last executing test programs: 5m28.164375152s ago: executing program 4 (id=146): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) shutdown(r0, 0x1) 5m27.923559075s ago: executing program 4 (id=147): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x0, 0x7}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) 5m27.584382029s ago: executing program 4 (id=148): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff02"], 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x0) 5m27.329793454s ago: executing program 4 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 5m27.0507941s ago: executing program 4 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004a00030000000000000000000a00", @ANYRES32], 0x1c}}, 0x0) 5m25.974545955s ago: executing program 4 (id=161): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @local, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8) 5m25.129229092s ago: executing program 32 (id=161): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @local, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8) 5m5.941217409s ago: executing program 3 (id=280): timerfd_create(0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) pselect6(0x40, &(0x7f0000000480)={0x5, 0xb, 0x8000000000000001, 0x5, 0x366f, 0x6ae1, 0x3, 0x2}, &(0x7f0000000300)={0x19, 0x7fffffffffffffff, 0x8c, 0x8, 0xe1, 0x80000001, 0x4, 0x1}, 0x0, 0x0, 0x0) 5m5.669527714s ago: executing program 3 (id=281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x14, 0x0, 0x0}) 5m5.154980709s ago: executing program 3 (id=288): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 5m4.66084548s ago: executing program 3 (id=293): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x2) poll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x9) 5m4.327147672s ago: executing program 3 (id=297): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 5m4.147246194s ago: executing program 3 (id=298): syz_usb_connect(0x2, 0x8f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201020c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104b263200309050900ff03030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340000b020bf32b4d85ea768fe60f25"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 4m48.915576624s ago: executing program 33 (id=298): syz_usb_connect(0x2, 0x8f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201020c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104b263200309050900ff03030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340000b020bf32b4d85ea768fe60f25"], 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 4m39.622970443s ago: executing program 2 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 4m39.482385299s ago: executing program 2 (id=454): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) 4m38.8551988s ago: executing program 2 (id=456): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 4m38.332390816s ago: executing program 2 (id=460): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x200000000003}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4m38.160866358s ago: executing program 2 (id=462): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m37.976226042s ago: executing program 2 (id=464): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000d20b060005000297"], 0x24}}, 0x0) 4m22.795365498s ago: executing program 34 (id=464): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000d20b060005000297"], 0x24}}, 0x0) 22.93017509s ago: executing program 1 (id=2635): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000380)="a3a302ae2f62", 0x0, 0x5, 0x0, 0x0, 0x0}) 22.583368236s ago: executing program 1 (id=2640): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) 22.350014686s ago: executing program 1 (id=2644): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xff, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 19.931713147s ago: executing program 1 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r1, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 19.786189249s ago: executing program 0 (id=2660): r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000500)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x1}, 0x0) 19.563877761s ago: executing program 1 (id=2664): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) 19.421131636s ago: executing program 1 (id=2665): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000140)) 19.325843971s ago: executing program 0 (id=2667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r0, 0x13, 0x0, @val=@iter={0x0}}, 0x20) 18.876945304s ago: executing program 0 (id=2670): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 18.786995849s ago: executing program 5 (id=2671): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20) 18.531048522s ago: executing program 7 (id=2672): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000240)={0x9, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x30383653}) 18.421655863s ago: executing program 0 (id=2674): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 18.2237142s ago: executing program 5 (id=2675): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200000, &(0x7f0000006680)) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 18.043707401s ago: executing program 7 (id=2676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37bc21cfdc8180c7d09c35d130d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6e19946b18a45333df51d78f735999aadfcda64488160c4ae6ba9dcef0c144e3de7be7fdc1ead6a425ff6128fab1517630c1d9507e0685488a57f85298b4e4382842c0730"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x2f, 0x8, 0x4}, 0x20) 17.981366239s ago: executing program 6 (id=2677): pipe(&(0x7f0000000400)) unshare(0x2040400) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 17.938133348s ago: executing program 0 (id=2678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 17.716806735s ago: executing program 5 (id=2679): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) 17.498727121s ago: executing program 7 (id=2680): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) 17.486101534s ago: executing program 6 (id=2681): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001240)={0xfc, {"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", 0x104e}}, 0x1006) 17.485732573s ago: executing program 0 (id=2682): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 17.051559652s ago: executing program 5 (id=2683): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0)) unshare(0x2040400) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 16.991613405s ago: executing program 7 (id=2684): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000400)) 16.493938258s ago: executing program 7 (id=2685): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x20000) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x7) 16.155821678s ago: executing program 5 (id=2686): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2279, 0x0) 16.155479957s ago: executing program 7 (id=2687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.848369691s ago: executing program 5 (id=2688): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 15.767215233s ago: executing program 6 (id=2689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfe19, @loopback={0xe0}, 0xd}, 0x1c) 15.504945779s ago: executing program 6 (id=2690): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0xe600036c) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) 15.343732261s ago: executing program 6 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000001c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 15.233672078s ago: executing program 6 (id=2692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) 4.231912032s ago: executing program 35 (id=2665): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000140)) 649.495389ms ago: executing program 36 (id=2682): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 626.067866ms ago: executing program 37 (id=2687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 334.015101ms ago: executing program 38 (id=2688): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 0s ago: executing program 39 (id=2692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x48c6) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=_ pid=8304 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 244.584736][ T37] audit: type=1326 audit(1758283149.855:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 244.585014][ T37] audit: type=1326 audit(1758283149.855:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 244.585287][ T37] audit: type=1326 audit(1758283149.855:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8304 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 244.787949][ T5925] usb 8-1: config 0 descriptor?? [ 244.796037][ T8298] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 244.797526][ T8298] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 244.819294][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x4 [ 244.819335][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x6 [ 244.819358][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819381][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819403][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819425][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819447][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819469][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819490][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.819519][ T44] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 244.874260][ T44] elecom 0003:056E:00FE.0015: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 245.036032][ T44] usb 2-1: USB disconnect, device number 15 [ 245.106382][ T8298] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 245.106615][ T8298] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 245.355607][ T8314] xt_HMARK: proto mask must be zero with L3 mode [ 245.556210][ T5925] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 245.670363][ T5925] usb 8-1: USB disconnect, device number 3 [ 245.897866][ T8320] fido_id[8320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 245.909747][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.908'. [ 245.956365][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.909'. [ 246.456242][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.913'. [ 247.155956][ T5925] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 247.322978][ T5925] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 247.323015][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.323051][ T5925] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 247.323075][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.399485][ T5925] usb 2-1: config 0 descriptor?? [ 247.401551][ T8347] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 247.887531][ T5925] lenovo 0003:17EF:60A4.0016: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 248.047664][ T9] usb 2-1: USB disconnect, device number 16 [ 248.487614][ T8371] fido_id[8371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 249.711177][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 249.877762][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 249.897371][ T44] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 249.897403][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.929384][ T44] usb 7-1: config 0 descriptor?? [ 249.953854][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 250.575712][ T44] gspca_nw80x: reg_w err -71 [ 250.575824][ T44] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 250.615595][ T44] usb 7-1: USB disconnect, device number 3 [ 250.867611][ T5933] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 251.020400][ T5933] usb 8-1: config 0 has an invalid interface number: 56 but max is 0 [ 251.020430][ T5933] usb 8-1: config 0 has no interface number 0 [ 251.024130][ T5933] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 