last executing test programs: 2m19.603221903s ago: executing program 1 (id=697): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%pK \x00') mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 2m19.371790667s ago: executing program 1 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4, 0xfffffeff, 0xfffffff8, 0xfffffffd}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd26, 0x25dfdbf9, {0x2, 0x20, 0x20, 0xfe, 0x0, 0x0, 0xc8, 0x0, 0x2000}}, 0x1c}}, 0x20048004) 2m19.040918937s ago: executing program 1 (id=703): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) 2m18.763499172s ago: executing program 1 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x7c}}, 0x0) 2m18.558990672s ago: executing program 1 (id=711): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 2m18.364025064s ago: executing program 1 (id=713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x2000000) 2m8.288240336s ago: executing program 4 (id=800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 2m8.180016491s ago: executing program 4 (id=801): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) read(r0, &(0x7f0000000100)=""/117, 0x75) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) 2m7.235264144s ago: executing program 4 (id=807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) 2m7.146096756s ago: executing program 4 (id=808): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m6.967475376s ago: executing program 4 (id=810): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) close(0x3) 2m6.044293559s ago: executing program 4 (id=817): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x4d, 0xff, 0x0, 0xffeffffd}]}) 2m5.539705536s ago: executing program 32 (id=817): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x4d, 0xff, 0x0, 0xffeffffd}]}) 2m3.241805912s ago: executing program 33 (id=713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x2000000) 37.106252862s ago: executing program 0 (id=1498): setresuid(0xee01, 0xee00, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) 29.389682439s ago: executing program 0 (id=1506): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) 29.077938477s ago: executing program 3 (id=1509): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.508019076s ago: executing program 0 (id=1512): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 27.979691157s ago: executing program 3 (id=1516): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "377ce8ed95"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x3c}}, 0x0) 27.652567495s ago: executing program 0 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x400000, 0x88000000}, 0x8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 27.449735459s ago: executing program 2 (id=1518): mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) 27.272225774s ago: executing program 3 (id=1519): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 27.007088794s ago: executing program 0 (id=1521): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000000)) 26.743397864s ago: executing program 2 (id=1522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 26.683884481s ago: executing program 3 (id=1523): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x40, 0x1a, 0x5, {0x5, 0x31, "63b0f7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 26.403633439s ago: executing program 0 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x6}]}) 26.134251864s ago: executing program 2 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000d000000080026000816"], 0x40}}, 0x200040b4) 25.37395156s ago: executing program 2 (id=1529): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) 23.570056577s ago: executing program 3 (id=1533): setreuid(0x0, 0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x9, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) 23.272802196s ago: executing program 5 (id=1534): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0xcd, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.242269445s ago: executing program 3 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 22.5095849s ago: executing program 5 (id=1536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 22.328088389s ago: executing program 2 (id=1537): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) 22.086219863s ago: executing program 5 (id=1538): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000003c0)=0x5, 0x4) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 22.020345605s ago: executing program 6 (id=1539): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) 21.406954127s ago: executing program 5 (id=1540): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/133, 0x85}}], 0x1, 0x2000000022, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 21.390865224s ago: executing program 6 (id=1541): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 21.083898509s ago: executing program 2 (id=1542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) 20.975390221s ago: executing program 6 (id=1543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x5c}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19.706957098s ago: executing program 6 (id=1544): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) 19.385947592s ago: executing program 6 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 19.051268219s ago: executing program 6 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 15.476364965s ago: executing program 5 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000a00)='./file0\x00', 0x0, 0x18) 15.311289804s ago: executing program 5 (id=1548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 10.915043506s ago: executing program 34 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x6}]}) 7.983987828s ago: executing program 35 (id=1535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.125087071s ago: executing program 36 (id=1542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) 3.465884616s ago: executing program 37 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 0s ago: executing program 38 (id=1548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) kernel console output (not intermixed with test programs): 107.008518][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 107.009083][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 107.055315][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.056383][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 107.056470][ T10] usb 2-1: media controller created [ 107.135743][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.170111][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 107.178685][ T6269] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 107.264549][ T6255] cxusb: i2c rd: len=80 is too big! [ 107.264549][ T6255] [ 107.269582][ T10] cxusb: set interface failed [ 107.269600][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 107.270755][ T44] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 107.270857][ T44] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 107.294246][ T44] usb 5-1: USB disconnect, device number 3 [ 107.439628][ T6274] netlink: 'syz.0.143': attribute type 4 has an invalid length. [ 107.466932][ T10] DVB: Unable to find symbol mt352_attach() [ 107.466956][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 107.654103][ T10] rc_core: IR keymap rc-dvico-portable not found [ 107.654121][ T10] Registered IR keymap rc-empty [ 107.657600][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 107.662196][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 107.839000][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 107.839034][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 107.880606][ T10] usb 2-1: USB disconnect, device number 4 [ 108.425057][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 108.779975][ T6310] program syz.4.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.834394][ T6311] program syz.4.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.863301][ T6311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.177521][ T6321] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 109.259740][ T6321] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 109.989432][ T6352] netlink: 79 bytes leftover after parsing attributes in process `syz.0.179'. [ 109.989550][ T6352] netlink: 79 bytes leftover after parsing attributes in process `syz.0.179'. [ 110.090910][ T6357] netlink: 'syz.3.180': attribute type 32 has an invalid length. [ 110.090929][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 110.091760][ T6357] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 110.708371][ T6381] ======================================================= [ 110.708371][ T6381] WARNING: The mand mount option has been deprecated and [ 110.708371][ T6381] and is ignored by this kernel. Remove the mand [ 110.708371][ T6381] option from the mount to silence this warning. [ 110.708371][ T6381] ======================================================= [ 110.708588][ T6381] 9pnet_fd: Insufficient options for proto=fd [ 111.267124][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.296651][ T6399] netlink: 140 bytes leftover after parsing attributes in process `syz.3.200'. [ 111.296711][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.200'. [ 111.296726][ T6399] netlink: 5 bytes leftover after parsing attributes in process `syz.3.200'. [ 111.418206][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 111.437734][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.439306][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 111.459520][ T9] usb 3-1: string descriptor 0 read error: -22 [ 111.459622][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 111.459642][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 111.596160][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 111.633040][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.633819][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 111.633876][ T9] usb 3-1: media controller created [ 111.815569][ T6408] tipc: Started in network mode [ 111.815601][ T6408] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 111.817416][ T6408] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 111.818825][ T6408] tipc: Enabled bearer , priority 10 [ 111.845780][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.026272][ T6414] trusted_key: encrypted_key: insufficient parameters specified [ 112.485072][ T988] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.654504][ T988] usb 4-1: Using ep0 maxpacket: 8 [ 112.671401][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.671487][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.671508][ T988] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.671546][ T988] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 112.671566][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.684629][ T988] usb 4-1: config 0 descriptor?? [ 112.816352][ T10] tipc: Node number set to 1 [ 112.998395][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 113.011271][ T5929] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.128084][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 113.139769][ T988] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 113.139809][ T988] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 113.139833][ T988] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 113.139858][ T988] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 113.169103][ T988] logitech 0003:046D:C293.0004: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 113.169150][ T988] logitech 0003:046D:C293.0004: no inputs found [ 113.193667][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 113.209969][ T5929] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.209993][ T5929] usb 5-1: config 0 has no interface number 0 [ 113.256914][ T5929] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.256942][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.256960][ T5929] usb 5-1: Product: syz [ 113.256972][ T5929] usb 5-1: Manufacturer: syz [ 113.256984][ T5929] usb 5-1: SerialNumber: syz [ 113.381565][ T5929] usb 5-1: config 0 descriptor?? [ 113.391903][ T988] usb 4-1: USB disconnect, device number 2 [ 113.525144][ T5929] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.528827][ T9] usb 3-1: USB disconnect, device number 3 [ 113.661543][ T5929] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.748437][ T5929] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.832571][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 114.052885][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.054730][ T988] usb 5-1: USB disconnect, device number 4 [ 114.063326][ T6449] binder: 6446:6449 ioctl c0306201 2000000001c0 returned -22 [ 114.165401][ T988] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.295262][ T988] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.296260][ T988] quatech2 5-1:0.51: device disconnected [ 114.797451][ T6473] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 114.797476][ T6473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.855923][ T6473] vhci_hcd vhci_hcd.0: Device attached [ 115.084306][ T9] vhci_hcd: vhci_device speed not set [ 115.125508][ T988] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 115.144350][ T9] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 115.279410][ T988] usb 2-1: config 0 has no interfaces? [ 115.279447][ T988] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.279467][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.286825][ T988] usb 2-1: config 0 descriptor?? [ 115.560744][ T31] usb 2-1: USB disconnect, device number 5 [ 115.570176][ T6475] vhci_hcd: unknown pdu 2 [ 115.599854][ T1108] vhci_hcd: stop threads [ 115.601061][ T1108] vhci_hcd: release socket [ 115.619391][ T1108] vhci_hcd: disconnect device [ 115.624176][ T9] vhci_hcd: vhci_device speed not set [ 115.647729][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.245'. [ 115.885122][ T6505] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.972516][ T6510] capability: warning: `syz.2.249' uses 32-bit capabilities (legacy support in use) [ 116.266377][ T6521] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 116.512069][ T6527] CUSE: unknown device info "" [ 116.512084][ T6527] CUSE: zero length info key specified [ 116.742610][ T6534] syz_tun: entered promiscuous mode [ 116.742794][ T6534] vlan0: entered promiscuous mode [ 117.040368][ T6545] overlayfs: workdir and upperdir must be separate subtrees [ 117.345443][ T6553] comedi: No check for data length of config insn id 3 is implemented [ 117.345459][ T6553] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 117.345470][ T6553] comedi: Assuming n=15 is correct [ 117.475466][ T6555] sp0: Synchronizing with TNC [ 118.080556][ T6578] tmpfs: Bad value for 'mpol' [ 118.275317][ T6584] IPVS: ip_vs_edit_dest(): server weight less than zero [ 118.314152][ T5930] IPVS: starting estimator thread 0... [ 118.372101][ T6593] mmap: syz.4.287 (6593) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.399925][ T6590] syz.1.285 (6590) used greatest stack depth: 18472 bytes left [ 118.414319][ T6585] IPVS: using max 10 ests per chain, 24000 per kthread [ 120.236229][ T6644] loop6: detected capacity change from 0 to 7 [ 120.274465][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.274580][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.301435][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.301477][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.325398][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.325435][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.325720][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.325745][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.326060][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.326081][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.326357][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.326383][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.333631][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.333666][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.346390][ T5908] ldm_validate_partition_table(): Disk read failed. [ 120.352952][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.352990][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.353439][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.353465][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.381459][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.381495][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.381846][ T5908] Dev loop6: unable to read RDB block 0 [ 120.385016][ T5908] loop6: unable to read partition table [ 120.386907][ T5908] loop6: partition table beyond EOD, truncated [ 120.489634][ T6644] ldm_validate_partition_table(): Disk read failed. [ 120.493476][ T6644] Dev loop6: unable to read RDB block 0 [ 120.497509][ T6644] loop6: unable to read partition table [ 120.498017][ T6644] loop6: partition table beyond EOD, truncated [ 120.498048][ T6644] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 121.156456][ T6663] delete_channel: no stack [ 121.167849][ T6662] delete_channel: no stack [ 121.205330][ T6665] netlink: 196 bytes leftover after parsing attributes in process `syz.2.317'. [ 122.100126][ T6693] netlink: 'syz.1.331': attribute type 5 has an invalid length. [ 122.269079][ T6698] xt_HMARK: spi-set and port-set can't be combined [ 123.054257][ T5929] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.214140][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 123.216486][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.216532][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.216567][ T5929] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 123.216587][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.277559][ T5929] usb 5-1: config 0 descriptor?? [ 123.495351][ T6681] syz.2.324 (6681): drop_caches: 2 [ 123.705400][ T5929] hid_mf 0003:0079:1801.0005: item fetching failed at offset 0/2 [ 123.706171][ T5929] hid_mf 0003:0079:1801.0005: HID parse failed. [ 123.706251][ T5929] hid_mf 0003:0079:1801.0005: probe with driver hid_mf failed with error -22 [ 123.761896][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 123.787685][ T6733] gretap0: entered promiscuous mode [ 123.791622][ T6733] gretap0: left promiscuous mode [ 123.920256][ T31] usb 5-1: USB disconnect, device number 5 [ 123.999199][ T5929] kernel write not supported for file /input/mouse0 (pid: 5929 comm: kworker/1:5) [ 124.294362][ T6745] netlink: 48 bytes leftover after parsing attributes in process `syz.3.356'. [ 124.294384][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.356'. [ 125.367783][ T6781] program syz.2.