last executing test programs: 1m43.833353988s ago: executing program 0 (id=1248): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) 1m43.64996118s ago: executing program 0 (id=1261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) 1m43.394622052s ago: executing program 0 (id=1255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0xffff]}, 0x6) 1m42.17556656s ago: executing program 0 (id=1258): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80222, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 1m41.395796444s ago: executing program 0 (id=1262): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) 1m41.04014315s ago: executing program 0 (id=1266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 1m25.703412511s ago: executing program 32 (id=1266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 1m18.997828061s ago: executing program 1 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0xfffffffd, 0x3, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1e, @dev={0xfe, 0x80, '\x00', 0x42}}]}, 0x30}}, 0x0) 1m18.693732879s ago: executing program 1 (id=1342): unshare(0x4000400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x2c}, 0x20) 1m18.386179368s ago: executing program 1 (id=1344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) 1m4.918189007s ago: executing program 1 (id=1346): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118a9000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb787b14416c6952f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 1m4.899721011s ago: executing program 1 (id=1349): setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}}, 0x0) 1m4.655744902s ago: executing program 1 (id=1352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae55137c395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 57.85223266s ago: executing program 3 (id=1359): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/dev_snmp6\x00') getdents64(r0, &(0x7f0000000180)=""/56, 0x38) getdents(r0, 0xffffffffffffffff, 0x5a) 57.484762727s ago: executing program 3 (id=1361): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r0, 0x1, 0xfffffffe, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}}, 0x0) 57.392585646s ago: executing program 4 (id=1362): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000780)={0x18}) 57.235749207s ago: executing program 3 (id=1363): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000000380)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) 57.198977379s ago: executing program 4 (id=1364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}]}]}, 0x38}}, 0x0) 56.980647601s ago: executing program 4 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf000000000000000008000000140001800600010002000000080005000300"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 56.807481969s ago: executing program 4 (id=1366): timer_create(0x3, 0x0, &(0x7f0000000780)=0x0) timer_settime(0x0, 0x413df92af0658268, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000140)) 56.619688901s ago: executing program 4 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}}, 0x0) 51.265109819s ago: executing program 4 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 49.063053003s ago: executing program 33 (id=1352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae55137c395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 44.890927371s ago: executing program 3 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 36.025193777s ago: executing program 34 (id=1368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 30.260739015s ago: executing program 3 (id=1382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 30.056814616s ago: executing program 2 (id=1384): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) 29.847521122s ago: executing program 2 (id=1385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 29.794991382s ago: executing program 3 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 29.623485202s ago: executing program 2 (id=1387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) migrate_pages(0x0, 0x6, &(0x7f00000002c0)=0x6, &(0x7f0000000300)=0x3) 16.574854353s ago: executing program 2 (id=1388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200060000001000aac14140ce000006a49e832f0", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.343681471s ago: executing program 2 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r0}, 0x4) 15.139724025s ago: executing program 2 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000900)="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", 0x14a}, {0x0}], 0x2) 14.425852169s ago: executing program 35 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 0s ago: executing program 36 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000900)="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", 0x14a}, {0x0}], 0x2) kernel console output (not intermixed with test programs): [ 97.813881][ T999] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 102.690361][ T5827] cgroup: Unknown subsys name 'net' [ 102.953587][ T5827] cgroup: Unknown subsys name 'cpuset' [ 102.988178][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.190974][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.419803][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.446696][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.460288][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.468674][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.478554][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.509447][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.519608][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.528584][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.533482][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.538962][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.545295][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.549117][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.549396][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.552212][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.554562][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.588874][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.589225][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.608165][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.626076][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.637973][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.648847][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.660562][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.664130][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.672685][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.678340][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.792168][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 109.884037][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 110.048764][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 110.099899][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 110.273099][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 110.610117][ T5853] Bluetooth: hci1: command tx timeout [ 110.610271][ T5853] Bluetooth: hci0: command tx timeout [ 110.687584][ T5851] Bluetooth: hci3: command tx timeout [ 110.687801][ T5851] Bluetooth: hci2: command tx timeout [ 110.769645][ T5853] Bluetooth: hci4: command tx timeout [ 110.910620][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.911596][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.912116][ T5840] bridge_slave_0: entered allmulticast mode [ 110.914563][ T5840] bridge_slave_0: entered promiscuous mode [ 111.059656][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.059837][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.060165][ T5840] bridge_slave_1: entered allmulticast mode [ 111.063736][ T5840] bridge_slave_1: entered promiscuous mode [ 111.193625][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.193782][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.193938][ T5838] bridge_slave_0: entered allmulticast mode [ 111.195969][ T5838] bridge_slave_0: entered promiscuous mode [ 111.460132][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.460355][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.460643][ T5838] bridge_slave_1: entered allmulticast mode [ 111.463876][ T5838] bridge_slave_1: entered promiscuous mode [ 111.610495][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.610681][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.610913][ T5841] bridge_slave_0: entered allmulticast mode [ 111.613937][ T5841] bridge_slave_0: entered promiscuous mode [ 111.766511][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.766814][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.766966][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.769028][ T5839] bridge_slave_0: entered allmulticast mode [ 111.772349][ T5839] bridge_slave_0: entered promiscuous mode [ 111.781358][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.781525][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.782402][ T5841] bridge_slave_1: entered allmulticast mode [ 111.785974][ T5841] bridge_slave_1: entered promiscuous mode [ 112.062453][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.062759][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.062881][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.063024][ T5839] bridge_slave_1: entered allmulticast mode [ 112.065002][ T5839] bridge_slave_1: entered promiscuous mode [ 112.180936][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.181279][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.181511][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.181714][ T5842] bridge_slave_0: entered allmulticast mode [ 112.184200][ T5842] bridge_slave_0: entered promiscuous mode [ 112.462561][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.464414][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.464583][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.465021][ T5842] bridge_slave_1: entered allmulticast mode [ 112.471508][ T5842] bridge_slave_1: entered promiscuous mode [ 112.687826][ T5853] Bluetooth: hci0: command tx timeout [ 112.687871][ T5853] Bluetooth: hci1: command tx timeout [ 112.688282][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.767407][ T5851] Bluetooth: hci2: command tx timeout [ 112.767447][ T5851] Bluetooth: hci3: command tx timeout [ 112.847721][ T5853] Bluetooth: hci4: command tx timeout [ 112.903187][ T5840] team0: Port device team_slave_0 added [ 112.914328][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.921433][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.093315][ T5840] team0: Port device team_slave_1 added [ 113.098343][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.303068][ T5838] team0: Port device team_slave_0 added [ 113.313877][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.552336][ T5838] team0: Port device team_slave_1 added [ 113.556988][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.711097][ T5841] team0: Port device team_slave_0 added [ 113.875399][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.875416][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.875436][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.881180][ T5839] team0: Port device team_slave_0 added [ 113.884565][ T5841] team0: Port device team_slave_1 added [ 114.070045][ T5839] team0: Port device team_slave_1 added [ 114.194377][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.194395][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.194416][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.195632][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.195645][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.195664][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.206614][ T5842] team0: Port device team_slave_0 added [ 114.554072][ T5842] team0: Port device team_slave_1 added [ 114.555255][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.555267][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.555287][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.672530][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.672552][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.672580][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.768305][ T5851] Bluetooth: hci0: command tx timeout [ 114.768440][ T5853] Bluetooth: hci1: command tx timeout [ 114.822673][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.822694][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.822714][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.823983][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.823998][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.824026][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.861168][ T5851] Bluetooth: hci2: command tx timeout [ 114.861289][ T5853] Bluetooth: hci3: command tx timeout [ 114.929351][ T5853] Bluetooth: hci4: command tx timeout [ 114.934232][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.934250][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.934278][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.031049][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.031068][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.031097][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.232297][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.232319][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.232352][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.251473][ T5840] hsr_slave_0: entered promiscuous mode [ 115.253671][ T5840] hsr_slave_1: entered promiscuous mode [ 115.445754][ T5838] hsr_slave_0: entered promiscuous mode [ 115.446758][ T5838] hsr_slave_1: entered promiscuous mode [ 115.448694][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 115.448834][ T5838] Cannot create hsr debugfs directory [ 115.627463][ T5841] hsr_slave_0: entered promiscuous mode [ 115.629049][ T5841] hsr_slave_1: entered promiscuous mode [ 115.630162][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 115.630189][ T5841] Cannot create hsr debugfs directory [ 115.843654][ T5839] hsr_slave_0: entered promiscuous mode [ 115.845558][ T5839] hsr_slave_1: entered promiscuous mode [ 115.849116][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 115.849159][ T5839] Cannot create hsr debugfs directory [ 116.128601][ T5842] hsr_slave_0: entered promiscuous mode [ 116.129986][ T5842] hsr_slave_1: entered promiscuous mode [ 116.130727][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 116.130752][ T5842] Cannot create hsr debugfs directory [ 116.847542][ T5851] Bluetooth: hci0: command tx timeout [ 116.847612][ T5853] Bluetooth: hci1: command tx timeout [ 116.927528][ T5851] Bluetooth: hci2: command tx timeout [ 116.927588][ T5853] Bluetooth: hci3: command tx timeout [ 117.007643][ T5853] Bluetooth: hci4: command tx timeout [ 