfs: missing 'workdir' [ 254.996067][ T7714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 255.018565][ T7714] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.037039][ T7714] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.066793][ T4310] usb 2-1: USB disconnect, device number 13 [ 255.085933][ T7714] usb 4-1: Product: syz [ 255.090116][ T7714] usb 4-1: Manufacturer: syz [ 255.115607][ T7714] cdc_wdm 4-1:1.0: skipping garbage [ 255.140514][ T7714] cdc_wdm 4-1:1.0: skipping garbage [ 255.169157][ T7714] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 255.175693][ T7714] cdc_wdm 4-1:1.0: Unknown control protocol [ 255.207564][ T8077] netlink: 'syz.1.1110': attribute type 13 has an invalid length. [ 255.275029][ T8076] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 255.321119][ T7714] usb 4-1: USB disconnect, device number 22 [ 255.435786][ T8081] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 255.522672][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.529003][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010920][ T7714] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 256.214822][ T7714] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.227557][ T7714] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 256.249949][ T7714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.293514][ T7714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 256.376493][ T7714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 256.416068][ T7714] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.499576][ T8105] overlayfs: missing 'workdir' [ 256.668360][ T7714] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.707960][ T7714] usb 4-1: Product: syz [ 256.743278][ T7714] usb 4-1: Manufacturer: syz [ 256.847735][ T7714] cdc_wdm 4-1:1.0: skipping garbage [ 256.893926][ T7714] cdc_wdm 4-1:1.0: skipping garbage [ 256.907236][ T7714] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 256.920035][ T7714] cdc_wdm 4-1:1.0: Unknown control protocol [ 257.030924][ T4382] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 257.088488][ T8112] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 257.232191][ T4382] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.240817][ T4382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.287469][ T4382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.315692][ T4382] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 257.379580][ T4382] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.432057][ T4382] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.454724][ T4382] usb 2-1: Product: syz [ 257.463486][ T4382] usb 2-1: Manufacturer: syz [ 257.487029][ T4382] cdc_wdm 2-1:1.0: skipping garbage [ 257.498947][ T4382] cdc_wdm 2-1:1.0: skipping garbage [ 257.514869][ T4382] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 257.783582][ T4382] usb 2-1: USB disconnect, device number 14 [ 258.118772][ T7714] usb 4-1: USB disconnect, device number 23 [ 258.352987][ C1] blk_print_req_error: 30 callbacks suppressed [ 258.353004][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.368337][ C1] buffer_io_error: 30 callbacks suppressed [ 258.368344][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.387356][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.396539][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.428715][ T8142] overlayfs: missing 'workdir' [ 258.447751][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.456904][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.524874][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.534053][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.543678][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.552861][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.765275][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.774504][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.783505][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.792663][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.831674][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.840875][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.888608][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.897782][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.914803][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.924011][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 258.962706][ T8157] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 259.160465][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1136'. [ 259.261139][ T7714] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 259.460923][ T7714] usb 4-1: Using ep0 maxpacket: 16 [ 259.467814][ T7714] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.550277][ T7714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 259.560583][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.573878][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.596528][ T7714] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 259.624229][ T7714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.673550][ T7714] usb 4-1: config 0 descriptor?? [ 260.085109][ T7714] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 260.286642][ T7714] usb 4-1: USB disconnect, device number 24 [ 260.407387][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 260.499944][ T8185] fido_id[8185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 260.672657][ T8194] loop5: detected capacity change from 0 to 7 [ 260.703674][ T4258] Dev loop5: unable to read RDB block 7 [ 260.709265][ T4258] loop5: AHDI p1 p2 p3 [ 260.722578][ T4258] loop5: partition table partially beyond EOD, truncated [ 260.737122][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 260.746242][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 260.775332][ T8194] Dev loop5: unable to read RDB block 7 [ 260.791293][ T8194] loop5: AHDI p1 p2 p3 [ 260.832866][ T8194] loop5: partition table partially beyond EOD, truncated [ 260.878473][ T8194] loop5: p1 start 1601398130 is beyond EOD, truncated [ 260.907703][ T8194] loop5: p2 start 1702059890 is beyond EOD, truncated [ 260.950953][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 260.966314][ T8202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1149'. [ 261.381026][ T7714] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 261.573046][ T7714] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.584646][ T7714] usb 2-1: config 0 has no interface number 0 [ 261.593215][ T7714] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 261.613524][ T7714] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 261.626965][ T7714] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.636395][ T7714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.649840][ T7714] usb 2-1: config 0 descriptor?? [ 261.657483][ T8206] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 261.674290][ T7714] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 261.790980][ T22] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 261.909026][ T7714] usb 2-1: USB disconnect, device number 15 [ 261.909193][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 261.982550][ T22] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.994971][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.015919][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.025245][ T22] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 262.038388][ T22] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.049784][ T22] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.074923][ T22] usb 3-1: Product: syz [ 262.087591][ T22] usb 3-1: Manufacturer: syz [ 262.135183][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 262.156349][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 262.182934][ T22] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 262.395336][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 262.444976][ T4382] usb 3-1: USB disconnect, device number 17 [ 263.396414][ C0] blk_print_req_error: 25 callbacks suppressed [ 263.396428][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.411780][ C0] buffer_io_error: 25 callbacks suppressed [ 263.411788][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.467402][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.476621][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.509519][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.518703][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.543974][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.553158][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.584405][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.593576][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.644006][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.653200][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.670208][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.679385][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.690169][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.699341][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.720431][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.729609][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 263.739130][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.748318][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 265.113085][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 265.711118][ T7714] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 265.764169][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.796589][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.912322][ T7714] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.950964][ T7714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.063841][ T7714] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.153757][ T7714] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 266.262213][ T7714] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.340992][ T7714] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.363028][ T7714] usb 3-1: Product: syz [ 266.369202][ T7714] usb 3-1: Manufacturer: syz [ 266.382615][ T7714] cdc_wdm 3-1:1.0: skipping garbage [ 266.394218][ T7714] cdc_wdm 3-1:1.0: skipping garbage [ 266.467163][ T7714] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 266.622524][ T8335] loop5: detected capacity change from 0 to 7 [ 266.658783][ T4258] Dev loop5: unable to read RDB block 7 [ 266.664563][ T4258] loop5: AHDI p1 p2 p3 [ 266.676962][ T4258] loop5: partition table partially beyond EOD, truncated [ 266.690752][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 266.701608][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 266.710247][ T8335] Dev loop5: unable to read RDB block 7 [ 266.723343][ T8335] loop5: AHDI p1 p2 p3 [ 266.734737][ T8335] loop5: partition table partially beyond EOD, truncated [ 266.745020][ T8335] loop5: p1 start 1601398130 is beyond EOD, truncated [ 266.755413][ T8335] loop5: p2 start 1702059890 is beyond EOD, truncated [ 267.352404][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 267.628794][ T8351] fuse: Bad value for 'fd' [ 267.634507][ T8345] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 268.483738][ T22] usb 3-1: USB disconnect, device number 18 [ 269.434893][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 269.584524][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.614230][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.650005][ T8383] loop2: detected capacity change from 0 to 7 [ 269.670990][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 269.699657][ T8383] Dev loop2: unable to read RDB block 7 [ 269.761583][ T8383] loop2: unable to read partition table [ 269.769646][ T8383] loop2: partition table beyond EOD, truncated [ 269.776817][ T8383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.793544][ T3638] Dev loop2: unable to read RDB block 7 [ 269.804463][ T3638] loop2: unable to read partition table [ 269.821887][ T3638] loop2: partition table beyond EOD, truncated [ 269.861754][ T8387] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 270.534855][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.649743][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.391029][ C1] blk_print_req_error: 10 callbacks suppressed [ 271.391046][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.406460][ C1] buffer_io_error: 10 callbacks suppressed [ 271.406471][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 271.428594][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.437816][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 271.457777][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.466924][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 271.477292][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1206'. [ 271.509585][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.518791][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 271.574748][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.583988][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 271.822118][ T8423] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.114692][ T8436] device batadv_slave_0 entered promiscuous mode [ 273.831410][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.840598][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 273.848585][ T8466] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 273.899688][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.908864][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 273.997510][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.006692][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 274.015992][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.025150][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 274.034001][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.043229][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 274.067500][ T8477] loop5: detected capacity change from 0 to 7 [ 274.102065][ T4258] Dev loop5: unable to read RDB block 7 [ 274.107820][ T4258] loop5: AHDI p1 p2 p3 [ 274.117149][ T4258] loop5: partition table partially beyond EOD, truncated [ 274.135354][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 274.157211][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 274.173025][ T8477] Dev loop5: unable to read RDB block 7 [ 274.184611][ T8477] loop5: AHDI p1 p2 p3 [ 274.223879][ T8477] loop5: partition table partially beyond EOD, truncated [ 274.234702][ T8477] loop5: p1 start 1601398130 is beyond EOD, truncated [ 274.259493][ T8477] loop5: p2 start 1702059890 is beyond EOD, truncated [ 274.575069][ T8470] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 275.889291][ T8486] loop0: detected capacity change from 0 to 32768 [ 275.901018][ T7714] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 276.034967][ T8486] XFS (loop0): Mounting V5 Filesystem [ 276.108080][ T8486] XFS (loop0): Ending clean mount [ 276.121805][ T8486] XFS (loop0): Quotacheck needed: Please wait. [ 276.151140][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 276.158427][ T7714] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.197886][ T7714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.248356][ T7714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.268692][ T7714] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 276.297449][ T7714] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.315498][ T7714] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.329174][ T7714] usb 4-1: Product: syz [ 276.337835][ T7714] usb 4-1: Manufacturer: syz [ 276.366901][ T8486] XFS (loop0): Quotacheck: Done. [ 276.399599][ T7714] cdc_wdm 4-1:1.0: skipping garbage [ 276.414959][ T8486] overlayfs: missing 'lowerdir' [ 276.425864][ T7714] cdc_wdm 4-1:1.0: skipping garbage [ 276.447418][ T7714] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 276.538145][ T4266] XFS (loop0): Unmounting Filesystem [ 277.178811][ C0] blk_print_req_error: 15 callbacks suppressed [ 277.178827][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.194519][ C0] buffer_io_error: 15 callbacks suppressed [ 277.194526][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.280849][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.290059][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.339815][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.349018][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.358390][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.367645][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.376972][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.377839][ T8525] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 277.386151][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.491345][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.500781][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.509779][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.518934][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.563669][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.572856][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.636064][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.645295][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.696382][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.705566][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 277.725588][ T8536] loop5: detected capacity change from 0 to 7 [ 277.738649][ T4258] Dev loop5: unable to read RDB block 7 [ 277.750671][ T4258] loop5: AHDI p1 p2 p3 [ 277.759406][ T4258] loop5: partition table partially beyond EOD, truncated [ 277.779653][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 277.792953][ T8540] netlink: 'syz.1.1241': attribute