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.893426][ T6789] syz.3.377 (6789) used greatest stack depth: 17720 bytes left [ 125.980738][ T6797] gretap0: entered promiscuous mode [ 126.709036][ T6825] netlink: 'syz.2.394': attribute type 2 has an invalid length. [ 127.744783][ T6856] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.796395][ T6859] netlink: 766 bytes leftover after parsing attributes in process `syz.3.410'. [ 128.085208][ T6865] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 128.086065][ T5928] kernel write not supported for file task/208/attr/keycreate (pid: 5928 comm: kworker/0:5) [ 128.135557][ T6869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.412'. [ 128.145812][ T6871] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 128.145830][ T6871] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 128.145841][ T6871] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.413'. [ 130.360529][ T5844] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 130.360571][ T5844] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 131.144305][ T6964] netlink: 240 bytes leftover after parsing attributes in process `syz.0.456'. [ 131.854060][ T988] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 132.006627][ T988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.006693][ T988] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.006736][ T988] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.006754][ T988] usb 3-1: config 1 interface 1 has no altsetting 0 [ 132.009848][ T988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.009874][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.009891][ T988] usb 3-1: Product: syz [ 132.009903][ T988] usb 3-1: Manufacturer: syz [ 132.009915][ T988] usb 3-1: SerialNumber: syz [ 132.098781][ T988] cdc_ncm 3-1:1.0: skipping garbage [ 132.098805][ T988] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 132.098850][ T988] cdc_ncm 3-1:1.0: bind() failure [ 132.101607][ T7000] vim2m vim2m.0: vidioc_s_fmt queue busy [ 132.324781][ T6984] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.556363][ T5928] usb 3-1: USB disconnect, device number 4 [ 132.956059][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.956160][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.154069][ T37] audit: type=1800 audit(1756964765.382:2): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.484" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 133.344288][ T5930] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.501657][ T5930] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 133.501685][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.511075][ T5930] usb 2-1: config 0 descriptor?? [ 134.011285][ T5930] waltop 0003:172F:0032.0006: item fetching failed at offset 3/5 [ 134.012157][ T5930] waltop 0003:172F:0032.0006: probe with driver waltop failed with error -22 [ 134.184138][ T5928] usb 2-1: USB disconnect, device number 6 [ 135.174701][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 135.226929][ T5929] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 135.387862][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.387887][ T5929] usb 5-1: config 0 has no interface number 0 [ 135.387936][ T5929] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 135.387956][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.412951][ T5929] usb 5-1: config 0 descriptor?? [ 135.425717][ T5929] usb 5-1: selecting invalid altsetting 1 [ 135.426939][ T5929] dvb_ttusb_budget: ttusb_init_controller: error [ 135.426956][ T5929] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 135.713869][ T5929] DVB: Unable to find symbol cx22700_attach() [ 135.842307][ T7100] warning: `syz.3.519' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.886167][ T5929] DVB: Unable to find symbol tda10046_attach() [ 135.886181][ T5929] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 135.916150][ T5929] usb 5-1: USB disconnect, device number 6 [ 136.081231][ T7106] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 136.081251][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 136.318955][ T7112] tmpfs: Cannot disable swap on remount [ 136.634334][ T988] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.720605][ T7128] program syz.2.533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.784781][ T988] usb 2-1: Using ep0 maxpacket: 32 [ 136.787511][ T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.787539][ T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.787575][ T988] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 136.787595][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.793232][ T988] usb 2-1: config 0 descriptor?? [ 136.807447][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.925700][ T5930] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.975865][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 136.981436][ T5929] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 136.981462][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.981479][ T5929] usb 4-1: Product: syz [ 136.981491][ T5929] usb 4-1: Manufacturer: syz [ 136.981503][ T5929] usb 4-1: SerialNumber: syz [ 136.999400][ T5929] usb 4-1: config 0 descriptor?? [ 137.018146][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 137.074169][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 137.080244][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.080291][ T5930] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 137.080312][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.109683][ T5930] usb 5-1: config 0 descriptor?? [ 137.268919][ T988] koneplus 0003:1E7D:2D51.0007: item fetching failed at offset 1/5 [ 137.270878][ T988] koneplus 0003:1E7D:2D51.0007: parse failed [ 137.270953][ T988] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -22 [ 137.474241][ T988] usb 2-1: USB disconnect, device number 7 [ 137.626350][ T5930] kye 0003:0458:4018.0008: unbalanced collection at end of report description [ 137.637093][ T5930] kye 0003:0458:4018.0008: parse failed [ 137.637163][ T5930] kye 0003:0458:4018.0008: probe with driver kye failed with error -22 [ 137.639125][ T5929] gspca_sonixj: reg_w1 err -71 [ 137.639209][ T5929] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 137.683881][ T5929] usb 4-1: USB disconnect, device number 3 [ 137.797088][ T9] usb 5-1: USB disconnect, device number 7 [ 138.094441][ T988] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.254318][ T988] usb 1-1: Using ep0 maxpacket: 8 [ 138.256468][ T988] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 138.256495][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.291746][ T988] usb 1-1: config 0 descriptor?? [ 138.740843][ T988] magicmouse 0003:05AC:0269.0009: reserved main item tag 0xd [ 138.740883][ T988] magicmouse 0003:05AC:0269.0009: item fetching failed at offset 4/5 [ 138.742908][ T988] magicmouse 0003:05AC:0269.0009: magicmouse hid parse failed [ 138.743023][ T988] magicmouse 0003:05AC:0269.0009: probe with driver magicmouse failed with error -22 [ 138.854049][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.929056][ T988] usb 1-1: USB disconnect, device number 3 [ 139.039834][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.041204][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 139.082465][ T9] usb 4-1: string descriptor 0 read error: -22 [ 139.082633][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 139.082655][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.274402][ T9] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 139.888548][ T9] usb 4-1: device descriptor read/64, error -71 [ 140.244116][ T9] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 140.785820][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.822375][ T9] usb 4-1: device firmware changed [ 140.871042][ T9] usb 4-1: USB disconnect, device number 4 [ 140.872994][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 142.620012][ T7254] tipc: Enabling of bearer rejected, failed to enable media [ 142.764187][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.918581][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.918626][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 142.918646][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.963546][ T9] usb 4-1: config 0 descriptor?? [ 143.081268][ T7268] program syz.0.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.284075][ T5930] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.395762][ T9] logitech 0003:046D:C50C.000A: unbalanced delimiter at end of report description [ 143.396550][ T9] logitech 0003:046D:C50C.000A: parse failed [ 143.396646][ T9] logitech 0003:046D:C50C.000A: probe with driver logitech failed with error -22 [ 143.484337][ T5930] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.484368][ T5930] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.484388][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.484418][ T5930] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 143.484438][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.599302][ T5930] usb 5-1: config 0 descriptor?? [ 143.602637][ T5929] usb 4-1: USB disconnect, device number 5 [ 144.040561][ T5930] uclogic 0003:5543:0064.000B: item fetching failed at offset 5/7 [ 144.041378][ T5930] uclogic 0003:5543:0064.000B: parse failed [ 144.041475][ T5930] uclogic 0003:5543:0064.000B: probe with driver uclogic failed with error -22 [ 144.232854][ T5930] usb 5-1: USB disconnect, device number 8 [ 144.765009][ T7302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'. [ 144.765323][ T7302] Zero length message leads to an empty skb [ 145.054656][ T7315] IPVS: Unknown mcast interface: pimreg1 [ 145.514207][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.666794][ T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 145.666819][ T9] usb 4-1: config 0 has no interface number 0 [ 145.666849][ T9] usb 4-1: config 0 interface 98 has no altsetting 0 [ 145.669320][ T9] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 145.669351][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.669369][ T9] usb 4-1: Product: syz [ 145.669380][ T9] usb 4-1: Manufacturer: syz [ 145.669392][ T9] usb 4-1: SerialNumber: syz [ 145.693669][ T37] audit: type=1326 audit(1756964777.942:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.702267][ T37] audit: type=1326 audit(1756964777.942:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.709261][ T37] audit: type=1326 audit(1756964777.962:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.711657][ T37] audit: type=1326 audit(1756964777.962:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.712588][ T37] audit: type=1326 audit(1756964777.962:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.721338][ T37] audit: type=1326 audit(1756964777.972:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.725639][ T37] audit: type=1326 audit(1756964777.982:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7336 comm="syz.2.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 145.754162][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.899640][ T9] usb 4-1: config 0 descriptor?? [ 145.913861][ T5930] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 145.913888][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.915865][ T5930] usb 2-1: Product: syz [ 145.915881][ T5930] usb 2-1: Manufacturer: syz [ 145.915909][ T5930] usb 2-1: SerialNumber: syz [ 145.958845][ T5930] usb 2-1: config 0 descriptor?? [ 145.999563][ T5930] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 008 [ 146.190569][ T9] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 146.654369][ T5930] i2c i2c-1: failure reading functionality [ 146.659728][ T5930] i2c i2c-1: connected i2c-tiny-usb device [ 146.674533][ T5930] usb 2-1: USB disconnect, device number 8 [ 146.844144][ T9] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 147.229960][ T9] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 147.231725][ T9] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 147.231813][ T9] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 147.270458][ T9] usb 4-1: USB disconnect, device number 6 [ 147.296106][ T988] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 147.296130][ T988] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 147.509120][ T7370] [U]  [ 148.599253][ T7401] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 149.055564][ T7414] netlink: 'syz.4.666': attribute type 3 has an invalid length. [ 149.586919][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.831819][ T7443] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 149.831841][ T7443] netlink: 208 bytes leftover after parsing attributes in process `syz.2.680'. [ 149.831870][ T7443] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 149.831881][ T7443] netlink: 'syz.2.680': attribute type 2 has an invalid length. [ 149.834247][ T5928] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.854078][ T5930] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.986899][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 149.989435][ T5928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.989457][ T5928] usb 1-1: config 0 has no interface number 0 [ 149.998521][ T5928] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 149.998547][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.998564][ T5928] usb 1-1: Product: syz [ 149.998576][ T5928] usb 1-1: Manufacturer: syz [ 149.998588][ T5928] usb 1-1: SerialNumber: syz [ 150.049320][ T5928] usb 1-1: config 0 descriptor?? [ 150.053967][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 150.062982][ T5928] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 150.063025][ T5928] usb 1-1: selecting invalid altsetting 1 [ 150.063038][ T5928] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 150.074968][ T5930] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 150.074995][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.075010][ T5930] usb 2-1: Product: syz [ 150.075022][ T5930] usb 2-1: Manufacturer: syz [ 150.075035][ T5930] usb 2-1: SerialNumber: syz [ 150.140376][ T5928] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.140811][ T5928] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 