117.976827][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.041154][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.076798][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.139418][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.283494][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.330003][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.384458][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.439261][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.657456][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.693014][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.751443][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.803310][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.992391][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.040842][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.079548][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.141507][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.340229][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.393134][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.447504][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.448785][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.492684][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.640316][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.658745][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.751873][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.752610][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.805872][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.806474][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.850188][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.914890][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.915118][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.961328][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.990351][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.990519][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.149961][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.181340][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.225056][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.225300][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.303689][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.303886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.372957][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.446363][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.459842][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.460766][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.537344][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.537512][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.695308][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.764557][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.764733][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.845499][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.848313][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.986698][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.214133][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.462813][ T5840] veth0_vlan: entered promiscuous mode [ 121.541273][ T5840] veth1_vlan: entered promiscuous mode [ 121.572557][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.762915][ T5840] veth0_macvtap: entered promiscuous mode [ 121.815567][ T5840] veth1_macvtap: entered promiscuous mode [ 121.959271][ T5841] veth0_vlan: entered promiscuous mode [ 122.054307][ T5841] veth1_vlan: entered promiscuous mode [ 122.073126][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.122269][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.180541][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.202576][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.222204][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.244032][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.270057][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.273832][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.453315][ T5841] veth0_macvtap: entered promiscuous mode [ 122.578810][ T5841] veth1_macvtap: entered promiscuous mode [ 122.704101][ T5838] veth0_vlan: entered promiscuous mode [ 122.732666][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.732702][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.836499][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.862799][ T5838] veth1_vlan: entered promiscuous mode [ 122.920719][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.935882][ T5842] veth0_vlan: entered promiscuous mode [ 122.936734][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.936753][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.993944][ T5839] veth0_vlan: entered promiscuous mode [ 123.004113][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.063203][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.081967][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.091497][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.113831][ T5842] veth1_vlan: entered promiscuous mode [ 123.123329][ T5839] veth1_vlan: entered promiscuous mode [ 123.340228][ T5838] veth0_macvtap: entered promiscuous mode [ 123.446994][ T5838] veth1_macvtap: entered promiscuous mode [ 123.703574][ T5842] veth0_macvtap: entered promiscuous mode [ 123.706328][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.706356][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.732974][ T5839] veth0_macvtap: entered promiscuous mode [ 123.809976][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.827363][ T5842] veth1_macvtap: entered promiscuous mode [ 123.847870][ T5839] veth1_macvtap: entered promiscuous mode [ 123.951738][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.037431][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.037457][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.080652][ T1000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.101298][ T1000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.159088][ T1000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.190580][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.224766][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.224879][ T1000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.274131][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.363359][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.490600][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.525872][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.566025][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.573814][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.583023][ T1000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.583544][ T1000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.584448][ T1000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.584935][ T1000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.699270][ T1246] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.888363][ T1246] usb 1-1: Using ep0 maxpacket: 8 [ 124.939233][ T1246] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 124.939270][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.939292][ T1246] usb 1-1: Product: syz [ 124.939306][ T1246] usb 1-1: Manufacturer: syz [ 124.939322][ T1246] usb 1-1: SerialNumber: syz [ 125.001673][ T1246] usb 1-1: config 0 descriptor?? [ 125.129766][ T1246] gspca_main: sq930x-2.14.0 probing 2770:930c [ 125.156126][ T1290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.156156][ T1290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.588625][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.588652][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.777394][ T1246] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 125.816616][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.816641][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.997561][ T1246] gspca_sq930x: Sensor ov9630 not yet treated [ 125.997668][ T1246] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 125.999886][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.999906][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.040997][ T1246] usb 1-1: USB disconnect, device number 2 [ 126.253818][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.253836][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.333364][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.589818][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.589844][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.058692][ T37] audit: type=1326 audit(1756854071.622:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.058752][ T37] audit: type=1326 audit(1756854071.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.081849][ T37] audit: type=1326 audit(1756854071.642:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.081939][ T37] audit: type=1326 audit(1756854071.642:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.081994][ T37] audit: type=1326 audit(1756854071.652:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.082062][ T37] audit: type=1326 audit(1756854071.652:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.088936][ T37] audit: type=1326 audit(1756854071.652:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.0.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 127.748693][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 128.966743][ T5930] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 129.131210][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.131250][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.131294][ T5930] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 129.131320][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.160807][ T5930] usb 4-1: config 0 descriptor?? [ 129.759955][ T5930] glorious 0003:258A:0036.0001: unknown main item tag 0x1 [ 129.867498][ T5930] glorious 0003:258A:0036.0001: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 129.937512][ T5930] usb 4-1: USB disconnect, device number 2 [ 130.564769][ T6056] fido_id[6056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.897421][ T5932] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.057540][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.057576][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.057598][ T5932] usb 1-1: config 1 has no interface number 0 [ 131.057654][ T5932] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.057685][ T5932] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 131.057726][ T5932] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.062892][ T5932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.062927][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.062950][ T5932] usb 1-1: Product: syz [ 131.062966][ T5932] usb 1-1: Manufacturer: syz [ 131.062981][ T5932] usb 1-1: SerialNumber: syz [ 131.707449][ T5843] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 131.795618][ T5932] cdc_ncm 1-1:1.1: bind() failure [ 131.874781][ T5843] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 131.874818][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.885958][ T5932] usb 1-1: USB disconnect, device number 3 [ 131.997390][ T5843] usb 4-1: config 0 descriptor?? [ 132.533014][ T5929] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 132.572540][ T5843] hid-alps 0003:044E:120C.0002: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 132.700641][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.700769][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.700812][ T5929] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 132.700836][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.736970][ T5929] usb 2-1: config 0 descriptor?? [ 132.772418][ T5932] usb 4-1: USB disconnect, device number 3 [ 133.291751][ T5929] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 133.291796][ T5929] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 133.330412][ T5929] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 133.468772][ T5929] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 133.468836][ T5929] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 133.474476][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 133.509622][ T5929] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -71 [ 133.584340][ T5929] usb 2-1: USB disconnect, device number 2 [ 133.987417][ T999] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.070644][ T6111] fido_id[6111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 134.209639][ T999] usb 4-1: Using ep0 maxpacket: 16 [ 134.212315][ T999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.212354][ T999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.212381][ T999] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.212429][ T999] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.212455][ T999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.264766][ T999] usb 4-1: config 0 descriptor?? [ 134.487431][ T5932] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.658569][ T5932] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 134.658602][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.735182][ T999] microsoft 0003:045E:07DA.0004: unknown main item tag 0x1 [ 134.797243][ T5932] usb 3-1: config 0 descriptor?? [ 134.800875][ T999] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 134.800911][ T999] microsoft 0003:045E:07DA.0004: no inputs found [ 134.800927][ T999] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 134.970179][ T5843] usb 4-1: USB disconnect, device number 4 [ 135.289514][ T5847] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 135.298394][ T6131] fido_id[6131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 135.444318][ T5932] ath6kl: Failed to read usb control message: -71 [ 135.444376][ T5932] ath6kl: Unable to read the bmi data from the device: -71 [ 135.444392][ T5932] ath6kl: unable to read target info byte count: -71 [ 135.477630][ T5932] ath6kl: Failed to init ath6kl core: -71 [ 135.478662][ T5932] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 135.480697][ T5847] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.480727][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.510315][ T5932] usb 3-1: USB disconnect, device number 2 [ 135.573643][ T5847] usb 2-1: config 0 descriptor?? [ 135.590665][ T5847] cp210x 2-1:0.0: cp210x converter detected [ 135.677341][ T999] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.842040][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.842105][ T999] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 135.842131][ T999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.932701][ T999] usb 5-1: config 0 descriptor?? [ 136.080365][ T5847] usb 2-1: cp210x converter now attached to ttyUSB0 [ 136.251233][ T5847] usb 2-1: USB disconnect, device number 3 [ 136.304725][ T5847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.325209][ T6144] capability: warning: `syz.2.79' uses 32-bit capabilities (legacy support in use) [ 136.416950][ T999] zydacron 0003:13EC:0006.0005: item fetching failed at offset 4/5 [ 136.426506][ T999] zydacron 0003:13EC:0006.0005: parse failed [ 136.426644][ T999] zydacron 0003:13EC:0006.0005: probe with driver zydacron failed with error -22 [ 136.438130][ T5847] cp210x 2-1:0.0: device disconnected [ 136.526424][ T6147] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 136.526449][ T6147] netlink: 208 bytes leftover after parsing attributes in process `syz.3.78'. [ 136.526485][ T6147] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 136.526501][ T6147] netlink: 'syz.3.78': attribute type 2 has an invalid length. [ 136.623393][ T5999] usb 5-1: USB disconnect, device number 2 [ 137.321736][ T6165] rdma_op ffff88805f8fd270 conn xmit_rdma 0000000000000000 [ 138.365387][ T6194] process 'syz.4.102' launched './file2' with NULL argv: empty string added [ 138.779969][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.551831][ T6236] ======================================================= [ 139.551831][ T6236] WARNING: The mand mount option has been deprecated and [ 139.551831][ T6236] and is ignored by this kernel. Remove the mand [ 139.551831][ T6236] option from the mount to silence this warning. [ 139.551831][ T6236] ======================================================= [ 140.174407][ T6251] netlink: 'syz.3.128': attribute type 2 has an invalid length. [ 140.192079][ T6252] IPVS: Error connecting to the multicast addr [ 140.532993][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'. [ 141.551207][ T5718] kernel write not supported for file /uinput (pid: 5718 comm: kworker/1:3) [ 141.896381][ T37] audit: type=1400 audit(1756854086.452:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6298 comm="syz.1.150" netif=wpan0 [ 142.477385][ T5718] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 142.630073][ T5718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.630213][ T5718] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.630272][ T5718] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.630297][ T5718] usb 3-1: config 1 interface 1 has no altsetting 0 [ 142.634620][ T5718] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.634653][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.634674][ T5718] usb 3-1: Product: syz [ 142.634689][ T5718] usb 3-1: Manufacturer: syz [ 142.634705][ T5718] usb 3-1: SerialNumber: syz [ 142.744289][ T5718] cdc_ncm 3-1:1.0: skipping garbage [ 142.744313][ T5718] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 142.744356][ T5718] cdc_ncm 3-1:1.0: bind() failure [ 143.011763][ T6309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.250113][ T5843] usb 3-1: USB disconnect, device number 3 [ 143.334728][ T6334] iso9660: Bad value for 'gid' [ 143.334751][ T6334] iso9660: Bad value for 'gid' [ 143.364223][ T5847] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.527323][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 