type 13 has an invalid length. [ 277.807290][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 277.843790][ T8536] Dev loop5: unable to read RDB block 7 [ 277.855166][ T8536] loop5: AHDI p1 p2 p3 [ 277.865573][ T8536] loop5: partition table partially beyond EOD, truncated [ 277.888052][ T8536] loop5: p1 start 1601398130 is beyond EOD, truncated [ 277.895614][ T8536] loop5: p2 start 1702059890 is beyond EOD, truncated [ 278.111776][ T8544] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.470953][ T22] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 278.650954][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 278.656727][ T4310] usb 4-1: USB disconnect, device number 25 [ 278.657818][ T22] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 278.722929][ T8558] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.730141][ T22] usb 6-1: config 0 has no interface number 0 [ 278.750289][ T22] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 278.825073][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.853738][ T22] usb 6-1: Product: syz [ 278.869135][ T22] usb 6-1: Manufacturer: syz [ 278.930776][ T22] usb 6-1: SerialNumber: syz [ 278.971125][ T22] usb 6-1: config 0 descriptor?? [ 279.000494][ T22] smsc95xx v2.0.0 [ 279.407325][ T22] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 279.544795][ T22] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.441353][ T8597] netlink: 'syz.2.1261': attribute type 13 has an invalid length. [ 280.690888][ T4310] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 280.790966][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 280.892248][ T4310] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.910385][ T4310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.928620][ T4310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.938303][ T4310] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 280.959519][ T4310] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.982012][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.007828][ T4310] usb 4-1: Product: syz [ 281.013543][ T4310] usb 4-1: Manufacturer: syz [ 281.052905][ T4310] cdc_wdm 4-1:1.0: skipping garbage [ 281.085997][ T4310] cdc_wdm 4-1:1.0: skipping garbage [ 281.114730][ T4310] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 281.571373][ T8600] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 281.777988][ T22] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 281.799464][ T22] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 281.827192][ T22] usb 6-1: USB disconnect, device number 18 [ 282.520880][ C0] blk_print_req_error: 45 callbacks suppressed [ 282.520895][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.536218][ C0] buffer_io_error: 45 callbacks suppressed [ 282.536229][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.579655][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.588847][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.603236][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.612412][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.624196][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.633429][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.643406][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.652583][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 282.690115][ T8629] netlink: 'syz.1.1272': attribute type 13 has an invalid length. [ 283.441305][ T8638] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 283.517771][ T4310] usb 4-1: USB disconnect, device number 26 [ 283.661768][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.670934][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 283.718685][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.727878][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 283.740835][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.750021][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 283.792159][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.801389][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 283.811656][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.820796][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 284.073833][ T8655] loop5: detected capacity change from 0 to 7 [ 284.086461][ T4258] Dev loop5: unable to read RDB block 7 [ 284.113576][ T4258] loop5: AHDI p1 p2 p3 [ 284.117770][ T4258] loop5: partition table partially beyond EOD, truncated [ 284.311564][ T4258] loop5: p1 start 1601398130 is beyond EOD, truncated [ 284.536583][ T4258] loop5: p2 start 1702059890 is beyond EOD, truncated [ 284.577169][ T8655] Dev loop5: unable to read RDB block 7 [ 284.586752][ T8655] loop5: AHDI p1 p2 p3 [ 284.609598][ T8655] loop5: partition table partially beyond EOD, truncated [ 284.636104][ T8655] loop5: p1 start 1601398130 is beyond EOD, truncated [ 284.659618][ T8655] loop5: p2 start 1702059890 is beyond EOD, truncated [ 285.160758][ T8677] netlink: 'syz.2.1286': attribute type 13 has an invalid length. [ 285.381572][ T8680] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 285.631332][ T8686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 285.911110][ T4310] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 286.112436][ T4310] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.128797][ T4310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.175330][ T4310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.218466][ T4310] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 286.259169][ T4310] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 286.301019][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 286.331064][ T4310] usb 6-1: Product: syz [ 286.344687][ T4310] usb 6-1: Manufacturer: syz [ 286.383413][ T4310] cdc_wdm 6-1:1.0: skipping garbage [ 286.406222][ T4310] cdc_wdm 6-1:1.0: skipping garbage [ 286.427654][ T4310] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 