150.140858][ T5928] usb 1-1: media controller created [ 150.170697][ T5930] usb 2-1: config 0 descriptor?? [ 150.187040][ T5930] gspca_main: se401-2.14.0 probing 047d:5003 [ 150.359867][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.464768][ T5928] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 150.464823][ T5928] zl10353_read_register: readreg error (reg=127, ret==-71) [ 150.465396][ T5928] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 150.627024][ T5928] usb 1-1: USB disconnect, device number 4 [ 150.806323][ T5930] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 150.841623][ T5930] usb 2-1: USB disconnect, device number 9 [ 151.034143][ T5929] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.191034][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.191061][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.191097][ T5929] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 151.191116][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.214054][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 151.262229][ T5929] usb 4-1: config 0 descriptor?? [ 151.371027][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.371057][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 151.371131][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 151.371166][ T31] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 151.371185][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.447749][ T31] usb 3-1: config 0 descriptor?? [ 151.452748][ T7463] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.800207][ T5929] hid_mf 0003:0079:1846.000C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 151.800240][ T5929] hid_mf 0003:0079:1846.000C: Invalid report, this should never happen! [ 151.800253][ T5929] hid_mf 0003:0079:1846.000C: Force feedback init failed. [ 151.898315][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898353][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898376][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898400][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898422][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898446][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898470][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898492][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898515][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.898538][ T31] aureal 0003:0755:2626.000D: unknown main item tag 0x0 [ 151.917576][ T5853] usb 4-1: USB disconnect, device number 7 [ 151.995742][ T31] aureal 0003:0755:2626.000D: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0 [ 152.081288][ T10] usb 3-1: USB disconnect, device number 5 [ 152.128490][ T7483] fido_id[7483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 152.474728][ T7490] fido_id[7490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 152.998071][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.173085][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.173116][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.173133][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.173171][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 153.173191][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.222327][ T10] usb 1-1: config 0 descriptor?? [ 153.697572][ T10] elecom 0003:056E:010C.000E: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.0-1/input0 [ 153.884853][ T10] usb 1-1: USB disconnect, device number 5 [ 153.954895][ T7532] netlink: 256 bytes leftover after parsing attributes in process `syz.3.723'. [ 153.954915][ T7532] netlink: 80 bytes leftover after parsing attributes in process `syz.3.723'. [ 154.086645][ T7528] fido_id[7528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.673271][ T7549] mkiss: ax0: crc mode is auto. [ 155.364979][ T7562] netlink: 277 bytes leftover after parsing attributes in process `syz.4.737'. [ 156.119275][ T5930] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.264023][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 156.267741][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.267769][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.267805][ T5930] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 156.267825][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.331318][ T5930] usb 3-1: config 0 descriptor?? [ 156.771370][ T5930] kone 0003:1E7D:2CED.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 156.942799][ T7588] syz.4.750 (7588) used greatest stack depth: 16760 bytes left [ 156.959595][ T5930] kone 0003:1E7D:2CED.000F: couldn't init struct kone_device [ 156.959646][ T5930] kone 0003:1E7D:2CED.000F: couldn't install mouse [ 156.991401][ T5930] kone 0003:1E7D:2CED.000F: probe with driver kone failed with error -5 [ 157.017267][ T5930] usb 3-1: USB disconnect, device number 6 [ 157.094360][ T7591] fido_id[7591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 157.571931][ T7604] Invalid source name [ 157.571948][ T7604] UBIFS error (pid: 7604): cannot open "usrquota", error -22 [ 158.304232][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 158.469526][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 158.469558][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 158.469596][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 158.469616][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.485348][ T9] usb 5-1: config 0 descriptor?? [ 158.486489][ T7618] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.977003][ T9] hid_parser_main: 102 callbacks suppressed [ 158.977026][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.977057][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.977083][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.977109][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.977134][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.977159][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.977184][ T9] waltop 0003:172F:0500.0010: unknown main item tag 0x0 [ 158.995886][ T9] waltop 0003:172F:0500.0010: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.4-1/input0 [ 159.160003][ T31] usb 5-1: USB disconnect, device number 9 [ 159.289997][ T7636] fido_id[7636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 159.712594][ T5844] Bluetooth: latency 3388 > 499 [ 160.424067][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 160.534115][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.574185][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 160.576928][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.578478][ T31] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 160.578500][ T31] usb 5-1: config 4 has no interface number 0 [ 160.578530][ T31] usb 5-1: config 4 interface 30 has no altsetting 0 [ 160.582449][ T31] usb 5-1: string descriptor 0 read error: -22 [ 160.582598][ T31] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 160.582616][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.678850][ T31] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 160.678922][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 160.678939][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 160.699957][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.699996][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 160.700015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.709355][ T9] usb 4-1: config 0 descriptor?? [ 160.744469][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.747972][ T31] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 160.748025][ T31] usb 5-1: media controller created [ 160.748197][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 160.748211][ T31] dw2102: i2c transfer failed. [ 160.748229][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 160.748240][ T31] dw2102: i2c transfer failed. [ 160.748255][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 160.748267][ T31] dw2102: i2c transfer failed. [ 160.748281][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 160.748291][ T31] dw2102: i2c transfer failed. [ 160.748305][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 160.748316][ T31] dw2102: i2c transfer failed. [ 160.748331][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 160.748342][ T31] dw2102: i2c transfer failed. [ 160.748351][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 160.868837][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.927717][ T7662] dw2102: i2c wr: len=66 is too big! [ 160.927717][ T7662] [ 160.932411][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 160.932433][ T31] dw2102: command 0x0e transfer failed. [ 160.932442][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 160.932453][ T31] dw2102: command 0x0e transfer failed. [ 161.235335][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 161.235356][ T31] dw2102: command 0x0e transfer failed. [ 161.235365][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 161.235377][ T31] dw2102: command 0x0e transfer failed. [ 161.235385][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 161.235397][ T31] dw2102: command 0x51 transfer failed. [ 161.235406][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 161.235417][ T31] dw2102: i2c probe for address 0x68 failed. [ 161.235428][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 161.235439][ T31] dw2102: i2c probe for address 0x69 failed. [ 161.235449][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 161.235461][ T31] dw2102: i2c probe for address 0x6a failed. [ 161.235470][ T31] dw2102: probing for demodulator failed. Is the external power switched on? [ 161.235479][ T31] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 161.255727][ T9] isku 0003:1E7D:3264.0011: unknown main item tag 0x0 [ 161.255765][ T9] isku 0003:1E7D:3264.0011: unknown main item tag 0x0 [ 161.255790][ T9] isku 0003:1E7D:3264.0011: unknown main item tag 0x0 [ 161.265661][ T9] isku 0003:1E7D:3264.0011: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 161.324417][ T7677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.791'. [ 161.455205][ T9] usb 4-1: USB disconnect, device number 8 [ 161.725148][ T31] rc_core: IR keymap rc-tt-1500 not found [ 161.725167][ T31] Registered IR keymap rc-empty [ 161.727113][ T31] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 161.747836][ T5844] Bluetooth: hci3: command tx timeout [ 161.794079][ T31] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 161.820940][ T31] dvb-usb: schedule remote query interval to 250 msecs. [ 161.820964][ T31] dw2102: su3000_power_ctrl: 0, initialized 1 [ 161.820974][ T31] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 161.868657][ T31] usb 5-1: USB disconnect, device number 10 [ 161.899610][ T7679] fido_id[7679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 162.284250][ T31] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 162.538819][ T7691] Bluetooth: MGMT ver 1.23 [ 162.702994][ T7693] dummy0: entered promiscuous mode [ 163.066147][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.231910][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.231941][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.231973][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 163.231994][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.242950][ T10] usb 3-1: config 0 descriptor?? [ 163.583420][ T7705] netlink: 'syz.0.803': attribute type 21 has an invalid length. [ 163.697914][ T10] lenovo 0003:17EF:6067.0012: item fetching failed at offset 0/2 [ 163.698728][ T10] lenovo 0003:17EF:6067.0012: hid_parse failed [ 163.698794][ T10] lenovo 0003:17EF:6067.0012: probe with driver lenovo failed with error -22 [ 163.874051][ T9] usb 3-1: USB disconnect, device number 7 [ 164.854161][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.024399][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 165.030283][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 165.030309][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.030327][ T10] usb 3-1: Product: syz [ 165.030339][ T10] usb 3-1: Manufacturer: syz [ 165.030351][ T10] usb 3-1: SerialNumber: syz [ 165.088759][ T10] usb 3-1: config 0 descriptor?? [ 165.102524][ T10] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 165.194803][ T7729] netlink: 260 bytes leftover after parsing attributes in process `syz.3.815'. [ 165.194830][ T7729] netlink: 260 bytes leftover after parsing attributes in process `syz.3.815'. [ 165.737479][ T10] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 165.764635][ T10] usb 3-1: USB disconnect, device number 8 [ 166.087340][ T3572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.728826][ T7749] [U]  [ 166.728874][ T7749] [U] K{‘ [ 166.729364][ T7749] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 166.731828][ T7749] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 166.732702][ T7749] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 166.766904][ T7749] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 166.788746][ T7749] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 166.792030][ T7749] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 166.796620][ T7749] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 166.803500][ T7749] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 166.841597][ T7749] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 166.853199][ T7749] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 166.853408][ T7749] [U] 22½“Æ©ÐÛ©X?0;3U± [ 166.865730][ T7749] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 166.868353][ T7749] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 166.869035][ T7749] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 166.872901][ T7749] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 166.879393][ T7749] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 166.879447][ T7749] [U] ¹ EC [ 166.883245][ T7749] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 166.931018][ T7748] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 166.981842][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.990759][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.992990][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.998773][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.001825][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.112690][ T3572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.588045][ T3572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.988560][ T7776] program syz.2.