last executing test programs: 2m57.877899285s ago: executing program 3 (id=1062): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000300)="b9ff0384b206d7f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x84}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x17, &(0x7f0000000680)={0x0, 0x5b23, 0x0, 0x1, 0x351}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0) 2m57.782429072s ago: executing program 3 (id=1063): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x10000a006) 2m57.648847468s ago: executing program 3 (id=1064): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)="c8", 0x1}], 0x1}, 0x800) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x1) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x3a, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 2m57.577396859s ago: executing program 3 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2m57.488472714s ago: executing program 3 (id=1066): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x4}}}}}}, 0x0) 2m54.94635791s ago: executing program 3 (id=1084): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m54.727923868s ago: executing program 32 (id=1084): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="f3", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m24.58221098s ago: executing program 4 (id=1813): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m21.497631767s ago: executing program 4 (id=1848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000001f80)=""/4082, 0xff2) 1m21.383445087s ago: executing program 4 (id=1851): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) 1m19.719533247s ago: executing program 4 (id=1862): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m19.490403862s ago: executing program 4 (id=1863): ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000000)={0x50d017, 0x0, '\x00', 0x1, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m19.226357711s ago: executing program 4 (id=1864): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m18.732589306s ago: executing program 33 (id=1864): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 6.53297434s ago: executing program 6 (id=2335): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x12) 4.958402462s ago: executing program 6 (id=2340): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.829151429s ago: executing program 1 (id=2341): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.2080407s ago: executing program 0 (id=2345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x100004, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0x1, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1}) 3.938799117s ago: executing program 1 (id=2347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) dup2(r1, r0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 3.826286808s ago: executing program 0 (id=2348): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x44}, 0x36a}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 3.494241021s ago: executing program 6 (id=2351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) 3.48045077s ago: executing program 0 (id=2352): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xe2, 0x4f, 0x92, 0x20, 0x93a, 0x2622, 0x7fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x26, 0x9d, 0x2, 0x2d, 0x26, 0xe6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44000, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.40161736s ago: executing program 2 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xb, 0x8, 0x2, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 3.368089154s ago: executing program 6 (id=2354): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x4f, 0x0, "8a52d6f198df5184ada95c48ab5b524a743a7686baaf5676f8601063a93031d5c1a76bc05aae1d176ef09a812564e2799d6c6c931b86cc7d30e93c2670c5acf7bd4b4403f382966ad528f0366ed14175"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 3.317138355s ago: executing program 1 (id=2355): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000003c0), &(0x7f0000000600)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.227145164s ago: executing program 6 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000200001030000001000000000020000000000000000000000080006000000c442772d16a81359082f5c1016ed78833b65713bc823afff32f582e4555d42b89da170868c08771aff2983014c20aea3f3b56d457afb36cffd14d44094"], 0x24}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 3.200341369s ago: executing program 2 (id=2358): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) 3.127428012s ago: executing program 1 (id=2359): r0 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x73, &(0x7f00000000c0)=@can, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 3.075624108s ago: executing program 2 (id=2360): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540)=""/205, 0xcd) 2.913407009s ago: executing program 6 (id=2363): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 2.847069262s ago: executing program 2 (id=2364): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 2.646613041s ago: executing program 1 (id=2366): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.569129678s ago: executing program 1 (id=2367): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0xffffffff]}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2.560424959s ago: executing program 2 (id=2368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 2.379431751s ago: executing program 2 (id=2369): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 1.482133557s ago: executing program 5 (id=2371): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="49e4", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1}, 0x0) 1.424406374s ago: executing program 5 (id=2372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb5d25a98010fc3c7e8e6eb254451832f7b5944de95d2b2608b9c4ba8fd75f6c9d98007df452e472f9b1e9d30b90779ee42fcd88e8b4175066b73858f4164bd1bb22ebd829dc8d90fd8516187e40417efc5c759ada70450be2efd08b40ed4e77ea41920c381dcf69fd6a", 0xdd}, {&(0x7f00000001c0)="53812f25b1e42e134f4e75a76aad6ce9d6e1727644d2179fdb23bdb4a90dedb3ddcde79706ee102d63e1589cb57c5d038803359f1e3a928b0a61189782f3b37c9680813d0ab217665df4b2d515c27f4e8df80a0dfee70129ebab9d4779a5ad4260a674b13a1b364ec09325f6a7e51e6a732d376442cba82eed6473ef3c162e12dff86e8ec888be76181667ca6b360f1ae6160f821780abbb17c558d25a1ae439710b5f6d1e8347f52dafe63e88d4ba3b9dbaebc2fcd5b9a3ab53d9", 0xbb}, {&(0x7f00000012c0)="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", 0x6b9}], 0x3) 1.328111412s ago: executing program 5 (id=2373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}], 0x1c) 435.402836ms ago: executing program 5 (id=2374): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x24a3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) 378.237108ms ago: executing program 0 (id=2375): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0xff, 0x6, 0x7, 0xe}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 274.077951ms ago: executing program 5 (id=2376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000080)="0fb08a00000fc71a2e2626640fc75e00d0c666b9d70b00000f32b89c000f00d8f36ed1ee64a50fc731", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 218.420823ms ago: executing program 0 (id=2377): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 173.17699ms ago: executing program 0 (id=2378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmmsg$unix(r1, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000000}}], 0x1, 0x4000100) 0s ago: executing program 5 (id=2379): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) kernel console output (not intermixed with test programs): 290.539185][ T9817] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1627'. [ 290.665153][ T5925] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.665188][ T5925] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.665218][ T5925] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.665230][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.690384][ T9815] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 290.717931][ T5925] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.751674][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.948027][ T9826] loop2: detected capacity change from 0 to 7 [ 290.949022][ T9826] Dev loop2: unable to read RDB block 7 [ 290.949049][ T9826] loop2: AHDI p2 p3 [ 290.968005][ T9826] loop2: partition table partially beyond EOD, truncated [ 290.968111][ T9826] loop2: p2 start 13841266 is beyond EOD, truncated [ 291.023372][ T5925] usb 6-1: USB disconnect, device number 4 [ 291.038798][ T9815] usb 6-1: usb_submit_urb: -2 [ 291.509408][ T990] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 291.663769][ T990] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 291.663795][ T990] usb 2-1: config 0 has no interface number 0 [ 291.691479][ T990] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 291.691511][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.691530][ T990] usb 2-1: Product: syz [ 291.691543][ T990] usb 2-1: Manufacturer: syz [ 291.691556][ T990] usb 2-1: SerialNumber: syz [ 291.701350][ T990] usb 2-1: config 0 descriptor?? [ 291.799422][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.075649][ T5856] Bluetooth: hci2: link tx timeout [ 292.078566][ T5856] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.085648][ T5856] Bluetooth: hci2: link tx timeout [ 292.085668][ T5856] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.110387][ T5846] Bluetooth: hci2: link tx timeout [ 292.110406][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.110422][ T5846] Bluetooth: hci2: link tx timeout [ 292.110433][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.117960][ T5846] Bluetooth: hci2: link tx timeout [ 292.117977][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.117993][ T5846] Bluetooth: hci2: link tx timeout [ 292.118002][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.118526][ T5846] Bluetooth: hci2: link tx timeout [ 292.118539][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.118552][ T5846] Bluetooth: hci2: link tx timeout [ 292.118562][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.118829][ T5846] Bluetooth: hci2: link tx timeout [ 292.118840][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.118853][ T5846] Bluetooth: hci2: link tx timeout [ 292.118861][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.125170][ T5846] Bluetooth: hci2: link tx timeout [ 292.125187][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.125203][ T5846] Bluetooth: hci2: link tx timeout [ 292.125213][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.125360][ T5846] Bluetooth: hci2: link tx timeout [ 292.125372][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.125385][ T5846] Bluetooth: hci2: link tx timeout [ 292.125394][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.125499][ T5846] Bluetooth: hci2: link tx timeout [ 292.125510][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.125523][ T5846] Bluetooth: hci2: link tx timeout [ 292.125532][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.127006][ T5846] Bluetooth: hci2: link tx timeout [ 292.127023][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.127037][ T5846] Bluetooth: hci2: link tx timeout [ 292.127047][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.127157][ T5846] Bluetooth: hci2: link tx timeout [ 292.127168][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.127180][ T5846] Bluetooth: hci2: link tx timeout [ 292.127189][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.144565][ T5846] Bluetooth: hci2: link tx timeout [ 292.144583][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.144599][ T5846] Bluetooth: hci2: link tx timeout [ 292.144608][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.145262][ T5846] Bluetooth: hci2: link tx timeout [ 292.145275][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.145289][ T5846] Bluetooth: hci2: link tx timeout [ 292.145298][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.146414][ T5846] Bluetooth: hci2: link tx timeout [ 292.146428][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.146441][ T5846] Bluetooth: hci2: link tx timeout [ 292.146451][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.147322][ T5846] Bluetooth: hci2: link tx timeout [ 292.147334][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.147348][ T5846] Bluetooth: hci2: link tx timeout [ 292.147357][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.147854][ T5846] Bluetooth: hci2: link tx timeout [ 292.147865][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.147879][ T5846] Bluetooth: hci2: link tx timeout [ 292.147888][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.148499][ T5846] Bluetooth: hci2: link tx timeout [ 292.148511][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.148524][ T5846] Bluetooth: hci2: link tx timeout [ 292.148534][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.150244][ T5846] Bluetooth: hci2: link tx timeout [ 292.150259][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.150273][ T5846] Bluetooth: hci2: link tx timeout [ 292.150283][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.151376][ T5846] Bluetooth: hci2: link tx timeout [ 292.151390][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.151404][ T5846] Bluetooth: hci2: link tx timeout [ 292.151413][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.151467][ T5846] Bluetooth: hci2: link tx timeout [ 292.151478][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.151491][ T5846] Bluetooth: hci2: link tx timeout [ 292.151500][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.173542][ T5846] Bluetooth: hci2: link tx timeout [ 292.173562][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.173576][ T5846] Bluetooth: hci2: link tx timeout [ 292.173586][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.174509][ T5846] Bluetooth: hci2: link tx timeout [ 292.174523][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.174537][ T5846] Bluetooth: hci2: link tx timeout [ 292.174546][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.175017][ T5846] Bluetooth: hci2: link tx timeout [ 292.175029][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.175042][ T5846] Bluetooth: hci2: link tx timeout [ 292.175051][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.177240][ T5846] Bluetooth: hci2: link tx timeout [ 292.177255][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.177270][ T5846] Bluetooth: hci2: link tx timeout [ 292.177279][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.178302][ T5846] Bluetooth: hci2: link tx timeout [ 292.178315][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.178328][ T5846] Bluetooth: hci2: link tx timeout [ 292.178337][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.181991][ T5846] Bluetooth: hci2: link tx timeout [ 292.182007][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.182022][ T5846] Bluetooth: hci2: link tx timeout [ 292.182032][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.183467][ T5846] Bluetooth: hci2: link tx timeout [ 292.183481][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.183494][ T5846] Bluetooth: hci2: link tx timeout [ 292.183504][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.184271][ T5846] Bluetooth: hci2: link tx timeout [ 292.184283][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.184297][ T5846] Bluetooth: hci2: link tx timeout [ 292.184306][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.185190][ T5846] Bluetooth: hci2: link tx timeout [ 292.185203][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.185217][ T5846] Bluetooth: hci2: link tx timeout [ 292.185226][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.186180][ T5846] Bluetooth: hci2: link tx timeout [ 292.186194][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.186207][ T5846] Bluetooth: hci2: link tx timeout [ 292.186217][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.187145][ T5846] Bluetooth: hci2: link tx timeout [ 292.187158][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.187171][ T5846] Bluetooth: hci2: link tx timeout [ 292.187181][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.187943][ T5846] Bluetooth: hci2: link tx timeout [ 292.187955][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.187976][ T5846] Bluetooth: hci2: link tx timeout [ 292.187985][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.188911][ T5846] Bluetooth: hci2: link tx timeout [ 292.188924][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.188938][ T5846] Bluetooth: hci2: link tx timeout [ 292.188947][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.209380][ T5846] Bluetooth: hci2: link tx timeout [ 292.209400][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.209415][ T5846] Bluetooth: hci2: link tx timeout [ 292.209425][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.210394][ T5846] Bluetooth: hci2: link tx timeout [ 292.210408][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.210422][ T5846] Bluetooth: hci2: link tx timeout [ 292.210431][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.211253][ T5846] Bluetooth: hci2: link tx timeout [ 292.211265][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.211279][ T5846] Bluetooth: hci2: link tx timeout [ 292.211289][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.212083][ T5846] Bluetooth: hci2: link tx timeout [ 292.212095][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.212109][ T5846] Bluetooth: hci2: link tx timeout [ 292.212119][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.212878][ T5846] Bluetooth: hci2: link tx timeout [ 292.212890][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.212903][ T5846] Bluetooth: hci2: link tx timeout [ 292.212913][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.213756][ T5846] Bluetooth: hci2: link tx timeout [ 292.213769][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.213783][ T5846] Bluetooth: hci2: link tx timeout [ 292.213792][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.214606][ T5846] Bluetooth: hci2: link tx timeout [ 292.214618][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.214632][ T5846] Bluetooth: hci2: link tx timeout [ 292.214642][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.224356][ T5846] Bluetooth: hci2: link tx timeout [ 292.224375][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.224390][ T5846] Bluetooth: hci2: link tx timeout [ 292.224400][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.228121][ T5846] Bluetooth: hci2: link tx timeout [ 292.228137][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.228152][ T5846] Bluetooth: hci2: link tx timeout [ 292.228162][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.228266][ T5846] Bluetooth: hci2: link tx timeout [ 292.228276][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.228290][ T5846] Bluetooth: hci2: link tx timeout [ 292.228298][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.230444][ T5846] Bluetooth: hci2: link tx timeout [ 292.230458][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.230471][ T5846] Bluetooth: hci2: link tx timeout [ 292.230480][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.235237][ T5846] Bluetooth: hci2: link tx timeout [ 292.235251][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.235265][ T5846] Bluetooth: hci2: link tx timeout [ 292.235275][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.236135][ T5846] Bluetooth: hci2: link tx timeout [ 292.236148][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.236161][ T5846] Bluetooth: hci2: link tx timeout [ 292.236171][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.238324][ T5846] Bluetooth: hci2: link tx timeout [ 292.238338][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.238351][ T5846] Bluetooth: hci2: link tx timeout [ 292.238359][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.245518][ T5846] Bluetooth: hci2: link tx timeout [ 292.245534][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.245550][ T5846] Bluetooth: hci2: link tx timeout [ 292.245559][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.246605][ T5846] Bluetooth: hci2: link tx timeout [ 292.246617][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.246632][ T5846] Bluetooth: hci2: link tx timeout [ 292.246641][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.247808][ T5846] Bluetooth: hci2: link tx timeout [ 292.247821][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.247835][ T5846] Bluetooth: hci2: link tx timeout [ 292.247844][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.248453][ T5846] Bluetooth: hci2: link tx timeout [ 292.248465][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.248479][ T5846] Bluetooth: hci2: link tx timeout [ 292.248488][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.249791][ T5846] Bluetooth: hci2: link tx timeout [ 292.249805][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.249823][ T5846] Bluetooth: hci2: link tx timeout [ 292.249833][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.250970][ T5846] Bluetooth: hci2: link tx timeout [ 292.250983][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.250997][ T5846] Bluetooth: hci2: link tx timeout [ 292.251006][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.251891][ T5846] Bluetooth: hci2: link tx timeout [ 292.251904][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.251918][ T5846] Bluetooth: hci2: link tx timeout [ 292.251927][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.252365][ T5846] Bluetooth: hci2: link tx timeout [ 292.252376][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.252389][ T5846] Bluetooth: hci2: link tx timeout [ 292.252398][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.253596][ T5846] Bluetooth: hci2: link tx timeout [ 292.253610][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.253623][ T5846] Bluetooth: hci2: link tx timeout [ 292.253632][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.254377][ T5846] Bluetooth: hci2: link tx timeout [ 292.254390][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.254403][ T5846] Bluetooth: hci2: link tx timeout [ 292.254413][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.255444][ T5846] Bluetooth: hci2: link tx timeout [ 292.255457][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.255471][ T5846] Bluetooth: hci2: link tx timeout [ 292.255480][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.256955][ T5846] Bluetooth: hci2: link tx timeout [ 292.256979][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.256994][ T5846] Bluetooth: hci2: link tx timeout [ 292.257003][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.265283][ T5846] Bluetooth: hci2: link tx timeout [ 292.265301][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.265315][ T5846] Bluetooth: hci2: link tx timeout [ 292.265324][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.266194][ T5846] Bluetooth: hci2: link tx timeout [ 292.266207][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.266221][ T5846] Bluetooth: hci2: link tx timeout [ 292.266230][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.268925][ T5846] Bluetooth: hci2: link tx timeout [ 292.268938][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.268953][ T5846] Bluetooth: hci2: link tx timeout [ 292.268970][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.279870][ T5846] Bluetooth: hci2: link tx timeout [ 292.279889][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.279903][ T5846] Bluetooth: hci2: link tx timeout [ 292.279912][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.304742][ T5846] Bluetooth: hci2: link tx timeout [ 292.304762][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.304778][ T5846] Bluetooth: hci2: link tx timeout [ 292.304788][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.305923][ T5846] Bluetooth: hci2: link tx timeout [ 292.305937][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.305951][ T5846] Bluetooth: hci2: link tx timeout [ 292.305961][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.306940][ T5846] Bluetooth: hci2: link tx timeout [ 292.306953][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.306967][ T5846] Bluetooth: hci2: link tx timeout [ 292.306977][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.307970][ T5846] Bluetooth: hci2: link tx timeout [ 292.307983][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.307997][ T5846] Bluetooth: hci2: link tx timeout [ 292.308007][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.309654][ T5846] Bluetooth: hci2: link tx timeout [ 292.309668][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.309683][ T5846] Bluetooth: hci2: link tx timeout [ 292.309692][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.310508][ T5846] Bluetooth: hci2: link tx timeout [ 292.310521][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.310535][ T5846] Bluetooth: hci2: link tx timeout [ 292.310544][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.311187][ T5846] Bluetooth: hci2: link tx timeout [ 292.311200][ T5846] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.311213][ T5846] Bluetooth: hci2: link tx timeout [ 292.311223][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.630078][ T990] asix 2-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x39 [ 292.811520][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 292.819496][ T9863] sctp: [Deprecated]: syz.5.1646 (pid 9863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.819496][ T9863] Use struct sctp_sack_info instead [ 292.839324][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.849750][ T990] usb 2-1: USB disconnect, device number 14 [ 293.869402][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.109259][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 294.909525][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.380073][ T990] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 295.541956][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 295.542008][ T990] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 295.542031][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.558075][ T990] usb 1-1: config 0 descriptor?? [ 295.568318][ T9911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.665750][ T5925] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 295.947916][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.947949][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.947972][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.948162][ T5925] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.948186][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.949505][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.067749][ T5925] usb 5-1: config 0 descriptor?? [ 296.179962][ T8990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 296.248257][ T990] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 296.339259][ T8990] usb 6-1: Using ep0 maxpacket: 8 [ 296.350558][ T8990] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 296.350584][ T8990] usb 6-1: config 0 has no interface number 0 [ 296.350633][ T8990] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.350656][ T8990] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 296.350680][ T8990] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.350706][ T8990] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.350747][ T8990] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 296.350769][ T8990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.376794][ T990] usb 1-1: USB disconnect, device number 23 [ 296.429203][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 296.457246][ T8990] usb 6-1: config 0 descriptor?? [ 296.496731][ T8990] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 296.577505][ T5925] plantronics 0003:047F:FFFF.0015: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 296.685929][ T5910] usb 6-1: USB disconnect, device number 5 [ 296.697171][ T5910] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 296.721182][ T8990] usb 5-1: USB disconnect, device number 16 [ 296.999353][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.328684][ T9935] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1676'. [ 298.032048][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.055226][ T9963] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1686'. [ 298.178917][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1687'. [ 298.222870][ T9968] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1689'. [ 298.698524][ T9982] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.699366][ T5925] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 298.709445][ T990] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 298.873447][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.873481][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.873505][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 298.873527][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.873569][ T5925] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.873591][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.880208][ T5925] usb 5-1: config 0 descriptor?? [ 298.912429][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.912527][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.912550][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.912590][ T990] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 298.912612][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.923775][ T990] usb 3-1: config 0 descriptor?? [ 299.079327][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.129403][ T5910] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 299.279388][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 299.284473][ T5910] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.284500][ T5910] usb 2-1: config 0 has no interface number 0 [ 299.288330][ T5910] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 