143.531031][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.541779][ T5847] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 143.541817][ T5847] usb 5-1: config 4 has no interface number 0 [ 143.541860][ T5847] usb 5-1: config 4 interface 30 has no altsetting 0 [ 143.577695][ T5847] usb 5-1: string descriptor 0 read error: -22 [ 143.577865][ T5847] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 143.577890][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.722529][ T5847] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 143.722578][ T5847] dw2102: su3000_power_ctrl: 1, initialized 0 [ 143.723121][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 143.789455][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.793480][ T5847] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 143.793585][ T5847] usb 5-1: media controller created [ 143.794231][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 143.794249][ T5847] dw2102: i2c transfer failed. [ 143.794274][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 143.794289][ T5847] dw2102: i2c transfer failed. [ 143.794308][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 143.794323][ T5847] dw2102: i2c transfer failed. [ 143.794348][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 143.794364][ T5847] dw2102: i2c transfer failed. [ 143.794382][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 143.794397][ T5847] dw2102: i2c transfer failed. [ 143.794415][ T5847] dvb-usb: bulk message failed: -22 (6/0) [ 143.794430][ T5847] dw2102: i2c transfer failed. [ 143.794441][ T5847] dvb-usb: MAC address: 02:02:02:02:02:02 [ 143.904121][ T6325] dvb-usb: bulk message failed: -22 (4/0) [ 143.904147][ T6325] dw2102: i2c transfer failed. [ 143.904158][ T6325] dvb-usb: bulk message failed: -22 (3/0) [ 143.904174][ T6325] dw2102: i2c transfer failed. [ 143.967445][ T5932] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.054546][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.121441][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.121479][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.121503][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 144.121548][ T5932] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 144.121572][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.169805][ T5932] usb 2-1: config 0 descriptor?? [ 144.366427][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 144.366459][ T5847] dw2102: command 0x0e transfer failed. [ 144.366471][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 144.366486][ T5847] dw2102: command 0x0e transfer failed. [ 144.673442][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 144.673474][ T5847] dw2102: command 0x0e transfer failed. [ 144.673485][ T5847] dvb-usb: bulk message failed: -22 (3/0) [ 144.673500][ T5847] dw2102: command 0x0e transfer failed. [ 144.673509][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 144.673524][ T5847] dw2102: command 0x51 transfer failed. [ 144.673535][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 144.673549][ T5847] dw2102: i2c probe for address 0x68 failed. [ 144.673562][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 144.673577][ T5847] dw2102: i2c probe for address 0x69 failed. [ 144.673589][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 144.673603][ T5847] dw2102: i2c probe for address 0x6a failed. [ 144.673615][ T5847] dw2102: probing for demodulator failed. Is the external power switched on? [ 144.673640][ T5847] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 144.767883][ T5932] viewsonic 0003:2133:0018.0006: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 144.861438][ T5932] usb 2-1: USB disconnect, device number 4 [ 145.227329][ T5847] rc_core: IR keymap rc-tt-1500 not found [ 145.227357][ T5847] Registered IR keymap rc-empty [ 145.308557][ T6362] fido_id[6362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.329184][ T5847] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 145.383626][ T5847] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 145.557844][ T5847] dvb-usb: schedule remote query interval to 250 msecs. [ 145.557874][ T5847] dw2102: su3000_power_ctrl: 0, initialized 1 [ 145.557889][ T5847] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 145.627720][ T5847] usb 5-1: USB disconnect, device number 3 [ 145.966511][ T6386] warning: `syz.2.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.087367][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.110506][ T5847] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 146.261926][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 146.274980][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.275072][ T5932] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 146.275111][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.364318][ T5932] usb 2-1: config 0 descriptor?? [ 146.512103][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.188'. [ 146.815782][ T5932] kye 0003:0458:4018.0007: unbalanced collection at end of report description [ 146.816792][ T5932] kye 0003:0458:4018.0007: parse failed [ 146.816873][ T5932] kye 0003:0458:4018.0007: probe with driver kye failed with error -22 [ 147.041333][ T5932] usb 2-1: USB disconnect, device number 5 [ 147.383102][ T5999] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 147.383156][ T5999] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 147.383185][ T5999] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 147.542377][ T5999] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 147.946715][ T6422] fido_id[6422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.091003][ T6434] capability: warning: `syz.4.207' uses deprecated v2 capabilities in a way that may be insecure [ 149.623896][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.225'. [ 149.624424][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.225'. [ 149.890732][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 152.257345][ T5932] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.407437][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 152.425851][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.425885][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.425929][ T5932] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 152.425955][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.493192][ T5932] usb 4-1: config 0 descriptor?? [ 152.676306][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 152.978364][ T5932] ft260 0003:0403:6030.0009: unbalanced collection at end of report description [ 152.979210][ T5932] ft260 0003:0403:6030.0009: failed to parse HID [ 152.979320][ T5932] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -22 [ 153.174321][ T5847] usb 4-1: USB disconnect, device number 5 [ 154.261654][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 154.261691][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 154.705901][ T6614] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.057926][ T6619] nbd: socks must be embedded in a SOCK_ITEM attr [ 155.112736][ T6621] program syz.3.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.864710][ T6639] netdevsim netdevsim0: Direct firmware load for . [ 155.864710][ T6639] failed with error -2 [ 155.864741][ T6639] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 155.864741][ T6639] [ 156.573957][ T6656] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.311'. [ 156.967533][ T5932] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.118038][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 157.121832][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.121870][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.121895][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.121943][ T5932] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.121968][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.157377][ T5847] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 157.204027][ T5932] usb 1-1: config 0 descriptor?? [ 157.323013][ T5847] usb 3-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 157.323084][ T5847] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.323110][ T5847] usb 3-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 157.323142][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.323180][ T5847] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 157.323204][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.396404][ T5847] usb 3-1: config 0 descriptor?? [ 157.795733][ T5932] HID 045e:07da: Invalid code 65791 type 1 [ 157.796172][ T5932] HID 045e:07da: Invalid code 768 type 1 [ 157.796203][ T5932] HID 045e:07da: Invalid code 769 type 1 [ 157.796220][ T5932] HID 045e:07da: Invalid code 770 type 1 [ 157.796235][ T5932] HID 045e:07da: Invalid code 771 type 1 [ 157.796252][ T5932] HID 045e:07da: Invalid code 772 type 1 [ 157.796267][ T5932] HID 045e:07da: Invalid code 773 type 1 [ 157.796282][ T5932] HID 045e:07da: Invalid code 774 type 1 [ 157.796297][ T5932] HID 045e:07da: Invalid code 775 type 1 [ 157.796312][ T5932] HID 045e:07da: Invalid code 776 type 1 [ 157.897503][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input6 [ 157.904429][ T6670] netlink: 'syz.4.318': attribute type 29 has an invalid length. [ 157.944692][ T5847] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 157.944733][ T5847] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 157.944759][ T5847] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 157.944785][ T5847] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 157.944810][ T5847] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 157.951372][ T6670] netlink: 'syz.4.318': attribute type 29 has an invalid length. [ 157.996868][ T5847] nzxt-kraken2 0003:1E71:170E.000B: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 158.047011][ T5932] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 158.101687][ T5932] usb 1-1: USB disconnect, device number 4 [ 158.274811][ T5847] usb 3-1: USB disconnect, device number 4 [ 158.509667][ T6672] fido_id[6672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 158.562968][ T6671] fido_id[6671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 159.137504][ T5932] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.295287][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.295323][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.295365][ T5932] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 159.295390][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.361142][ T5932] usb 5-1: config 0 descriptor?? [ 159.831379][ T5932] cypress 0003:04B4:DE61.000C: item fetching failed at offset 5/7 [ 159.832276][ T5932] cypress 0003:04B4:DE61.000C: parse failed [ 159.832358][ T5932] cypress 0003:04B4:DE61.000C: probe with driver cypress failed with error -22 [ 160.026284][ T999] usb 5-1: USB disconnect, device number 4 [ 160.177335][ T5932] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.358986][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.359039][ T5932] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 160.359064][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.416036][ T5932] usb 1-1: config 0 descriptor?? [ 160.884347][ T5932] kye 0003:0458:5017.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 160.885608][ T5932] kye 0003:0458:5017.000D: unknown main item tag 0x0 [ 160.885638][ T5932] kye 0003:0458:5017.000D: unknown main item tag 0x0 [ 160.885665][ T5932] kye 0003:0458:5017.000D: unknown main item tag 0x0 [ 160.885692][ T5932] kye 0003:0458:5017.000D: unknown main item tag 0x0 [ 160.885719][ T5932] kye 0003:0458:5017.000D: unknown main item tag 0x0 [ 160.968016][ T5932] kye 0003:0458:5017.000D: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0 [ 160.968055][ T5932] kye 0003:0458:5017.000D: tablet-enabling feature report not found [ 160.968070][ T5932] kye 0003:0458:5017.000D: tablet enabling failed [ 161.116098][ T1246] usb 1-1: USB disconnect, device number 5 [ 161.303636][ T37] audit: type=1326 audit(1756854105.872:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz.4.335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e2f49ebe9 code=0x0 [ 161.330502][ T6706] fido_id[6706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 163.996663][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 163.996691][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 163.996720][ T6748] netlink: 'syz.4.353': attribute type 5 has an invalid length. [ 163.996735][ T6748] netlink: 'syz.4.353': attribute type 6 has an invalid length. [ 164.346602][ T6667] syz.3.317 (6667): drop_caches: 1 [ 164.544042][ T6761] netlink: 96 bytes leftover after parsing attributes in process `syz.2.361'. [ 164.624628][ T6761] vlan2: entered allmulticast mode [ 164.624651][ T6761] gretap0: entered allmulticast mode [ 165.547474][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.713677][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.713731][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 165.713759][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.769428][ T5932] usb 1-1: config 0 descriptor?? [ 166.021149][ T6799] sp0: Synchronizing with TNC [ 166.258815][ T5932] logitech-djreceiver 0003:046D:C71F.000E: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 166.463211][ T5843] usb 1-1: USB disconnect, device number 6 [ 166.732256][ T6809] fido_id[6809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 167.154423][ T6823] Bluetooth: MGMT ver 1.23 [ 167.549081][ T6835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'. [ 170.285813][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 170.344935][ T6921] program syz.3.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.137310][ T5843] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.330458][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.330496][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.330521][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.330568][ T5843] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.330592][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.336757][ T5843] usb 3-1: config 0 descriptor?? [ 171.736405][ T6952] overlayfs: workdir and upperdir must be separate subtrees [ 171.805244][ T6955] batadv0: entered promiscuous mode [ 171.817947][ T6955] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 171.845492][ T5843] plantronics 0003:047F:FFFF.000F: collection stack underflow [ 171.845530][ T5843] plantronics 0003:047F:FFFF.000F: item 0 2 0 12 parsing failed [ 171.846399][ T5843] plantronics 0003:047F:FFFF.000F: parse failed [ 171.846508][ T5843] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 171.958514][ T6955] batadv0: left promiscuous mode [ 172.070687][ T5847] usb 3-1: USB disconnect, device number 5 [ 172.948482][ T6982] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 172.948509][ T6982] netlink: 184 bytes leftover after parsing attributes in process `syz.3.463'. [ 172.948543][ T6982] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 175.411050][ T7057] futex_wake_op: syz.1.499 tries to shift op by 32; fix this program [ 175.437750][ T5847] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.603183][ T5847] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 175.603229][ T5847] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.631880][ T5847] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.631933][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.631956][ T5847] usb 3-1: Product: syz [ 175.631972][ T5847] usb 3-1: Manufacturer: syz [ 175.631988][ T5847] usb 3-1: SerialNumber: syz [ 175.689790][ T5847] usb 3-1: config 0 descriptor?? [ 175.747026][ T5847] usb 3-1: selecting invalid altsetting 0 [ 175.904511][ T7067] xfs: Unexpected value for 'discard' [ 176.039725][ T5847] usb 3-1: USB disconnect, device number 6 [ 176.638124][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.987330][ T5932] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.075297][ T7096] netlink: 1 bytes leftover after parsing attributes in process `syz.0.518'. [ 177.138797][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 177.141530][ T5932] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 177.141582][ T5932] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 177.141612][ T5932] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.141646][ T5932] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 177.141683][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.141720][ T5932] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 177.141755][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.190255][ T5932] usb 5-1: config 0 descriptor?? [ 177.658088][ T5932] microsoft 0003:045E:00F9.0010: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 177.658130][ T5932] microsoft 0003:045E:00F9.0010: no inputs found [ 177.658147][ T5932] microsoft 0003:045E:00F9.0010: could not initialize ff, continuing anyway [ 177.827572][ T1246] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 177.838209][ T5843] usb 5-1: USB disconnect, device number 5 [ 177.980040][ T1246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.980081][ T1246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.980126][ T1246] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 177.980152][ T1246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.037888][ T1246] usb 1-1: config 0 descriptor?? [ 178.252540][ T7119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.529'. [ 178.482011][ T7115] fido_id[7115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 178.506902][ T1246] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 178.550747][ T1246] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 178.591002][ T7123] netlink: 'syz.1.531': attribute type 3 has an invalid length. [ 178.730310][ T1246] usb 1-1: USB disconnect, device number 7 [ 179.551093][ T7139] fido_id[7139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 180.375472][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 180.729362][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 181.378163][ T7191] Illegal XDP return value 4294967274 on prog (id 51) dev N/A, expect packet loss! [ 182.337455][ T5932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.496318][ T5932] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 182.496353][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.496376][ T5932] usb 4-1: Product: syz [ 182.496393][ T5932] usb 4-1: Manufacturer: syz [ 182.496409][ T5932] usb 4-1: SerialNumber: syz [ 182.591618][ T5932] usb 4-1: config 0 descriptor?? [ 182.622091][ T5932] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 006 [ 182.861798][ T7227] Bluetooth: MGMT ver 1.23 [ 182.940267][ T5718] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 183.132317][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.132361][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.132411][ T5718] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 183.132829][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.259492][ T5718] usb 2-1: config 0 descriptor?? [ 183.278965][ T5932] i2c i2c-1: failure reading functionality [ 183.457639][ T5932] i2c i2c-1: connected i2c-tiny-usb device [ 183.568392][ T5932] usb 4-1: USB disconnect, device number 6 [ 183.854321][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.854367][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.854397][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.854425][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.854454][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.854482][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.854510][ T5718] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 183.915422][ T5718] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 184.009799][ T5718] arvo 0003:1E7D:30D4.0012: couldn't init struct arvo_device [ 184.009871][ T5718] arvo 0003:1E7D:30D4.0012: couldn't install keyboard [ 184.038714][ T5718] arvo 0003:1E7D:30D4.0012: probe with driver arvo failed with error -71 [ 184.108106][ T5718] usb 2-1: USB disconnect, device number 6 [ 184.486839][ T7240] fido_id[7240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 184.797058][ T7253] veth1_macvtap: left promiscuous mode [ 184.797101][ T7253] macsec0: entered promiscuous mode [ 184.880686][ T7258] veth1_macvtap: entered promiscuous mode [ 184.881061][ T7258] macsec0: left promiscuous mode [ 185.510204][ T5847] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 185.670956][ T5847] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.671309][ T5847] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.671338][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.671379][ T5847] usb 2-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 185.671406][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.743732][ T5847] usb 2-1: config 0 descriptor?? [ 186.247429][ T5718] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.248200][ T5847] asus 0003:0B05:183D.0013: hidraw0: USB HID v0.08 Device [HID 0b05:183d] on usb-dummy_hcd.1-1/input0 [ 186.248237][ T5847] asus 0003:0B05:183D.0013: Asus input not registered [ 186.290455][ T5847] asus 0003:0B05:183D.0013: probe with driver asus failed with error -12 [ 186.476215][ T5718] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 186.476254][ T5718] usb 4-1: config 0 has no interface number 0 [ 186.476293][ T5718] usb 4-1: config 0 interface 46 has no altsetting 0 [ 186.476367][ T5718] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 186.476395][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.527602][ T5932] usb 2-1: USB disconnect, device number 7 [ 186.613204][ T5718] usb 4-1: config 0 descriptor?? [ 186.682043][ T5718] usb-storage 4-1:0.46: USB Mass Storage device detected [ 186.748095][ T5718] usb-storage 4-1:0.46: Quirks match for vid 0781 pid 0100: 1 [ 186.910832][ T5718] usb 4-1: USB disconnect, device number 7 [ 187.008188][ T7301] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 187.409149][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.558688][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 187.562275][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.562312][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.608667][ T5847] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.608702][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.608725][ T5847] usb 3-1: Product: syz [ 187.608741][ T5847] usb 3-1: Manufacturer: syz [ 187.608757][ T5847] usb 3-1: SerialNumber: syz [ 187.888917][ T5847] usb 3-1: 0:2 : does not exist [ 187.904250][ T5847] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 188.017325][ T5847] usb 3-1: USB disconnect, device number 7 [ 188.218013][ T7326] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.626'. [ 188.491995][ T7090] udevd[7090]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.018800][ T7348] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 189.018827][ T7348] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.644'. [ 189.866887][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 189.866919][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 190.419663][ T5204] udevd[5204]: worker [7090] terminated by signal 33 (Unknown signal 33) [ 190.419732][ T5204] udevd[5204]: worker [7090] failed while handling '/devices/virtual/block/loop3' [ 191.518295][ T7399] netlink: 96 bytes leftover after parsing attributes in process `syz.0.658'. [ 191.554152][ T7399] vlan2: entered allmulticast mode [ 191.554179][ T7399] gretap0: entered allmulticast mode [ 191.841852][ T37] audit: type=1326 audit(1756854136.412:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06ebe8ebe9 code=0x0 [ 192.667307][ T5718] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.730898][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.671'. [ 192.756697][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 192.756922][ T7430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.672'. [ 192.756944][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 192.827358][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 192.832935][ T5718] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 192.832975][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.864605][ T5718] usb 1-1: config 0 descriptor?? [ 192.880827][ T5718] gspca_main: sq930x-2.14.0 probing 041e:403c [ 193.230655][ T7440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.678'. [ 193.491243][ T5932] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.588818][ T5718] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 193.588941][ T5718] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 193.592563][ T5718] usb 1-1: USB disconnect, device number 8 [ 193.645550][ T5932] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.645583][ T5932] usb 3-1: config 0 has no interface number 0 [ 193.645632][ T5932] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.645663][ T5932] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.645688][ T5932] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.645735][ T5932] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 193.645759][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.719943][ T5932] usb 3-1: config 0 descriptor?? [ 194.159427][ T5932] hid (null): report_id 35660 is invalid [ 194.333209][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.689'. [ 194.358316][ T5932] uclogic 0003:28BD:0042.0014: failed retrieving string descriptor #100: -71 [ 194.358379][ T5932] uclogic 0003:28BD:0042.0014: failed retrieving pen parameters: -71 [ 194.358414][ T5932] uclogic 0003:28BD:0042.0014: pen probing failed: -71 [ 194.358443][ T5932] uclogic 0003:28BD:0042.0014: failed probing parameters: -71 [ 194.358553][ T5932] uclogic 0003:28BD:0042.0014: probe with driver uclogic failed with error -71 [ 194.378018][ T7469] netlink: 'syz.0.690': attribute type 16 has an invalid length. [ 194.419948][ T5932] usb 3-1: USB disconnect, device number 8 [ 194.640468][ T7477] netlink: 76 bytes leftover after parsing attributes in process `syz.4.693'. [ 194.690164][ T7481] tipc: Started in network mode [ 194.690201][ T7481] tipc: Node identity 00000000000000000000ffffac1414bb, cluster identity 4711 [ 194.690262][ T7481] tipc: Enabling of bearer rejected, failed to enable media [ 195.766319][ T37] audit: type=1326 audit(1756854140.332:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7516 comm="syz.1.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8f1bebe9 code=0x0 [ 197.077340][ T5847] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.237815][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.237857][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.237902][ T5847] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 197.237926][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.301275][ T5847] usb 1-1: config 0 descriptor?? [ 197.769423][ T5847] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x1 [ 197.769523][ T5847] hid-steam 0003:28DE:1142.0015: item fetching failed at offset 4/5 [ 197.770471][ T5847] hid-steam 0003:28DE:1142.0015: steam_probe:parse of hid interface failed [ 197.770556][ T5847] hid-steam 0003:28DE:1142.0015: probe with driver hid-steam failed with error -22 [ 197.958058][ T5847] usb 1-1: USB disconnect, device number 9 [ 198.097326][ T5929] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 198.257049][ T5929] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.257084][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.272774][ T5929] usb 3-1: config 0 descriptor?? [ 198.283466][ T5929] cp210x 3-1:0.0: cp210x converter detected [ 198.737649][ T5929] usb 3-1: cp210x converter now attached to ttyUSB0 [ 198.953572][ T5932] usb 3-1: USB disconnect, device number 9 [ 198.981657][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.100137][ T5932] cp210x 3-1:0.0: device disconnected [ 199.277311][ T5847] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.430679][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.430727][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 199.430753][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.465660][ T5847] usb 2-1: config 0 descriptor?? [ 199.769122][ T7598] bridge0: port 3(syz_tun) entered blocking state [ 199.769300][ T7598] bridge0: port 3(syz_tun) entered disabled state [ 199.770607][ T7598] syz_tun: entered allmulticast mode [ 199.816556][ T7598] syz_tun: entered promiscuous mode [ 199.841380][ T7598] bridge0: port 3(syz_tun) entered blocking state [ 199.844325][ T7598] bridge0: port 3(syz_tun) entered forwarding state [ 200.131020][ T5847] video4linux radio48: keene_cmd_set failed (-71) [ 200.131054][ T5847] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 200.157221][ T5847] usb 2-1: USB disconnect, device number 8 [ 200.219713][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.308025][ T7610] loop4: detected capacity change from 0 to 524255232 [ 200.584605][ T7618] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.758'. [ 201.153764][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 201.481951][ T7655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.777'. [ 201.587965][ T7660] syz.0.779 uses obsolete (PF_INET,SOCK_PACKET) [ 201.650426][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 201.817383][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 201.825925][ T9] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.825969][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.826009][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 201.826035][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.871376][ T9] usb 3-1: config 0 descriptor?? [ 202.548254][ T5932] usb 3-1: USB disconnect, device number 10 [ 202.973474][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 202.973501][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 202.973543][ T7689] netlink: 'syz.4.792': attribute type 15 has an invalid length. [ 203.867442][ T5926] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.032860][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 204.035586][ T5926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.035649][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 204.035677][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 204.035706][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 204.069858][ T5926] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 204.069895][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 204.069921][ T5926] usb 1-1: Product: syz [ 204.069938][ T5926] usb 1-1: Manufacturer: syz [ 204.069958][ T5926] usb 1-1: SerialNumber: syz [ 204.100010][ T5926] usb 1-1: config 0 descriptor?? [ 204.349178][ T5926] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 204.349207][ T5926] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 204.387711][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 204.557458][ T5926] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 204.557506][ T5926] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 204.557528][ T5926] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 204.754987][ T5926] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 204.755305][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 204.755665][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 204.755904][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 204.756019][ T5926] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 204.756148][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 204.756290][ C0] radio-si470x 1-1:0.0: resubmitting urb failed (-1) [ 204.756740][ T5926] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 204.805177][ T5926] usb 1-1: USB disconnect, device number 10 [ 204.904335][ T7738] program syz.2.815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.906682][ T7738] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 206.892215][ T5926] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.051314][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 207.059904][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.059965][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.059995][ T5926] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.064481][ T5926] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 207.064523][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 207.064552][ T5926] usb 4-1: Product: syz [ 207.064571][ T5926] usb 4-1: Manufacturer: syz [ 207.064592][ T5926] usb 4-1: SerialNumber: syz [ 207.151507][ T5926] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 207.565208][ T5926] usb 4-1: USB disconnect, device number 8 [ 207.671846][ T5926] appletouch 4-1:1.0: input: appletouch disconnected [ 208.027348][ T5718] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.177361][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 208.180340][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.180375][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.180400][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.180447][ T5718] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.180473][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.248571][ T5718] usb 3-1: config 0 descriptor?? [ 208.692571][ T5718] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 208.695177][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695212][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695240][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695267][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695295][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695322][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695348][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695375][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695404][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.695431][ T5718] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 208.885242][ T5718] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 208.885284][ T5718] microsoft 0003:045E:07DA.0017: no inputs found [ 208.885299][ T5718] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 208.918072][ T5718] usb 3-1: USB disconnect, device number 11 [ 209.499230][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.872'. [ 209.737076][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 210.189599][ T7887] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.883'. [ 210.698556][ T7904] loop6: detected capacity change from 0 to 7 [ 210.727983][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.728126][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.732371][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.732415][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.732790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.732821][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.737299][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.737344][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.787327][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.820790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.820836][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.821590][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.821624][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.861466][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.861509][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.861629][ T7904] ldm_validate_partition_table(): Disk read failed. [ 210.861866][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.861895][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.862149][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.862177][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.862479][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.862507][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 210.865165][ T7904] Dev loop6: unable to read RDB block 0 [ 210.871612][ T7904] loop6: unable to read partition table [ 210.871910][ T7904] loop6: partition table beyond EOD, truncated [ 210.871962][ T7904] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 211.047317][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 211.053253][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 211.053288][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.053310][ T9] usb 3-1: Product: syz [ 211.053326][ T9] usb 3-1: Manufacturer: syz [ 211.053343][ T9] usb 3-1: SerialNumber: syz [ 211.106254][ T9] usb 3-1: config 0 descriptor?? [ 211.119775][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 211.538702][ T9] gspca_se401: Bayer format not supported! [ 211.746715][ T5718] usb 3-1: USB disconnect, device number 12 [ 212.186617][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 212.407456][ T7951] netlink: 'syz.3.914': attribute type 29 has an invalid length. [ 212.411399][ T7951] netlink: 'syz.3.914': attribute type 29 has an invalid length. [ 212.597352][ T5847] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 212.679293][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 212.751832][ T5847] usb 2-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 212.751887][ T5847] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.751913][ T5847] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 212.751944][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.751981][ T5847] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 212.752007][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.819641][ T5847] usb 2-1: config 0 descriptor?? [ 213.045055][ T5718] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 213.177437][ T5932] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 213.229744][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.229780][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.229827][ T5718] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 213.229851][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.240036][ T5718] usb 5-1: config 0 descriptor?? [ 213.304348][ T5847] nzxt-kraken2 0003:1E71:170E.0018: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.1-1/input0 [ 213.331720][ T5932] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.331826][ T5932] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.331853][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.331891][ T5932] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 213.331917][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.434556][ T5932] usb 1-1: config 0 descriptor?? [ 213.521940][ T5847] usb 2-1: USB disconnect, device number 9 [ 213.623536][ T7978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.925'. [ 213.791816][ T5718] hid_parser_main: 5 callbacks suppressed [ 213.791847][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.791886][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.792150][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.792181][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.792210][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.792475][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.792506][ T5718] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 213.897573][ T5718] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 213.943555][ T5932] asus 0003:0B05:183D.001A: hidraw1: USB HID v0.08 Device [HID 0b05:183d] on usb-dummy_hcd.0-1/input0 [ 213.943984][ T5932] asus 0003:0B05:183D.001A: Asus input not registered [ 213.955847][ T5718] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device [ 213.955918][ T5718] arvo 0003:1E7D:30D4.0019: couldn't install keyboard [ 213.985100][ T5718] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -71 [ 213.987701][ T5932] asus 0003:0B05:183D.001A: probe with driver asus failed with error -12 [ 214.017099][ T5718] usb 5-1: USB disconnect, device number 6 [ 214.061214][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 214.102402][ T5847] usb 1-1: USB disconnect, device number 11 [ 215.104266][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.947'. [ 215.207320][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.327010][ T8031] netlink: 56 bytes leftover after parsing attributes in process `syz.4.951'. [ 215.357483][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 215.364053][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 215.364089][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.364113][ T9] usb 2-1: Product: syz [ 215.364130][ T9] usb 2-1: Manufacturer: syz [ 215.364146][ T9] usb 2-1: SerialNumber: syz [ 215.410313][ T9] usb 2-1: config 0 descriptor?? [ 215.646976][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.050993][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 216.077375][ T9] usb 2-1: USB disconnect, device number 10 [ 216.437709][ T8053] program syz.3.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.019976][ T37] audit: type=1326 audit(1756854161.582:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8070 comm="syz.2.971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcce9cebe9 code=0x0 [ 218.329223][ T8121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.997'. [ 218.494845][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.999'. [ 218.511330][ T8126] IPVS: Error connecting to the multicast addr [ 219.861623][ T8173] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 219.861646][ T8173] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1019'. [ 220.128838][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 220.128878][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 220.602650][ T8185] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 221.205016][ T8204] Zero length message leads to an empty skb [ 221.697749][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 221.697777][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1038'. [ 222.150647][ T8221] Bluetooth: MGMT ver 1.23 [ 222.774552][ T8233] binder: 8229:8233 ioctl 4018620d 0 returned -22 [ 222.775437][ T8233] binder: 8229:8233 ioctl c0306201 200000000240 returned -11 [ 222.860625][ T8239] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 223.977402][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 224.127269][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 224.130864][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.130901][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.173598][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.173637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.173662][ T9] usb 4-1: Product: syz [ 224.173679][ T9] usb 4-1: Manufacturer: syz [ 224.173696][ T9] usb 4-1: SerialNumber: syz [ 224.642686][ T9] usb 4-1: cannot find UAC_HEADER [ 224.713389][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 224.869597][ T9] usb 4-1: USB disconnect, device number 9 [ 225.445991][ T8299] loop6: detected capacity change from 0 to 524288000 [ 225.552303][ T8304] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 226.778892][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1088'. [ 227.427468][ T1246] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.577408][ T1246] usb 5-1: Using ep0 maxpacket: 16 [ 227.580183][ T1246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.580213][ T1246] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.583928][ T1246] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.583962][ T1246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.583985][ T1246] usb 5-1: Product: syz [ 227.584001][ T1246] usb 5-1: Manufacturer: syz [ 227.584039][ T1246] usb 5-1: SerialNumber: syz [ 227.901433][ T1246] usb 5-1: 0:2 : does not exist [ 227.913870][ T1246] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 227.989035][ T1246] usb 5-1: USB disconnect, device number 7 [ 228.788261][ T8410] [U] „ [ 229.053402][ T37] audit: type=1326 audit(1756854173.622:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.053464][ T37] audit: type=1326 audit(1756854173.622:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.099917][ T37] audit: type=1326 audit(1756854173.642:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.099994][ T37] audit: type=1326 audit(1756854173.652:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.100050][ T37] audit: type=1326 audit(1756854173.652:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.101644][ T37] audit: type=1326 audit(1756854173.672:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.101705][ T37] audit: type=1326 audit(1756854173.672:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.101759][ T37] audit: type=1326 audit(1756854173.672:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8418 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1fd6bebe9 code=0x7ffc0000 [ 229.493378][ T8430] binder_alloc: binder_alloc_mmap_handler: 8429 200000ffc000-200001000000 already mapped failed -16 [ 229.527358][ T5929] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.696807][ T5929] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 229.696842][ T5929] usb 3-1: config 1 has no interface number 0 [ 229.696899][ T5929] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 229.696928][ T5929] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 229.696957][ T5929] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.748150][ T5929] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 229.748183][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.748204][ T5929] usb 3-1: Product: syz [ 229.748218][ T5929] usb 3-1: Manufacturer: syz [ 229.748234][ T5929] usb 3-1: SerialNumber: syz [ 229.859330][ T8426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.114286][ T8426] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.574413][ T5929] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 230.667455][ T1246] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 230.744132][ T5929] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 230.745035][ T5929] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 230.759911][ T5929] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 230.759947][ T5929] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 230.827356][ T1246] usb 5-1: Using ep0 maxpacket: 32 [ 230.833648][ T1246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.833685][ T1246] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.833711][ T1246] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.837408][ T1246] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 230.837442][ T1246] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 230.837464][ T1246] usb 5-1: Product: syz [ 230.837479][ T1246] usb 5-1: Manufacturer: syz [ 230.837494][ T1246] usb 5-1: SerialNumber: syz [ 230.991339][ T1246] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 231.016765][ T5929] usb 3-1: USB disconnect, device number 13 [ 231.042229][ T5929] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 231.391005][ T5929] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 231.576926][ T1246] usb 5-1: USB disconnect, device number 8 [ 231.777930][ T1246] appletouch 5-1:1.0: input: appletouch disconnected [ 232.557368][ T5929] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 232.710772][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 232.710831][ T5929] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 232.710859][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.742029][ T5929] usb 4-1: config 0 descriptor?? [ 233.026744][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 233.026812][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 233.026952][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 233.026982][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 233.299584][ T5929] aquacomputer_d5next 0003:0C70:F0BD.001B: unknown main item tag 0x0 [ 233.314727][ T5929] aquacomputer_d5next 0003:0C70:F0BD.001B: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.3-1/input0 [ 233.515354][ T5929] usb 4-1: USB disconnect, device number 10 [ 234.083216][ T5857] Bluetooth: hci4: link tx timeout [ 234.083674][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 234.407307][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.577481][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 234.592496][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.592541][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.592568][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.592618][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.592644][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.649488][ T9] usb 4-1: config 0 descriptor?? [ 234.968305][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1164'. [ 234.968356][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'. [ 235.216681][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001C/input/input9 [ 235.338242][ T9] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 235.357952][ T9] usb 4-1: USB disconnect, device number 11 [ 236.127692][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 238.327474][ T5929] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.401163][ T8659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.492964][ T5929] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 238.492996][ T5929] usb 3-1: config 0 has no interface number 0 [ 238.493032][ T5929] usb 3-1: config 0 interface 46 has no altsetting 0 [ 238.493141][ T5929] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 238.493167][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.519195][ T5929] usb 3-1: config 0 descriptor?? [ 