251.024156][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.024176][ T5933] usb 8-1: Product: syz [ 251.024191][ T5933] usb 8-1: Manufacturer: syz [ 251.024205][ T5933] usb 8-1: SerialNumber: syz [ 251.041083][ T5933] usb 8-1: config 0 descriptor?? [ 251.309254][ T5933] peak_usb 8-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 251.524873][ T5933] peak_usb 8-1:0.56 can0: sending command failure: -22 [ 251.524901][ T5933] peak_usb 8-1:0.56 can0: sending command failure: -22 [ 251.524920][ T5933] peak_usb 8-1:0.56 can0: sending command failure: -22 [ 251.606337][ T8453] xt_l2tp: invalid flags combination: 0 [ 251.700225][ T37] audit: type=1400 audit(1758283156.965:34): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8455 comm="syz.1.952" src=1 dest=20000 netif=wpan0 [ 251.883065][ T5933] peak_usb 8-1:0.56: probe with driver peak_usb failed with error -22 [ 251.960932][ T5933] usb 8-1: USB disconnect, device number 4 [ 252.241353][ T8466] IPVS: ip_vs_edit_dest(): server weight less than zero [ 252.275429][ T5925] IPVS: starting estimator thread 0... [ 252.379422][ T8467] IPVS: using max 7 ests per chain, 16800 per kthread [ 252.458167][ T8471] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 252.458167][ T8471] [ 252.970372][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 253.108649][ T8489] netlink: 'syz.5.964': attribute type 46 has an invalid length. [ 253.297551][ T8494] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 253.297575][ T8494] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 253.356466][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.966'. [ 253.505626][ T8495] ipvlan2: entered promiscuous mode [ 254.042443][ T8516] xt_l2tp: unknown flags: 10 [ 256.018936][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.019013][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.325649][ T975] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 256.475612][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 256.479447][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.479487][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.479531][ T975] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.479554][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.509440][ T975] usb 2-1: config 0 descriptor?? [ 256.574513][ T975] hub 2-1:0.0: USB hub found [ 256.662091][ T8589] netlink: 'syz.6.1001': attribute type 1 has an invalid length. [ 256.742402][ T975] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 256.951389][ T975] usbhid 2-1:0.0: can't add hid device: -71 [ 256.951538][ T975] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.018285][ T975] usb 2-1: USB disconnect, device number 17 [ 259.947267][ T8672] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 260.372103][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1034'. [ 260.825980][ T8693] usb usb8: usbfs: process 8693 (syz.7.1037) did not claim interface 0 before use [ 261.203082][ T8703] sp0: Synchronizing with TNC [ 261.220370][ T8700] [U] è [ 261.449546][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1045'. [ 262.267120][ T8725] sp0: Synchronizing with TNC [ 262.784711][ T8739] netlink: 'syz.0.1052': attribute type 2 has an invalid length. [ 263.814489][ T8761] veth1_macvtap: left promiscuous mode [ 263.814516][ T8761] macsec0: entered allmulticast mode [ 263.909577][ T8762] veth1_macvtap: entered promiscuous mode [ 263.909607][ T8762] veth1_macvtap: entered allmulticast mode [ 263.909730][ T8762] macsec0: left allmulticast mode [ 263.909743][ T8762] veth1_macvtap: left allmulticast mode [ 265.915597][ T5932] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 266.070029][ T5932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.070085][ T5932] usb 8-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.10 [ 266.070108][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.125242][ T5932] usb 8-1: config 0 descriptor?? [ 266.405624][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 266.405815][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 266.475952][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'. [ 266.475978][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1090'. [ 266.720887][ T5932] logitech 0003:046D:C626.0017: ignoring exceeding usage max [ 266.730513][ T5932] logitech 0003:046D:C626.0017: unbalanced delimiter at end of report description [ 266.742462][ T5932] logitech 0003:046D:C626.0017: parse failed [ 266.742569][ T5932] logitech 0003:046D:C626.0017: probe with driver logitech failed with error -22 [ 266.939491][ T5932] usb 8-1: USB disconnect, device number 5 [ 267.276606][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 267.447497][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 267.456364][ T31] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.456396][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 267.456430][ T31] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 267.456450][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.475152][ T31] usb 7-1: config 0 descriptor?? [ 268.025613][ T31] hid_parser_main: 49 callbacks suppressed [ 268.025640][ T31] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 268.025673][ T31] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 268.025699][ T31] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 268.025723][ T31] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 268.025747][ T31] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 268.032989][ T31] corsair-psu 0003:1B1C:1C09.0018: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 268.096370][ T31] corsair-psu 0003:1B1C:1C09.0018: unable to initialize device (-38) [ 268.130613][ T31] corsair-psu 0003:1B1C:1C09.0018: probe with driver corsair-psu failed with error -38 [ 268.277985][ T31] usb 7-1: USB disconnect, device number 4 [ 268.568106][ T8864] fido_id[8864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 268.757291][ T8871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 270.095658][ T5933] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 270.248989][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.249036][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 270.249062][ T5933] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.249106][ T5933] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 270.249129][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.314911][ T5933] usb 7-1: config 0 descriptor?? [ 270.321398][ T8894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 270.782432][ T5933] aureal 0003:0755:2626.0019: unknown main item tag 0x0 [ 270.782471][ T5933] aureal 0003:0755:2626.0019: unknown main item tag 0x0 [ 270.782496][ T5933] aureal 0003:0755:2626.0019: unknown main item tag 0x0 [ 270.782521][ T5933] aureal 0003:0755:2626.0019: unknown main item tag 0x0 [ 270.782545][ T5933] aureal 0003:0755:2626.0019: unknown main item tag 0x0 [ 270.840574][ T5933] aureal 0003:0755:2626.0019: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.6-1/input0 [ 271.029224][ T5933] usb 7-1: USB disconnect, device number 5 [ 271.074619][ T8915] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1127'. [ 271.074646][ T8915] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1127'. [ 271.127556][ T8912] fido_id[8912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 274.444254][ T5933] syz_tun: tun_net_xmit 106 [ 275.068365][ T9014] tipc: Enabling of bearer rejected, already enabled [ 275.365822][ T5841] syz_tun: tun_net_xmit 106 [ 275.445616][ T5933] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 275.610722][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 275.618781][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.618840][ T5933] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 275.618860][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.649829][ T5933] usb 6-1: config 0 descriptor?? [ 275.693304][ T5933] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 276.313430][ T5933] gspca_vc032x: reg_r err -71 [ 276.313546][ T5933] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 276.335502][ T5933] usb 6-1: USB disconnect, device number 12 [ 276.636882][ T9047] tipc: Enabling of bearer rejected, failed to enable media [ 277.062400][ T37] audit: type=1326 audit(1758283182.335:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.063726][ T37] audit: type=1326 audit(1758283182.335:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.072958][ T37] audit: type=1326 audit(1758283182.345:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.073879][ T37] audit: type=1326 audit(1758283182.345:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.074120][ T37] audit: type=1326 audit(1758283182.345:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.074606][ T37] audit: type=1326 audit(1758283182.345:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.172383][ T37] audit: type=1326 audit(1758283182.345:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.172436][ T37] audit: type=1326 audit(1758283182.405:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9057 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f2faeba9 code=0x7ffc0000 [ 277.195568][ T5933] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 277.332946][ T9064] program syz.1.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.345472][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 277.352248][ T5933] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.353697][ T5933] usb 6-1: config 9 has an invalid interface number: 48 but max is 0 [ 277.353721][ T5933] usb 6-1: config 9 has no interface number 0 [ 277.353760][ T5933] usb 6-1: config 9 interface 48 has no altsetting 0 [ 277.362685][ T5933] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 277.362716][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.362733][ T5933] usb 6-1: Product: syz [ 277.362746][ T5933] usb 6-1: Manufacturer: syz [ 277.362759][ T5933] usb 6-1: SerialNumber: syz [ 277.399771][ T9065] program syz.1.1197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.421848][ T9065] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 277.665967][ T5933] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 278.028330][ T5933] gspca_vc032x: reg_w err -71 [ 278.028349][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028360][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028369][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028378][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028387][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028395][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028404][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028411][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028420][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028429][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028438][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028447][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028456][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028464][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028473][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028482][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028491][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028500][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028509][ T5933] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.028517][ T5933] gspca_vc032x: Unknown sensor... [ 278.028612][ T5933] vc032x 6-1:9.48: probe with driver vc032x failed with error -22 [ 278.048318][ T5933] usb 6-1: USB disconnect, device number 13 [ 278.725752][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 278.891023][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 278.891057][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 278.891079][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 