299.288358][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.288377][ T5910] usb 2-1: Product: syz [ 299.288389][ T5910] usb 2-1: Manufacturer: syz [ 299.288399][ T5910] usb 2-1: SerialNumber: syz [ 299.375043][ T5925] hid_parser_main: 5 callbacks suppressed [ 299.375067][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375101][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375129][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375157][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375192][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375219][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375247][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375275][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375303][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.375331][ T5925] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 299.381276][ T990] razer 0003:1532:011B.0017: item fetching failed at offset 4/5 [ 299.382057][ T990] razer 0003:1532:011B.0017: probe with driver razer failed with error -22 [ 299.493253][ T5910] usb 2-1: config 0 descriptor?? [ 299.508519][ T5910] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 299.519991][ T5925] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 299.566093][ T5925] usb 3-1: USB disconnect, device number 14 [ 299.615379][ T990] usb 5-1: USB disconnect, device number 17 [ 300.099402][ T8990] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 300.109463][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.249523][ T8990] usb 6-1: Using ep0 maxpacket: 8 [ 300.258563][ T8990] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 300.258811][ T8990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.258832][ T8990] usb 6-1: Product: syz [ 300.258846][ T8990] usb 6-1: Manufacturer: syz [ 300.258860][ T8990] usb 6-1: SerialNumber: syz [ 300.269689][ T990] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 300.331545][ T8990] usb 6-1: config 0 descriptor?? [ 300.364221][ T8990] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 300.425588][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.425621][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.425644][ T990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.425686][ T990] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.425708][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.497796][ T990] usb 1-1: config 0 descriptor?? [ 300.549039][ T5910] gspca_spca1528: reg_w err -71 [ 300.555423][ T5910] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 300.570298][ T5910] usb 2-1: USB disconnect, device number 15 [ 300.648092][T10014] lo speed is unknown, defaulting to 1000 [ 300.981760][ T990] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 301.149427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.453901][ T8990] gspca_sonixj: reg_w1 err -71 [ 301.541507][ T8990] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 301.581118][ T8990] usb 6-1: USB disconnect, device number 6 [ 301.951379][T10036] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1718'. [ 302.207421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.729341][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 302.883716][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 302.897303][ T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 302.897333][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.897352][ T9] usb 5-1: Product: syz [ 302.897366][ T9] usb 5-1: Manufacturer: syz [ 302.897379][ T9] usb 5-1: SerialNumber: syz [ 302.939274][ T9] usb 5-1: config 0 descriptor?? [ 303.053736][ T8990] usb 1-1: USB disconnect, device number 24 [ 303.229301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.364096][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 303.389355][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 303.390285][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 303.390341][ T9] usb 5-1: media controller created [ 303.460172][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.723639][T10065] netlink: 'syz.1.1730': attribute type 4 has an invalid length. [ 303.792122][T10068] netlink: 'syz.1.1730': attribute type 4 has an invalid length. [ 304.062581][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 304.062646][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 304.062660][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 304.063186][T10045] dtv5100: wlen = 0, aborting. [ 304.100913][ T9] usb 5-1: USB disconnect, device number 18 [ 304.197645][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 304.269310][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.309337][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.974101][T10122] netlink: 'syz.5.1757': attribute type 4 has an invalid length. [ 306.031276][T10125] netlink: 'syz.5.1757': attribute type 4 has an invalid length. [ 306.349670][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.541365][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1763'. [ 307.390705][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.869321][ T5925] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 308.046939][ T5925] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 308.046995][ T5925] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 308.047021][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 308.050250][ T5925] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 308.050277][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 308.050297][ T5925] usb 6-1: Product: syz [ 308.050310][ T5925] usb 6-1: Manufacturer: syz [ 308.050324][ T5925] usb 6-1: SerialNumber: syz [ 308.055422][ T5925] usb 6-1: config 0 descriptor?? [ 308.061090][ T5925] hub 6-1:0.0: bad descriptor, ignoring hub [ 308.061134][ T5925] hub 6-1:0.0: probe with driver hub failed with error -5 [ 308.077331][ T5925] usb 6-1: selecting invalid altsetting 0 [ 308.233754][T10190] Invalid source name [ 308.233772][T10190] UBIFS error (pid: 10190): cannot open "./file0", error -22 [ 308.281408][T10186] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 308.429368][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.540470][ T5918] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 308.545511][T10201] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 308.689297][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 308.696347][ T5918] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 308.696378][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.704489][ T5918] usb 3-1: config 0 descriptor?? [ 308.849264][T10168] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 309.329445][T10168] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71) [ 309.335042][ T5925] usb 6-1: USB disconnect, device number 7 [ 309.469311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.847724][ T5918] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 309.847997][ T5918] asix 3-1:0.0: probe with driver asix failed with error -71 [ 309.861423][ T5918] usb 3-1: USB disconnect, device number 15 [ 310.103072][T10230] netlink: 146780 bytes leftover after parsing attributes in process `syz.5.1799'. [ 310.509319][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.694145][T10247] bridge1: entered promiscuous mode [ 310.966127][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 311.549424][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.585371][T10311] input: syz1 as /devices/virtual/input/input23 [ 312.589710][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.119320][ T5925] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.259319][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 313.269315][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 313.277364][ T5925] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 313.277391][ T5925] usb 1-1: config 0 has no interface number 0 [ 313.313085][ T5925] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 313.313113][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.313131][ T5925] usb 1-1: Product: syz [ 313.313145][ T5925] usb 1-1: Manufacturer: syz [ 313.313158][ T5925] usb 1-1: SerialNumber: syz [ 313.318921][ T5925] usb 1-1: config 0 descriptor?? [ 313.363287][ T5925] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 313.586434][ T5925] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 313.614385][ T5925] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 313.629306][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.787353][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 313.988740][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 314.001807][ T6014] usb 1-1: USB disconnect, device number 25 [ 314.026347][ T6014] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 314.057647][ T6014] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 314.058454][ T6014] quatech2 1-1:0.51: device disconnected [ 314.085993][T10349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.669683][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.969213][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 315.121073][ T9] usb 1-1: config 0 has no interfaces? [ 315.121097][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.121110][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.134919][ T9] usb 1-1: config 0 descriptor?? [ 315.619219][ T5910] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 315.639367][ T6014] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 315.709391][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.791790][ T6014] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 315.791820][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.799787][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 315.805474][ T5910] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 315.805500][ T5910] usb 2-1: config 0 has no interface number 0 [ 315.809676][ T5910] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 315.809703][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.809722][ T5910] usb 2-1: Product: syz [ 315.809735][ T5910] usb 2-1: Manufacturer: syz [ 315.809748][ T5910] usb 2-1: SerialNumber: syz [ 315.831261][ T5910] usb 2-1: config 0 descriptor?? [ 315.842583][ T5910] usb 2-1: bad CDC descriptors [ 315.896042][ T6014] usb 6-1: config 0 descriptor?? [ 315.925315][ T6014] pwc: Creative Labs Webcam Pro Ex detected. [ 316.066576][ T5910] usb 2-1: USB disconnect, device number 16 [ 316.142132][ T6014] pwc: Failed to set LED on/off time (-71) [ 316.145538][ T6014] pwc: send_video_command error -71 [ 316.145555][ T6014] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 316.145684][ T6014] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 316.172570][ T5915] usb 1-1: USB disconnect, device number 26 [ 316.173036][ T6014] usb 6-1: USB disconnect, device number 8 [ 316.749331][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.237778][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.237851][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.506670][ T1306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.659388][ T8990] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 317.789349][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.819279][ T8990] usb 2-1: Using ep0 maxpacket: 8 [ 317.834504][ T8990] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 317.834533][ T8990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.834552][ T8990] usb 2-1: Product: syz [ 317.834566][ T8990] usb 2-1: Manufacturer: syz [ 317.834579][ T8990] usb 2-1: SerialNumber: syz [ 317.860496][ T8990] usb 2-1: config 0 descriptor?? [ 317.876663][ T8990] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 317.956124][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.975040][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.977211][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.002512][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.006963][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.091623][T10414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.263142][ T1306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.570604][ T6014] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 318.719291][ T6014] usb 6-1: Using ep0 maxpacket: 16 [ 318.721825][ T6014] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 318.721850][ T6014] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.724806][ T6014] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.724832][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.724852][ T6014] usb 6-1: Product: syz [ 318.724865][ T6014] usb 6-1: Manufacturer: syz [ 318.724879][ T6014] usb 6-1: SerialNumber: syz [ 318.829350][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.914931][T10423] Trying to write to read-only block-device nullb0 [ 319.003173][ T6014] usb 6-1: 0:2 : does not exist [ 319.007994][ T6014] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 319.090296][ T6014] usb 6-1: USB disconnect, device number 9 [ 319.142688][ T8990] gspca_sonixj: reg_w1 err -71 [ 319.164390][ T1306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.179317][ T8990] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 319.213737][ T8990] usb 2-1: USB disconnect, device number 17 [ 319.296691][T10412] lo speed is unknown, defaulting to 1000 [ 319.544747][ T1306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.592205][T10436] kvm: emulating exchange as write [ 319.869378][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.109699][ T5856] Bluetooth: hci1: command tx timeout [ 320.510632][T10466] loop7: detected capacity change from 0 to 7 [ 320.515838][ C1] blk_print_req_error: 5 callbacks suppressed [ 320.515864][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.515894][ C1] buffer_io_error: 5 callbacks suppressed [ 320.515904][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.516296][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.516321][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.516552][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.516579][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.516781][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.516807][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.517063][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.517088][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.517353][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.517379][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.517628][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.517654][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.517749][T10466] ldm_validate_partition_table(): Disk read failed. [ 320.517904][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.517929][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.518143][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.518168][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.518430][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.518456][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.518736][T10466] Dev loop7: unable to read RDB block 0 [ 320.539348][T10466] loop7: unable to read partition table [ 320.539655][T10466] loop7: partition table beyond EOD, truncated [ 320.539672][T10466] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 320.836313][T10472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1895'. [ 320.852060][T10412] chnl_net:caif_netlink_parms(): no params data found [ 320.863016][T10472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1895'. [ 320.909466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.096753][T10478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.097546][ T1306] bridge_slave_1: left allmulticast mode [ 321.097574][ T1306] bridge_slave_1: left promiscuous mode [ 321.097839][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.192807][ T1306] bridge_slave_0: left allmulticast mode [ 321.192848][ T1306] bridge_slave_0: left promiscuous mode [ 321.193137][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.770203][ T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0) [ 321.949315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.140268][ T37] audit: type=1326 audit(1759137249.216:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.140384][ T37] audit: type=1326 audit(1759137249.216:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.141935][ T37] audit: type=1326 audit(1759137249.216:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.142196][ T37] audit: type=1326 audit(1759137249.216:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.142609][ T37] audit: type=1326 audit(1759137249.216:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.142855][ T37] audit: type=1326 audit(1759137249.216:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.189227][ T5856] Bluetooth: hci1: command tx timeout [ 322.288462][ T37] audit: type=1326 audit(321.972:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10499 comm="syz.0.