238.540730][ T5929] usb-storage 3-1:0.46: USB Mass Storage device detected [ 238.586964][ T5929] usb-storage 3-1:0.46: Quirks match for vid 0781 pid 0100: 1 [ 238.588050][ T8667] loop6: detected capacity change from 0 to 7 [ 238.602847][ C0] blk_print_req_error: 5 callbacks suppressed [ 238.602867][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.602898][ C0] buffer_io_error: 5 callbacks suppressed [ 238.602908][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.630637][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.630683][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.631083][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.631118][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.640943][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.640994][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.661353][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.661399][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.670837][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.670879][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.671683][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.671718][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.671840][ T8667] ldm_validate_partition_table(): Disk read failed. [ 238.672101][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.672133][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.672556][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.672588][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.674073][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.674111][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.684355][ T8667] Dev loop6: unable to read RDB block 0 [ 238.688803][ T8667] loop6: unable to read partition table [ 238.689348][ T8667] loop6: partition table beyond EOD, truncated [ 238.689377][ T8667] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 238.936975][ T5929] usb 3-1: USB disconnect, device number 14 [ 239.048614][ T8674] batadv0: entered promiscuous mode [ 239.056776][ T8674] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 239.080449][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 239.080493][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1216'. [ 239.160084][ T8674] batadv0: left promiscuous mode [ 239.417321][ T5929] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 239.580505][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.580544][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.580588][ T5929] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 239.580613][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.650542][ T5929] usb 2-1: config 0 descriptor?? [ 239.726859][ T8694] loop6: detected capacity change from 0 to 7 [ 239.752059][ T8694] ldm_validate_partition_table(): Disk read failed. [ 239.756773][ T8694] Dev loop6: unable to read RDB block 0 [ 239.771235][ T8694] loop6: unable to read partition table [ 239.774147][ T8694] loop6: partition table beyond EOD, truncated [ 239.774255][ T8694] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 240.123740][ T5929] hid-retrode 0003:0403:97C1.001D: unknown main item tag 0x0 [ 240.147311][ T1246] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 240.172912][ T5929] hid-retrode 0003:0403:97C1.001D: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 240.197355][ T5999] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.221055][ T1246] hid-generic 0000:0000:0000.001E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 240.347280][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 240.350381][ T5999] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.352152][ T5999] usb 4-1: config 9 has an invalid interface number: 48 but max is 0 [ 240.352182][ T5999] usb 4-1: config 9 has no interface number 0 [ 240.352218][ T5999] usb 4-1: config 9 interface 48 has no altsetting 0 [ 240.355398][ T5999] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 240.355429][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.355451][ T5999] usb 4-1: Product: syz [ 240.355467][ T5999] usb 4-1: Manufacturer: syz [ 240.355492][ T5999] usb 4-1: SerialNumber: syz [ 240.428002][ T5932] usb 2-1: USB disconnect, device number 11 [ 240.487030][ T8716] batadv0: entered promiscuous mode [ 240.541701][ T8716] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 240.628361][ T8716] batadv0: left promiscuous mode [ 240.675718][ T5999] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 241.069387][ T8721] loop6: detected capacity change from 0 to 7 [ 241.083790][ T5999] gspca_vc032x: reg_w err -71 [ 241.083822][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083834][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083844][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083855][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083865][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083875][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083885][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083895][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083904][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083921][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083930][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083940][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083950][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083960][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083969][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083979][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083988][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.083998][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.084008][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.084017][ T5999] gspca_vc032x: Unknown sensor... [ 241.084121][ T5999] vc032x 4-1:9.48: probe with driver vc032x failed with error -22 [ 241.089072][ T8721] ldm_validate_partition_table(): Disk read failed. [ 241.090187][ T8721] Dev loop6: unable to read RDB block 0 [ 241.091734][ T8721] loop6: unable to read partition table [ 241.092053][ T8721] loop6: partition table beyond EOD, truncated [ 241.092078][ T8721] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 241.264026][ T5999] usb 4-1: USB disconnect, device number 12 [ 241.457453][ T8733] netlink: 642 bytes leftover after parsing attributes in process `syz.2.1241'. [ 241.473112][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 242.706711][ T5999] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 242.920950][ T5999] usb 4-1: Using ep0 maxpacket: 8 [ 242.960519][ T5999] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 242.960552][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.960574][ T5999] usb 4-1: Product: syz [ 242.960590][ T5999] usb 4-1: Manufacturer: syz [ 242.960605][ T5999] usb 4-1: SerialNumber: syz [ 243.040960][ T5999] usb 4-1: config 0 descriptor?? [ 243.326723][ T5999] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.760689][ T5999] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 243.800738][ T5999] usb 4-1: USB disconnect, device number 13 [ 246.001439][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 246.313545][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.387791][ T8818] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1280'. [ 248.875573][ T8851] vim2m vim2m.0: vidioc_s_fmt queue busy [ 249.039175][ T8853] netlink: 'syz.1.1299': attribute type 2 has an invalid length. [ 249.039202][ T8853] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1299'. [ 256.957192][ C1] sched: DL replenish lagged too much [ 259.129519][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 259.317307][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 259.322204][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.322240][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 259.322268][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 259.322298][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.326339][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 259.326371][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.326392][ T9] usb 2-1: Product: syz [ 259.326504][ T9] usb 2-1: Manufacturer: syz [ 259.326520][ T9] usb 2-1: SerialNumber: syz [ 259.519831][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 259.563335][ T9] usbtest 2-1:1.0: Linux user mode ISO test driver [ 259.563361][ T9] usbtest 2-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 259.737975][ T5999] usb 2-1: USB disconnect, device number 12 [ 259.959761][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.147437][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 260.150613][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.150668][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 260.150693][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.241088][ T9] usb 3-1: config 0 descriptor?? [ 261.095980][ T9] usb 3-1: string descriptor 0 read error: -71 [ 261.096760][ T9] uclogic 0003:5543:004D.001F: failed retrieving string descriptor #200: -71 [ 261.096826][ T9] uclogic 0003:5543:004D.001F: failed retrieving pen parameters: -71 [ 261.096846][ T9] uclogic 0003:5543:004D.001F: failed probing pen v2 parameters: -71 [ 261.096915][ T9] uclogic 0003:5543:004D.001F: failed probing parameters: -71 [ 261.097042][ T9] uclogic 0003:5543:004D.001F: probe with driver uclogic failed with error -71 [ 261.211785][ T9] usb 3-1: USB disconnect, device number 15 [ 261.621700][ T5847] kernel write not supported for file /binder/state (pid: 5847 comm: kworker/0:4) [ 261.714211][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.840968][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.870954][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.872332][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.873687][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.874557][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.915685][ T8930] chnl_net:caif_netlink_parms(): no params data found [ 264.937380][ T5846] Bluetooth: hci5: command tx timeout [ 266.758049][ T8946] netlink: 'syz.1.1340': attribute type 30 has an invalid length. [ 267.007453][ T5846] Bluetooth: hci5: command tx timeout [ 269.311433][ T5846] Bluetooth: hci5: command tx timeout [ 271.396429][ T5846] Bluetooth: hci5: command tx timeout [ 281.097380][ T8892] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 281.269724][ T8986] xt_limit: Overflow, try lower: 324382443/4200216956 [ 281.322948][ T8892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.322987][ T8892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.323036][ T8892] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 281.323062][ T8892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.459793][ T8892] usb 5-1: config 0 descriptor?? [ 282.223702][ T8892] ortek 0003:1223:3F07.0020: unknown main item tag 0x3 [ 282.223741][ T8892] ortek 0003:1223:3F07.0020: item fetching failed at offset 48/69 [ 282.278183][ T8892] ortek 0003:1223:3F07.0020: probe with driver ortek failed with error -22 [ 282.421686][ T8892] usb 5-1: USB disconnect, device number 9 [ 282.817499][ T8880] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 283.015543][ T8880] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 283.015576][ T8880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.043736][ T8880] usb 4-1: config 0 descriptor?? [ 283.315777][ T8880] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 283.542225][ T8880] [drm:udl_init] *ERROR* Selecting channel failed [ 283.637734][ T8880] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 283.637761][ T8880] [drm] Initialized udl on minor 2 [ 283.674915][ T8880] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.712871][ T8880] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 283.748840][ T8880] usb 4-1: USB disconnect, device number 14 [ 283.763645][ T8892] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 283.764590][ T8892] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 297.563506][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 297.593747][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 297.596054][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 297.612152][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 297.613168][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.647649][ T5857] Bluetooth: hci6: command tx timeout [ 301.729516][ T5857] Bluetooth: hci6: command tx timeout [ 303.807666][ T5857] Bluetooth: hci6: command tx timeout [ 305.729443][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 305.892246][ T5857] Bluetooth: hci6: command tx timeout [ 310.538616][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.570113][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.574897][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.576328][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.577605][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.264875][ T5846] Bluetooth: hci2: command tx timeout [ 319.327431][ T5846] Bluetooth: hci2: command tx timeout [ 321.407800][ T5846] Bluetooth: hci2: command tx timeout [ 321.504991][ T5857] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.512680][ T5857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.515343][ T5857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.552429][ T5857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.570495][ T5857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.134327][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.487807][ T5857] Bluetooth: hci2: command tx timeout [ 323.647661][ T5857] Bluetooth: hci7: command tx timeout [ 325.727317][ T5857] Bluetooth: hci7: command tx timeout [ 327.807293][ T5857] Bluetooth: hci7: command tx timeout [ 329.887365][ T5857] Bluetooth: hci7: command tx timeout [ 330.965148][ T8781] bridge0: port 3(syz_tun) entered disabled state [ 332.469574][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.494450][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.495999][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.512098][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.513148][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.607366][ T5857] Bluetooth: hci4: command tx timeout [ 336.771475][ T5857] Bluetooth: hci4: command tx timeout [ 338.848134][ T5857] Bluetooth: hci4: command tx timeout [ 340.934995][ T5857] Bluetooth: hci4: command tx timeout [ 341.436260][ T8781] syz_tun (unregistering): left allmulticast mode [ 341.436298][ T8781] syz_tun (unregistering): left promiscuous mode [ 341.436430][ T8781] bridge0: port 3(syz_tun) entered disabled state [ 347.733781][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.742053][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.743453][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.745282][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.746259][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.807401][ T5857] Bluetooth: hci0: command tx timeout [ 351.896980][ T5857] Bluetooth: hci0: command tx timeout [ 353.967269][ T5857] Bluetooth: hci0: command tx timeout [ 356.047524][ T5857] Bluetooth: hci0: command tx timeout [ 358.420168][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 358.447921][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 358.451376][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 358.452723][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 358.453718][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 360.537669][ T5857] Bluetooth: hci8: command tx timeout [ 362.673952][ T5857] Bluetooth: hci8: command tx timeout [ 364.753399][ T5857] Bluetooth: hci8: command tx timeout [ 366.777343][ T5857] Bluetooth: hci8: command tx timeout [ 371.732032][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 371.766945][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 371.769780][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 371.771157][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 371.772057][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 373.237549][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.237710][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.238043][ T8930] bridge_slave_0: entered allmulticast mode [ 373.287655][ T8930] bridge_slave_0: entered promiscuous mode [ 373.887513][ T5857] Bluetooth: hci9: command tx timeout [ 375.977474][ T5857] Bluetooth: hci9: command tx timeout [ 378.047445][ T5857] Bluetooth: hci9: command tx timeout [ 