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.102139][ T37] audit: type=1326 audit(1756964800.352:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.102192][ T37] audit: type=1326 audit(1756964800.352:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.125838][ T37] audit: type=1326 audit(1756964800.382:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.125887][ T37] audit: type=1326 audit(1756964800.382:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.125925][ T37] audit: type=1326 audit(1756964800.382:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.127834][ T37] audit: type=1326 audit(1756964800.382:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.127884][ T37] audit: type=1326 audit(1756964800.382:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.127922][ T37] audit: type=1326 audit(1756964800.382:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7778 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d136ebe9 code=0x7ffc0000 [ 168.300005][ T3572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.028482][ T5844] Bluetooth: hci4: command tx timeout [ 169.247882][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 169.441592][ T7799] sch_fq: defrate 4294967295 ignored. [ 169.612350][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.630768][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.641396][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.661297][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.662136][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.490748][ T7828] netlink: 'syz.2.859': attribute type 2 has an invalid length. [ 170.765060][ T3572] bridge_slave_1: left allmulticast mode [ 170.765449][ T3572] bridge_slave_1: left promiscuous mode [ 170.767616][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.887183][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.864'. [ 170.916887][ T3572] bridge_slave_0: left allmulticast mode [ 170.919047][ T3572] bridge_slave_0: left promiscuous mode [ 170.919405][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.944452][ T5929] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.104069][ T5844] Bluetooth: hci4: command tx timeout [ 171.120895][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 171.123757][ T5929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 171.123802][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 171.123839][ T5929] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 171.123858][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.176190][ T5929] usb 3-1: config 0 descriptor?? [ 171.337835][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 171.337873][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 171.591406][ T5929] hid_parser_main: 4 callbacks suppressed [ 171.591437][ T5929] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 171.591468][ T5929] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 171.591491][ T5929] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 171.591512][ T5929] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 171.591534][ T5929] saitek 0003:06A3:0621.0013: unknown main item tag 0x0 [ 171.644393][ T5929] saitek 0003:06A3:0621.0013: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 171.746281][ T5844] Bluetooth: hci1: command tx timeout [ 171.793391][ T5853] usb 3-1: USB disconnect, device number 9 [ 172.192379][ T7863] ubi31: attaching mtd0 [ 172.192410][ T7863] ubi31 error: ubi_attach_mtd_dev: bad VID header (536940548) or data offsets (536940612) [ 172.910730][ T37] audit: type=1326 audit(1756964805.162:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7879 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cc68ebe9 code=0x7ffc0000 [ 172.910779][ T37] audit: type=1326 audit(1756964805.162:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7879 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cc68ebe9 code=0x7ffc0000 [ 173.069660][ T7882] netlink: 72 bytes leftover after parsing attributes in process `syz.0.883'. [ 173.195794][ T5844] Bluetooth: hci4: command tx timeout [ 173.824390][ T5844] Bluetooth: hci1: command tx timeout [ 173.884796][ T3572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.944946][ T3572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.970825][ T3572] bond0 (unregistering): Released all slaves [ 174.144284][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.144446][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.144679][ T7753] bridge_slave_0: entered allmulticast mode [ 174.148908][ T7753] bridge_slave_0: entered promiscuous mode [ 174.196717][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.196930][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.197165][ T7753] bridge_slave_1: entered allmulticast mode [ 174.201093][ T7753] bridge_slave_1: entered promiscuous mode [ 175.261696][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.265556][ T5844] Bluetooth: hci4: command tx timeout [ 175.380215][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.818800][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 175.818818][ T37] audit: type=1800 audit(1756964808.062:24): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.905" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 175.905524][ T5844] Bluetooth: hci1: command tx timeout [ 176.043560][ T5928] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 176.196599][ T5928] usb 4-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 176.196646][ T5928] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.196664][ T5928] usb 4-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 176.196693][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.196722][ T5928] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 176.196742][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.232841][ T5928] usb 4-1: config 0 descriptor?? [ 176.253561][ T37] audit: type=1326 audit(1756964808.482:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.0.908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96cc68ebe9 code=0x0 [ 176.357031][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 176.540926][ T7753] team0: Port device team_slave_0 added [ 176.612600][ T7753] team0: Port device team_slave_1 added [ 176.711018][ T5928] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0 [ 176.711054][ T5928] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0 [ 176.711081][ T5928] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0 [ 176.711106][ T5928] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0 [ 176.711131][ T5928] nzxt-kraken2 0003:1E71:170E.0014: unknown main item tag 0x0 [ 176.724996][ T5928] nzxt-kraken2 0003:1E71:170E.0014: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.3-1/input0 [ 176.934209][ T5928] usb 4-1: USB disconnect, device number 9 [ 177.301831][ T3572] hsr_slave_0: left promiscuous mode [ 177.334875][ T3572] hsr_slave_1: left promiscuous mode [ 177.336190][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.336281][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.388369][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.388399][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.538326][ T3572] veth1_macvtap: left promiscuous mode [ 177.539547][ T3572] veth0_macvtap: left promiscuous mode [ 177.539927][ T3572] veth1_vlan: left promiscuous mode [ 177.540331][ T3572] veth0_vlan: left promiscuous mode [ 177.897872][ T7952] Falling back ldisc for ttynull. [ 177.984758][ T5844] Bluetooth: hci1: command tx timeout [ 178.554119][ T5928] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.704153][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 178.707852][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.707894][ T5928] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 178.707914][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.716123][ T5928] usb 1-1: config 0 descriptor?? [ 179.135191][ T5928] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 179.135226][ T5928] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 179.135251][ T5928] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 179.135277][ T5928] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 179.135303][ T5928] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 179.146424][ T5928] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 179.334722][ T5928] usb 1-1: USB disconnect, device number 6 [ 180.414999][ T3572] team0 (unregistering): Port device team_slave_1 removed [ 180.669010][ T3572] team0 (unregistering): Port device team_slave_0 removed [ 182.908025][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.908035][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.908048][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.940183][ T7995] ip6tnl1: entered allmulticast mode [ 182.986449][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.986464][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.986488][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.920439][ T7753] hsr_slave_0: entered promiscuous mode [ 183.921718][ T7753] hsr_slave_1: entered promiscuous mode [ 183.938284][ T7753] debugfs: 'hsr0' already exists in 'hsr' [ 183.938312][ T7753] Cannot create hsr debugfs directory [ 183.954003][ T5907] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 184.106468][ T5907] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 184.106494][ T5907] usb 3-1: config 0 has no interface number 0 [ 184.106536][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.106556][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 184.106579][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 184.106599][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 184.106621][ T5907] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 184.106641][ T5907] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.106678][ T5907] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 184.106698][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.193642][ T5907] usb 3-1: config 0 descriptor?? [ 184.194819][ T8018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.195001][ T8018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.286593][ T5907] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 184.484666][ T5907] usb 3-1: USB disconnect, device number 10 [ 184.490868][ T5907] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 184.690679][ T7800] chnl_net:caif_netlink_parms(): no params data found [ 184.824148][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 184.974207][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 184.976839][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.976867][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.976887][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.976926][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.976947][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.997729][ T5928] usb 4-1: config 0 descriptor?? [ 185.495276][ T5928] HID 045e:07da: Invalid code 65791 type 1 [ 185.505293][ T5928] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input9 [ 185.551736][ T5928] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 185.708327][ T5930] usb 4-1: USB disconnect, device number 10 [ 185.714117][ T5853] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 185.866677][ T5853] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.866704][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.886553][ T5853] usb 1-1: config 0 descriptor?? [ 185.907535][ T5853] cp210x 1-1:0.0: cp210x converter detected [ 186.019360][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.022479][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.028086][ T7800] bridge_slave_0: entered allmulticast mode [ 186.041883][ T7800] bridge_slave_0: entered promiscuous mode [ 186.063184][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.063415][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.063828][ T7800] bridge_slave_1: entered allmulticast mode [ 186.100233][ T7800] bridge_slave_1: entered promiscuous mode [ 186.272578][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 186.428117][ T5853] usb 1-1: cp210x converter now attached to ttyUSB0 [ 186.534787][ T5928] usb 1-1: USB disconnect, device number 7 [ 186.569898][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.575839][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.669308][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.693423][ T5928] cp210x 1-1:0.0: device disconnected [ 187.800426][ T3572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.937649][ T7800] team0: Port device team_slave_0 added [ 187.959897][ T7800] team0: Port device team_slave_1 added [ 188.403290][ T3572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.467709][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.467725][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.467748][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.521400][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.521414][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.521437][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.949758][ T3572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.215646][ T7753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.438649][ T7753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.708594][ T3572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.854807][ T7800] hsr_slave_0: entered promiscuous mode [ 189.866822][ T7800] hsr_slave_1: entered promiscuous mode [ 189.867654][ T7800] debugfs: 'hsr0' already exists in 'hsr' [ 189.867674][ T7800] Cannot create hsr debugfs directory [ 189.869151][ T7753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.999810][ T8079] syz.3.958 (8079): drop_caches: 1 [ 190.012933][ T7753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 190.534076][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 190.635389][ T8146] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 190.635411][ T8146] netlink: 17 bytes leftover after parsing attributes in process `syz.3.980'. [ 190.689626][ T31] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 190.689651][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.689668][ T31] usb 3-1: config 0 has no interface number 0 [ 190.689714][ T31] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 190.689733][ T31] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.693553][ T31] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 190.693580][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.693597][ T31] usb 3-1: Product: syz [ 190.693609][ T31] usb 3-1: Manufacturer: syz [ 190.693621][ T31] usb 3-1: SerialNumber: syz [ 190.795911][ T31] usb 3-1: config 0 descriptor?? [ 191.476291][ T5853] usb 3-1: USB disconnect, device number 11 [ 191.540734][ T3572] bridge_slave_1: left allmulticast mode [ 191.540765][ T3572] bridge_slave_1: left promiscuous mode [ 191.541042][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.625984][ T3572] bridge_slave_0: left allmulticast mode [ 191.626017][ T3572] bridge_slave_0: left promiscuous mode [ 191.626307][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.710718][ T8164] autofs: Bad value for 'fd' [ 192.224258][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.394096][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 192.396505][ T5930] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.398041][ T5930] usb 4-1: config 4 interface 0 has no altsetting 0 [ 192.402546][ T5930] usb 4-1: string descriptor 0 read error: -22 [ 192.402644][ T5930] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 192.402656][ T5930] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 192.430881][ T5930] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 192.485827][ T5930] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 192.486197][ T5930] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 192.486245][ T5930] usb 4-1: media controller created [ 192.514050][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 192.568684][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.666731][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.666778][ T10] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 192.666798][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.672086][ T10] usb 3-1: config 0 descriptor?? [ 193.101547][ T10] aquacomputer_d5next 0003:0C70:F00B.0017: unknown main item tag 0x1 [ 193.101584][ T10] aquacomputer_d5next 0003:0C70:F00B.0017: unknown main item tag 0x0 [ 193.101610][ T10] aquacomputer_d5next 0003:0C70:F00B.0017: unknown main item tag 0x0 [ 193.140453][ T10] aquacomputer_d5next 0003:0C70:F00B.0017: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 193.306602][ T10] usb 3-1: USB disconnect, device number 12 [ 193.608478][ T8178] fido_id[8178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 193.668083][ T5930] zl10353_read_register: readreg error (reg=127, ret==0) [ 193.669099][ T8173] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 193.756071][ T5930] usb 4-1: USB disconnect, device number 11 [ 194.392372][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392450][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.434927][ T3572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.516482][ T3572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.572620][ T3572] bond0 (unregistering): Released all slaves [ 195.136438][ T3572] tipc: Disabling bearer [ 195.140993][ T3572] tipc: Left network mode [ 195.298796][ T3572] IPVS: stopping master sync thread 7401 ... [ 196.413574][ T8229] fuse: Invalid rootmode [ 196.636948][ T8242] process 'syz.0.1016' launched './file0' with NULL argv: empty string added [ 197.077245][ T7800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.208986][ T7800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.370840][ T7800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.686125][ T3572] hsr_slave_0: left promiscuous mode [ 197.736725][ T3572] hsr_slave_1: left promiscuous mode [ 197.737642][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.737670][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.815425][ T3572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.817648][ T3572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.051544][ T3572] veth1_macvtap: left promiscuous mode [ 198.051669][ T3572] veth0_macvtap: left promiscuous mode [ 198.051958][ T3572] veth1_vlan: left promiscuous mode [ 198.052164][ T3572] veth0_vlan: left promiscuous