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 322.372436][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.438794][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.490878][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.514679][T10503] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 322.641876][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.989525][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.089196][T10515] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 323.089263][T10515] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 323.089307][T10515] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 323.089344][T10515] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 323.089400][T10515] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 323.166568][T10516] block device autoloading is deprecated and will be removed. [ 323.483756][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.775552][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.921522][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.029353][ C1] net_ratelimit: 3324 callbacks suppressed [ 324.029373][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.270142][ T5856] Bluetooth: hci1: command tx timeout [ 324.603154][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.774589][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.859993][ T1306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.962527][ T1306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.022882][ T1306] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 325.069339][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.201019][ T1306] bond0 (unregistering): Released all slaves [ 325.353907][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1902'. [ 325.763597][T10539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.790158][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.864718][T10539] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 326.109517][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.349384][ T5856] Bluetooth: hci1: command tx timeout [ 326.713266][T10548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.149374][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.326350][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.326529][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.326777][T10412] bridge_slave_0: entered allmulticast mode [ 327.351942][T10412] bridge_slave_0: entered promiscuous mode [ 327.413920][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.416040][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.416287][T10412] bridge_slave_1: entered allmulticast mode [ 327.448678][T10412] bridge_slave_1: entered promiscuous mode [ 327.589382][ T5910] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 327.761866][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.761931][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.761957][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.761979][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.762021][ T5910] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 327.762043][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.838889][ T5910] usb 2-1: config 0 descriptor?? [ 328.189294][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.493090][ T5910] usb 2-1: string descriptor 0 read error: -71 [ 328.493657][ T5910] uclogic 0003:5543:006E.0019: failed retrieving string descriptor #200: -71 [ 328.493722][ T5910] uclogic 0003:5543:006E.0019: failed retrieving pen parameters: -71 [ 328.493740][ T5910] uclogic 0003:5543:006E.0019: failed probing pen v2 parameters: -71 [ 328.493792][ T5910] uclogic 0003:5543:006E.0019: failed probing parameters: -71 [ 328.493900][ T5910] uclogic 0003:5543:006E.0019: probe with driver uclogic failed with error -71 [ 328.555857][ T5910] usb 2-1: USB disconnect, device number 18 [ 328.896050][T10412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.950601][T10412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.151205][ T1306] hsr_slave_0: left promiscuous mode [ 329.194935][ T1306] hsr_slave_1: left promiscuous mode [ 329.195972][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.196000][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.229371][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.251840][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.251872][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.297002][T10562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.472016][ T1306] veth1_macvtap: left promiscuous mode [ 329.472139][ T1306] veth0_macvtap: left promiscuous mode [ 329.472434][ T1306] veth1_vlan: left promiscuous mode [ 329.472642][ T1306] veth0_vlan: left promiscuous mode [ 330.269298][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.585427][T10591] block device autoloading is deprecated and will be removed. [ 331.309775][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.534105][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.594349][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.739407][ T6014] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 331.897477][ T6014] usb 1-1: Using ep0 maxpacket: 16 [ 331.900057][ T6014] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 331.900088][ T6014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.904809][ T6014] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 331.904836][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.904854][ T6014] usb 1-1: Product: syz [ 331.904866][ T6014] usb 1-1: Manufacturer: syz [ 331.904880][ T6014] usb 1-1: SerialNumber: syz [ 331.926257][ T6014] usb 1-1: config 0 descriptor?? [ 331.933103][ T6014] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 331.933135][ T6014] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 332.072986][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.287500][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.355466][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.355475][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.574133][ T6014] em28xx 1-1:0.0: unknown em28xx chip ID (254) [ 332.634402][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.788102][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.789982][ T6014] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 332.884300][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.993862][ T6014] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 332.993891][ T6014] em28xx 1-1:0.0: No AC97 audio processor [ 333.003305][ T6014] usb 1-1: USB disconnect, device number 27 [ 333.005914][ T6014] em28xx 1-1:0.0: Disconnecting em28xx [ 333.019740][ T6014] em28xx 1-1:0.0: Freeing device [ 333.103046][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.173567][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.384221][ T1306] team0 (unregistering): Port device team_slave_1 removed [ 333.389412][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.687460][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.168099][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.402229][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.429434][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.520700][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.585286][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.786923][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.269416][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.340401][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.469446][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.509415][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.788085][T10583] pim6reg1: entered promiscuous mode [ 336.788115][T10583] pim6reg1: entered allmulticast mode [ 336.922197][T10621] atomic_op ffff888036051218 conn xmit_atomic 0000000000000000 [ 337.419309][ T6014] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 337.552073][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.569175][ T6014] usb 6-1: Using ep0 maxpacket: 16 [ 337.571428][ T6014] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 337.571451][ T6014] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.571470][ T6014] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.578074][ T6014] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.578103][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.578122][ T6014] usb 6-1: Product: syz [ 337.578136][ T6014] usb 6-1: Manufacturer: syz [ 337.578150][ T6014] usb 6-1: SerialNumber: syz [ 337.660850][T10631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.674767][T10412] team0: Port device team_slave_0 added [ 337.698783][T10412] team0: Port device team_slave_1 added [ 338.028063][ T6014] usb 6-1: 0:2 : does not exist [ 338.077714][ T6014] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 338.119376][T10412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.119392][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.119415][T10412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.132051][T10412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.132069][T10412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.132094][T10412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.240513][ T6014] usb 6-1: USB disconnect, device number 10 [ 338.342832][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.394732][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.439372][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 338.589303][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.592962][ T31] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 338.593019][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 338.593217][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 338.593309][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.593352][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.593374][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.672685][ T31] usb 2-1: config 0 descriptor?? [ 338.684418][T10637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 338.848387][T10412] hsr_slave_0: entered promiscuous mode [ 338.858817][T10412] hsr_slave_1: entered promiscuous mode [ 338.866204][T10412] debugfs: 'hsr0' already exists in 'hsr' [ 338.866232][T10412] Cannot create hsr debugfs directory [ 339.067144][ T1306] IPVS: stop unused estimator thread 0... [ 339.116001][ T31] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 339.146991][ T31] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 339.482205][ T6014] usb 2-1: USB disconnect, device number 19 [ 339.629317][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.789295][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 340.441645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 340.569902][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 340.669329][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 340.728132][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.728153][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.728176][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 340.728188][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.770262][ T31] usb 2-1: config 0 descriptor?? [ 340.969157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 340.969342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 340.969527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 340.969689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.285066][ T31] hid_parser_main: 5 callbacks suppressed [ 341.285089][ T31] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 341.285222][ T31] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 341.350881][ T31] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001B/input/input25 [ 341.407544][ T31] cm6533_jd 0003:0D8C:0022.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 341.523877][T10412] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.593238][ T5910] usb 2-1: USB disconnect, device number 20 [ 341.649046][T10667] loop8: detected capacity change from 0 to 7 [ 341.673030][T10667] Dev loop8: unable to read RDB block 7 [ 341.673083][T10667] loop8: unable to read partition table [ 341.673302][T10667] loop8: partition table beyond EOD, truncated [ 341.673320][T10667] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.681047][T10412] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.709308][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.788157][T10669] Dev loop8: unable to read RDB block 7 [ 341.788188][T10669] loop8: unable to read partition table [ 341.788313][T10669] loop8: partition table beyond EOD, truncated [ 341.788323][T10669] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.831342][T10412] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.950191][T10412] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.437915][T10412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.522176][T10691] genirq: Flags mismatch irq 10. 