287.600892][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 288.301644][ C1] blk_print_req_error: 20 callbacks suppressed [ 288.301660][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.316980][ C1] buffer_io_error: 20 callbacks suppressed [ 288.316994][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.332247][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.341408][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.357954][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.367124][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.384500][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.393703][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.400933][ T4310] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 288.408896][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.418099][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.496334][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.505489][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.514099][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.523253][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.561036][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.570231][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.580359][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.589538][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.643253][ T4310] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.652710][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.661873][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 288.676545][ T4310] usb 4-1: config 0 has no interface number 0 [ 288.684625][ T4310] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 288.707411][ T4310] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 288.724137][ T4310] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.737104][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.751108][ T8736] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.751199][ T4310] usb 4-1: config 0 descriptor?? [ 288.763890][ T8729] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 288.776286][ T4310] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 288.865220][ T22] usb 6-1: USB disconnect, device number 19 [ 288.982930][ T8744] netlink: 'syz.1.1305': attribute type 13 has an invalid length. [ 289.000150][ T7714] usb 4-1: USB disconnect, device number 27 [ 289.006109][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 289.350932][ T4311] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.477875][ T8753] loop5: detected capacity change from 0 to 7 [ 289.488838][ T8753] Dev loop5: unable to read RDB block 7 [ 289.496967][ T8753] loop5: AHDI p1 p2 p3 [ 289.504457][ T8753] loop5: partition table partially beyond EOD, truncated [ 289.511082][ T4311] usb 3-1: device descriptor read/64, error -71 [ 289.515431][ T8753] loop5: p1 start 1601398130 is beyond EOD, truncated [ 289.524858][ T8753] loop5: p2 start 1702059890 is beyond EOD, truncated [ 289.564145][ T8755] loop2: detected capacity change from 0 to 7 [ 289.574750][ T8755] Dev loop2: unable to read RDB block 7 [ 289.580483][ T8755] loop2: unable to read partition table [ 289.586622][ T8755] loop2: partition table beyond EOD, truncated [ 289.594238][ T8755] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.781026][ T4311] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 289.816598][ T8759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1312'. [ 289.950958][ T4311] usb 3-1: device descriptor read/64, error -71 [ 290.072156][ T4311] usb usb3-port1: attempt power cycle [ 290.311377][ T8773] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 290.481455][ T4311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 290.525317][ T4311] usb 3-1: device descriptor read/8, error -71 [ 290.800900][ T4310] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 290.800922][ T4311] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 290.861291][ T4311] usb 3-1: device descriptor read/8, error -71 [ 290.990929][ T4311] usb usb3-port1: unable to enumerate USB device [ 290.999492][ T4310] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.013047][ T4310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.031509][ T4310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.045354][ T4310] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x42, skipping [ 291.073280][ T4310] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.100998][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.129821][ T4310] usb 6-1: Product: syz [ 291.142439][ T4310] usb 6-1: Manufacturer: syz [ 291.188549][ T4310] cdc_wdm 6-1:1.0: skipping garbage [ 291.221663][ T4310] cdc_wdm 6-1:1.0: skipping garbage [ 291.226904][ T4310] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 291.840990][ T4310] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 291.923201][ T8800] blktrace: Concurrent blktraces are not allowed on loop4 [ 292.032262][ T4310] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.046068][ T4310] usb 2-1: config 0 has no interface number 0 [ 292.057949][ T4310] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.087706][ T4310] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 292.088744][ T8806] netlink: 'syz.2.1323': attribute type 13 has an invalid length. [ 292.120626][ T4310] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.140691][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.168510][ T4310] usb 2-1: config 0 descriptor?? [ 292.176965][ T8797] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 292.194783][ T4310] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 292.310956][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 292.966434][ T7714] usb 2-1: USB disconnect, device number 16 [ 293.191032][ T4311] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 293.201260][ T8812] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 