mode [ 198.394157][ T5907] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.564081][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 198.571178][ T5907] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 198.571205][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.571228][ T5907] usb 3-1: Product: syz [ 198.571240][ T5907] usb 3-1: Manufacturer: syz [ 198.571253][ T5907] usb 3-1: SerialNumber: syz [ 198.613219][ T5907] usb 3-1: config 0 descriptor?? [ 198.627063][ T5907] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 198.736653][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.263320][ T5907] gspca_stk1135: reg_w 0x3 err -71 [ 199.269715][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269731][ T5907] gspca_stk1135: Sensor write failed [ 199.269753][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269761][ T5907] gspca_stk1135: Sensor write failed [ 199.269780][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269788][ T5907] gspca_stk1135: Sensor read failed [ 199.269807][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269814][ T5907] gspca_stk1135: Sensor read failed [ 199.269819][ T5907] gspca_stk1135: Detected sensor type unknown (0x0) [ 199.269847][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269856][ T5907] gspca_stk1135: Sensor read failed [ 199.269876][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269884][ T5907] gspca_stk1135: Sensor read failed [ 199.269904][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269912][ T5907] gspca_stk1135: Sensor write failed [ 199.269932][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 199.269940][ T5907] gspca_stk1135: Sensor write failed [ 199.270035][ T5907] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 199.399007][ T5907] usb 3-1: USB disconnect, device number 13 [ 201.313640][ T3572] team0 (unregistering): Port device team_slave_1 removed [ 201.527486][ T3572] team0 (unregistering): Port device team_slave_0 removed [ 201.584201][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 201.584232][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 203.826579][ T7800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.892093][ T8306] pimreg: entered allmulticast mode [ 203.907520][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 203.907650][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 203.909749][ T5844] Bluetooth: hci2: hardware error 0x00 [ 204.170550][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.318631][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.366364][ T6019] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.366639][ T6019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.380582][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.384138][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.482014][ T5853] kernel write not supported for file /input/event0 (pid: 5853 comm: kworker/0:4) [ 204.724907][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.929577][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.968916][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.969052][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.988672][ T8335] mkiss: ax0: crc mode is auto. [ 205.245536][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.246108][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.742124][ T8357] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1059'. [ 206.171434][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.235263][ T5844] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 206.892137][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.149985][ T37] audit: type=1326 audit(1756964839.402:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.150033][ T37] audit: type=1326 audit(1756964839.402:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.204153][ T37] audit: type=1326 audit(1756964839.462:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.213395][ T37] audit: type=1326 audit(1756964839.462:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.213445][ T37] audit: type=1326 audit(1756964839.462:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.213737][ T37] audit: type=1326 audit(1756964839.462:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.424380][ T37] audit: type=1326 audit(1756964839.682:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.424429][ T37] audit: type=1326 audit(1756964839.682:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x7ffc0000 [ 207.889948][ T7753] veth0_vlan: entered promiscuous mode [ 207.941817][ T7753] veth1_vlan: entered promiscuous mode [ 208.252686][ T7753] veth0_macvtap: entered promiscuous mode [ 208.266147][ T7800] veth0_vlan: entered promiscuous mode [ 208.282803][ T7753] veth1_macvtap: entered promiscuous mode [ 208.354986][ T7800] veth1_vlan: entered promiscuous mode [ 208.473346][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.530756][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.576120][ T37] audit: type=1800 audit(1756964840.832:34): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1084" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 208.663578][ T7800] veth0_macvtap: entered promiscuous mode [ 208.666107][ T4264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.715503][ T6019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.731721][ T6019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.743570][ T6019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.755823][ T7800] veth1_macvtap: entered promiscuous mode [ 209.194247][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.264244][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.380136][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.382833][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.382922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.382939][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.391346][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.393652][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.687618][ T8471] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 209.748433][ T988] usb 4-1: [UEAGLE-ATM] firmware is not available [ 209.867506][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.867525][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.341239][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.341256][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.424168][ T5915] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.601605][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.601623][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.602693][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.602735][ T5915] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 210.602755][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.679408][ T5915] usb 3-1: config 0 descriptor?? [ 211.071075][ T8499] atomic_op ffff888028ed5a18 conn xmit_atomic 0000000000000000 [ 211.147339][ T5915] kye 0003:0458:5010.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 211.149245][ T5915] kye 0003:0458:5010.0018: unknown main item tag 0x0 [ 211.149282][ T5915] kye 0003:0458:5010.0018: unknown main item tag 0x0 [ 211.149308][ T5915] kye 0003:0458:5010.0018: unknown main item tag 0x0 [ 211.192208][ T5915] kye 0003:0458:5010.0018: hidraw0: USB HID v0.08 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 211.192238][ T5915] kye 0003:0458:5010.0018: tablet-enabling feature report not found [ 211.192250][ T5915] kye 0003:0458:5010.0018: tablet enabling failed [ 211.404663][ T988] usb 3-1: USB disconnect, device number 14 [ 211.894858][ T8514] fido_id[8514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 211.945331][ T8523] program syz.5.1113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.470465][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 213.144037][ T5840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 213.327354][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.327384][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.327403][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.327442][ T5840] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 213.327462][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.387242][ T5840] usb 7-1: config 0 descriptor?? [ 213.812834][ T5840] hid (null): bogus close delimiter [ 213.838536][ T5840] kye 0003:0458:5011.0019: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 213.839695][ T5840] kye 0003:0458:5011.0019: bogus close delimiter [ 213.839712][ T5840] kye 0003:0458:5011.0019: item 0 4 2 10 parsing failed [ 213.840532][ T5840] kye 0003:0458:5011.0019: parse failed [ 213.840597][ T5840] kye 0003:0458:5011.0019: probe with driver kye failed with error -22 [ 214.020517][ T8590] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1140'. [ 214.020692][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1140'. [ 214.069778][ T31] usb 7-1: USB disconnect, device number 2 [ 214.604828][ T988] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 214.762990][ T988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.763017][ T988] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.763056][ T988] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 214.763077][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.816133][ T988] usb 6-1: config 0 descriptor?? [ 215.270989][ T8626] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 215.271018][ T8626] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1153'. [ 215.300573][ T988] kye 0003:0458:5011.001A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 215.344761][ T988] kye 0003:0458:5011.001A: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 215.344791][ T988] kye 0003:0458:5011.001A: tablet-enabling feature report not found [ 215.344804][ T988] kye 0003:0458:5011.001A: tablet enabling failed [ 215.566109][ T5929] usb 6-1: USB disconnect, device number 2 [ 215.655630][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 216.464088][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.627114][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 216.634366][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.634396][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.634431][ T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 216.634450][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.656144][ T31] usb 4-1: config 0 descriptor?? [ 217.093204][ T31] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 217.093243][ T31] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 217.093267][ T31] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 217.093291][ T31] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 217.093314][ T31] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 217.156167][ T31] savu 0003:1E7D:2D5A.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 217.203053][ T8683] netlink: 'syz.6.1175': attribute type 5 has an invalid length. [ 217.355933][ T31] usb 4-1: USB disconnect, device number 12 [ 217.530322][ T8688] fido_id[8688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 218.310308][ T8714] can0: slcan on ptm0. [ 218.499932][ T8713] can0 (unregistered): slcan off ptm0. [ 218.574781][ T8727] tipc: Started in network mode [ 218.574810][ T8727] tipc: Node identity 2d000000400000000075000000000001, cluster identity 4711 [ 218.574859][ T8727] tipc: Enabling of bearer rejected, failed to enable media [ 219.904276][ T5929] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.054035][ T5915] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 220.054207][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 220.063500][ T5929] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 220.063524][ T5929] usb 1-1: config 0 has no interface number 0 [ 220.063573][ T5929] usb 1-1: config 0 interface 2 has no altsetting 0 [ 220.108196][ T5929] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 220.108221][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.108236][ T5929] usb 1-1: Product: syz [ 220.108248][ T5929] usb 1-1: Manufacturer: syz [ 220.108259][ T5929] usb 1-1: SerialNumber: syz [ 220.130466][ T8782] tmpfs: Cannot retroactively limit inodes [ 220.156516][ T5929] usb 1-1: config 0 descriptor?? [ 220.223854][ T5915] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 220.226470][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.311406][ T5915] usb 3-1: config 0 descriptor?? [ 220.371303][ T5929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 220.684135][ T988] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.756126][ T5915] hid-alps 0003:044E:120C.001C: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 220.837798][ T5929] usb 1-1: USB disconnect, device number 8 [ 220.845246][ T988] usb 6-1: Using ep0 maxpacket: 8 [ 220.848083][ T988] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.848112][ T988] usb 6-1: config 0 interface 0 has no altsetting 0 [ 220.848143][ T988] usb 6-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 220.848164][ T988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.926906][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1220'. [ 220.991990][ T5840] usb 3-1: USB disconnect, device number 15 [ 221.160395][ T988] usb 6-1: config 0 descriptor?? [ 221.746934][ T988] thrustmaster 0003:044F:B300.001D: hidraw0: USB HID v0.03 Device [HID 044f:b300] on usb-dummy_hcd.5-1/input0 [ 221.746964][ T988] thrustmaster 0003:044F:B300.001D: no inputs found [ 221.796009][ T8818] tipc: Started in network mode [ 221.796037][ T8818] tipc: Node identity b6eeb889da07, cluster identity 4711 [ 221.796291][ T8818] tipc: Enabled bearer , priority 10 [ 221.864758][ T5930] usb 6-1: USB disconnect, device number 3 [ 221.897505][ T8820] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 221.927844][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.983022][ T8820] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 222.233690][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 222.282064][ T8832] udevd[8832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.858184][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1244'. [ 222.914066][ T5930] tipc: Node number set to 1827256457 [ 223.372458][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 224.354088][ T5930] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 224.508489][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.508518][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.508554][ T5930] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 224.508573][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.588412][ T5930] usb 1-1: config 0 descriptor?? [ 224.633067][ T5844] Bluetooth: hci1: link tx timeout [ 224.633449][ T5844] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.043496][ T5930] glorious 0003:258A:0036.001E: unknown main item tag 0x1 [ 225.064626][ T5928] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 225.124873][ T5930] glorious 0003:258A:0036.001E: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0 [ 225.226677][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.226707][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.226726][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.226763][ T5928] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 225.226781][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.242376][ T37] audit: type=1326 audit(1756964857.492:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8923 comm="syz.3.1272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9d136ebe9 code=0x0 [ 225.267734][ T5930] usb 1-1: USB disconnect, device number 9 [ 225.323316][ T5928] usb 3-1: config 0 descriptor?? [ 225.518491][ T8922] fido_id[8922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 225.617100][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 225.617169][ T8931] tipc: Started in network mode [ 225.617249][ T8931] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 225.617300][ T8931] tipc: Enabling of bearer rejected, failed to enable media [ 225.823858][ T5928] apple 0003:05AC:8102.001F: unknown main item tag 0x0 [ 225.825228][ T5928] apple 0003:05AC:8102.001F: unknown main item tag 0x0 [ 225.825260][ T5928] apple 0003:05AC:8102.001F: unknown main item tag 0x0 [ 225.825287][ T5928] apple 0003:05AC:8102.001F: unknown main item tag 0x0 [ 225.825312][ T5928] apple 0003:05AC:8102.001F: unknown main item tag 0x0 [ 225.874831][ T5928] apple 0003:05AC:8102.001F: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.2-1/input0 [ 226.027514][ T5928] usb 3-1: USB disconnect, device number 16 [ 226.180273][ T8939] fido_id[8939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 226.653154][ T8958] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1287'. [ 226.725323][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 226.933998][ T5928] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.104282][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 227.104330][ T5928] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 227.104351][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.165050][ T5928] usb 1-1: config 0 descriptor?? [ 227.588563][ T5928] logitech 0003:046D:CA03.0020: unbalanced delimiter at end of report description [ 227.589276][ T5928] logitech 0003:046D:CA03.0020: parse failed [ 227.589368][ T5928] logitech 0003:046D:CA03.0020: probe with driver logitech failed with error -22 [ 227.784475][ T31] usb 1-1: USB disconnect, device number 10 [ 228.375852][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 228.527899][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.527927][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 228.527959][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 228.527979][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.545657][ T31] usb 3-1: config 0 descriptor?? [ 229.027509][ T31] wacom 0003:056A:0333.0021: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 229.192098][ T988] usb 3-1: USB disconnect, device number 17 [ 229.460240][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 229.814185][ T988] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 229.974095][ T988] usb 7-1: Using ep0 maxpacket: 16 [ 229.976996][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 229.977041][ T988] usb 7-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 229.977061][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.026136][ T988] usb 7-1: config 0 descriptor?? [ 230.644085][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 230.664809][ T5929] usb 7-1: USB disconnect, device number 3 [ 231.823979][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.964178][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1350'. [ 231.979890][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.979934][ T5915] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 231.979955][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.023592][ T5915] usb 4-1: config 0 descriptor?? [ 232.476231][ T5915] lenovo 0003:17EF:6047.0023: unknown main item tag 0x0 [ 232.476270][ T5915] lenovo 0003:17EF:6047.0023: unknown main item tag 0x0 [ 232.476296][ T5915] lenovo 0003:17EF:6047.0023: unknown main item tag 0x0 [ 232.476322][ T5915] lenovo 0003:17EF:6047.0023: unknown main item tag 0x0 [ 232.476348][ T5915] lenovo 0003:17EF:6047.0023: unknown main item tag 0x0 [ 232.480286][ T5915] lenovo 0003:17EF:6047.0023: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 232.594072][ T5840] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 232.677140][ T5915] lenovo 0003:17EF:6047.0023: Failed to switch F7/9/11 mode: -71 [ 232.677692][ T5915] lenovo 0003:17EF:6047.0023: Failed to switch middle button: -71 [ 232.680383][ T5915] lenovo 0003:17EF:6047.0023: Fn-lock setting failed: -71 [ 232.690057][ T5915] lenovo 0003:17EF:6047.0023: Sensitivity setting failed: -71 [ 232.738920][ T5915] usb 4-1: USB disconnect, device number 13 [ 232.753306][ T5840] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.753330][ T5840] usb 1-1: config 0 has no interface number 0 [ 232.753375][ T5840] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 232.753395][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.788207][ T9133] fido_id[9133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 232.824959][ T5840] usb 1-1: config 0 descriptor?? [ 232.832109][ T5840] usb 1-1: selecting invalid altsetting 1 [ 232.832278][ T5840] dvb_ttusb_budget: ttusb_init_controller: error [ 232.832292][ T5840] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 232.935855][ T5840] DVB: Unable to find symbol cx22700_attach() [ 233.166531][ T5840] DVB: Unable to find symbol tda10046_attach() [ 233.166546][ T5840] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 233.221609][ T5840] usb 1-1: USB disconnect, device number 11 [ 233.256663][ T9145] program syz.2.1359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.564065][ T5929] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 233.724274][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 233.728400][ T5929] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 233.728424][ T5929] usb 7-1: config 0 has no interface number 0 [ 233.728464][ T5929] usb 7-1: config 0 interface 12 has no altsetting 0 [ 233.730963][ T5929] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 233.730988][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.731005][ T5929] usb 7-1: Product: syz [ 233.731016][ T5929] usb 7-1: Manufacturer: syz [ 233.731028][ T5929] usb 7-1: SerialNumber: syz [ 233.764211][ T5929] usb 7-1: config 0 descriptor?? [ 233.854050][ T5840] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 234.019381][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.019413][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.019449][ T5840] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 234.019470][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.077687][ T5840] usb 6-1: config 0 descriptor?? [ 234.457809][ T5929] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 234.457874][ T5929] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 234.457890][ T5929] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 234.457977][ T5929] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 234.532571][ T5929] usb 7-1: USB disconnect, device number 4 [ 234.740798][ T991] usb 6-1: USB disconnect, device number 4 [ 235.099476][ T59] Bluetooth: hci0: unexpected event for opcode 0x042d [ 235.423128][ T991] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 235.584166][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 235.586669][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.586699][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.586735][ T991] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 235.586755][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.597245][ T991] usb 4-1: config 0 descriptor?? [ 236.072152][ T991] hid-picolcd 0003:04D8:F002.0025: unbalanced collection at end of report description [ 236.073037][ T991] hid-picolcd 0003:04D8:F002.0025: device report parse failed [ 236.073134][ T991] hid-picolcd 0003:04D8:F002.0025: probe with driver hid-picolcd failed with error -22 [ 236.246399][ T991] usb 4-1: USB disconnect, device number 14 [ 238.047136][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 238.047158][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1412'. [ 238.047174][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 238.047230][ T9288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 238.476881][ T9304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1417'. [ 238.553223][ T9307] syz.6.1419 uses obsolete (PF_INET,SOCK_PACKET) [ 239.245291][ T9337] netlink: 'syz.6.1431': attribute type 2 has an invalid length. [ 241.603908][ T9372] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1444'. [ 241.603932][ T9372] NCSI netlink: No device for ifindex 29216 [ 242.158451][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 244.040287][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 244.252684][ C0] sched: DL replenish lagged too much [ 247.756659][ T9438] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 248.915259][ T9452] netlink: 'syz.6.1464': attribute type 3 has an invalid length. [ 248.915283][ T9452] netlink: 'syz.6.1464': attribute type 1 has an invalid length. [ 248.915295][ T9452] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1464'. [ 252.675800][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1484'. [ 253.505663][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1491'. [ 253.724283][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1493'. [ 253.724543][ T9519] openvswitch: netlink: nsh attribute has 5260 unknown bytes. [ 253.724574][ T9519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.830918][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.570210][ T9533] netlink: 'syz.6.1500': attribute type 1 has an invalid length. [ 261.574075][ T9540] netlink: 'syz.5.1503': attribute type 10 has an invalid length. [ 265.464795][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 265.607453][ T9599] Attempt to restore checkpoint with obsolete wellknown handles [ 265.662390][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.662529][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 265.662551][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.794330][ T9] usb 4-1: config 0 descriptor?? [ 266.549185][ T9] asus 0003:0B05:17E0.0026: item fetching failed at offset 2/5 [ 266.550032][ T9] asus 0003:0B05:17E0.0026: Asus hid parse failed: -22 [ 266.550133][ T9] asus 0003:0B05:17E0.0026: probe with driver asus failed with error -22 [ 266.823509][ T9] usb 4-1: USB disconnect, device number 15 [ 268.277576][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 268.291202][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 269.114032][ T37] audit: type=1326 audit(1756964901.362:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.2.1537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89a4eaebe9 code=0x0 [ 269.580734][ T9627] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1539'. [ 270.350784][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.385194][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.418014][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.450195][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.483389][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.514958][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.546322][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.578558][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.608619][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.638753][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.669928][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.734398][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.764916][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.797235][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.828246][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.866837][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.901008][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.932313][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.963503][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.995891][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.027523][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.057923][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.089317][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.122409][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.156363][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.188351][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.219800][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.286634][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.320228][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.353500][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.386413][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.450739][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.482942][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.516973][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.548613][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.578789][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.614157][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.647801][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.681200][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.716465][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.725543][ T9640] ntfs3: Bad value for 'gid' [ 271.725562][ T9640] ntfs3: Bad value for 'gid' [ 271.746788][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.778441][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.813084][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.846403][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.877239][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.910048][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.942478][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.973618][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.006431][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.039065][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.070227][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.103264][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.136510][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.183435][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.219842][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.260101][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.291210][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.324571][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.356376][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.395377][ T9644] vxcan3: entered allmulticast mode [ 272.404629][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.442018][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.480184][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.511301][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.536263][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.599590][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.629698][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.661184][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.686366][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.745308][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.776476][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.807943][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.840901][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.872417][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.915864][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.965252][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.995494][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.025717][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.058764][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.088639][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.149765][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.180935][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.212360][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.244723][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.287030][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.331675][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.365235][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.397060][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.423517][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.398240][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.424238][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.452420][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.453733][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.469826][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.098088][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.122841][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.142307][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.143751][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.162337][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.544151][ T5844] Bluetooth: hci5: command tx timeout [ 286.224118][ T5844] Bluetooth: hci6: command tx timeout [ 286.624220][ T5844] Bluetooth: hci5: command tx timeout [ 287.056049][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.094372][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.096053][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.097235][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.098571][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.304155][ T5844] Bluetooth: hci6: command tx timeout [ 288.705651][ T5844] Bluetooth: hci5: command tx timeout [ 