00202000 (aio_iiro_16) vs. 00202080 (virtio2) [ 342.556297][T10412] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.678750][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.678910][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.704413][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.705448][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.749471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.942141][T10705] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.008285][ T37] audit: type=1326 audit(342.822:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.008952][ T37] audit: type=1326 audit(342.822:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.015608][ T37] audit: type=1326 audit(342.832:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.016269][ T37] audit: type=1326 audit(342.832:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.016510][ T37] audit: type=1326 audit(342.832:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.016843][ T37] audit: type=1326 audit(342.832:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.017364][ T37] audit: type=1326 audit(342.832:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.018101][ T37] audit: type=1326 audit(342.832:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.020908][ T37] audit: type=1326 audit(342.842:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.022200][ T37] audit: type=1326 audit(342.842:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.2.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b68eeec9 code=0x7ffc0000 [ 343.101376][T10713] sctp: [Deprecated]: syz.2.1987 (pid 10713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.101376][T10713] Use struct sctp_sack_info instead [ 343.181301][T10715] syz.2.1988: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 343.181509][T10715] CPU: 0 UID: 0 PID: 10715 Comm: syz.2.1988 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.181533][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.181552][T10715] Call Trace: [ 343.181560][T10715] [ 343.181569][T10715] dump_stack_lvl+0x189/0x250 [ 343.181605][T10715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.181632][T10715] ? __pfx__printk+0x10/0x10 [ 343.181654][T10715] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 343.181676][T10715] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 343.181699][T10715] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 343.181723][T10715] warn_alloc+0x22e/0x3b0 [ 343.181752][T10715] ? __pfx_warn_alloc+0x10/0x10 [ 343.181775][T10715] ? __kasan_kmalloc+0x93/0xb0 [ 343.181797][T10715] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 343.181822][T10715] ? xskq_create+0x56/0x170 [ 343.181847][T10715] ? xsk_init_queue+0xb0/0x110 [ 343.181879][T10715] ? xsk_setsockopt+0x57b/0x8d0 [ 343.181902][T10715] ? do_sock_setsockopt+0x179/0x1b0 [ 343.181919][T10715] ? __x64_sys_setsockopt+0x145/0x1b0 [ 343.181936][T10715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.181962][T10715] __vmalloc_node_range_noprof+0x125/0x12f0 [ 343.182024][T10715] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 343.182059][T10715] ? __kasan_kmalloc+0x93/0xb0 [ 343.182086][T10715] vmalloc_user_noprof+0xad/0xf0 [ 343.182113][T10715] ? xskq_create+0xbf/0x170 [ 343.182141][T10715] xskq_create+0xbf/0x170 [ 343.182170][T10715] xsk_init_queue+0xb0/0x110 [ 343.182200][T10715] xsk_setsockopt+0x57b/0x8d0 [ 343.182229][T10715] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.182261][T10715] ? __fget_files+0x2a/0x420 [ 343.182290][T10715] ? __fget_files+0x2a/0x420 [ 343.182316][T10715] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 343.182335][T10715] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.182362][T10715] do_sock_setsockopt+0x179/0x1b0 [ 343.182385][T10715] __x64_sys_setsockopt+0x145/0x1b0 [ 343.182410][T10715] do_syscall_64+0xfa/0x3b0 [ 343.182428][T10715] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.182455][T10715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.182473][T10715] ? clear_bhb_loop+0x60/0xb0 [ 343.182497][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.182515][T10715] RIP: 0033:0x7f77b68eeec9 [ 343.182533][T10715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.182549][T10715] RSP: 002b:00007f77b4b4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.182568][T10715] RAX: ffffffffffffffda RBX: 00007f77b6b45fa0 RCX: 00007f77b68eeec9 [ 343.182582][T10715] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 343.182594][T10715] RBP: 00007f77b6971f91 R08: 0000000000000004 R09: 0000000000000000 [ 343.182606][T10715] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 343.182618][T10715] R13: 00007f77b6b46038 R14: 00007f77b6b45fa0 R15: 00007ffcebd5eff8 [ 343.182650][T10715] [ 343.182789][T10715] Mem-Info: [ 343.182804][T10715] active_anon:255 inactive_anon:21417 isolated_anon:0 [ 343.182804][T10715] active_file:17746 inactive_file:39745 isolated_file:0 [ 343.182804][T10715] unevictable:768 dirty:339 writeback:0 [ 343.182804][T10715] slab_reclaimable:10810 slab_unreclaimable:101691 [ 343.182804][T10715] mapped:29193 shmem:18263 pagetables:1181 [ 343.182804][T10715] sec_pagetables:0 bounce:0 [ 343.182804][T10715] kernel_misc_reclaimable:0 [ 343.182804][T10715] free:1305509 free_pcp:2184 free_cma:0 [ 343.182869][T10715] Node 0 active_anon:1020kB inactive_anon:85668kB active_file:70784kB inactive_file:158980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116772kB dirty:1352kB writeback:0kB shmem:71516kB kernel_stack:12812kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.182916][T10715] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:80kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.182961][T10715] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.183022][T10715] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 343.183055][T10715] Node 0 DMA32 free:1306520kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:85624kB active_file:69776kB inactive_file:158912kB unevictable:1536kB writepending:1348kB present:3129332kB managed:2572276kB mlocked:0kB bounce:0kB free_pcp:8728kB local_pcp:5372kB free_cma:0kB [ 343.183258][T10715] lowmem_reserve[]: 0 0 1 1 1 [ 343.183290][T10715] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1008kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 343.183347][T10715] lowmem_reserve[]: 0 0 0 0 0 [ 343.183377][T10715] Node 1 Normal free:3900156kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.183436][T10715] lowmem_reserve[]: 0 0 0 0 0 [ 343.183467][T10715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.186520][T10715] Node 0 DMA32: 713*4kB (UME) 746*8kB (UME) 316*16kB (UME) 513*32kB (UME) 227*64kB (UME) 145*128kB (UME) 72*256kB (UME) 18*512kB (UME) 17*1024kB (UME) 7*2048kB (UME) 289*4096kB (M) = 1306516kB [ 343.186694][T10715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.186790][T10715] Node 1 Normal: 185*4kB (UE) 53*8kB (UME) 35*16kB (UME) 214*32kB (UME) 94*64kB (UME) 38*128kB (UME) 15*256kB (UM) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB (M) = 3900156kB [ 343.198703][T10715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.198721][T10715] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.198738][T10715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.198754][T10715] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.198769][T10715] 75750 total pagecache pages [ 343.198790][T10715] 0 pages in swap cache [ 343.198797][T10715] Free swap = 124996kB [ 343.198805][T10715] Total swap = 124996kB [ 343.198814][T10715] 2097051 pages RAM [ 343.198821][T10715] 0 pages HighMem/MovableOnly [ 343.198828][T10715] 422084 pages reserved [ 343.198835][T10715] 0 pages cma reserved [ 343.656395][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 343.789411][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.272052][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.358580][T10733] loop6: detected capacity change from 0 to 524287999 [ 344.448531][ C1] blk_print_req_error: 5 callbacks suppressed [ 344.448554][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 344.448734][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 344.505031][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 344.505058][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 344.519256][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 344.519514][ C0] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 344.519849][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 344.519879][ C0] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 344.520061][ C0] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 344.520087][ C0] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 344.829340][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.516115][T10412] veth0_vlan: entered promiscuous mode [ 345.584551][T10412] veth1_vlan: entered promiscuous mode [ 345.869417][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.874657][T10412] veth0_macvtap: entered promiscuous mode [ 345.901767][T10412] veth1_macvtap: entered promiscuous mode [ 345.982015][T10412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.043426][T10412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.092037][T10766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.291933][T10771] loop2: detected capacity change from 0 to 7 [ 346.301154][T10771] Dev loop2: unable to read RDB block 7 [ 346.301200][T10771] loop2: unable to read partition table [ 346.301467][T10771] loop2: partition table beyond EOD, truncated [ 346.301485][T10771] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.501013][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.595853][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.597654][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.626657][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.630353][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.630372][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.911526][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.148875][T10787] serio: Serial port ptm0 [ 347.194756][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.194777][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.400269][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.400290][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.574960][ T31] libceph: connect (1)[c::]:6789 error -101 [ 347.575677][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 347.612819][ T31] libceph: connect (1)[c::]:6789 error -101 [ 347.613038][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 347.616394][T10797] ceph: No mds server is up or the cluster is laggy [ 347.949672][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.009904][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 348.009939][T10806] netlink: 'syz.2.2020': attribute type 30 has an invalid length. [ 348.055311][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 348.055346][T10806] netlink: 'syz.2.2020': attribute type 30 has an invalid length. [ 348.056441][ T1281] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.095365][ T1281] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.095415][ T1281] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.095448][ T1281] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.133160][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 348.280541][T10814] geneve2: entered promiscuous mode [ 348.280573][T10814] geneve2: entered allmulticast mode [ 348.282031][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.282060][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.282083][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.282131][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.282152][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.367624][ T31] usb 6-1: config 0 descriptor?? [ 348.806507][ T31] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 348.989412][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.039349][ T990] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 349.202219][ T990] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 349.202294][ T990] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.202320][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.202344][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 349.202365][ T990] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.202406][ T990] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.202426][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.203292][T10832] netlink: 'syz.2.2030': attribute type 9 has an invalid length. [ 349.203309][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 349.315597][ T990] usb 7-1: config 0 descriptor?? [ 349.659871][T10832] netlink: 'syz.2.2030': attribute type 9 has an invalid length. [ 349.660547][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 349.769304][ T990] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 349.813687][ T990] plantronics 0003:047F:FFFF.001D: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 350.029423][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.096443][ C0] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -1 [ 350.108377][ T5910] usb 6-1: USB disconnect, device number 11 [ 350.111303][ T5852] usb 7-1: USB disconnect, device number 2 [ 351.069388][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.026124][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.109364][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 352.123513][T10883] bond0: (slave rose0): Enslaving as an active interface with an up link [ 353.149367][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 354.128164][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 354.189383][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.002071][T10952] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 355.229363][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.529329][ T990] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 355.683060][ T990] usb 6-1: Using ep0 maxpacket: 32 [ 355.702580][ T990] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 355.702613][ T990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.702634][ T990] usb 6-1: Product: syz [ 355.702650][ T990] usb 6-1: Manufacturer: syz [ 355.702664][ T990] usb 6-1: SerialNumber: syz [ 355.743765][ T990] usb 6-1: config 0 descriptor?? [ 355.760157][ T990] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 356.270067][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 356.558571][T10974] loop2: detected capacity change from 0 to 7 [ 356.564942][T10974] Dev loop2: unable to read RDB block 7 [ 356.564987][T10974] loop2: unable to read partition table [ 356.565233][T10974] loop2: partition table beyond EOD, truncated [ 356.565252][T10974] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.676214][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 356.676658][T10976] chnl_net:caif_netlink_parms(): no params data found [ 356.897456][T10982] block nbd6: NBD_DISCONNECT [ 356.932838][T10982] block nbd6: Send disconnect failed -107 [ 356.972445][ T990] gspca_ov534_9: reg_w failed -71 [ 357.002353][T10978] block nbd6: Disconnected due to user