278.891101][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 278.891144][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 278.891168][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.958540][ T31] usb 2-1: config 0 descriptor?? [ 279.199073][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.203786][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.225864][ T31] hdpvr 2-1:0.0: firmware version 0xd dated [ 279.416532][ T31] hdpvr 2-1:0.0: device init failed [ 279.416642][ T31] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 279.417599][ T5841] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 279.465833][ T31] usb 2-1: USB disconnect, device number 18 [ 279.568379][ T5841] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 279.568413][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.588793][ T5841] usb 7-1: config 0 descriptor?? [ 279.598289][ T5841] cp210x 7-1:0.0: cp210x converter detected [ 279.704765][ T9104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 279.705263][ T9104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 279.709748][ T9104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 279.711399][ T9104] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 279.712235][ T9104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 279.712290][ T9104] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 279.713590][ T9104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 279.713641][ T9104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 279.715225][ T9104] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 279.719281][ T9104] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 279.720133][ T9104] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 279.721085][ T9104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 279.722119][ T9104] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 279.722749][ T9104] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 279.722801][ T9104] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 279.723414][ T9104] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 279.724052][ T9104] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 279.724105][ T9104] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 280.258474][ T5841] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 280.258508][ T5841] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 280.294067][ T5841] usb 7-1: cp210x converter now attached to ttyUSB0 [ 280.320506][ T5841] usb 7-1: USB disconnect, device number 6 [ 280.408914][ T5841] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 280.409931][ T5841] cp210x 7-1:0.0: device disconnected [ 281.577954][ T9135] bridge0: entered promiscuous mode [ 281.578512][ T9135] macsec1: entered promiscuous mode [ 282.085708][ T5903] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 282.260604][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.260638][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.260678][ T5903] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 282.260702][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.314056][ T5903] usb 2-1: config 0 descriptor?? [ 282.750807][ T5903] usbhid 2-1:0.0: can't add hid device: -71 [ 282.750948][ T5903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 282.765897][ T5903] usb 2-1: USB disconnect, device number 19 [ 284.345672][ T5932] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 284.516111][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.516168][ T5932] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 284.516200][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.543970][ T5932] usb 6-1: config 0 descriptor?? [ 284.997234][ T5932] hid_parser_main: 64 callbacks suppressed [ 284.997267][ T5932] waltop 0003:172F:0502.001A: unknown main item tag 0x2 [ 284.997302][ T5932] waltop 0003:172F:0502.001A: item fetching failed at offset 4/5 [ 284.998297][ T5932] waltop 0003:172F:0502.001A: probe with driver waltop failed with error -22 [ 285.218121][ T5932] usb 6-1: USB disconnect, device number 14 [ 285.997967][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1273'. [ 286.032513][ T9224] vlan2: entered promiscuous mode [ 286.032539][ T9224] gretap0: entered promiscuous mode [ 286.075480][ T5932] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 286.232801][ T9228] sp0: Synchronizing with TNC [ 286.265487][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 286.268796][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.268867][ T5932] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 286.268891][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.302364][ T5932] usb 2-1: config 0 descriptor?? [ 286.438696][ T5932] dvb-usb: found a 'TeVii S662' in warm state. [ 286.438752][ T5932] dw2102: su3000_power_ctrl: 1, initialized 0 [ 286.439182][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 286.502899][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 286.535560][ T5932] dvbdev: DVB: registering new adapter (TeVii S662) [ 286.535628][ T5932] usb 2-1: media controller created [ 286.535940][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 286.535957][ T5932] dw2102: i2c transfer failed. [ 286.535978][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 286.535992][ T5932] dw2102: i2c transfer failed. [ 286.536011][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 286.536025][ T5932] dw2102: i2c transfer failed. [ 286.536044][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 286.536058][ T5932] dw2102: i2c transfer failed. [ 286.536077][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 286.536091][ T5932] dw2102: i2c transfer failed. [ 286.536109][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 286.536124][ T5932] dw2102: i2c transfer failed. [ 286.536135][ T5932] dvb-usb: MAC address: 02:02:02:02:02:02 [ 286.549875][ T9219] dvb-usb: bulk message failed: -22 (4/0) [ 286.549895][ T9219] dw2102: i2c transfer failed. [ 286.769569][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.918953][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 286.918975][ T5932] dw2102: command 0x0e transfer failed. [ 286.918985][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 286.918999][ T5932] dw2102: command 0x0e transfer failed. [ 287.235554][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 287.235582][ T5932] dw2102: command 0x0e transfer failed. [ 287.235592][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 287.235606][ T5932] dw2102: command 0x0e transfer failed. [ 287.235615][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 287.235629][ T5932] dw2102: command 0x51 transfer failed. [ 287.235638][ T5932] dvb-usb: bulk message failed: -22 (5/0) [ 287.235652][ T5932] dw2102: i2c probe for address 0x68 failed. [ 287.235663][ T5932] dvb-usb: bulk message failed: -22 (5/0) [ 287.235675][ T5932] dw2102: i2c probe for address 0x69 failed. [ 287.235686][ T5932] dvb-usb: bulk message failed: -22 (5/0) [ 287.235699][ T5932] dw2102: i2c probe for address 0x6a failed. [ 287.235710][ T5932] dw2102: probing for demodulator failed. Is the external power switched on? [ 287.235720][ T5932] dvb-usb: no frontend was attached by 'TeVii S662' [ 287.446563][ T5932] rc_core: IR keymap rc-tt-1500 not found [ 287.446587][ T5932] Registered IR keymap rc-empty [ 287.448597][ T5932] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 287.476412][ T5932] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13 [ 287.493497][ T5932] dvb-usb: schedule remote query interval to 250 msecs. [ 287.493521][ T5932] dw2102: su3000_power_ctrl: 0, initialized 1 [ 287.493534][ T5932] dvb-usb: TeVii S662 successfully initialized and connected. [ 287.545489][ T5932] usb 2-1: USB disconnect, device number 20 [ 287.966757][ T5932] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 288.011343][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1291'. [ 288.341382][ T9269] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 288.585641][ T5932] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 288.738722][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.738759][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 288.738805][ T5932] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 288.738828][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.758705][ T5932] usb 2-1: config 0 descriptor?? [ 289.246188][ T5932] mcp2200 0003:04D8:00DF.001B: item fetching failed at offset 5/7 [ 289.247076][ T5932] mcp2200 0003:04D8:00DF.001B: can't parse reports [ 289.247185][ T5932] mcp2200 0003:04D8:00DF.001B: probe with driver mcp2200 failed with error -22 [ 289.469748][ T5933] usb 2-1: USB disconnect, device number 21 [ 289.672736][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1306'. [ 291.805542][ T9355] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1336'. [ 292.351632][ T9369] pimreg: entered allmulticast mode [ 292.825679][ T9381] vivid-001: disconnect [ 292.848247][ T9380] vivid-001: reconnect [ 292.855440][ T5903] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 293.008746][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.008777][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 293.008845][ T5903] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 293.008870][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.018291][ T5903] usb 2-1: config 0 descriptor?? [ 293.034247][ T5903] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 293.034316][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 293.053696][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 293.061791][ T5903] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 293.061852][ T5903] usb 2-1: media controller created [ 293.064378][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.126899][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 293.127003][ T5903] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 293.134959][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 293.175581][ T5933] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 293.246391][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 293.246417][ T5903] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 293.332970][ T9375] dvb-usb: bulk message failed: -22 (2/0) [ 293.335457][ T5933] usb 7-1: Using ep0 maxpacket: 16 [ 293.337970][ T5933] usb 7-1: config 1 has an invalid interface number: 214 but max is 0 [ 293.337993][ T5933] usb 7-1: config 1 has no interface number 0 [ 293.338039][ T5933] usb 7-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 293.338061][ T5933] usb 7-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 293.338082][ T5933] usb 7-1: config 1 interface 214 has no altsetting 0 [ 293.341987][ T5933] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 293.342012][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.342030][ T5933] usb 7-1: Product: syz [ 293.342042][ T5933] usb 7-1: Manufacturer: syz [ 293.342054][ T5933] usb 7-1: SerialNumber: syz [ 293.364458][ T10] usb 2-1: USB disconnect, device number 22 [ 293.366747][ T9385] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 293.366948][ T9385] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 293.391879][ T5933] ums-alauda 7-1:1.214: USB Mass Storage device detected [ 293.425055][ T5933] scsi host1: usb-storage 7-1:1.214 [ 293.632769][ T31] usb 7-1: USB disconnect, device number 7 [ 293.694124][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 294.491052][ T9419] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1365'. [ 294.535877][ T9417] trusted_key: encrypted_key: master key parameter '' is invalid [ 295.025436][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 295.187343][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.187372][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 295.187430][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 295.187454][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.259912][ T10] usb 6-1: config 0 descriptor?? [ 295.280264][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 295.280325][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 295.367917][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.369507][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 295.369570][ T10] usb 6-1: media controller created [ 295.372513][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.420104][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 295.420208][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 295.459876][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 295.497509][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 295.497536][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 295.613022][ T9425] dvb-usb: bulk message failed: -22 (2/0) [ 295.618993][ T10] usb 6-1: USB disconnect, device number 15 [ 295.908689][ T9447] trusted_key: encrypted_key: master key parameter '' is invalid [ 295.931003][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 296.375466][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 296.538750][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.538901][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.540717][ T31] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.540745][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.540765][ T31] usb 8-1: SerialNumber: syz [ 296.857285][ T31] usb 8-1: 0:2 : does not exist [ 296.932774][ T31] usb 8-1: USB disconnect, device number 6 [ 297.055387][ T5925] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 297.136748][ T7997] udevd[7997]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.208430][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.208460][ T5925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 297.208517][ T5925] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 297.208541][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.267455][ T5925] usb 6-1: config 0 descriptor?? [ 297.269783][ T9474] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1392'. [ 297.308124][ T5925] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 297.308188][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 297.313683][ T5925] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 297.338099][ T5925] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 297.338187][ T5925] usb 6-1: media controller created [ 297.341292][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.373713][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 297.373811][ T5925] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 297.401853][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 297.426549][ T5925] dvb-usb: schedule remote query interval to 150 msecs. [ 297.426576][ T5925] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 297.556671][ T9466] dvb-usb: bulk message failed: -22 (2/0) [ 297.556758][ T9466] dvb-usb: bulk message failed: -22 (4/0) [ 297.559274][ T10] usb 6-1: USB disconnect, device number 16 [ 297.786401][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.966333][ T9487] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 298.639665][ T9507] trusted_key: encrypted_key: key trusted:syz not found [ 298.942065][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1410'. [ 299.124028][ T9522] netlink: 'syz.0.1415': attribute type 12 has an invalid length. [ 299.124054][ T9522] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1415'. [ 299.615457][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 299.703506][ T9536] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 299.703572][ T9536] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 299.775504][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 299.778225][ T31] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 299.778257][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.813682][ T31] usb 7-1: config 0 descriptor?? [ 299.832399][ T31] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 300.466807][ T5841] usb 7-1: USB disconnect, device number 8 [ 300.681467][ T9554] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 300.877514][ T9560] netlink: 'syz.1.1432': attribute type 16 has an invalid length. [ 301.578058][ T9573] syz.0.1437 (9573) used greatest stack depth: 18968 bytes left [ 302.900787][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1453'. [ 303.308985][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'. [ 304.037108][ T9633] program syz.6.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.156103][ T9635] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 304.156129][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 304.615865][ T5925] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 304.775568][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 304.782868][ T5925] usb 6-1: unable to get BOS descriptor or descriptor too short [ 304.784215][ T5925] usb 6-1: config 4 interface 0 has no altsetting 0 [ 304.812218][ T5925] usb 6-1: string descriptor 0 read error: -22 [ 304.812340][ T5925] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 304.812353][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.856770][ T5925] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 304.875768][ T5925] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.876360][ T5925] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 304.876433][ T5925] usb 6-1: media controller created [ 304.930962][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.076392][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 305.167918][ T5925] usb 6-1: USB disconnect, device number 17 [ 306.984993][ T9690] Zero length message leads to an empty skb [ 307.284352][ T9696] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 307.976010][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.383874][ T9732] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1513'. [ 310.084703][ T9746] binder: 9744:9746 ioctl 400c620e 200000000000 returned -22 [ 312.630795][ T9809] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 313.416418][ T9833] netlink: 'syz.1.1559': attribute type 31 has an invalid length. [ 313.625036][ T9839] netlink: 'syz.1.1562': attribute type 2 has an invalid length. [ 313.625062][ T9839] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1562'. [ 313.792453][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 313.955527][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 313.974174][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.974208][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.974231][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.974269][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 313.974291][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.052181][ T10] usb 6-1: config 0 descriptor?? [ 314.216107][ T9852] tmpfs: User quota inode hardlimit too large. [ 314.494688][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494724][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494749][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494774][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494806][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494830][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494854][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494879][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494904][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.494928][ T10] kye 0003:0458:0138.001C: unknown main item tag 0x0 [ 314.571644][ T10] kye 0003:0458:0138.001C: collection stack underflow [ 314.571677][ T10] kye 0003:0458:0138.001C: item 0 0 0 12 parsing failed [ 314.572620][ T10] kye 0003:0458:0138.001C: parse failed [ 314.572699][ T10] kye 0003:0458:0138.001C: probe with driver kye failed with error -22 [ 314.721912][ T10] usb 6-1: USB disconnect, device number 18 [ 314.815924][ T5925] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 314.968153][ T5925] usb 8-1: Using ep0 maxpacket: 32 [ 314.975846][ T5925] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 314.975876][ T5925] usb 8-1: config 0 has no interface number 0 [ 314.975929][ T5925] usb 8-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.975955][ T5925] usb 8-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.975977][ T5925] usb 8-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.976004][ T5925] usb 8-1: config 0 interface 2 has no altsetting 0 [ 314.976041][ T5925] usb 8-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 314.976062][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.022028][ T5925] usb 8-1: config 0 descriptor?? [ 315.622864][ T5925] uclogic 0003:5543:0781.001D: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.7-1/input2 [ 315.766513][ T5933] usb 8-1: USB disconnect, device number 7 [ 316.092398][ T9882] fido_id[9882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 317.225439][ T5933] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 317.375843][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 317.404018][ T5933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.404048][ T5933] usb 6-1: config 0 has no interface number 0 [ 317.437676][ T5933] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 317.437708][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.437727][ T5933] usb 6-1: Product: syz [ 317.437741][ T5933] usb 6-1: Manufacturer: syz [ 317.437755][ T5933] usb 6-1: SerialNumber: syz [ 317.467062][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467137][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.505612][ T5933] usb 6-1: config 0 descriptor?? [ 317.511440][ T5933] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 317.511467][ T5933] usb 6-1: selecting invalid altsetting 1 [ 317.511482][ T5933] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 317.546148][ T5933] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.546627][ T5933] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 317.546689][ T5933] usb 6-1: media controller created [ 317.621131][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.395681][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 318.549285][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 318.566769][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 318.567319][ T10] usb 2-1: config 0 has no interface number 0 [ 318.567633][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.618115][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 318.618149][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.618170][ T10] usb 2-1: Product: syz [ 318.618184][ T10] usb 2-1: Manufacturer: syz [ 318.618197][ T10] usb 2-1: SerialNumber: syz [ 318.695588][ T10] usb 2-1: config 0 descriptor?? [ 318.728498][ T5933] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 318.728591][ T5933] zl10353_read_register: readreg error (reg=127, ret==-110) [ 318.737279][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 318.737318][ T10] em28xx 2-1:0.132: Video interface 132 found: [ 318.956747][ T5933] usb 6-1: USB disconnect, device number 19 [ 319.128330][ T10] em28xx 2-1:0.132: chip ID is em2800 [ 319.376559][ T9949] usb usb8: usbfs: process 9949 (syz.6.1615) did not claim interface 0 before use [ 319.447782][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 319.447826][ T10] em28xx 2-1:0.132: board has no eeprom [ 319.505378][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 319.505409][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 319.506172][ T5933] em28xx 2-1:0.132: Registering V4L2 extension [ 319.576091][ T10] usb 2-1: USB disconnect, device number 23 [ 319.640941][ T10] em28xx 2-1:0.132: Disconnecting em28xx [ 320.015805][ T9963] syz.0.1621 uses obsolete (PF_INET,SOCK_PACKET) [ 320.523864][ T5933] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 320.523891][ T5933] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 320.523905][ T5933] em28xx 2-1:0.132: No AC97 audio processor [ 320.632039][ T5933] usb 2-1: Decoder not found [ 320.632063][ T5933] em28xx 2-1:0.132: failed to create media graph [ 320.632123][ T5933] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 320.691721][ T5933] em28xx 2-1:0.132: Remote control support is not available for this card. [ 320.705229][ T10] em28xx 2-1:0.132: Closing input extension [ 320.882264][ T10] em28xx 2-1:0.132: Freeing device [ 321.610808][ T9997] vlan2: entered allmulticast mode [ 321.610828][ T9997] bond0: entered allmulticast mode [ 321.610839][ T9997] bond_slave_0: entered allmulticast mode [ 321.610858][ T9997] bond_slave_1: entered allmulticast mode [ 322.575616][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 322.728384][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 322.731218][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 322.731249][ T10] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.731276][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.731301][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 322.731323][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.982609][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 322.982643][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.982663][ T10] usb 2-1: Product: syz [ 323.058564][ T10] usb 2-1: config 0 descriptor?? [ 323.071122][ T10] usb 2-1: can't set config #0, error -71 [ 323.073991][ T10] usb 2-1: USB disconnect, device number 24 [ 324.215683][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'. [ 324.900230][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1671'. [ 325.603748][T10092] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 325.603813][T10092] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 325.603923][T10092] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 325.604073][T10092] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 325.604130][T10092] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 325.604183][T10092] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 325.604333][T10092] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 325.604619][T10092] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 325.604676][T10092] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 325.604730][T10092] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 325.604784][T10092] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 325.604839][T10092] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 326.107517][T10104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.545478][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 326.721071][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.721124][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 326.721149][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.761407][ T9] usb 6-1: config 0 descriptor?? [ 326.799424][T10128] xt_l2tp: invalid flags combination: 8 [ 327.233937][ T9] logitech-djreceiver 0003:046D:C71F.001E: item fetching failed at offset 3/7 [ 327.234878][ T9] logitech-djreceiver 0003:046D:C71F.001E: logi_dj_probe: parse failed [ 327.234952][ T9] logitech-djreceiver 0003:046D:C71F.001E: probe with driver logitech-djreceiver failed with error -22 [ 327.426093][ T9] usb 6-1: USB disconnect, device number 20 [ 331.035421][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 331.188486][ T9] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 331.188518][ T9] usb 8-1: config 0 has no interface number 0 [ 331.188572][ T9] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.188599][ T9] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.188621][ T9] usb 8-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.188666][ T9] usb 8-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 331.188689][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.279420][ T9] usb 8-1: config 0 descriptor?? [ 331.754146][ T9] uclogic 0003:28BD:0934.001F: Interface probing failed: -22 [ 331.754246][ T9] uclogic 0003:28BD:0934.001F: interface is invalid, ignoring [ 331.974402][ T9] usb 8-1: USB disconnect, device number 8 [ 332.341032][T10238] netlink: 'syz.6.1746': attribute type 10 has an invalid length. [ 332.341061][T10238] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1746'. [ 333.637553][ T5933] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 333.793375][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.793411][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.793434][ T5933] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.793479][ T5933] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 333.793502][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.847979][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 333.870454][ T5933] usb 7-1: config 0 descriptor?? [ 333.999362][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.999467][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.999513][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.999537][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.071809][T10269] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 334.128225][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.381208][ T5933] elo 0003:04E7:0030.0020: reserved main item tag 0xe [ 334.381247][ T5933] elo 0003:04E7:0030.0020: item fetching failed at offset 8/9 [ 334.382161][ T5933] elo 0003:04E7:0030.0020: parse failed [ 334.382277][ T5933] elo 0003:04E7:0030.0020: probe with driver elo failed with error -22 [ 334.623730][ T5933] usb 7-1: USB disconnect, device number 9 [ 334.632760][ T10] usb 8-1: USB disconnect, device number 9 [ 334.775727][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1765'. [ 335.065977][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 337.812030][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'. [ 339.345111][T10366] overlayfs: failed to resolve './file1': -2 [ 339.545533][ T5925] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 339.695591][ T5925] usb 8-1: Using ep0 maxpacket: 16 [ 339.698458][ T5925] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.698491][ T5925] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.698514][ T5925] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.698556][ T5925] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.698577][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.812979][ T5925] usb 8-1: config 0 descriptor?? [ 340.042321][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 340.315456][ T5925] hid_parser_main: 650 callbacks suppressed [ 340.315494][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.315527][ T5925] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 340.317697][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317730][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317756][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317781][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317806][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317830][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317855][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317880][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317905][ T5925] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.317943][ T5925] microsoft 0003:045E:07DA.0021: unsupported Resolution Multiplier 0 [ 340.565612][ T5925] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 340.565649][ T5925] microsoft 0003:045E:07DA.0021: no inputs found [ 340.565663][ T5925] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 340.661073][ T5925] usb 8-1: USB disconnect, device number 10 [ 340.750300][T10395] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1808'. [ 340.750329][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1808'. [ 341.015973][T10394] fido_id[10394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 341.426003][ T31] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 341.587929][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 341.587987][ T31] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 341.588010][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.598521][ T31] usb 2-1: config 0 descriptor?? [ 342.063391][ T31] greenasia 0003:0E8F:0012.0022: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 342.063429][ T31] greenasia 0003:0E8F:0012.0022: no inputs found [ 342.286599][ T5925] usb 2-1: USB disconnect, device number 25 [ 342.613796][T10429] fido_id[10429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 344.114490][T10467] netlink: 'syz.7.1837': attribute type 178 has an invalid length. [ 345.395588][ T975] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 345.465519][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 345.538686][T10501] netlink: 'syz.5.1853': attribute type 3 has an invalid length. [ 345.538711][T10501] netlink: 944 bytes leftover after parsing attributes in process `syz.5.1853'. [ 345.545533][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 345.569628][ T975] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 345.569657][ T975] usb 2-1: config 0 has no interface number 0 [ 345.569713][ T975] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.569740][ T975] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 345.572348][ T975] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 345.572377][ T975] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 345.572397][ T975] usb 2-1: Product: syz [ 345.572411][ T975] usb 2-1: SerialNumber: syz [ 345.615813][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 345.646648][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 345.646678][ T10] usb 7-1: config 179 has no interface number 0 [ 345.646732][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 345.646760][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 345.646787][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.646814][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 345.646842][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 345.646889][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 345.646912][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.762123][ T975] usb 2-1: config 0 descriptor?? [ 345.829335][ T975] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 345.857283][T10496] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 345.862504][ T975] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input19 [ 346.233141][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.236926][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.237190][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.237464][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.237715][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.237972][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.238221][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.238505][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.238761][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.239026][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 346.339680][ T975] usb 2-1: USB disconnect, device number 26 [ 346.339783][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 346.460170][ T5925] usb 7-1: USB disconnect, device number 10 [ 346.460228][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 346.460311][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 346.520355][ T975] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 347.953750][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.752224][T10530] can0: slcan on ttynull. [ 348.828662][T10537] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1869'. [ 349.086786][T10529] can0 (unregistered): slcan off ttynull. [ 350.062750][T10562] sp0: Synchronizing with TNC [ 350.248246][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 351.965587][ T5903] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 