288.852860][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 288.887894][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 288.889984][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 288.891844][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 288.920829][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 289.189219][ T59] Bluetooth: hci7: command tx timeout [ 290.384276][ T59] Bluetooth: hci6: command tx timeout [ 290.784106][ T5844] Bluetooth: hci5: command tx timeout [ 291.029721][ T5844] Bluetooth: hci8: command tx timeout [ 291.264120][ T59] Bluetooth: hci7: command tx timeout [ 292.082079][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.128219][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.129607][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.135124][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.135986][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.464208][ T5844] Bluetooth: hci6: command tx timeout [ 293.111021][ T5844] Bluetooth: hci8: command tx timeout [ 293.344274][ T5844] Bluetooth: hci7: command tx timeout [ 293.744263][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 294.224304][ T5844] Bluetooth: hci2: command tx timeout [ 295.184163][ T5844] Bluetooth: hci8: command tx timeout [ 295.424222][ T5844] Bluetooth: hci7: command tx timeout [ 296.304117][ T5844] Bluetooth: hci2: command tx timeout [ 297.264275][ T5844] Bluetooth: hci8: command tx timeout [ 298.384085][ T5844] Bluetooth: hci2: command tx timeout [ 300.464043][ T5844] Bluetooth: hci2: command tx timeout [ 304.963695][ T9658] chnl_net:caif_netlink_parms(): no params data found [ 305.214408][ T9662] chnl_net:caif_netlink_parms(): no params data found [ 313.004725][ T9668] chnl_net:caif_netlink_parms(): no params data found [ 317.272167][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.327383][ T9665] chnl_net:caif_netlink_parms(): no params data found [ 342.484811][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 343.809245][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.835607][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.837787][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.838992][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.892653][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.352311][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 345.388869][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 345.390239][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 345.391495][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 345.392361][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 346.784440][ T5844] Bluetooth: hci4: command tx timeout [ 347.507136][ T5844] Bluetooth: hci9: command tx timeout [ 347.911521][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.936122][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.937438][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.938783][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.939826][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.864033][ T5844] Bluetooth: hci4: command tx timeout [ 349.266686][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 349.307278][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 349.309696][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 349.339929][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 349.340842][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 349.584079][ T59] Bluetooth: hci9: command tx timeout [ 350.064071][ T59] Bluetooth: hci3: command tx timeout [ 350.956035][ T59] Bluetooth: hci4: command tx timeout [ 351.425589][ T59] Bluetooth: hci10: command tx timeout [ 351.664126][ T59] Bluetooth: hci9: command tx timeout [ 352.143989][ T59] Bluetooth: hci3: command tx timeout [ 352.716017][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 352.720210][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 352.721461][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 352.723085][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 352.774460][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 353.024491][ T59] Bluetooth: hci4: command tx timeout [ 353.564053][ T59] Bluetooth: hci10: command tx timeout [ 353.750780][ T59] Bluetooth: hci9: command tx timeout [ 354.239945][ T59] Bluetooth: hci3: command tx timeout [ 354.876504][ T59] Bluetooth: hci11: command tx timeout [ 355.585159][ T59] Bluetooth: hci10: command tx timeout [ 356.304695][ T59] Bluetooth: hci3: command tx timeout [ 356.944165][ T59] Bluetooth: hci11: command tx timeout [ 357.684044][ T59] Bluetooth: hci10: command tx timeout [ 359.024199][ T59] Bluetooth: hci11: command tx timeout [ 361.105562][ T59] Bluetooth: hci11: command tx timeout [ 378.711417][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.487059][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.514226][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.528140][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.529464][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.530269][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.664296][ T5844] Bluetooth: hci0: command tx timeout [ 405.705479][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.711478][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.713186][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.738995][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.739830][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.395111][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 407.762699][ T5844] Bluetooth: hci0: command tx timeout [ 407.829965][ T5844] Bluetooth: hci1: command tx timeout [ 408.737888][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 408.775211][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 408.776531][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 408.778145][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 408.779050][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.833920][ T9755] Bluetooth: hci0: command tx timeout [ 409.912084][ T9755] Bluetooth: hci1: command tx timeout [ 410.217326][ T9754] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 410.240170][ T9754] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 410.241463][ T9754] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 410.265455][ T9754] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 410.266308][ T9754] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 411.834104][ T9754] Bluetooth: hci7: command 0x0406 tx timeout [ 411.901090][ T9754] Bluetooth: hci8: command 0x0406 tx timeout [ 411.904347][ T9754] Bluetooth: hci0: command tx timeout [ 411.984265][ T9759] Bluetooth: hci1: command tx timeout [ 413.657225][ T9757] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 413.692199][ T9757] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 413.720753][ T9757] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 413.722018][ T9757] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 413.722811][ T9757] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 414.064129][ T9757] Bluetooth: hci1: command tx timeout [ 416.624142][ T9764] Bluetooth: hci2: command 0x0406 tx timeout [ 440.207319][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.064066][ T5154] Bluetooth: hci12: command tx timeout [ 456.064646][ T5154] Bluetooth: hci5: command tx timeout [ 456.067006][ T9759] Bluetooth: hci13: command tx timeout [ 457.782102][ T9662] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 458.144311][ T9757] Bluetooth: hci13: command tx timeout [ 458.144344][ T9757] Bluetooth: hci5: command tx timeout [ 458.144364][ T9757] Bluetooth: hci12: command tx timeout [ 460.224160][ T9757] Bluetooth: hci13: command tx timeout [ 460.224190][ T9757] Bluetooth: hci12: command tx timeout [ 460.224211][ T9757] Bluetooth: hci5: command tx timeout [ 462.324035][ T9755] Bluetooth: hci5: command tx timeout [ 462.324070][ T9755] Bluetooth: hci12: command tx timeout [ 462.324093][ T9755] Bluetooth: hci13: command tx timeout [ 463.706935][ T9755] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 463.734992][ T9755] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 463.736346][ T9755] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 463.737947][ T9755] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 463.738726][ T9755] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 466.317559][ T9755] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 466.345255][ T9755] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 466.347265][ T9755] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 466.348528][ T9755] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 466.349363][ T9755] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 467.828506][ T5844] Bluetooth: hci9: command 0x0406 tx timeout [ 467.828840][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 469.231038][ T5844] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 469.265268][ T5844] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 469.267869][ T5844] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 469.269139][ T5844] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 469.284516][ T5844] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 470.825939][ T59] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 470.849842][ T59] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 470.851220][ T59] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 470.928217][ T9754] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 470.932942][ T9754] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 473.114101][ T9754] Bluetooth: hci3: command 0x0406 tx timeout [ 473.114144][ T9754] Bluetooth: hci10: command 0x0406 tx timeout [ 474.768253][ T9795] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 474.794947][ T9795] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 474.797632][ T9795] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 474.799188][ T9795] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 474.799950][ T9795] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 478.144216][ T9754] Bluetooth: hci11: command 0x0406 tx timeout [ 503.156296][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.592439][ T9755] Bluetooth: hci15: command tx timeout [ 512.623863][ T5844] Bluetooth: hci15: command tx timeout [ 512.704005][ T5844] Bluetooth: hci14: command tx timeout [ 512.784158][ T5844] Bluetooth: hci16: command tx timeout [ 512.784710][ T5844] Bluetooth: hci17: command tx timeout [ 514.709074][ T5845] Bluetooth: hci15: command tx timeout [ 514.783979][ T5845] Bluetooth: hci14: command tx timeout [ 514.864117][ T5845] Bluetooth: hci17: command tx timeout [ 514.864148][ T5845] Bluetooth: hci16: command tx timeout [ 516.831489][ T9795] Bluetooth: hci15: command tx timeout [ 516.876529][ T5844] Bluetooth: hci14: command tx timeout [ 516.946041][ T5844] Bluetooth: hci16: command tx timeout [ 516.946074][ T5844] Bluetooth: hci17: command tx timeout [ 518.982285][ T9795] Bluetooth: hci14: command tx timeout [ 519.030558][ T9795] Bluetooth: hci17: command tx timeout [ 519.030589][ T9795] Bluetooth: hci16: command tx timeout [ 522.546406][ T5844] Bluetooth: hci8: command tx timeout [ 524.588517][ T9792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.624029][ T9792] Bluetooth: hci8: command tx timeout [ 524.624381][ T9792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.626878][ T9792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.628175][ T9792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.668648][ T9792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.866376][ T5844] Bluetooth: hci8: command tx timeout [ 527.184487][ T38] INFO: task syz.2.1542:9634 blocked for more than 143 seconds. [ 527.184516][ T38] Not tainted syzkaller #0 [ 527.184526][ T38] Blocked by coredump. [ 527.184532][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 527.184544][ T38] task:syz.2.1542 state:D stack:26168 pid:9634 tgid:9633 ppid:5834 task_flags:0x40044c flags:0x00004002 [ 527.184599][ T38] Call Trace: [ 527.184606][ T38] [ 527.184619][ T38] __schedule+0x16f3/0x4c20 [ 527.184653][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 527.184674][ T38] ? arch_stack_walk+0xfc/0x150 [ 527.184713][ T38] ? __pfx___schedule+0x10/0x10 [ 527.184752][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.184778][ T38] rt_mutex_schedule+0x77/0xf0 [ 527.184796][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 527.184815][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 527.184851][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 527.184872][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 527.184891][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 527.184925][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 527.184954][ T38] ? tun_chr_close+0x41/0x1c0 [ 527.184975][ T38] mutex_lock_nested+0x16a/0x1d0 [ 527.184995][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 527.185016][ T38] tun_chr_close+0x41/0x1c0 [ 527.185037][ T38] __fput+0x45b/0xa80 [ 527.185066][ T38] task_work_run+0x1d4/0x260 [ 527.185088][ T38] ? __pfx_task_work_run+0x10/0x10 [ 527.185107][ T38] ? do_exit+0x6b0/0x2300 [ 527.185122][ T38] ? kmem_cache_free+0x195/0x510 [ 527.185149][ T38] do_exit+0x6b5/0x2300 [ 527.185165][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 527.185193][ T38] ? __lock_acquire+0xab9/0xd20 [ 527.185217][ T38] ? __pfx_do_exit+0x10/0x10 [ 527.185230][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 527.185251][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 527.185280][ T38] do_group_exit+0x21c/0x2d0 [ 527.185303][ T38] get_signal+0x125e/0x1310 [ 527.185343][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 527.185362][ T38] ? __pfx_task_work_add+0x10/0x10 [ 527.185380][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 527.185396][ T38] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 527.185422][ T38] ? __fget_files+0x2a/0x420 [ 527.185460][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 527.185482][ T38] exit_to_user_mode_loop+0x75/0x110 [ 527.185502][ T38] do_sysca[ 527.185502][ T38] do_syscall_64+0x2bd/0x3b0 [ 527.185522][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.185543][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.185561][ T38] ? clear_bhb_loop+0x60/0xb0 [ 527.185583][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.185606][ T38] RIP: 0033:0x7f89a4eae7eb [ 527.185626][ T38] RSP: 002b:00007f89a310c490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.185644][ T38] RAX: 0000000000000000 RBX: 00007f89a310cbe0 RCX: 00007f89a4eae7eb [ 527.185656][ T38] RDX: 00007f89a310cbe0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 527.185668][ T38] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000001 [ 527.185677][ T38] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 527.185686][ T38] R13: 0000200000fea000 R14: 0000200000fe8000 R15: 00000000fec00000 [ 527.185714][ T38] [ 527.185752][ T38] [ 527.185752][ T38] Showing all locks held in the system: [ 527.185762][ T38] 4 locks held by kworker/0:0/9: [ 527.185772][ T38] #0: ffff88805c4d3938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.185821][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.185874][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.185918][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.185962][ T38] 7 locks held by ktimers/0/16: [ 527.185971][ T38] 2 locks held by rcuc/0/20: [ 527.185980][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.186022][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.186066][ T38] 1 lock held by khungtaskd/38: [ 527.186075][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 527.186116][ T38] 3 locks held by kworker/u8:2/43: [ 527.186126][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.186168][ T38] #1: ffffc90000b47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.186211][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 527.186257][ T38] 7 locks held by kworker/u8:3/57: [ 527.186275][ T38] 4 locks held by kworker/0:2/988: [ 527.186285][ T38] #0: ffff88805c90d938 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.186333][ T38] #1: ffffc90004ca7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.186389][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.186431][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.186482][ T38] 7 locks held by kworker/u8:5/1101: [ 