380.127284][ T5857] Bluetooth: hci9: command tx timeout [ 382.260794][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 382.284763][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 382.286567][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 382.317564][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 382.318605][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 384.377240][ T5857] Bluetooth: hci10: command tx timeout [ 385.560863][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.447229][ T5857] Bluetooth: hci10: command tx timeout [ 388.527382][ T5857] Bluetooth: hci10: command tx timeout [ 390.607415][ T5857] Bluetooth: hci10: command tx timeout [ 392.413004][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 392.437542][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 392.439501][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 392.440847][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 392.441794][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 407.098985][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 407.126749][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 407.146027][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 407.169178][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 407.170205][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 418.889248][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.916095][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.928695][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.930786][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.931736][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.487497][ T5857] Bluetooth: hci11: command tx timeout [ 425.573077][ T5857] Bluetooth: hci11: command tx timeout [ 427.647506][ T5857] Bluetooth: hci11: command tx timeout [ 429.727495][ T5857] Bluetooth: hci11: command tx timeout [ 432.211010][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.247551][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.252978][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.255040][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.300971][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.123862][ T5857] Bluetooth: hci5: command tx timeout [ 438.047545][ T5857] Bluetooth: hci12: command tx timeout [ 438.127468][ T5857] Bluetooth: hci5: command tx timeout [ 438.128141][ T5857] Bluetooth: hci3: command tx timeout [ 440.127471][ T5857] Bluetooth: hci12: command tx timeout [ 440.207465][ T59] Bluetooth: hci5: command tx timeout [ 440.211602][ T5857] Bluetooth: hci3: command tx timeout [ 442.207394][ T5857] Bluetooth: hci12: command tx timeout [ 442.290154][ T59] Bluetooth: hci5: command tx timeout [ 442.290218][ T5857] Bluetooth: hci3: command tx timeout [ 443.974238][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.075936][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.084801][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.121281][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.122229][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.295050][ T59] Bluetooth: hci12: command tx timeout [ 444.381798][ T59] Bluetooth: hci3: command tx timeout [ 446.227280][ T59] Bluetooth: hci2: command tx timeout [ 446.713706][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.299123][ T5857] Bluetooth: hci2: command tx timeout [ 448.767440][ T5857] Bluetooth: hci7: command 0x0406 tx timeout [ 450.377547][ T5857] Bluetooth: hci2: command tx timeout [ 452.457376][ T5857] Bluetooth: hci2: command tx timeout [ 453.720787][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 453.753176][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 453.767509][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 453.769322][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 453.770475][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 464.496931][ T5851] Bluetooth: hci6: command tx timeout [ 466.537754][ T5851] Bluetooth: hci6: command tx timeout [ 467.533447][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 467.557576][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 467.566045][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 467.582555][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 467.583622][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 468.637322][ T5851] Bluetooth: hci6: command tx timeout [ 469.656595][ T5851] Bluetooth: hci13: command tx timeout [ 470.687541][ T5851] Bluetooth: hci6: command tx timeout [ 471.727401][ T59] Bluetooth: hci13: command tx timeout [ 473.727336][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 473.807315][ T59] Bluetooth: hci13: command tx timeout [ 475.887424][ T59] Bluetooth: hci13: command tx timeout [ 479.966859][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.983819][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.985189][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.012041][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.012934][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.127403][ T5857] Bluetooth: hci4: command tx timeout [ 483.947238][ T5857] Bluetooth: hci8: command 0x0406 tx timeout [ 484.208898][ T5857] Bluetooth: hci4: command tx timeout [ 486.307102][ T5851] Bluetooth: hci4: command tx timeout [ 488.397292][ T5851] Bluetooth: hci4: command tx timeout [ 492.122060][ T5857] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 492.166069][ T5857] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 492.175147][ T5857] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 492.176567][ T5857] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 492.195995][ T5857] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 503.612595][ T5851] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 503.652892][ T5851] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 503.655847][ T5851] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 503.677315][ T5851] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 503.678284][ T5851] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 507.468260][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.094109][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 514.112943][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 514.124592][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.135547][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.150060][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 528.392696][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.413559][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.415105][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.428236][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.457324][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 540.323628][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 540.352883][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 540.356474][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 540.359335][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 540.360503][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 549.327407][ T5844] Bluetooth: hci14: command tx timeout [ 551.407227][ T5844] Bluetooth: hci14: command tx timeout [ 552.036137][ T5851] Bluetooth: hci0: command tx timeout [ 552.041945][ T5846] Bluetooth: hci7: command tx timeout [ 553.489276][ T5851] Bluetooth: hci14: command tx timeout [ 553.534141][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 553.560023][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 553.561580][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 553.591097][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 553.596425][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 554.057126][ T5846] Bluetooth: hci7: command tx timeout [ 554.057639][ T5846] Bluetooth: hci8: command tx timeout [ 554.057878][ T5846] Bluetooth: hci0: command tx timeout [ 554.058025][ T5846] Bluetooth: hci15: command tx timeout [ 555.569013][ T5846] Bluetooth: hci14: command tx timeout [ 555.647294][ T5846] Bluetooth: hci9: command tx timeout [ 556.127387][ T5846] Bluetooth: hci0: command tx timeout [ 556.127427][ T5846] Bluetooth: hci15: command tx timeout [ 556.127452][ T5846] Bluetooth: hci8: command tx timeout [ 556.127477][ T5846] Bluetooth: hci7: command tx timeout [ 557.729304][ T5846] Bluetooth: hci9: command tx timeout [ 558.207434][ T5846] Bluetooth: hci7: command tx timeout [ 558.207479][ T5846] Bluetooth: hci8: command tx timeout [ 558.207506][ T5846] Bluetooth: hci15: command tx timeout [ 558.207533][ T5846] Bluetooth: hci0: command tx timeout [ 559.827090][ T5153] Bluetooth: hci9: command tx timeout [ 560.287498][ T5153] Bluetooth: hci15: command tx timeout [ 560.287537][ T5153] Bluetooth: hci8: command tx timeout [ 560.778880][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 560.778949][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 561.887390][ T5846] Bluetooth: hci9: command tx timeout [ 564.310215][ T5153] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 564.326461][ T5153] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 564.347663][ T5153] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 564.382837][ T5153] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 564.383886][ T5153] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 568.890344][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.934957][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 573.968403][ T38] INFO: task kworker/0:11:9007 blocked for more than 143 seconds. [ 573.968438][ T38] Not tainted syzkaller #0 [ 573.968451][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.968475][ T38] task:kworker/0:11 state:D stack:21432 pid:9007 tgid:9007 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 573.968543][ T38] Workqueue: events switchdev_deferred_process_work [ 573.968598][ T38] Call Trace: [ 573.968607][ T38] [ 573.968623][ T38] __schedule+0x16f3/0x4c20 [ 573.968694][ T38] ? __pfx___schedule+0x10/0x10 [ 573.968748][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.968784][ T38] rt_mutex_schedule+0x77/0xf0 [ 573.968809][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 573.968836][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 573.968883][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 573.968912][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 573.968939][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 573.968978][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 573.969020][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 573.969056][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 573.969091][ T38] mutex_lock_nested+0x16a/0x1d0 [ 573.969115][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 573.969151][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 573.969184][ T38] switchdev_deferred_process_work+0xe/0x20 [ 573.969217][ T38] process_scheduled_works+0xade/0x17b0 [ 573.969283][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.969336][ T38] worker_thread+0x8a0/0xda0 [ 573.969372][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 573.969415][ T38] ? __kthread_parkme+0x7b/0x200 [ 573.969468][ T38] kthread+0x70e/0x8a0 [ 573.969508][ T38] ? __pfx_worker_thread+0x10/0x10 [ 573.969540][ T38] ? __pfx_kthread+0x10/0x10 [ 573.969583][ T38] ? __pfx_kthread+0x10/0x10 [ 573.969621][ T38] ret_from_fork+0x3f9/0x770 [ 573.969658][ T38] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.969696][ T38] ? __switch_to_asm+0x39/0x70 [ 573.969719][ T38] ? __switch_to_asm+0x33/0x70 [ 573.969741][ T38] ? __pfx_kthread+0x10/0x10 [ 573.969778][ T38] ret_from_fork_asm+0x1a/0x30 [ 573.969822][ T38] [ 573.969822][ T38] [ 573.969837][ T38] INFO: task syz.2.1390:9081 blocked for more than 143 seconds. [ 573.969854][ T38] Not tainted syzkaller #0 [ 573.969866][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.969877][ T38] task:syz.2.1390 state:D stack:27592 pid:9081 tgid:9080 ppid:5839 task_flags:0x400140 flags:0x00004006 [ 573.969948][ T38] Call Trace: [ 573.969956][ T38] [ 573.969970][ T38] __schedule+0x16f3/0x4c20 [ 573.970032][ T38] ? __pfx___schedule+0x10/0x10 [ 573.970084][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.970121][ T38] rt_mutex_schedule+0x77/0xf0 [ 573.970144][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 573.970170][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 573.970218][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 573.970247][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 573.970274][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 573.970314][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 573.970352][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 573.970386][ T38] ? do_raw_spin_lock+0x121/0x290 [ 573.970420][ T38] ? tun_chr_close+0x41/0x1c0 [ 573.970450][ T38] mutex_lock_nested+0x16a/0x1d0 [ 573.970482][ T38] ? tun_chr_close+0x41/0x1c0 [ 573.970514][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 573.970545][ T38] tun_chr_close+0x41/0x1c0 [ 573.970578][ T38] __fput+0x458/0xa80 [ 573.970617][ T38] task_work_run+0x1d4/0x260 [ 573.970647][ T38] ? __pfx_task_work_run+0x10/0x10 [ 573.970686][ T38] get_signal+0x11c5/0x1310 [ 573.970743][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 573.970771][ T38] ? __pfx_task_work_add+0x10/0x10 [ 573.970798][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 573.970823][ T38] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 573.970860][ T38] ? __fget_files+0x2a/0x420 [ 573.970900][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 573.970936][ T38] exit_to_user_mode_loop+0x75/0x110 [ 573.970969][ T38] do_syscall_64+0x2bd/0x3b0 [ 573.971001][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.971032][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.971055][ T38] ? clear_bhb_loop+0x60/0xb0 [ 573.971085][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.971117][ T38] RIP: 0033:0x7fbcce9cebe9 [ 573.971142][ T38] RSP: 002b:00007fbcccc36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.971166][ T38] RAX: 0000000000000000 RBX: 00007fbccec05fa0 RCX: 00007fbcce9cebe9 [ 573.971183][ T38] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 573.971199][ T38] RBP: 00007fbccea51e19 R08: 0000000000000000 R09: 0000000000000000 [ 573.971215][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.971229][ T38] R13: 00007fbccec06038 R14: 00007fbccec05fa0 R15: 00007ffd873ba848 [ 573.971267][ T38] [ 573.971278][ T38] INFO: task syz-executor:9116 blocked for more than 143 seconds. [ 573.971294][ T38] Not tainted syzkaller #0 [ 573.971306][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.971317][ T38] task:syz-executor state:D stack:26952 pid:9116 tgid:9116 ppid:1 task_flags:0x400140 flags:0x00004004 [ 573.971384][ T38] Call Trace: [ 573.971392][ T38] [ 573.971406][ T38] __schedule+0x16f3/0x4c20 [ 573.971490][ T38] ? __pfx___schedule+0x10/0x10 [ 573.971538][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.971568][ T38] rt_mutex_schedule+0x77/0xf0 [ 573.971589][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 573.971613][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 573.971648][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 573.971668][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 573.971687][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 573.971704][ T38] ? __lock_acquire+0xab9/0xd20 [ 573.971736][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 573.971777][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 573.971813][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 573.971831][ T38] mutex_lock_nested+0x16a/0x1d0 [ 573.971862][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 573.971896][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 573.971938][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 573.971960][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 573.971987][ T38] ? __lock_acquire+0xab9/0xd20 [ 573.972019][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 573.972047][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.972095][ T38] netlink_rcv_skb+0x205/0x470 [ 573.972123][ T38] ? __lock_acquire+0xab9/0xd20 [ 573.972153][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.972184][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.972225][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.972263][ T38] netlink_unicast+0x843/0xa10 [ 573.972298][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 573.972327][ T38] ? netlink_sendmsg+0x642/0xb30 [ 573.972353][ T38] ? skb_put+0x11b/0x210 [ 573.972388][ T38] netlink_sendmsg+0x805/0xb30 [ 573.972427][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.972473][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.972497][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.972529][ T38] __sock_sendmsg+0x21c/0x270 [ 573.972559][ T38] __sys_sendto+0x3c7/0x520 [ 573.972593][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 573.972654][ T38] ? exc_page_fault+0x76/0xf0 [ 573.972690][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 573.972723][ T38] __x64_sys_sendto+0xde/0x100 [ 573.972756][ T38] do_syscall_64+0xfa/0x3b0 [ 573.972788][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.972817][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.972841][ T38] ? clear_bhb_loop+0x60/0xb0 [ 573.972868][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.972890][ T38] RIP: 0033:0x7fd40a2a0a7c [ 573.972908][ T38] RSP: 002b:00007ffd0a28f1b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 573.972931][ T38] RAX: ffffffffffffffda RBX: 00007fd40b004620 RCX: 00007fd40a2a0a7c [ 573.972949][ T38] RDX: 0000000000000028 RSI: 00007fd40b004670 RDI: 0000000000000003 [ 573.972964][ T38] RBP: 0000000000000000 R08: 00007ffd0a28f204 R09: 000000000000000c [ 573.972978][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 573.972992][ T38] R13: 0000000000000000 R14: 00007fd40b004670 R15: 0000000000000000 [ 573.973028][ T38] [ 573.973058][ T38] [ 573.973058][ T38] Showing all locks held in the system: [ 573.973071][ T38] 2 locks held by rcuc/1/28: [ 573.973085][ T38] 9 locks held by ktimers/1/29: [ 573.973098][ T38] 2 locks held by ksoftirqd/1/30: [ 573.973111][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 573.973173][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 573.973234][ T38] 1 lock held by khungtaskd/38: [ 573.973245][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 573.973298][ T38] 5 locks held by kworker/u8:3/44: [ 573.973310][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.973368][ T38] #1: ffffc90000b57bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.973425][ T38] #2: ffffffff8ecc5a20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 573.973492][ T38] #3: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 573.973546][ T38] #4: ffff88803d3917b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 573.973600][ T38] 5 locks held by kworker/u9:0/59: [ 573.973613][ T38] #0: ffff888024f0b938 ((wq_completion)hci2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.973676][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.973735][ T38] #2: ffff888054fe8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 573.973788][ T38] #3: ffff888054fe80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 573.973846][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 573.973916][ T38] 3 locks held by kworker/u8:6/975: [ 573.973929][ T38] #0: ffff8880306ea938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.973990][ T38] #1: ffffc900045d7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.974052][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 573.974113][ T38] 3 locks held by kworker/u8:7/1000: [ 573.974127][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.974185][ T38] #1: ffffc900045b7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.974243][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 573.974328][ T38] 2 locks held by getty/5601: [ 573.974341][ T38] #0: ffff88823bfec8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 573.974405][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 573.974469][ T38] 4 locks held by kworker/1:3/5718: [ 573.974482][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.974541][ T38] #1: ffffc90004aa7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.974602][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 573.974661][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 573.974720][ T38] 6 locks held by kworker/u9:2/5844: [ 573.974733][ T38] #0: ffff888021b82938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.974792][ T38] #1: ffffc90004e57bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.974853][ T38] #2: ffff88804d09ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 573.974904][ T38] #3: ffff88804d09c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 573.974963][ T38] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 573.975022][ T38] #5: ffff8880309f9b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 573.975091][ T38] 4 locks held by kworker/u9:3/5846: [ 573.975105][ T38] #0: ffff88805fae7938 ((wq_completion)hci10#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.975169][ T38] #1: ffffc90004e87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.975229][ T38] #2: ffff8880799680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 573.975284][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 573.975340][ T38] 4 locks held by kworker/u9:4/5851: [ 573.975353][ T38] #0: ffff888038114938 ((wq_completion)hci5#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.975418][ T38] #1: ffffc90004ed7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.975484][ T38] #2: ffff888028e7ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 573.975535][ T38] #3: ffff888028e7c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 573.975604][ T38] 4 locks held by kworker/1:8/8865: [ 573.975617][ T38] #0: ffff88805a76e538 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.975682][ T38] #1: ffffc9001cb2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.975765][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 573.975823][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 573.975883][ T38] 4 locks held by kworker/1:10/8880: [ 573.975896][ T38] #0: ffff88805a77d538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.975961][ T38] #1: ffffc9001cb3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.976042][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 573.976099][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 573.976159][ T38] 4 locks held by kworker/1:12/8892: [ 573.976172][ T38] #0: ffff88805a6da538 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.976236][ T38] #1: ffffc9001ca4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.976317][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 573.976374][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 573.976434][ T38] 1 lock held by syz-executor/8930: [ 573.976448][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 573.976518][ T38] 3 locks held by kworker/0:11/9007: [ 573.976531][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 573.976589][ T38] #1: ffffc9001f507bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 573.976647][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 573.976712][ T38] 1 lock held by syz.2.1390/9081: [ 573.976725][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 573.976784][ T38] 2 locks held by kworker/1:15/9093: [ 573.976798][ T38] 1 lock held by syz-executor/9116: [ 573.976811][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 573.976862][ T38] 1 lock held by syz-executor/9119: [ 573.976875][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 573.976925][ T38] 1 lock held by syz-executor/9125: [ 573.976938][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237054][ T38] 1 lock held by syz-executor/9128: [ 574.237076][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237139][ T38] 1 lock held by syz-executor/9136: [ 574.237152][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237205][ T38] 1 lock held by syz-executor/9139: [ 574.237218][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237270][ T38] 1 lock held by syz-executor/9143: [ 574.237283][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237334][ T38] 1 lock held by syz-executor/9146: [ 574.237348][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237400][ T38] 1 lock held by syz-executor/9149: [ 574.237413][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237473][ T38] 1 lock held by syz-executor/9154: [ 574.237485][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237537][ T38] 1 lock held by syz-executor/9159: [ 574.237550][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237603][ T38] 1 lock held by syz-executor/9163: [ 574.237616][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237668][ T38] 1 lock held by syz-executor/9166: [ 574.237681][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.237734][ T38] [ 574.237740][ T38] ============================================= [ 574.237740][ T38] [ 574.237764][ T38] NMI backtrace for cpu 0 [ 574.237795][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.237821][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.237841][ T38] Call Trace: [ 574.237850][ T38] [ 574.237860][ T38] dump_stack_lvl+0x189/0x250 [ 574.237899][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.237932][ T38] ? __pfx__printk+0x10/0x10 [ 574.237973][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 574.238003][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.238032][ T38] ? __pfx__printk+0x10/0x10 [ 574.238061][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.238094][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 574.238123][ T38] watchdog+0xf93/0xfe0 [ 574.238159][ T38] ? watchdog+0x1de/0xfe0 [ 574.238196][ T38] kthread+0x70e/0x8a0 [ 574.238234][ T38] ? __pfx_watchdog+0x10/0x10 [ 574.238262][ T38] ? __pfx_kthread+0x10/0x10 [ 574.238303][ T38] ? __pfx_kthread+0x10/0x10 [ 574.238339][ T38] ret_from_fork+0x3f9/0x770 [ 574.238372][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 574.238409][ T38] ? __switch_to_asm+0x39/0x70 [ 574.238436][ T38] ? __switch_to_asm+0x33/0x70 [ 574.238456][ T38] ? __pfx_kthread+0x10/0x10 [ 574.238491][ T38] ret_from_fork_asm+0x1a/0x30 [ 574.238537][ T38] [ 574.238546][ T38] Sending NMI from CPU 0 to CPUs 1: [ 574.238574][ C1] NMI backtrace for cpu 1 [ 574.238589][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.238612][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.238623][ C1] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 574.238653][ C1] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 f4 a7 61 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 f0 a2 9e 92 eb 40 83 3d 9b 37 [ 574.238669][ C1] RSP: 0018:ffffc90000a3ebb0 EFLAGS: 00000003 [ 574.238686][ C1] RAX: 000000000000000b RBX: 0000000000000002 RCX: 0000000000000006 [ 574.238698][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801c6b1dc0 [ 574.238711][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff84bfbee8 [ 574.238723][ C1] R10: dffffc0000000000 R11: fffffbfff1e3aa27 R12: 0000000000000003 [ 574.238736][ C1] R13: 0000000000000002 R14: ffff88801c6b29d0 R15: ffff88801c6b2950 [ 574.238748][ C1] FS: 0000000000000000(0000) GS:ffff8881269c1000(0000) knlGS:0000000000000000 [ 574.238764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.238776][ C1] CR2: 00007f37e42145bb CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 574.238793][ C1] Call Trace: [ 574.238799][ C1] [ 574.238811][ C1] ? debug_object_activate+0xa8/0x3a0 [ 574.238832][ C1] lock_acquire+0x120/0x360 [ 574.238856][ C1] ? debug_object_activate+0xa8/0x3a0 [ 574.238886][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 574.238911][ C1] ? debug_object_activate+0xa8/0x3a0 [ 574.238933][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 574.238963][ C1] debug_object_activate+0xa8/0x3a0 [ 574.238989][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 574.239006][ C1] call_rcu+0xaa/0x9c0 [ 574.239029][ C1] ? rcuref_put+0x1b7/0x210 [ 574.239044][ C1] ? __pfx_call_rcu+0x10/0x10 [ 574.239061][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 574.239086][ C1] ? dst_release+0x126/0x1b0 [ 574.239103][ C1] skb_release_head_state+0x71/0x250 [ 574.239132][ C1] consume_skb+0x60/0xf0 [ 574.239156][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 574.239196][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 574.239228][ C1] ? nf_ip_checksum+0x13c/0x510 [ 574.239258][ C1] nft_synproxy_do_eval+0x345/0x570 [ 574.239286][ C1] ? kmem_cache_free+0x195/0x510 [ 574.239315][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 574.239343][ C1] ? geneve_udp_encap_recv+0x7ca/0x2b70 [ 574.239370][ C1] nft_do_chain+0x40c/0x1920 [ 574.239405][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 574.239434][ C1] ? rcu_qs+0xc4/0x170 [ 574.239480][ C1] nft_do_chain_inet+0x25d/0x340 [ 574.239509][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 574.239537][ C1] ? __lock_acquire+0xab9/0xd20 [ 574.239567][ C1] ? NF_HOOK+0x9a/0x3a0 [ 574.239590][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 574.239619][ C1] nf_hook_slow+0xc5/0x220 [ 574.239646][ C1] NF_HOOK+0x206/0x3a0 [ 574.239669][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 574.239693][ C1] ? NF_HOOK+0x9a/0x3a0 [ 574.239714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 574.239735][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 574.239761][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 574.239785][ C1] ? skb_dst+0x4f/0xd0 [ 574.239808][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 574.239832][ C1] NF_HOOK+0x309/0x3a0 [ 574.239854][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 574.239877][ C1] ? NF_HOOK+0x9a/0x3a0 [ 574.239898][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 574.239921][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 574.239949][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 574.239970][ C1] __netif_receive_skb+0x143/0x380 [ 574.239990][ C1] ? rt_spin_unlock+0x65/0x80 [ 574.240012][ C1] ? process_backlog+0x27b/0x900 [ 574.240033][ C1] process_backlog+0x31e/0x900 [ 574.240061][ C1] __napi_poll+0xb3/0x540 [ 574.240083][ C1] net_rx_action+0x707/0xe00 [ 574.240105][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.240138][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 574.240183][ C1] handle_softirqs+0x22f/0x710 [ 574.240212][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 574.240240][ C1] run_ktimerd+0xcf/0x190 [ 574.240266][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 574.240292][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 574.240315][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 574.240339][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 574.240361][ C1] smpboot_thread_fn+0x53f/0xa60 [ 574.240385][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 574.240412][ C1] kthread+0x70e/0x8a0 [ 574.240442][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 574.240465][ C1] ? __pfx_kthread+0x10/0x10 [ 574.240495][ C1] ? __pfx_kthread+0x10/0x10 [ 574.240524][ C1] ret_from_fork+0x3f9/0x770 [ 574.240549][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 574.240576][ C1] ? __switch_to_asm+0x39/0x70 [ 574.240593][ C1] ? __switch_to_asm+0x33/0x70 [ 574.240610][ C1] ? __pfx_kthread+0x10/0x10 [ 574.240638][ C1] ret_from_fork_asm+0x1a/0x30 [ 574.240664][ C1] [ 574.241579][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 574.241597][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.241624][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.241638][ T38] Call Trace: [ 574.241647][ T38] [ 574.241656][ T38] dump_stack_lvl+0x99/0x250 [ 574.241692][ T38] ? __asan_memcpy+0x40/0x70 [ 574.241716][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.241751][ T38] ? __pfx__printk+0x10/0x10 [ 574.241790][ T38] vpanic+0x281/0x750 [ 574.241828][ T38] ? __pfx_vpanic+0x10/0x10 [ 574.241859][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 574.241883][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.241925][ T38] panic+0xb9/0xc0 [ 574.241958][ T38] ? __pfx_panic+0x10/0x10 [ 574.241994][ T38] ? irq_work_queue+0xc3/0x140 [ 574.242028][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 574.242057][ T38] watchdog+0xfd2/0xfe0 [ 574.242093][ T38] ? watchdog+0x1de/0xfe0 [ 574.242129][ T38] kthread+0x70e/0x8a0 [ 574.242167][ T38] ? __pfx_watchdog+0x10/0x10 [ 574.242196][ T38] ? __pfx_kthread+0x10/0x10 [ 574.242236][ T38] ? __pfx_kthread+0x10/0x10 [ 574.242271][ T38] ret_from_fork+0x3f9/0x770 [ 574.242304][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 574.242342][ T38] ? __switch_to_asm+0x39/0x70 [ 574.242364][ T38] ? __switch_to_asm+0x33/0x70 [ 574.242384][ T38] ? __pfx_kthread+0x10/0x10 [ 574.242421][ T38] ret_from_fork_asm+0x1a/0x30 [ 574.242473][ T38] [ 574.242844][ T38] Kernel Offset: disabled