352.117956][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.117993][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.118035][ T5903] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 352.118059][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.178344][ T5903] usb 6-1: config 0 descriptor?? [ 352.362577][T10624] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 352.504689][T10624] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 352.643616][ T5903] petalynx 0003:18B1:0037.0023: item fetching failed at offset 2/5 [ 352.644581][ T5903] petalynx 0003:18B1:0037.0023: parse failed [ 352.644660][ T5903] petalynx 0003:18B1:0037.0023: probe with driver petalynx failed with error -22 [ 352.735662][ T5933] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 352.872376][ T5903] usb 6-1: USB disconnect, device number 21 [ 352.895444][ T5933] usb 7-1: Using ep0 maxpacket: 32 [ 352.901771][ T5933] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 352.903334][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.903370][ T5933] usb 7-1: config 0 has no interface number 0 [ 352.904859][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.904883][ T5933] usb 7-1: config 0 has no interface number 0 [ 352.957059][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.957089][ T5933] usb 7-1: config 0 has no interface number 0 [ 352.961040][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.961067][ T5933] usb 7-1: config 0 has no interface number 0 [ 352.962334][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.962358][ T5933] usb 7-1: config 0 has no interface number 0 [ 352.964436][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 352.964461][ T5933] usb 7-1: config 0 has no interface number 0 [ 353.015376][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 353.015405][ T5933] usb 7-1: config 0 has no interface number 0 [ 353.022650][ T5933] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 353.022681][ T5933] usb 7-1: config 0 has no interface number 0 [ 353.060696][ T5933] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 353.060728][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.060748][ T5933] usb 7-1: Product: syz [ 353.060762][ T5933] usb 7-1: Manufacturer: syz [ 353.060776][ T5933] usb 7-1: SerialNumber: syz [ 353.102619][ T5933] usb 7-1: config 0 descriptor?? [ 353.125559][ T5933] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 353.310410][T10636] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1915'. [ 353.894958][T10648] netlink: 'syz.1.1920': attribute type 10 has an invalid length. [ 354.402277][T10648] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 354.464263][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.593085][T10657] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 355.417640][ T975] kernel write not supported for file /vcs (pid: 975 comm: kworker/1:2) [ 355.513590][ T5933] etas_es58x 7-1:0.2: could not retrieve the product info string [ 355.751075][ T5933] usb 7-1: USB disconnect, device number 11 [ 355.764271][ T5933] etas_es58x 7-1:0.2: Disconnecting syz syz [ 356.444626][ T7594] udevd[7594]: setting owner of /dev/bus/usb/007/011 to uid=0, gid=0 failed: No such file or directory [ 356.603360][T10699] program syz.5.1943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.815453][ T5933] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 356.965573][ T5933] usb 7-1: Using ep0 maxpacket: 16 [ 356.968803][ T5933] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.968872][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.968901][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 356.968922][ T5933] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 356.968944][ T5933] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.978587][ T5933] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 356.978617][ T5933] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 356.978634][ T5933] usb 7-1: Manufacturer: syz [ 356.997702][ T5933] usb 7-1: config 0 descriptor?? [ 357.537699][ T5933] rc_core: IR keymap rc-hauppauge not found [ 357.537725][ T5933] Registered IR keymap rc-empty [ 357.537921][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.558926][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.577665][ T5933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 357.604215][ T5933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input20 [ 357.645612][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.666314][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.685835][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.705696][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.725654][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.745588][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.771534][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.785654][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.805648][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.825587][ T5933] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 357.873172][ T5933] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 357.873200][ T5933] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 357.899796][ T975] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 357.940042][ T5933] usb 7-1: USB disconnect, device number 12 [ 358.056784][ T975] usb 8-1: Using ep0 maxpacket: 32 [ 358.066228][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.066264][ T975] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.066305][ T975] usb 8-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 358.066326][ T975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.131964][ T975] usb 8-1: config 0 descriptor?? [ 358.645486][ T975] hid_mf 0003:0079:1801.0024: item fetching failed at offset 0/2 [ 358.646428][ T975] hid_mf 0003:0079:1801.0024: HID parse failed. [ 358.646509][ T975] hid_mf 0003:0079:1801.0024: probe with driver hid_mf failed with error -22 [ 358.676137][T10731] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 358.866409][ T5925] usb 8-1: USB disconnect, device number 11 [ 359.065405][ T5933] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 359.236145][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 359.236194][ T5933] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 359.236215][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.290159][ T5933] usb 2-1: config 0 descriptor?? [ 359.300439][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 359.461401][ T31] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.461434][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.461453][ T31] usb 6-1: Product: syz [ 359.461468][ T31] usb 6-1: Manufacturer: syz [ 359.461482][ T31] usb 6-1: SerialNumber: syz [ 359.539096][ T31] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 359.706701][T10748] netlink: 'syz.6.1966': attribute type 3 has an invalid length. [ 359.706728][T10748] netlink: 944 bytes leftover after parsing attributes in process `syz.6.1966'. [ 359.758651][ T5933] hid_parser_main: 1 callbacks suppressed [ 359.758679][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.758714][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.758739][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.758762][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.771871][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.771903][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.771925][ T5933] isku 0003:1E7D:3264.0025: unknown main item tag 0x0 [ 359.800770][ T5933] isku 0003:1E7D:3264.0025: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 359.853513][ T5932] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 359.958857][ T5903] usb 2-1: USB disconnect, device number 27 [ 360.191828][T10751] fido_id[10751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 361.486080][ T5932] usb 6-1: Service connection timeout for: 256 [ 361.486109][ T5932] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 362.535984][ T37] audit: type=1326 audit(1758283267.805:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.5.1981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fac45355b67 code=0x0 [ 364.573862][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 365.339221][T10813] sp0: Synchronizing with TNC [ 365.339272][T10814] sp0: Found TNC [ 365.483881][ T31] usb 6-1: USB disconnect, device number 22 [ 365.557301][ T5932] ath9k_htc: Failed to initialize the device [ 365.561157][ T31] usb 6-1: ath9k_htc: USB layer deinitialized [ 366.341880][T10831] option changes via remount are deprecated (pid=10826 comm=syz.7.2000) [ 366.470962][T10824] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1998'. [ 367.026593][T10844] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 367.756538][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2013'. [ 368.662052][ T37] audit: type=1800 audit(1758283273.915:44): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2022" name="SYSV798dd82f" dev="tmpfs" ino=0 res=0 errno=0 [ 369.034946][T10887] netlink: 'syz.6.2025': attribute type 2 has an invalid length. [ 369.867873][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 369.905628][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2035'. [ 370.445546][ T5933] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 370.615562][ T5933] usb 7-1: Using ep0 maxpacket: 16 [ 370.717207][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.717254][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.717305][ T5933] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 370.717328][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.792282][ T5933] usb 7-1: config 0 descriptor?? [ 371.025228][T10939] fuse: Invalid rootmode [ 371.291771][ T5933] hid-picolcd 0003:04D8:F002.0026: unbalanced collection at end of report description [ 371.292778][ T5933] hid-picolcd 0003:04D8:F002.0026: device report parse failed [ 371.292899][ T5933] hid-picolcd 0003:04D8:F002.0026: probe with driver hid-picolcd failed with error -22 [ 371.487271][ T5933] usb 7-1: USB disconnect, device number 13 [ 371.655523][ T5932] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 371.808322][ T5932] usb 8-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 371.808354][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.867718][ T5932] usb 8-1: config 0 descriptor?? [ 372.324316][ T5932] pantherlord 0003:0F30:0111.0027: item fetching failed at offset 0/4 [ 372.325239][ T5932] pantherlord 0003:0F30:0111.0027: parse failed [ 372.336569][T10972] tipc: Started in network mode [ 372.336598][T10972] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 372.336654][T10972] tipc: Enabling of bearer rejected, failed to enable media [ 372.372407][ T5932] pantherlord 0003:0F30:0111.0027: probe with driver pantherlord failed with error -22 [ 372.559655][ T5933] usb 8-1: USB disconnect, device number 12 [ 372.945477][ T5903] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 373.103020][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.103078][ T5903] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 373.103102][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.113507][T10987] [U] : [ 373.113545][T10987] [U] [ 373.113575][T10987] [U] [ 373.113606][T10987] [U] [ 373.113637][T10987] [U] [ 373.113667][T10987] [U] [ 373.113697][T10987] [U] [ 373.113747][T10987] [U] [ 373.113820][T10987] [U] [ 373.113849][T10987] [U] [ 373.113894][T10987] [U] [ 373.113924][T10987] [U] [ 373.113955][T10987] [U] [ 373.113986][T10987] [U] [ 373.114016][T10987] [U] [ 373.114046][T10987] [U] [ 373.114123][T10987] [U] [ 373.114152][T10987] [U] [ 373.114182][T10987] [U] [ 373.114213][T10987] [U] [ 373.114243][T10987] [U] [ 373.114273][T10987] [U] [ 373.114303][T10987] [U] [ 373.114333][T10987] [U] [ 373.114401][T10987] [U] [ 373.114431][T10987] [U] [ 373.114461][T10987] [U] [ 373.114492][T10987] [U] [ 373.114521][T10987] [U] [ 373.114551][T10987] [U] [ 