527.186492][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.186535][ T38] #1: ffffc90004fe7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.186579][ T38] #2: ffff88805d648300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 527.186629][ T38] #3: ffff88805d181920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 527.186674][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 527.186712][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.186754][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.186797][ T38] 3 locks held by kworker/u8:6/1108: [ 527.186807][ T38] #0: ffff8880300f3938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.186851][ T38] #1: ffffc90005047bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.186895][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 527.186937][ T38] 6 locks held by kworker/u8:9/1174: [ 527.186947][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.186991][ T38] #1: ffffc90005367bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.187034][ T38] #2: ffffffff8ecc5a20 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 527.187077][ T38] #3: ffff888036cfb0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 527.187123][ T38] #4: ffff888036cfd300 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 527.187173][ T38] #5: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 527.187232][ T38] 2 locks held by getty/5597: [ 527.187242][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 527.187304][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 527.187347][ T38] 4 locks held by kworker/0:3/5840: [ 527.187358][ T38] #0: ffff888035176938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.187401][ T38] #1: ffffc900045afbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.187453][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.187495][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.187539][ T38] 2 locks held by napi/wg2-0/5898: [ 527.187549][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.187591][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.187636][ T38] 3 locks held by kworker/0:6/6024: [ 527.187646][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.187689][ T38] #1: ffffc900052e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.187731][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 527.187783][ T38] 4 locks held by kworker/0:7/9487: [ 527.187793][ T38] #0: ffff88805cb24938 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.187841][ T38] #1: ffffc90003c7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.187897][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.187939][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.187982][ T38] 1 lock held by syz.2.1542/9634: [ 527.187992][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188037][ T38] 1 lock held by syz.6.1546/9644: [ 527.188046][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188089][ T38] 1 lock held by syz-executor/9650: [ 527.188099][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188143][ T38] 1 lock held by syz-executor/9658: [ 527.188153][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188196][ T38] 1 lock held by syz-executor/9662: [ 527.188205][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188248][ T38] 1 lock held by syz-executor/9665: [ 527.188258][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188301][ T38] 1 lock held by syz-executor/9668: [ 527.188310][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 527.188355][ T38] 4 locks held by kworker/0:9/9698: [ 527.188365][ T38] #0: ffff88805c4d3d38 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.188409][ T38] #1: ffffc90004b0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.188473][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.188515][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.188559][ T38] 4 locks held by syz-executor/9711: [ 527.188569][ T38] #0: ffff888052058e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 527.188610][ T38] #1: ffff8880520580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 527.188653][ T38] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 527.188698][ T38] #3: ffff888036e0f358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 527.188746][ T38] 2 locks held by syz-executor/9714: [ 527.188756][ T38] #0: ffff88803379ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 527.188797][ T38] #1: ffff88803379c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 527.188839][ T38] 4 locks held by kworker/0:12/9716: [ 527.188849][ T38] #0: ffff88805c4d3d38 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.188892][ T38] #1: ffffc90003ccfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.188948][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.188990][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.189033][ T38] 4 locks held by kworker/0:13/9717: [ 527.189043][ T38] #0: ffff88805e9ed538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.189090][ T38] #1: ffffc90003c5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.189146][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.189188][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.189231][ T38] 3 locks held by syz-executor/9719: [ 527.189241][ T38] #0: ffff88806ac40e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 527.189281][ T38] #1: ffff88806ac400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 527.189324][ T38] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 527.189370][ T38] 4 locks held by kworker/0:15/9736: [ 527.189380][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.189423][ T38] #1: ffffc90003c8fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.189473][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 527.189515][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 527.189558][ T38] 1 lock held by syz-executor/9740: [ 527.189569][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189609][ T38] 2 locks held by kworker/u8:15/9745: [ 527.189620][ T38] 1 lock held by syz-executor/9748: [ 527.189630][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189669][ T38] 1 lock held by syz-executor/9751: [ 527.189679][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189717][ T38] 1 lock held by syz-executor/9756: [ 527.189727][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189767][ T38] 1 lock held by syz-executor/9761: [ 527.189777][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189816][ T38] 1 lock held by syz-executor/9779: [ 527.189826][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189865][ T38] 1 lock held by syz-executor/9784: [ 527.189874][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189913][ T38] 1 lock held by syz-executor/9787: [ 527.189923][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.189963][ T38] 1 lock held by syz-executor/9790: [ 527.189973][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.190011][ T38] 4 locks held by kworker/u9:9/9792: [ 527.190021][ T38] #0: ffff888060e1e938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 527.190068][ T38] #1: ffffc90003a2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 527.190111][ T38] #2: ffff888042d940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 527.190152][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 527.190193][ T38] 1 lock held by syz-executor/9794: [ 527.190203][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.190244][ T38] 1 lock held by syz-executor/9817: [ 527.190254][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 527.190292][ T38] 1 lock held by syz-executor/9819: [ 527.190302][ T38] [ 527.190307][ T38] ============================================= [ 527.190307][ T38] [ 527.190327][ T38] NMI backtrace for cpu 1 [ 527.190350][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.190397][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.190420][ T38] Call Trace: [ 527.190440][ T38] [ 527.190448][ T38] dump_stack_lvl+0x189/0x250 [ 527.190475][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.190498][ T38] ? __pfx__printk+0x10/0x10 [ 527.190529][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 527.190552][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 527.190573][ T38] ? __pfx__printk+0x10/0x10 [ 527.190595][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 527.190617][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 527.190639][ T38] watchdog+0xf93/0xfe0 [ 527.190665][ T38] ? watchdog+0x1de/0xfe0 [ 527.190690][ T38] kthread+0x70e/0x8a0 [ 527.190717][ T38] ? __pfx_watchdog+0x10/0x10 [ 527.190736][ T38] ? __pfx_kthread+0x10/0x10 [ 527.190763][ T38] ? __pfx_kthread+0x10/0x10 [ 527.190787][ T38] ret_from_fork+0x3f9/0x770 [ 527.190811][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 527.190836][ T38] ? __switch_to_asm+0x39/0x70 [ 527.190851][ T38] ? __switch_to_asm+0x33/0x70 [ 527.190866][ T38] ? __pfx_kthread+0x10/0x10 [ 527.190889][ T38] ret_from_fork_asm+0x1a/0x30 [ 527.190922][ T38] [ 527.190928][ T38] Sending NMI from CPU 1 to CPUs 0: [ 527.190953][ C0] NMI backtrace for cpu 0 [ 527.190967][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.190987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.190996][ C0] RIP: 0010:__lock_acquire+0x4ff/0xd20 [ 527.191020][ C0] Code: 44 89 e0 48 ff c3 48 63 8f 18 0b 00 00 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 <25> ff 1f 00 00 48 0f a3 05 e4 a7 61 11 73 10 48 69 c0 c8 00 00 00 [ 527.191034][ C0] RSP: 0018:ffffc90000156870 EFLAGS: 00000083 [ 527.191049][ C0] RAX: 000000000002000b RBX: 0000000000000004 RCX: 0000000000000009 [ 527.191060][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801c295940 [ 527.191071][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff88df782f [ 527.191082][ C0] R10: 0aaaaaaaaaaa0000 R11: 00080aaaaaaaaaaa R12: 0000000000000003 [ 527.191094][ C0] R13: 0000000000000001 R14: ffff88801c2965c8 R15: ffff88801c296520 [ 527.191106][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 527.191120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.191132][ C0] CR2: 00007f80734bef3e CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 527.191147][ C0] Call Trace: [ 527.191152][ C0] [ 527.191162][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 527.191177][ C0] lock_acquire+0x120/0x360 [ 527.191196][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 527.191216][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 527.191231][ C0] __dev_queue_xmit+0x29e/0x3b70 [ 527.191245][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 527.191258][ C0] ? rt_set_nexthop+0x1c8/0xa80 [ 527.191278][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 527.191297][ C0] ? synproxy_pernet+0x23/0x240 [ 527.191320][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 527.191334][ C0] ? synproxy_pernet+0x23/0x240 [ 527.191353][ C0] ? __nf_conntrack_confirm+0x93/0x1050 [ 527.191375][ C0] ? synproxy_pernet+0x23/0x240 [ 527.191395][ C0] ? __asan_memset+0x22/0x50 [ 527.191414][ C0] ? __lock_acquire+0xab9/0xd20 [ 527.191437][ C0] ? ip_output+0x2a1/0x3c0 [ 527.191462][ C0] ? ip_finish_output2+0xbae/0x11d0 [ 527.191480][ C0] ip_finish_output2+0xd5a/0x11d0 [ 527.191496][ C0] ? ip_finish_output2+0x452/0x11d0 [ 527.191516][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 527.191533][ C0] ? ip_skb_dst_mtu+0x866/0xab0 [ 527.191548][ C0] ? ip_finish_output+0x33a/0x3f0 [ 527.191571][ C0] ip_output+0x2a1/0x3c0 [ 527.191593][ C0] ? ip_output+0x60/0x3c0 [ 527.191615][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 527.191642][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 527.191662][ C0] ? nft_sock_get_eval_cgroupv2+0x18/0x270 [ 527.191689][ C0] ? synproxy_pernet+0x45/0x270 [ 527.191706][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 527.191731][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 527.191756][ C0] ? nf_ip_checksum+0x13c/0x510 [ 527.191781][ C0] nft_synproxy_do_eval+0x345/0x570 [ 527.191803][ C0] ? unwind_next_frame+0xa5/0x2390 [ 527.191826][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 527.191856][ C0] nft_do_chain+0x40c/0x1920 [ 527.191877][ C0] ? arch_stack_walk+0x11c/0x150 [ 527.191902][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 527.191920][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 527.191951][ C0] ? smpboot_thread_fn+0x53f/0xa60 [ 527.191970][ C0] ? kthread+0x70e/0x8a0 [ 527.191990][ C0] ? ret_from_fork+0x3f9/0x770 [ 527.192007][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 527.192028][ C0] nft_do_chain_inet+0x25d/0x340 [ 527.192050][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 527.192072][ C0] ? __lock_acquire+0xab9/0xd20 [ 527.192096][ C0] ? NF_HOOK+0x9a/0x3a0 [ 527.192114][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 527.192137][ C0] nf_hook_slow+0xc2/0x220 [ 527.192158][ C0] NF_HOOK+0x206/0x3a0 [ 527.192177][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 527.192196][ C0] ? NF_HOOK+0x9a/0x3a0 [ 527.192213][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 527.192229][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 527.192250][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 527.192270][ C0] ? skb_dst+0x4f/0xd0 [ 527.192288][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 527.192308][ C0] NF_HOOK+0x309/0x3a0 [ 527.192326][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 527.192344][ C0] ? NF_HOOK+0x9a/0x3a0 [ 527.192361][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 527.192380][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 527.192404][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 527.192420][ C0] __netif_receive_skb+0x143/0x380 [ 527.192437][ C0] ? rt_spin_unlock+0x65/0x80 [ 527.192456][ C0] ? process_backlog+0x27b/0x900 [ 527.192473][ C0] process_backlog+0x31e/0x900 [ 527.192497][ C0] __napi_poll+0xb3/0x540 [ 527.192515][ C0] net_rx_action+0x707/0xe00 [ 527.192533][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.192560][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 527.192593][ C0] handle_softirqs+0x22f/0x710 [ 527.192616][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 527.192640][ C0] run_ktimerd+0xcf/0x190 [ 527.192660][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 527.192681][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 527.192704][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 527.192723][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 527.192741][ C0] smpboot_thread_fn+0x53f/0xa60 [ 527.192760][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 527.192783][ C0] kthread+0x70e/0x8a0 [ 527.192805][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 527.192824][ C0] ? __pfx_kthread+0x10/0x10 [ 527.192848][ C0] ? __pfx_kthread+0x10/0x10 [ 527.192869][ C0] ret_from_fork+0x3f9/0x770 [ 527.192890][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 527.192912][ C0] ? __switch_to_asm+0x39/0x70 [ 527.192926][ C0] ? __switch_to_asm+0x33/0x70 [ 527.192940][ C0] ? __pfx_kthread+0x10/0x10 [ 527.192962][ C0] ret_from_fork_asm+0x1a/0x30 [ 527.192984][ C0] [ 527.493919][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 527.493939][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 527.493961][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.493972][ T38] Call Trace: [ 527.493980][ T38] [ 527.493989][ T38] dump_stack_lvl+0x99/0x250 [ 527.494019][ T38] ? __asan_memcpy+0x40/0x70 [ 527.494039][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.494061][ T38] ? __pfx__printk+0x10/0x10 [ 527.494093][ T38] vpanic+0x281/0x750 [ 527.494119][ T38] ? __pfx_vpanic+0x10/0x10 [ 527.494140][ T38] ? preempt_schedule+0xae/0xc0 [ 527.494163][ T38] ? preempt_schedule_common+0x83/0xd0 [ 527.494190][ T38] panic+0xb9/0xc0 [ 527.494211][ T38] ? __pfx_panic+0x10/0x10 [ 527.494234][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 527.494259][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 527.494281][ T38] watchdog+0xfd2/0xfe0 [ 527.494308][ T38] ? watchdog+0x1de/0xfe0 [ 527.494334][ T38] kthread+0x70e/0x8a0 [ 527.494361][ T38] ? __pfx_watchdog+0x10/0x10 [ 527.494380][ T38] ? __pfx_kthread+0x10/0x10 [ 527.494408][ T38] ? __pfx_kthread+0x10/0x10 [ 527.494431][ T38] ret_from_fork+0x3f9/0x770 [ 527.494455][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 527.494482][ T38] ? __switch_to_asm+0x39/0x70 [ 527.494497][ T38] ? __switch_to_asm+0x33/0x70 [ 527.494512][ T38] ? __pfx_kthread+0x10/0x10 [ 527.494536][ T38] ret_from_fork_asm+0x1a/0x30 [ 527.494568][ T38] [ 527.494891][ T38] Kernel Offset: disabled