request. [ 357.002376][T10978] block nbd6: shutting down sockets [ 357.259241][ T990] gspca_ov534_9: Unknown sensor 0000 [ 357.259332][ T990] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 357.262545][ T990] usb 6-1: USB disconnect, device number 12 [ 357.283601][ T37] audit: type=1326 audit(357.092:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.288138][ T37] audit: type=1326 audit(357.102:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.288188][ T37] audit: type=1326 audit(357.102:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.304607][ T37] audit: type=1326 audit(357.122:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.304661][ T37] audit: type=1326 audit(357.122:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.304699][ T37] audit: type=1326 audit(357.122:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.304737][ T37] audit: type=1326 audit(357.122:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.304774][ T37] audit: type=1326 audit(357.122:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.304811][ T37] audit: type=1326 audit(357.122:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab708eec9 code=0x7ffc0000 [ 357.309371][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.501261][ T5910] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 357.654599][ T5910] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 357.654627][ T5910] usb 7-1: config 0 has no interface number 0 [ 357.657514][ T5910] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 357.657541][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.657559][ T5910] usb 7-1: Product: syz [ 357.657572][ T5910] usb 7-1: Manufacturer: syz [ 357.657585][ T5910] usb 7-1: SerialNumber: syz [ 357.673194][ T5910] usb 7-1: config 0 descriptor?? [ 358.090295][ T5910] usb 7-1: Firmware: major: 224, minor: 10, hardware type: UNKNOWN (89) [ 358.193991][ T990] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 358.293935][ T5910] usb 7-1: Firmware: build [ 358.347039][ T990] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.347065][ T990] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.348557][ T990] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.348584][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 358.348603][ T990] usb 6-1: SerialNumber: syz [ 358.349365][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.521242][ T5910] usb 7-1: failed to fetch extended address, random address set [ 358.521273][ T5910] usb 7-1: atusb_probe: initialization failed, error = -524 [ 358.528205][ T5910] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 358.575448][ T5910] usb 7-1: USB disconnect, device number 3 [ 358.642117][ T990] usb 6-1: cannot find UAC_HEADER [ 358.740858][ T990] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 358.743660][ T990] usb 6-1: USB disconnect, device number 13 [ 358.929560][ T8990] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 359.084235][ T8990] usb 3-1: Using ep0 maxpacket: 32 [ 359.092285][ T8990] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 359.092316][ T8990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.120992][ T8990] usb 3-1: config 0 descriptor?? [ 359.139590][ T8990] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 359.389276][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.294692][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2116'. [ 360.294717][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2116'. [ 360.294733][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2116'. [ 360.333249][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2116'. [ 360.380380][ T8990] gspca_nw80x: reg_w err -71 [ 360.380475][ T8990] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 360.399220][ T8990] usb 3-1: USB disconnect, device number 16 [ 360.429317][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.487473][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2118'. [ 360.487501][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2118'. [ 360.541229][T11042] batadv_slave_1: entered promiscuous mode [ 360.542664][T11041] batadv_slave_1: left promiscuous mode [ 360.886541][T11049] syzkaller1: entered promiscuous mode [ 360.886570][T11049] syzkaller1: entered allmulticast mode [ 360.979335][ T990] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 361.066617][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.134815][ T990] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.134842][ T990] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.137386][ T990] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 361.137415][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 361.137433][ T990] usb 7-1: SerialNumber: syz [ 361.404424][ T990] usb 7-1: 0:2 : does not exist [ 361.443221][ T6014] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 361.461608][ T990] usb 7-1: USB disconnect, device number 4 [ 361.469466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 361.599537][ T6014] usb 6-1: Using ep0 maxpacket: 16 [ 361.603112][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.603163][ T6014] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 361.603186][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.648833][ T6014] usb 6-1: config 0 descriptor?? [ 361.735048][T11069] netlink: 'syz.1.2132': attribute type 12 has an invalid length. [ 361.735070][T11069] netlink: 'syz.1.2132': attribute type 29 has an invalid length. [ 361.735083][T11069] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2132'. [ 361.735121][T11069] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2132'. [ 362.151981][ T6014] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 362.152022][ T6014] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 362.152047][ T6014] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 362.152073][ T6014] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 362.152098][ T6014] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 362.153089][ T6014] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 362.323202][T11079] support for the xor transformation has been removed. [ 362.509275][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.125207][ T6014] usb 6-1: USB disconnect, device number 14 [ 363.256688][T11101] ip6gretap0: entered promiscuous mode [ 363.256870][T11101] macsec1: entered allmulticast mode [ 363.256884][T11101] ip6gretap0: entered allmulticast mode [ 363.316173][T11101] ip6gretap0: left allmulticast mode [ 363.316333][T11101] ip6gretap0: left promiscuous mode [ 363.549418][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.742899][T11104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.621980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.789333][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 364.945116][ T5915] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 364.945146][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.945165][ T5915] usb 2-1: Product: syz [ 364.945179][ T5915] usb 2-1: Manufacturer: syz [ 364.945193][ T5915] usb 2-1: SerialNumber: syz [ 364.981802][ T5915] usb 2-1: config 0 descriptor?? [ 364.999746][ T5915] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 364.999772][ T5915] usb 2-1: bad CDC descriptors [ 365.001011][ T5915] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 365.195964][ T5915] usb 2-1: USB disconnect, device number 21 [ 365.639258][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.694230][T11104] bond2 (unregistering): Released all slaves [ 365.764155][T11115] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.154300][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2159'. [ 366.212090][T11144] netlink: 'syz.0.2159': attribute type 1 has an invalid length. [ 366.212114][T11144] netlink: 'syz.0.2159': attribute type 2 has an invalid length. [ 366.669646][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 366.677234][T11163] loop2: detected capacity change from 0 to 7 [ 367.279283][ T5915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 367.375854][T11187] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 367.439993][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.440026][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.440049][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.440092][ T5915] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.440114][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.473493][ T5915] usb 7-1: config 0 descriptor?? [ 367.709469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.924866][T11196] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2181'. [ 368.091024][ T5915] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 368.480660][ T5910] usb 7-1: USB disconnect, device number 5 [ 368.759261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.826241][ T5852] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 368.849312][ T6014] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 368.977585][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 368.986103][ T5852] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.986132][ T5852] usb 3-1: config 0 has no interface number 0 [ 368.986183][ T5852] usb 3-1: config 0 interface 184 has no altsetting 0 [ 368.993966][ T5852] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.993995][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.994014][ T5852] usb 3-1: Product: syz [ 368.994035][ T5852] usb 3-1: Manufacturer: syz [ 368.994048][ T5852] usb 3-1: SerialNumber: syz [ 369.009444][ T6014] usb 6-1: Using ep0 maxpacket: 16 [ 369.021857][ T5852] usb 3-1: config 0 descriptor?? [ 369.025542][ T6014] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.025573][ T6014] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.025594][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 369.025626][ T6014] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 369.025648][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.031957][ T5852] smsc75xx v1.0.0 [ 369.106367][ T6014] usb 6-1: config 0 descriptor?? [ 369.540132][ T6014] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 369.540172][ T6014] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 369.540200][ T6014] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 369.540237][ T6014] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 369.540270][ T6014] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 369.587468][ T6014] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 369.749948][ T6014] usb 6-1: USB disconnect, device number 15 [ 369.799271][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.094065][ T5852] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 370.303062][ T5852] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 370.303103][ T5852] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 370.303122][ T5852] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 370.303156][ T5852] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 370.303441][ T5852] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 370.374891][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 370.530480][ T5852] usb 3-1: USB disconnect, device number 17 [ 370.829311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.179196][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 371.296829][T11255] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 371.337759][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.337801][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 371.337846][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 371.337872][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 371.349316][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.349346][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.349366][ T9] usb 2-1: Product: syz [ 371.349379][ T9] usb 2-1: Manufacturer: syz [ 371.349392][ T9] usb 2-1: SerialNumber: syz [ 371.356569][T11241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.376627][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 371.469304][ T6014] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 371.594158][T11241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.595033][T11241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.638396][ T6014] usb 7-1: config 0 has no interfaces? [ 371.638436][ T6014] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.638458][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.666012][ T6014] usb 7-1: config 0 descriptor?? [ 371.869482][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.200622][T11241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.200825][T11241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 372.201243][ T9] cdc_mbim 2-1:1.0: dwNtbInMaxSize=170 is too small. Using 2048 [ 372.201263][ T9] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 372.402616][ T9] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 372.409709][ T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 372.425393][ T9] wwan wwan0: port wwan0mbim0 attached [ 372.503010][ T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b2:69:46:2b:34:ff [ 372.591025][ T6014] usb 7-1: USB disconnect, device number 6 [ 372.628033][ T9] usb 2-1: USB disconnect, device number 22 [ 372.630516][ T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 372.801725][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 372.909610][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.139311][ T6014] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 373.309228][ T6014] usb 3-1: Using ep0 maxpacket: 16 [ 373.314052][ T6014] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.314084][ T6014] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.314118][ T6014] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 373.314146][ T6014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.366283][ T6014] usb 3-1: config 0 descriptor?? [ 373.852292][ T6014] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 373.953645][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.309883][ T8990] usb 3-1: USB disconnect, device number 18 [ 374.499289][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 374.589566][ T5925] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 374.657089][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 374.657118][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 374.657136][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 374.657155][ T9] usb 2-1: config 220 has no interface number 2 [ 374.657228][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 374.657253][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 374.657270][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 374.657288][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 374.666004][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 374.666036][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.666055][ T9] usb 2-1: Product: syz [ 374.666068][ T9] usb 2-1: Manufacturer: syz [ 374.666082][ T9] usb 2-1: SerialNumber: syz [ 