293.380940][ T4311] usb 3-1: Using ep0 maxpacket: 32 [ 293.389000][ T4311] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 293.403709][ T4311] usb 3-1: config 0 has no interface number 0 [ 293.414431][ T4311] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 293.423863][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.432222][ T4311] usb 3-1: Product: syz [ 293.436666][ T4311] usb 3-1: Manufacturer: syz [ 293.441476][ T4311] usb 3-1: SerialNumber: syz [ 293.455207][ T4311] usb 3-1: config 0 descriptor?? [ 293.476072][ T4311] smsc95xx v2.0.0 [ 293.602024][ T4310] usb 6-1: USB disconnect, device number 20 [ 293.874540][ T4311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 293.886103][ T4311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.190253][ C1] blk_print_req_error: 25 callbacks suppressed [ 294.190264][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.205648][ C1] buffer_io_error: 25 callbacks suppressed [ 294.205655][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.281260][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.290454][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.299522][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.308700][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.331661][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.338960][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.340835][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.349613][ T8835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 294.358475][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.374560][ T7714] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 294.380943][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.391297][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.530947][ T7714] usb 6-1: device descriptor read/64, error -71 [ 294.689987][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.699234][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.720779][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.729942][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.739135][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.748303][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.771083][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.780343][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.789613][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 294.798833][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 294.840638][ T7714] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 295.011084][ T7714] usb 6-1: device descriptor read/64, error -71 [ 295.131041][ T7714] usb usb6-port1: attempt power cycle [ 295.145356][ T8848] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 295.565409][ T7714] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 295.612680][ T7714] usb 6-1: device descriptor read/8, error -71 [ 295.841044][ T27] INFO: task syz.4.420:5741 blocked for more than 143 seconds. [ 295.855179][ T27] Not tainted syzkaller #0 [ 295.865331][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.880909][ T7714] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 295.898664][ T27] task:syz.4.420 state:D stack:24568 pid:5741 ppid:4270 flags:0x00004004 [ 295.923595][ T27] Call Trace: [ 295.930194][ T27] [ 295.936949][ T27] __schedule+0x11d1/0x40e0 [ 295.944080][ T7714] usb 6-1: device descriptor read/8, error -71 [ 295.961066][ T27] ? __sched_text_start+0x8/0x8 [ 295.974480][ T27] schedule+0xb9/0x180 [ 295.987763][ T27] schedule_timeout+0xbd/0x2d0 [ 296.020746][ T27] ? console_conditional_schedule+0x40/0x40 [ 296.030994][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.043838][ T27] ? lock_chain_count+0x20/0x20 [ 296.054115][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 296.065420][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 296.082230][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 296.087461][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 296.091101][ T7714] usb usb6-port1: unable to enumerate USB device [ 296.100625][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 296.110890][ T27] ? wait_for_completion+0x276/0x5a0 [ 296.116237][ T27] wait_for_completion+0x2c7/0x5a0 [ 296.124209][ T27] ? io_schedule+0xd0/0xd0 [ 296.133677][ T27] i2c_del_adapter+0x611/0x760 [ 296.153887][ T27] ? i2c_add_numbered_adapter+0x140/0x140 [ 296.164735][ T27] ? rcu_is_watching+0x11/0xa0 [ 296.174802][ T27] ? dvb_usb_adapter_exit+0xd7/0x230 [ 296.182850][ T4311] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 296.190851][ T27] dvb_usb_i2c_exit+0x60/0xb0 [ 296.198219][ T27] dvb_usb_device_exit+0x1c8/0x340 [ 296.206450][ T4311] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 296.213253][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 296.213279][ T27] ? dvb_usb_device_init+0x2460/0x2460 [ 296.213301][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 296.213323][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 296.244488][ T4311] usb 3-1: USB disconnect, device number 23 [ 296.261007][ T27] ? usb_disable_interface+0x319/0x350 [ 296.266490][ T27] usb_unbind_interface+0x1ee/0x860 [ 296.277360][ T27] ? kernfs_remove_by_name_ns+0x113/0x150 [ 296.321713][ T27] ? usb_driver_release_interface+0x1b0/0x1b0 [ 296.344080][ T27] device_release_driver_internal+0x522/0x850 [ 296.360537][ T27] bus_remove_device+0x2e2/0x400 [ 296.375301][ T27] device_del+0x6af/0xaf0 [ 296.385406][ T27] ? kill_device+0x160/0x160 [ 296.397810][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.415720][ T27] ? usb_disconnect+0x107/0x8a0 [ 296.435903][ T27] ? mutex_lock_nested+0x10/0x10 [ 296.444188][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 296.464244][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 296.477542][ T27] usb_disable_device+0x3e2/0x890 [ 296.496514][ T27] usb_disconnect+0x348/0x8a0 [ 296.516706][ T27] hub_quiesce+0x171/0x330 [ 296.536073][ T27] hub_disconnect+0xc1/0x460 [ 296.556804][ T27] usb_unbind_interface+0x1ee/0x860 [ 296.576021][ T27] ? kernfs_remove_by_name_ns+0x113/0x150 [ 296.583033][ T27] ? usb_driver_release_interface+0x1b0/0x1b0 [ 296.589124][ T27] device_release_driver_internal+0x522/0x850 [ 296.595407][ T27] proc_ioctl+0x293/0x670 [ 296.599761][ T27] proc_ioctl_default+0xc1/0x100 [ 296.605018][ T27] ? proc_releaseinterface+0x1b0/0x1b0 [ 296.610601][ T27] usbdev_ioctl+0x15a1/0x1f10 [ 296.615553][ T27] ? __fget_files+0x28/0x4b0 [ 296.620168][ T27] ? usbdev_poll+0x1f0/0x1f0 [ 296.625101][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 296.630070][ T27] ? security_file_ioctl+0x7c/0xa0 [ 296.635528][ T27] ? usbdev_poll+0x1f0/0x1f0 [ 296.640145][ T27] __se_sys_ioctl+0xfa/0x170 [ 296.646962][ T27] do_syscall_64+0x4c/0xa0 [ 296.655392][ T27] ? clear_bhb_loop+0x60/0xb0 [ 296.660095][ T27] ? clear_bhb_loop+0x60/0xb0 [ 296.665193][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.671392][ T27] RIP: 0033:0x7f2369d9c629 [ 296.675832][ T27] RSP: 002b:00007f236acf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.685721][ T27] RAX: ffffffffffffffda RBX: 00007f236a016180 RCX: 00007f2369d9c629 [ 296.693892][ T27] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000008 [ 296.706511][ T27] RBP: 00007f2369e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 296.715282][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.723511][ T27] R13: 00007f236a016218 R14: 00007f236a016180 R15: 00007ffdb35639f8 [ 296.743392][ T27] [ 296.748984][ T27] INFO: task syz.4.420:5750 blocked for more than 144 seconds. [ 296.776942][ T27] Not tainted syzkaller #0 [ 296.787115][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.796446][ T27] task:syz.4.420 state:D stack:28592 pid:5750 ppid:4270 flags:0x00004004 [ 296.805936][ T27] Call Trace: [ 296.809228][ T27] [ 296.818040][ T27] __schedule+0x11d1/0x40e0 [ 296.823197][ T27] ? __sched_text_start+0x8/0x8 [ 296.828079][ T27] ? __mutex_trylock_common+0x86/0x260 [ 296.833981][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 296.840255][ T27] schedule+0xb9/0x180 [ 296.844629][ T27] schedule_preempt_disabled+0xf/0x20 [ 296.850187][ T27] __mutex_lock+0x562/0xaf0 [ 296.854978][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 296.859682][ T27] ? usbdev_ioctl+0x144/0x1f10 [ 296.864752][ T27] ? mutex_lock_nested+0x10/0x10 [ 296.869728][ T27] usbdev_ioctl+0x144/0x1f10 [ 296.874576][ T27] ? __fget_files+0x28/0x4b0 [ 296.879209][ T27] ? usbdev_poll+0x1f0/0x1f0 [ 296.884186][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 296.889146][ T27] ? security_file_ioctl+0x7c/0xa0 [ 296.900398][ T27] ? usbdev_poll+0x1f0/0x1f0 [ 296.905455][ T27] __se_sys_ioctl+0xfa/0x170 [ 296.910073][ T27] do_syscall_64+0x4c/0xa0 [ 296.915070][ T27] ? clear_bhb_loop+0x60/0xb0 [ 296.919767][ T27] ? clear_bhb_loop+0x60/0xb0 [ 296.924730][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.930644][ T27] RIP: 0033:0x7f2369d9c629 [ 296.935303][ T27] RSP: 002b:00007f236acd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.943946][ T27] RAX: ffffffffffffffda RBX: 00007f236a016270 RCX: 00007f2369d9c629 [ 296.952162][ T27] RDX: 0000000000000000 RSI: 0000000080045505 RDI: 0000000000000008 [ 296.960149][ T27] RBP: 00007f2369e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 296.968536][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.981231][ T27] R13: 00007f236a016308 R14: 00007f236a016270 R15: 00007ffdb35639f8 [ 296.989263][ T27] [ 296.992507][ T27] INFO: task syz.4.420:5759 blocked for more than 144 seconds. [ 297.000071][ T27] Not tainted syzkaller #0 [ 297.006803][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.015516][ T27] task:syz.4.420 state:D stack:29168 pid:5759 ppid:4270 flags:0x00004004 [ 297.024784][ T27] Call Trace: [ 297.028073][ T27] [ 297.031164][ T27] __schedule+0x11d1/0x40e0 [ 297.035704][ T27] ? __sched_text_start+0x8/0x8 [ 297.040566][ T27] ? __mutex_trylock_common+0x86/0x260 [ 297.046202][ T27] ? trace_raw_output_contention_end+0xd0/0xd0 [ 297.052448][ T27] schedule+0xb9/0x180 [ 297.056523][ T27] schedule_preempt_disabled+0xf/0x20 [ 297.061930][ T27] __mutex_lock+0x562/0xaf0 [ 297.066441][ T27] ? __mutex_lock+0x3b2/0xaf0 [ 297.071205][ T27] ? usbdev_ioctl+0x144/0x1f10 [ 297.075978][ T27] ? mutex_lock_nested+0x10/0x10 [ 297.080986][ T27] usbdev_ioctl+0x144/0x1f10 [ 297.085605][ T27] ? __fget_files+0x28/0x4b0 [ 297.090196][ T27] ? usbdev_poll+0x1f0/0x1f0 [ 297.094825][ T27] ? bpf_lsm_file_ioctl+0x5/0x10 [ 297.099767][ T27] ? security_file_ioctl+0x7c/0xa0 [ 297.104945][ T27] ? usbdev_poll+0x1f0/0x1f0 [ 297.109577][ T27] __se_sys_ioctl+0xfa/0x170 [ 297.114266][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 297.118754][ T27] do_syscall_64+0x4c/0xa0 [ 297.124963][ T27] ? clear_bhb_loop+0x60/0xb0 [ 297.129718][ T27] ? clear_bhb_loop+0x60/0xb0 [ 297.134437][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.140363][ T27] RIP: 0033:0x7f2369d9c629 [ 297.144871][ T27] RSP: 002b:00007f236ac8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.153323][ T27] RAX: ffffffffffffffda RBX: 00007f236a016450 RCX: 00007f2369d9c629 [ 297.161499][ T27] RDX: 0000200000000000 RSI: 0000000080045505 RDI: 0000000000000008 [ 297.169479][ T27] RBP: 00007f2369e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 297.177463][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.185553][ T27] R13: 00007f236a0164e8 R14: 00007f236a016450 R15: 00007ffdb35639f8 [ 297.193608][ T27] [ 297.196663][ T27] [ 297.196663][ T27] Showing all locks held in the system: [ 297.204693][ T27] 1 lock held by rcu_tasks_kthre/12: [ 297.209979][ T27] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 297.220580][ T27] 1 lock held by rcu_tasks_trace/13: [ 297.228241][ T27] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 297.239394][ T27] 1 lock held by khungtaskd/27: [ 297.245870][ T27] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 