373.114582][T10987] [U] [ 373.114612][T10987] [U] [ 373.114677][T10987] [U] [ 373.114705][T10987] [U] [ 373.114734][T10987] [U] [ 373.114762][T10987] [U] [ 373.114790][T10987] [U] [ 373.114819][T10987] [U] [ 373.114855][T10987] [U] [ 373.114892][T10987] [U] [ 373.114960][T10987] [U] [ 373.114991][T10987] [U] [ 373.115020][T10987] [U] [ 373.115050][T10987] [U] [ 373.115080][T10987] [U] [ 373.115110][T10987] [U] [ 373.115140][T10987] [U] [ 373.115170][T10987] [U] [ 373.115237][T10987] [U] [ 373.147263][ T5903] usb 2-1: config 0 descriptor?? [ 373.167609][T10987] [U] [ 373.167647][T10987] [U] [ 373.167677][T10987] [U] [ 373.167709][T10987] [U] [ 373.167740][T10987] [U] [ 373.167770][T10987] [U] [ 373.167800][T10987] [U] [ 373.190259][T10987] [U] [ 373.190298][T10987] [U] [ 373.190329][T10987] [U] [ 373.190359][T10987] [U] [ 373.190389][T10987] [U] [ 373.190417][T10987] [U] [ 373.190445][T10987] [U] [ 373.190474][T10987] [U] [ 373.190540][T10987] [U] [ 373.190568][T10987] [U] [ 373.190596][T10987] [U] [ 373.190624][T10987] [U] [ 373.190652][T10987] [U] [ 373.190681][T10987] [U] [ 373.190710][T10987] [U] [ 373.190738][T10987] [U] [ 373.190803][T10987] [U] [ 373.190831][T10987] [U] [ 373.190868][T10987] [U] [ 373.190896][T10987] [U] [ 373.190924][T10987] [U] [ 373.190952][T10987] [U] [ 373.190980][T10987] [U] [ 373.191019][T10987] [U] [ 373.191086][T10987] [U] [ 373.191116][T10987] [U] [ 373.191147][T10987] [U] [ 373.191177][T10987] [U] [ 373.191207][T10987] [U] [ 373.191236][T10987] [U] [ 373.191267][T10987] [U] [ 373.191298][T10987] [U] [ 373.191364][T10987] [U] [ 373.191395][T10987] [U] [ 373.191424][T10987] [U] [ 373.191460][T10987] [U] [ 373.191488][T10987] [U] [ 373.191516][T10987] [U] [ 373.191545][T10987] [U] [ 373.191573][T10987] [U] [ 373.191638][T10987] [U] [ 373.191666][T10987] [U] [ 373.191695][T10987] [U] [ 373.191723][T10987] [U] [ 373.191751][T10987] [U] [ 373.191781][T10987] [U] [ 373.191811][T10987] [U] [ 373.191841][T10987] [U] [ 373.191914][T10987] [U] [ 373.191942][T10987] [U] [ 373.205105][T10987] [U] [ 373.205204][T10987] [U] [ 373.205236][T10987] [U] [ 373.205951][T10987] [U] [ 373.205985][T10987] [U] [ 373.206016][T10987] [U] [ 373.207523][T10987] [U] [ 373.208759][T10987] [U] [ 373.208792][T10987] [U] [ 373.208822][T10987] [U] [ 373.209623][T10987] [U] [ 373.209656][T10987] [U] [ 373.209686][T10987] [U] [ 373.210747][T10987] [U] [ 373.210834][T10987] [U] [ 373.212147][T10987] [U] [ 373.212181][T10987] [U] [ 373.212211][T10987] [U] [ 373.213441][T10987] [U] [ 373.213473][T10987] [U] [ 373.213504][T10987] [U] [ 373.450914][T10986] [U] [ 373.694952][ T5903] aquacomputer_d5next 0003:0C70:F00B.0028: item fetching failed at offset 6/7 [ 373.730908][ T5903] aquacomputer_d5next 0003:0C70:F00B.0028: probe with driver aquacomputer_d5next failed with error -22 [ 373.932635][ T5903] usb 2-1: USB disconnect, device number 28 [ 374.670427][T11016] netlink: 'syz.7.2085': attribute type 10 has an invalid length. [ 374.833314][T11016] team0: Port device syz_tun added [ 374.905501][ T5932] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 375.067224][ T5932] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 375.067261][ T5932] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.067307][ T5932] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 375.067330][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.148431][ T5932] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.149712][ T5932] usb 7-1: invalid MIDI out EP 0 [ 375.351690][ T5932] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 375.390121][ T5932] usb 7-1: USB disconnect, device number 14 [ 375.470934][T10985] udevd[10985]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.095587][ T5925] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 376.248161][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.248190][ T5925] usb 6-1: config 0 has no interfaces? [ 376.250616][ T5925] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.250645][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.250664][ T5925] usb 6-1: Product: syz [ 376.250678][ T5925] usb 6-1: Manufacturer: syz [ 376.305967][ T5925] usb 6-1: config 0 descriptor?? [ 376.549815][ T5925] usb 6-1: USB disconnect, device number 23 [ 377.763601][T11080] binder: 11077:11080 ioctl c0306201 2000000003c0 returned -22 [ 378.073124][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 378.900744][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.900839][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.236988][T11117] ucma_write: process 654 (syz.7.2132) changed security contexts after opening file descriptor, this is not allowed. [ 381.401727][T11174] xt_l2tp: missing protocol rule (udp|l2tpip) [ 381.975429][ T5932] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 381.996876][T11189] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2167'. [ 382.138852][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 382.142007][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.142040][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.142081][ T5932] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 382.142105][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.171907][ T5932] usb 2-1: config 0 descriptor?? [ 382.622809][ T5932] koneplus 0003:1E7D:2D51.0029: item fetching failed at offset 1/5 [ 382.623743][ T5932] koneplus 0003:1E7D:2D51.0029: parse failed [ 382.623834][ T5932] koneplus 0003:1E7D:2D51.0029: probe with driver koneplus failed with error -22 [ 382.863198][ T5925] usb 2-1: USB disconnect, device number 29 [ 383.022346][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2176'. [ 383.305431][ T5932] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 383.308351][ T37] audit: type=1326 audit(1758283288.585:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.366891][ T37] audit: type=1326 audit(1758283288.585:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.366953][ T37] audit: type=1326 audit(1758283288.635:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.367002][ T37] audit: type=1326 audit(1758283288.635:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.367060][ T37] audit: type=1326 audit(1758283288.635:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.367111][ T37] audit: type=1326 audit(1758283288.635:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.367158][ T37] audit: type=1326 audit(1758283288.635:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.367206][ T37] audit: type=1326 audit(1758283288.635:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11212 comm="syz.5.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 383.548301][ T5932] usb 8-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 383.548374][ T5932] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 383.548398][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.616567][ T5932] usb 8-1: probing VID:PID(2201:012C) [ 383.619816][ T5932] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 383.619926][ T5932] vub300 8-1:64.0: probe with driver vub300 failed with error -22 [ 383.808480][ T5932] usb 8-1: USB disconnect, device number 13 [ 384.379434][ T5925] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 384.528069][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.528107][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.528130][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.528175][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.528199][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.626135][ T5925] usb 2-1: config 0 descriptor?? [ 385.074754][ T5925] plantronics 0003:047F:FFFF.002A: item 0 4 0 11 parsing failed [ 385.096074][ T5925] plantronics 0003:047F:FFFF.002A: parse failed [ 385.096203][ T5925] plantronics 0003:047F:FFFF.002A: probe with driver plantronics failed with error -22 [ 385.292462][ T5933] usb 2-1: USB disconnect, device number 30 [ 385.779467][T11260] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2202'. [ 387.234034][ T5925] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 387.281326][T11301] sp0: Synchronizing with TNC [ 387.307075][T11299] [U] è [ 387.385484][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 387.390674][ T5925] usb 8-1: unable to get BOS descriptor or descriptor too short [ 387.392360][ T5925] usb 8-1: config 4 has an invalid interface number: 30 but max is 0 [ 387.392389][ T5925] usb 8-1: config 4 has no interface number 0 [ 387.392424][ T5925] usb 8-1: config 4 interface 30 has no altsetting 0 [ 387.435999][ T5925] usb 8-1: string descriptor 0 read error: -22 [ 387.436185][ T5925] usb 8-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 387.436210][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.517491][ T5925] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 387.517552][ T5925] dw2102: su3000_power_ctrl: 1, initialized 0 [ 387.517572][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 387.565869][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.576186][ T5925] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 387.576252][ T5925] usb 8-1: media controller created [ 387.576281][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 387.576297][ T5925] dw2102: i2c transfer failed. [ 387.576317][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 387.576331][ T5925] dw2102: i2c transfer failed. [ 387.576350][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 387.576365][ T5925] dw2102: i2c transfer failed. [ 387.576383][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 387.576398][ T5925] dw2102: i2c transfer failed. [ 387.576417][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 387.576432][ T5925] dw2102: i2c transfer failed. [ 387.576450][ T5925] dvb-usb: bulk message failed: -22 (6/0) [ 387.576464][ T5925] dw2102: i2c transfer failed. [ 387.576475][ T5925] dvb-usb: MAC address: 02:02:02:02:02:02 [ 387.729933][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.746586][T11293] dvb-usb: bulk message failed: -22 (3/0) [ 387.746609][T11293] dw2102: i2c transfer failed. [ 387.746618][T11293] dvb-usb: bulk message failed: -22 (4/0) [ 387.746632][T11293] dw2102: i2c transfer failed. [ 387.817074][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 387.817098][ T5925] dw2102: command 0x0e transfer failed. [ 387.817107][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 387.817120][ T5925] dw2102: command 0x0e transfer failed. [ 388.127235][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 388.127262][ T5925] dw2102: command 0x0e transfer failed. [ 388.127272][ T5925] dvb-usb: bulk message failed: -22 (3/0) [ 388.127287][ T5925] dw2102: command 0x0e transfer failed. [ 388.127296][ T5925] dvb-usb: bulk message failed: -22 (1/0) [ 388.127310][ T5925] dw2102: command 0x51 transfer failed. [ 388.127320][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 388.127334][ T5925] dw2102: i2c probe for address 0x68 failed. [ 388.127346][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 388.127360][ T5925] dw2102: i2c probe for address 0x69 failed. [ 388.127372][ T5925] dvb-usb: bulk message failed: -22 (5/0) [ 388.127385][ T5925] dw2102: i2c probe for address 0x6a failed. [ 388.127397][ T5925] dw2102: probing for demodulator failed. Is the external power switched on? [ 388.127408][ T5925] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 388.205760][ T5157] Bluetooth: hci3: link tx timeout [ 388.211130][ T5157] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.220977][ T5157] Bluetooth: hci3: link tx timeout [ 388.220997][ T5157] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.335438][ T5925] rc_core: IR keymap rc-tt-1500 not found [ 388.335460][ T5925] Registered IR keymap rc-empty [ 388.337552][ T5925] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 388.380061][ T5925] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input21 [ 388.416249][ T5925] dvb-usb: schedule remote query interval to 250 msecs. [ 388.416274][ T5925] dw2102: su3000_power_ctrl: 0, initialized 1 [ 388.416285][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 388.419802][ T5925] usb 8-1: USB disconnect, device number 14 [ 388.780049][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 388.973512][T11340] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 388.973512][T11340] The task syz.6.2236 (11340) triggered the difference, watch for misbehavior. [ 389.234934][T11344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2241'. [ 389.921061][T11356] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2244'. [ 390.245455][ T5157] Bluetooth: hci3: command 0x0405 tx timeout [ 391.325457][ T5903] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 391.485544][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 391.488364][ T5903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.488392][ T5903] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.504272][ T5903] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.504305][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.504325][ T5903] usb 7-1: Product: syz [ 391.504340][ T5903] usb 7-1: Manufacturer: syz [ 391.504354][ T5903] usb 7-1: SerialNumber: syz [ 391.809901][ T5903] usb 7-1: 0:2 : does not exist [ 391.837878][ T5903] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 391.933161][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2265'. [ 391.960392][ T5903] usb 7-1: USB disconnect, device number 15 [ 392.058802][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2264'. [ 392.395131][T10985] udevd[10985]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.259588][T11450] genirq: Flags mismatch irq 10. 