374.789331][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 374.795484][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.795517][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.795562][ T5925] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.795584][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.853967][ T5925] usb 6-1: config 0 descriptor?? [ 374.940808][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 374.940939][ T9] usb 2-1: No valid video chain found. [ 374.941020][ T9] usb 2-1: selecting invalid altsetting 0 [ 374.989369][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.019951][ T9] usb 2-1: selecting invalid altsetting 0 [ 375.019997][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 375.035909][ T9] usb 2-1: USB disconnect, device number 23 [ 375.308330][ T5925] HID 045e:07da: Invalid code 65791 type 1 [ 375.330749][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0022/input/input27 [ 375.360188][ T5925] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 376.029299][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.171175][T11349] block nbd1: shutting down sockets [ 376.185796][ T5918] usb 6-1: USB disconnect, device number 16 [ 377.069306][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.443847][T11379] Bluetooth: hci0: invalid length 4, exp 2 for type 27 [ 377.636073][T11383] input: syz0 as /devices/virtual/input/input28 [ 377.711034][T11386] vivid-003: disconnect [ 377.927753][T11384] vivid-003: reconnect [ 378.109340][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.117110][T11393] tipc: Started in network mode [ 378.117139][T11393] tipc: Node identity ac141441, cluster identity 4711 [ 378.118144][T11393] tipc: Enabling of bearer rejected, failed to enable media [ 378.200072][T11396] kvm: user requested TSC rate below hardware speed [ 378.586726][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2265'. [ 378.702670][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.702746][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731382][T11419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2265'. [ 378.787536][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 378.787642][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 379.149333][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.879399][T11446] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2281'. [ 379.969446][ T5918] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 380.132176][ T5918] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 380.132206][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.158098][ T5918] usb 6-1: config 0 descriptor?? [ 380.171353][ T5918] cp210x 6-1:0.0: cp210x converter detected [ 380.189249][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.584312][ T5918] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 380.622128][ T5918] usb 6-1: cp210x converter now attached to ttyUSB0 [ 380.808734][ T5918] usb 6-1: USB disconnect, device number 17 [ 380.834214][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 380.959726][ T5918] cp210x 6-1:0.0: device disconnected [ 381.229325][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.913699][T11468] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.2290'. [ 382.269352][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.490860][T11478] netlink: 'syz.1.2296': attribute type 13 has an invalid length. [ 382.669627][ T5925] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 382.877027][ T5925] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 382.877058][ T5925] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 382.877078][ T5925] usb 7-1: Product: syz [ 382.877092][ T5925] usb 7-1: Manufacturer: syz [ 382.877106][ T5925] usb 7-1: SerialNumber: syz [ 382.925475][ T5925] usb 7-1: config 0 descriptor?? [ 382.935963][ T5925] ch341 7-1:0.0: ch341-uart converter detected [ 382.962963][T11478] netlink: 'syz.1.2296': attribute type 13 has an invalid length. [ 383.309250][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.008138][ T5925] ch341-uart ttyUSB0: break control not supported, using simulated break [ 384.019621][ T5925] usb 7-1: ch341-uart converter now attached to ttyUSB0 [ 384.049967][ T5925] usb 7-1: USB disconnect, device number 7 [ 384.074694][ T5925] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 384.074979][ T5925] ch341 7-1:0.0: device disconnected [ 384.353260][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.372259][T11506] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2305'. [ 384.420777][T11506] gretap0: entered promiscuous mode [ 384.515125][T11509] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2305'. [ 384.812891][T11509] 0ªî{X¹¦: renamed from gretap0 [ 384.858208][T11509] 0ªî{X¹¦: left promiscuous mode [ 384.858237][T11509] 0ªî{X¹¦: entered allmulticast mode [ 384.872606][T11509] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 385.243839][T11517] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 385.389457][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.517943][T11522] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 385.634538][T11496] kexec: Could not allocate control_code_buffer [ 386.429431][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.751501][T11538] binder: 11537:11538 ioctl c0306201 2000000003c0 returned -14 [ 387.298291][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298329][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298356][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298382][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298408][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298434][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298458][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298484][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298510][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.298535][ T5918] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 387.424662][ T5918] hid-generic 0000:0000:0000.0023: hidraw0: HID v8.00 Device [syz0] on syz1 [ 387.469401][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.509389][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.552754][ T5846] Bluetooth: hci1: link tx timeout [ 388.553727][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.561505][ T5846] Bluetooth: hci1: link tx timeout [ 388.561526][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.603357][ T5846] Bluetooth: hci1: link tx timeout [ 388.603378][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.609367][ T5846] Bluetooth: hci1: link tx timeout [ 388.609383][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.623899][ T5846] Bluetooth: hci1: link tx timeout [ 388.623921][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624069][ T5846] Bluetooth: hci1: link tx timeout [ 388.624080][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624202][ T5846] Bluetooth: hci1: link tx timeout [ 388.624212][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624398][ T5846] Bluetooth: hci1: link tx timeout [ 388.624409][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624525][ T5846] Bluetooth: hci1: link tx timeout [ 388.624535][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624649][ T5846] Bluetooth: hci1: link tx timeout [ 388.624660][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624773][ T5846] Bluetooth: hci1: link tx timeout [ 388.624783][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.624992][ T5846] Bluetooth: hci1: link tx timeout [ 388.625003][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625120][ T5846] Bluetooth: hci1: link tx timeout [ 388.625130][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625244][ T5846] Bluetooth: hci1: link tx timeout [ 388.625254][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625379][ T5846] Bluetooth: hci1: link tx timeout [ 388.625389][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625503][ T5846] Bluetooth: hci1: link tx timeout [ 388.625513][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625626][ T5846] Bluetooth: hci1: link tx timeout [ 388.625637][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625749][ T5846] Bluetooth: hci1: link tx timeout [ 388.625759][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.625873][ T5846] Bluetooth: hci1: link tx timeout [ 388.625882][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.628360][ T5846] Bluetooth: hci1: link tx timeout [ 388.628377][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.628523][ T5846] Bluetooth: hci1: link tx timeout [ 388.628533][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.628743][ T5846] Bluetooth: hci1: link tx timeout [ 388.628754][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.628870][ T5846] Bluetooth: hci1: link tx timeout [ 388.628881][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.628996][ T5846] Bluetooth: hci1: link tx timeout [ 388.629006][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.629801][ T5846] Bluetooth: hci1: link tx timeout [ 388.629814][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.630006][ T5846] Bluetooth: hci1: link tx timeout [ 388.630016][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.630155][ T5846] Bluetooth: hci1: link tx timeout [ 388.630165][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.630286][ T5846] Bluetooth: hci1: link tx timeout [ 388.630296][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.630412][ T5846] Bluetooth: hci1: link tx timeout [ 388.630422][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.630939][ T5846] Bluetooth: hci1: link tx timeout [ 388.630951][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.632123][ T5846] Bluetooth: hci1: link tx timeout [ 388.632135][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.632298][ T5846] Bluetooth: hci1: link tx timeout [ 388.632308][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.632426][ T5846] Bluetooth: hci1: link tx timeout [ 388.632436][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.633209][ T5846] Bluetooth: hci1: link tx timeout [ 388.633224][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.633387][ T5846] Bluetooth: hci1: link tx timeout [ 388.633398][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.634573][ T5846] Bluetooth: hci1: link tx timeout [ 388.634587][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.634732][ T5846] Bluetooth: hci1: link tx timeout [ 388.634742][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.634859][ T5846] Bluetooth: hci1: link tx timeout [ 388.634870][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.635107][ T5846] Bluetooth: hci1: link tx timeout [ 388.635118][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.635575][ T5846] Bluetooth: hci1: link tx timeout [ 388.635588][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.644234][ T5846] Bluetooth: hci1: link tx timeout [ 388.644253][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.644388][ T5846] Bluetooth: hci1: link tx timeout [ 388.644399][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.644627][ T5846] Bluetooth: hci1: link tx timeout [ 388.644638][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.644791][ T5846] Bluetooth: hci1: link tx timeout [ 388.644802][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.644919][ T5846] Bluetooth: hci1: link tx timeout [ 388.644929][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.646243][ T5846] Bluetooth: hci1: link tx timeout [ 388.646257][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.646385][ T5846] Bluetooth: hci1: link tx timeout [ 388.646396][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.646511][ T5846] Bluetooth: hci1: link tx timeout [ 388.646522][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.646650][ T5846] Bluetooth: hci1: link tx timeout [ 388.646660][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.646776][ T5846] Bluetooth: hci1: link tx timeout [ 388.646786][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.646903][ T5846] Bluetooth: hci1: link tx timeout [ 388.646912][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.647028][ T5846] Bluetooth: hci1: link tx timeout [ 388.647037][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.647152][ T5846] Bluetooth: hci1: link tx timeout [ 388.647161][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.691186][ T5846] Bluetooth: hci1: link tx timeout [ 388.691207][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.691361][ T5846] Bluetooth: hci1: link tx timeout [ 388.691373][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.691504][ T5846] Bluetooth: hci1: link tx timeout [ 388.691514][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.691640][ T5846] Bluetooth: hci1: link tx timeout [ 388.691650][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.691775][ T5846] Bluetooth: hci1: link tx timeout [ 388.691785][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.691908][ T5846] Bluetooth: hci1: link tx timeout [ 388.691919][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692169][ T5846] Bluetooth: hci1: link tx timeout [ 388.692182][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692310][ T5846] Bluetooth: hci1: link tx timeout [ 388.692328][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692452][ T5846] Bluetooth: hci1: link tx timeout [ 388.692463][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692589][ T5846] Bluetooth: hci1: link tx timeout [ 388.692598][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692723][ T5846] Bluetooth: hci1: link tx timeout [ 388.692733][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692855][ T5846] Bluetooth: hci1: link tx timeout [ 388.692865][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.692996][ T5846] Bluetooth: hci1: link tx timeout [ 388.693006][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.693123][ T5846] Bluetooth: hci1: link tx timeout [ 388.693133][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.693327][ T5846] Bluetooth: hci1: link tx timeout [ 388.693338][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.693494][ T5846] Bluetooth: hci1: link tx timeout [ 388.693504][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.693628][ T5846] Bluetooth: hci1: link tx timeout [ 388.693638][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.693759][ T5846] Bluetooth: hci1: link tx timeout [ 388.693774][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.693890][ T5846] Bluetooth: hci1: link tx timeout [ 388.693900][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.694022][ T5846] Bluetooth: hci1: link tx timeout [ 388.694032][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.694142][ T5846] Bluetooth: hci1: link tx timeout [ 388.694152][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.694286][ T5846] Bluetooth: hci1: link tx timeout [ 388.694296][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.695620][ T5846] Bluetooth: hci1: link tx timeout [ 388.695633][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.695755][ T5846] Bluetooth: hci1: link tx timeout [ 388.695765][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.696092][ T5846] Bluetooth: hci1: link tx timeout [ 388.696102][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.696220][ T5846] Bluetooth: hci1: link tx timeout [ 388.696230][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.696355][ T5846] Bluetooth: hci1: link tx timeout [ 388.696365][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.697641][ T5846] Bluetooth: hci1: link tx timeout [ 388.697654][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.697872][ T5846] Bluetooth: hci1: link tx timeout [ 388.697883][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.760763][ T5846] Bluetooth: hci1: link tx timeout [ 388.760785][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.760959][ T5846] Bluetooth: hci1: link tx timeout [ 388.760970][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.761115][ T5846] Bluetooth: hci1: link tx timeout [ 388.761126][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.761330][ T5846] Bluetooth: hci1: link tx timeout [ 388.761341][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.761459][ T5846] Bluetooth: hci1: link tx timeout [ 388.761469][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.761585][ T5846] Bluetooth: hci1: link tx timeout [ 388.761595][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.761713][ T5846] Bluetooth: hci1: link tx timeout [ 388.761723][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.761836][ T5846] Bluetooth: hci1: link tx timeout [ 388.761846][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.768123][ T5846] Bluetooth: hci1: link tx timeout [ 388.768141][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.768286][ T5846] Bluetooth: hci1: link tx timeout [ 388.768297][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.769867][ T5846] Bluetooth: hci1: link tx timeout [ 388.769885][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.770940][ T5846] Bluetooth: hci1: link tx timeout [ 388.770952][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.771130][ T5846] Bluetooth: hci1: link tx timeout [ 388.771140][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.772263][ T5846] Bluetooth: hci1: link tx timeout [ 388.772276][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.772400][ T5846] Bluetooth: hci1: link tx timeout [ 388.772411][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.772562][ T5846] Bluetooth: hci1: link tx timeout [ 388.772572][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.829549][ T5846] Bluetooth: hci1: link tx timeout [ 388.829569][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.829734][ T5846] Bluetooth: hci1: link tx timeout [ 388.829745][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.829863][ T5846] Bluetooth: hci1: link tx timeout [ 388.829873][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.830875][ T5846] Bluetooth: hci1: link tx timeout [ 388.830887][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.831005][ T5846] Bluetooth: hci1: link tx timeout [ 388.831016][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.832055][ T5846] Bluetooth: hci1: link tx timeout [ 388.832070][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.832195][ T5846] Bluetooth: hci1: link tx timeout [ 388.832205][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.833960][ T5846] Bluetooth: hci1: link tx timeout [ 388.833974][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.834105][ T5846] Bluetooth: hci1: link tx timeout [ 388.834116][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.834232][ T5846] Bluetooth: hci1: link tx timeout [ 388.834242][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.834357][ T5846] Bluetooth: hci1: link tx timeout [ 388.834367][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.834483][ T5846] Bluetooth: hci1: link tx timeout [ 388.834494][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.835073][ T5846] Bluetooth: hci1: link tx timeout [ 388.835085][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.836232][ T5846] Bluetooth: hci1: link tx timeout [ 388.836244][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.836393][ T5846] Bluetooth: hci1: link tx timeout [ 388.836404][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.836520][ T5846] Bluetooth: hci1: link tx timeout [ 388.836530][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.843948][ T5846] Bluetooth: hci1: link tx timeout [ 388.847096][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.869412][ T5846] Bluetooth: hci1: link tx timeout [ 388.869433][ T5846] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 389.549381][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.592969][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2335'. [ 390.139837][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 390.393041][T11583] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 390.393064][T11583] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 390.591971][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 390.599265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.629230][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.002261][T11608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.663687][T11637] netlink: 'syz.6.2357': attribute type 4 has an invalid length. [ 392.663709][T11637] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2357'. [ 392.669256][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.719262][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.561146][T11664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.561166][T11664] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 394.628803][T11664] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.628839][T11664] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 394.749442][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.218480][T11664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.218503][T11664] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 395.309688][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 395.789234][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.831595][T11664] ------------[ cut here ]------------ [ 395.831610][T11664] rtmutex deadlock detected [ 395.831711][T11664] WARNING: CPU: 1 PID: 11664 at kernel/locking/rtmutex.c:1674 rt_mutex_handle_deadlock+0x28/0xb0 [ 395.831757][T11664] Modules linked in: [ 395.831782][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.2.2369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.831806][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.831825][T11664] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 395.831852][T11664] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 c6 2c 01 00 90 48 c7 c7 40 0b 0b 8b e8 09 c8 89 f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 40 f6 91 4c 8d [ 395.831871][T11664] RSP: 0018:ffffc90006357950 EFLAGS: 00010246 [ 395.831889][T11664] RAX: 6bf84680fc6f2f00 RBX: ffffc900063579e0 RCX: 0000000000080000 [ 395.831904][T11664] RDX: ffffc9000db52000 RSI: 00000000000779c5 RDI: 00000000000779c6 [ 395.831918][T11664] RBP: ffffc90006357b00 R08: 0000000000000000 R09: 0000000000000000 [ 395.831932][T11664] R10: dffffc0000000000 R11: ffffed1017124863 R12: 1ffff92000c6af38 [ 395.831948][T11664] R13: ffffffff8af971b9 R14: ffff88805c3c9098 R15: dffffc0000000000 [ 395.831964][T11664] FS: 00007f77b4b4e6c0(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 395.831982][T11664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.831996][T11664] CR2: 0000200000062030 CR3: 00000000354d2000 CR4: 00000000003526f0 [ 395.832014][T11664] Call Trace: [ 395.832022][T11664] [ 395.832032][T11664] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 395.832058][T11664] rt_mutex_slowlock+0x692/0x6e0 [ 395.832086][T11664] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 395.832111][T11664] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 395.832135][T11664] ? __lock_acquire+0xab9/0xd20 [ 395.832173][T11664] ? nfc_rfkill_set_block+0x50/0x2e0 [ 395.832217][T11664] ? rt_mutex_slowunlock+0x493/0x8a0 [ 395.832242][T11664] ? reacquire_held_locks+0x127/0x1d0 [ 395.832277][T11664] ? nfc_rfkill_set_block+0x50/0x2e0 [ 395.832298][T11664] mutex_lock_nested+0x16a/0x1d0 [ 395.832324][T11664] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 395.832370][T11664] nfc_rfkill_set_block+0x50/0x2e0 [ 395.832393][T11664] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 395.832417][T11664] rfkill_set_block+0x1e2/0x450 [ 395.832451][T11664] rfkill_fop_write+0x44e/0x580 [ 395.832477][T11664] ? __pfx_rfkill_fop_write+0x10/0x10 [ 395.832502][T11664] ? rw_verify_area+0x25b/0x4e0 [ 395.832526][T11664] ? __lock_acquire+0xab9/0xd20 [ 395.832549][T11664] ? __pfx_rfkill_fop_write+0x10/0x10 [ 395.832572][T11664] vfs_write+0x287/0xb40 [ 395.832605][T11664] ? __pfx_vfs_write+0x10/0x10 [ 395.832632][T11664] ? __fget_files+0x2a/0x420 [ 395.832662][T11664] ? __fget_files+0x2a/0x420 [ 395.832688][T11664] ? __fget_files+0x3a6/0x420 [ 395.832714][T11664] ? __fget_files+0x2a/0x420 [ 395.832749][T11664] ksys_write+0x14b/0x260 [ 395.832775][T11664] ? __pfx_ksys_write+0x10/0x10 [ 395.832796][T11664] ? rcu_is_watching+0x15/0xb0 [ 395.832831][T11664] ? do_syscall_64+0xbe/0x3b0 [ 395.832855][T11664] do_syscall_64+0xfa/0x3b0 [ 395.832874][T11664] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.832903][T11664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.832923][T11664] ? clear_bhb_loop+0x60/0xb0 [ 395.832948][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.832968][T11664] RIP: 0033:0x7f77b68eeec9 [ 395.832986][T11664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.833003][T11664] RSP: 002b:00007f77b4b4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.833024][T11664] RAX: ffffffffffffffda RBX: 00007f77b6b45fa0 RCX: 00007f77b68eeec9 [ 395.833040][T11664] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 395.833053][T11664] RBP: 00007f77b6971f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.833066][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.833079][T11664] R13: 00007f77b6b46038 R14: 00007f77b6b45fa0 R15: 00007ffcebd5eff8 [ 395.833112][T11664] [ 395.833122][T11664] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.833136][T11664] CPU: 1 UID: 0 PID: 11664 Comm: syz.2.2369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.833160][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.833172][T11664] Call Trace: [ 395.833180][T11664] [ 395.833188][T11664] dump_stack_lvl+0x99/0x250 [ 395.833218][T11664] ? __asan_memcpy+0x40/0x70 [ 395.833240][T11664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.833269][T11664] ? __pfx__printk+0x10/0x10 [ 395.833305][T11664] vpanic+0x281/0x750 [ 395.833340][T11664] ? __pfx__printk+0x10/0x10 [ 395.833362][T11664] ? __pfx_vpanic+0x10/0x10 [ 395.833388][T11664] ? is_bpf_text_address+0x292/0x2b0 [ 395.833424][T11664] panic+0xb9/0xc0 [ 395.833449][T11664] ? __pfx_panic+0x10/0x10 [ 395.833491][T11664] __warn+0x31b/0x4b0 [ 395.833517][T11664] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 395.833543][T11664] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 395.833567][T11664] report_bug+0x2be/0x4f0 [ 395.833592][T11664] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 395.833614][T11664] ? rt_mutex_handle_deadlock+0x28/0xb0 [ 395.833638][T11664] ? rt_mutex_handle_deadlock+0x2a/0xb0 [ 395.833662][T11664] handle_bug+0x84/0x160 [ 395.833684][T11664] exc_invalid_op+0x1a/0x50 [ 395.833706][T11664] asm_exc_invalid_op+0x1a/0x20 [ 395.833724][T11664] RIP: 0010:rt_mutex_handle_deadlock+0x28/0xb0 [ 395.833750][T11664] Code: 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 8c 00 00 00 48 89 f7 e8 c6 2c 01 00 90 48 c7 c7 40 0b 0b 8b e8 09 c8 89 f6 90 <0f> 0b 90 90 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 40 f6 91 4c 8d [ 395.833767][T11664] RSP: 0018:ffffc90006357950 EFLAGS: 00010246 [ 395.833784][T11664] RAX: 6bf84680fc6f2f00 RBX: ffffc900063579e0 RCX: 0000000000080000 [ 395.833800][T11664] RDX: ffffc9000db52000 RSI: 00000000000779c5 RDI: 00000000000779c6 [ 395.833814][T11664] RBP: ffffc90006357b00 R08: 0000000000000000 R09: 0000000000000000 [ 395.833828][T11664] R10: dffffc0000000000 R11: ffffed1017124863 R12: 1ffff92000c6af38 [ 395.833842][T11664] R13: ffffffff8af971b9 R14: ffff88805c3c9098 R15: dffffc0000000000 [ 395.833861][T11664] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 395.833900][T11664] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 395.833923][T11664] rt_mutex_slowlock+0x692/0x6e0 [ 395.833951][T11664] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 395.833977][T11664] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 395.833999][T11664] ? __lock_acquire+0xab9/0xd20 [ 395.834037][T11664] ? nfc_rfkill_set_block+0x50/0x2e0 [ 395.834063][T11664] ? rt_mutex_slowunlock+0x493/0x8a0 [ 395.834089][T11664] ? reacquire_held_locks+0x127/0x1d0 [ 395.834140][T11664] ? nfc_rfkill_set_block+0x50/0x2e0 [ 395.834161][T11664] mutex_lock_nested+0x16a/0x1d0 [ 395.834187][T11664] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 395.834212][T11664] nfc_rfkill_set_block+0x50/0x2e0 [ 395.834235][T11664] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 395.834259][T11664] rfkill_set_block+0x1e2/0x450 [ 395.834292][T11664] rfkill_fop_write+0x44e/0x580 [ 395.834315][T11664] ? __pfx_rfkill_fop_write+0x10/0x10 [ 395.834347][T11664] ? rw_verify_area+0x25b/0x4e0 [ 395.834371][T11664] ? __lock_acquire+0xab9/0xd20 [ 395.834394][T11664] ? __pfx_rfkill_fop_write+0x10/0x10 [ 395.834417][T11664] vfs_write+0x287/0xb40 [ 395.834450][T11664] ? __pfx_vfs_write+0x10/0x10 [ 395.834476][T11664] ? __fget_files+0x2a/0x420 [ 395.834507][T11664] ? __fget_files+0x2a/0x420 [ 395.834533][T11664] ? __fget_files+0x3a6/0x420 [ 395.834560][T11664] ? __fget_files+0x2a/0x420 [ 395.834596][T11664] ksys_write+0x14b/0x260 [ 395.834624][T11664] ? __pfx_ksys_write+0x10/0x10 [ 395.834646][T11664] ? rcu_is_watching+0x15/0xb0 [ 395.834681][T11664] ? do_syscall_64+0xbe/0x3b0 [ 395.834706][T11664] do_syscall_64+0xfa/0x3b0 [ 395.834724][T11664] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.834754][T11664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.834774][T11664] ? clear_bhb_loop+0x60/0xb0 [ 395.834799][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.834819][T11664] RIP: 0033:0x7f77b68eeec9 [ 395.834835][T11664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.834853][T11664] RSP: 002b:00007f77b4b4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.834873][T11664] RAX: ffffffffffffffda RBX: 00007f77b6b45fa0 RCX: 00007f77b68eeec9 [ 395.834888][T11664] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 395.834901][T11664] RBP: 00007f77b6971f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.834913][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.834925][T11664] R13: 00007f77b6b46038 R14: 00007f77b6b45fa0 R15: 00007ffcebd5eff8 [ 395.834955][T11664] [ 395.835382][T11664] Kernel Offset: disabled