297.264596][ T27] 2 locks held by getty/4031: [ 297.274055][ T27] #0: ffff88814d37f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 297.285792][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 297.301009][ T27] 1 lock held by udevd/4258: [ 297.305794][ T27] 4 locks held by syz.4.420/5741: [ 297.312031][ T27] #0: ffff888145b1f190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x144/0x1f10 [ 297.321321][ T27] #1: ffff888059798118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb2/0x850 [ 297.331996][ T27] #2: ffff88802e659190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x107/0x8a0 [ 297.341380][ T27] #3: ffff88802e65c118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb2/0x850 [ 297.352027][ T27] 1 lock held by syz.4.420/5750: [ 297.356957][ T27] #0: ffff888145b1f190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x144/0x1f10 [ 297.366266][ T27] 1 lock held by syz.4.420/5759: [ 297.371246][ T27] #0: ffff888145b1f190 (&dev->mutex){....}-{3:3}, at: usbdev_ioctl+0x144/0x1f10 [ 297.380522][ T27] [ 297.383068][ T27] ============================================= [ 297.383068][ T27] [ 297.391567][ T27] NMI backtrace for cpu 1 [ 297.395894][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 297.403076][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.413131][ T27] Call Trace: [ 297.416413][ T27] [ 297.419332][ T27] dump_stack_lvl+0x188/0x24e [ 297.423995][ T27] ? irq_work_queue+0xb8/0x140 [ 297.428747][ T27] ? show_regs_print_info+0x12/0x12 [ 297.433928][ T27] ? load_image+0x400/0x400 [ 297.438411][ T27] ? vprintk_emit+0x59f/0x6a0 [ 297.443080][ T27] ? printk_sprint+0x460/0x460 [ 297.447830][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 297.452763][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 297.458907][ T27] ? _printk+0xda/0x130 [ 297.463051][ T27] ? load_image+0x400/0x400 [ 297.467541][ T27] ? load_image+0x400/0x400 [ 297.472037][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 297.478095][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 297.484154][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 297.490128][ T27] watchdog+0xeee/0xf30 [ 297.494287][ T27] ? watchdog+0x1ed/0xf30 [ 297.498611][ T27] kthread+0x29d/0x330 [ 297.502667][ T27] ? hungtask_pm_notify+0x40/0x40 [ 297.507681][ T27] ? kthread_blkcg+0xd0/0xd0 [ 297.512258][ T27] ret_from_fork+0x1f/0x30 [ 297.516671][ T27] [ 297.519687][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.526119][ T27] Sending NMI from CPU 1 to CPUs 0: [ 297.531374][ C0] NMI backtrace for cpu 0 [ 297.531382][ C0] CPU: 0 PID: 4455 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 297.531397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.531405][ C0] Workqueue: bat_events batadv_nc_worker [ 297.531433][ C0] RIP: 0010:check_preemption_disabled+0x56/0x110 [ 297.531451][ C0] Code: 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 cc 65 4c 8b 3d a6 c4 d5 75 41 f6 [ 297.531463][ C0] RSP: 0018:ffffc90004b2fa80 EFLAGS: 00000046 [ 297.531475][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000000 [ 297.531485][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0d20 [ 297.531496][ C0] RBP: ffffc90004b2fbc8 R08: dffffc0000000000 R09: 1ffffffff215ea48 [ 297.531507][ C0] R10: dffffc0000000000 R11: fffffbfff215ea49 R12: 0000000000000000 [ 297.531517][ C0] R13: 1ffff92000965f64 R14: 0000000000000246 R15: dffffc0000000000 [ 297.531528][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 297.531540][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.531550][ C0] CR2: 00007f4f107ea4b8 CR3: 000000002e64b000 CR4: 00000000003506f0 [ 297.531563][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.531572][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.531581][ C0] Call Trace: [ 297.531585][ C0] [ 297.531591][ C0] lock_acquire+0x1cb/0x4a0 [ 297.531613][ C0] ? read_lock_is_recursive+0x10/0x10 [ 297.531630][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 297.531650][ C0] ? batadv_nc_worker+0xce/0x600 [ 297.531664][ C0] batadv_nc_worker+0xeb/0x600 [ 297.531678][ C0] ? batadv_nc_worker+0xce/0x600 [ 297.531694][ C0] ? process_one_work+0x7b0/0x1160 [ 297.531710][ C0] process_one_work+0x8a2/0x1160 [ 297.531730][ C0] ? worker_detach_from_pool+0x240/0x240 [ 297.531746][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 297.531760][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 297.531773][ C0] ? kthread_data+0x4b/0xc0 [ 297.531792][ C0] worker_thread+0xaa2/0x1270 [ 297.531813][ C0] ? __kthread_parkme+0x162/0x1c0 [ 297.531833][ C0] kthread+0x29d/0x330 [ 297.531844][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 297.531859][ C0] ? kthread_blkcg+0xd0/0xd0 [ 297.531872][ C0] ret_from_fork+0x1f/0x30 [ 297.531893][ C0] [ 297.532832][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 297.775966][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 297.783149][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.793188][ T27] Call Trace: [ 297.796456][ T27] [ 297.799376][ T27] dump_stack_lvl+0x188/0x24e [ 297.804047][ T27] ? memcpy+0x3c/0x60 [ 297.808015][ T27] ? show_regs_print_info+0x12/0x12 [ 297.813206][ T27] ? load_image+0x400/0x400 [ 297.817704][ T27] panic+0x2e5/0x730 [ 297.821585][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 297.827209][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 297.831699][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 297.837239][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 297.843385][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 297.849549][ T27] watchdog+0xf2d/0xf30 [ 297.853708][ T27] ? watchdog+0x1ed/0xf30 [ 297.858035][ T27] kthread+0x29d/0x330 [ 297.862117][ T27] ? hungtask_pm_notify+0x40/0x40 [ 297.867130][ T27] ? kthread_blkcg+0xd0/0xd0 [ 297.871705][ T27] ret_from_fork+0x1f/0x30 [ 297.876119][ T27] [ 297.879447][ T27] Kernel Offset: disabled [ 297.883758][ T27] Rebooting in 86400 seconds..