00202000 (das16m1) vs. 00202080 (virtio2) [ 394.899441][T11495] xt_l2tp: wrong L2TP version: 1 [ 395.189712][T11502] loop6: detected capacity change from 0 to 524288000 [ 395.505391][ T31] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 395.665443][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 395.670203][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 395.670258][ T31] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 395.670284][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.678673][ T31] usb 8-1: config 0 descriptor?? [ 395.895868][ T5933] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 396.045472][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 396.048225][ T5933] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 396.048253][ T5933] usb 7-1: config 2 has no interface number 0 [ 396.048310][ T5933] usb 7-1: config 2 interface 31 has no altsetting 0 [ 396.070243][ T5933] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 396.070274][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.070294][ T5933] usb 7-1: Product: syz [ 396.070307][ T5933] usb 7-1: Manufacturer: syz [ 396.070320][ T5933] usb 7-1: SerialNumber: syz [ 396.178132][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178168][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178194][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178219][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178244][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178269][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178294][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178320][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178345][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.178370][ T31] corsair 0003:1B1C:1B09.002B: unknown main item tag 0x0 [ 396.226058][ T31] corsair 0003:1B1C:1B09.002B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.7-1/input0 [ 396.380719][ T5903] usb 8-1: USB disconnect, device number 15 [ 396.729598][T11523] fido_id[11523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 396.794058][T11528] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 396.867640][ T5933] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 396.909758][ T5933] usb 7-1: USB disconnect, device number 16 [ 397.274372][T11538] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 397.315440][ T975] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 397.475506][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 397.482198][ T975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.482227][ T975] usb 2-1: config 0 has no interface number 0 [ 397.498642][ T975] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 397.498674][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.498694][ T975] usb 2-1: Product: syz [ 397.498708][ T975] usb 2-1: Manufacturer: syz [ 397.498722][ T975] usb 2-1: SerialNumber: syz [ 397.545182][ T975] usb 2-1: config 0 descriptor?? [ 397.807205][ T975] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 397.807758][ T975] gspca_spca1528: reg_w err -71 [ 397.825488][ T975] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 397.855579][ T975] usb 2-1: USB disconnect, device number 31 [ 399.006480][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2335'. [ 399.006553][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2335'. [ 399.032294][T11578] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2334'. [ 399.032322][T11578] block nbd0: Unsupported socket: shutdown callout must be supported. [ 399.082762][T11582] program syz.5.2336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.843408][T11628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.155398][ T5918] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 401.305416][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 401.310402][ T5918] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.310430][ T5918] usb 7-1: config 0 has no interface number 0 [ 401.344186][ T5918] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 401.344220][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.344240][ T5918] usb 7-1: Product: syz [ 401.344255][ T5918] usb 7-1: Manufacturer: syz [ 401.344268][ T5918] usb 7-1: SerialNumber: syz [ 401.389169][ T5918] usb 7-1: config 0 descriptor?? [ 401.400732][ T31] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 401.415190][ T5918] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 401.562805][ T31] usb 8-1: string descriptor 0 read error: -22 [ 401.563154][ T31] usb 8-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 401.563181][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.637008][ T31] usb 8-1: config 0 descriptor?? [ 401.679637][ T31] usbtest 8-1:0.0: FX2 device [ 401.679661][ T31] usbtest 8-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 401.886437][ T5933] usb 8-1: USB disconnect, device number 16 [ 402.036751][ T5918] gspca_spca1528: reg_w err -71 [ 402.055505][ T5918] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 402.063927][ T5918] usb 7-1: USB disconnect, device number 17 [ 403.914494][T11701] program syz.1.2393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.109975][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 404.198627][ T37] audit: type=1326 audit(1758283309.475:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.202269][ T37] audit: type=1326 audit(1758283309.475:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.202581][ T37] audit: type=1326 audit(1758283309.475:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.203532][ T37] audit: type=1326 audit(1758283309.475:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.203853][ T37] audit: type=1326 audit(1758283309.475:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.204704][ T37] audit: type=1326 audit(1758283309.475:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.205180][ T37] audit: type=1326 audit(1758283309.475:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.368584][ T37] audit: type=1326 audit(1758283309.535:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11707 comm="syz.5.2399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 404.925629][ T5933] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 405.085621][ T5933] usb 7-1: Using ep0 maxpacket: 32 [ 405.095103][ T5933] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 405.095134][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.095154][ T5933] usb 7-1: Product: syz [ 405.095169][ T5933] usb 7-1: Manufacturer: syz [ 405.095184][ T5933] usb 7-1: SerialNumber: syz [ 405.186777][ T5933] usb 7-1: config 0 descriptor?? [ 405.211856][ T5933] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 405.342400][T11739] veth1_macvtap: left promiscuous mode [ 405.342434][T11739] macsec0: entered promiscuous mode [ 405.342457][T11739] macsec0: entered allmulticast mode [ 405.387066][T11740] veth1_macvtap: entered promiscuous mode [ 405.387125][T11740] veth1_macvtap: entered allmulticast mode [ 405.387750][T11740] macsec0: left promiscuous mode [ 405.392831][T11740] macsec0: left allmulticast mode [ 405.392855][T11740] veth1_macvtap: left allmulticast mode [ 405.882857][ T5933] gspca_ov534_9: reg_w failed -71 [ 406.205459][ T5933] gspca_ov534_9: Unknown sensor 0000 [ 406.205581][ T5933] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 406.226476][ T5933] usb 7-1: USB disconnect, device number 18 [ 407.765904][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 407.920928][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.920984][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 407.921008][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.934054][ T9] usb 2-1: config 0 descriptor?? [ 408.336423][T11804] netlink: 'syz.0.2441': attribute type 1 has an invalid length. [ 408.426405][ T9] hid_parser_main: 1 callbacks suppressed [ 408.426433][ T9] elecom 0003:056E:00FC.002C: unknown main item tag 0x0 [ 408.426463][ T9] elecom 0003:056E:00FC.002C: unknown main item tag 0x0 [ 408.426492][ T9] elecom 0003:056E:00FC.002C: unknown main item tag 0x0 [ 408.426517][ T9] elecom 0003:056E:00FC.002C: unknown main item tag 0x0 [ 408.426541][ T9] elecom 0003:056E:00FC.002C: unknown main item tag 0x0 [ 408.459005][ T9] elecom 0003:056E:00FC.002C: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 408.630953][ T9] usb 2-1: USB disconnect, device number 32 [ 408.758806][T11808] fido_id[11808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 409.631482][T11832] nbd: must specify a size in bytes for the device [ 410.226365][T11844] syz.6.2460 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 411.145315][T11851] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.199093][T11861] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl812) [ 411.403994][T11862] : entered promiscuous mode [ 411.809717][T11851] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.883833][T11872] xt_socket: unknown flags 0xd0 [ 412.413853][T11851] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.889310][T11851] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.281124][T11899] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2485'. [ 413.281159][T11899] netlink: 'syz.7.2485': attribute type 6 has an invalid length. [ 413.281174][T11899] netlink: 'syz.7.2485': attribute type 5 has an invalid length. [ 413.281187][T11899] netlink: 'syz.7.2485': attribute type 4 has an invalid length. [ 413.579287][ T3634] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.695894][ T160] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.827656][ T3530] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.916182][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.728856][T11955] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.729381][T11955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.729396][T11955] IPv6: NLM_F_CREATE should be set when creating new route [ 415.729484][T11955] IPv6: NLM_F_CREATE should be set when creating new route [ 415.730394][T11955] IPv6: NLM_F_CREATE should be set when creating new route [ 415.766790][T11955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.284484][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'. [ 418.284512][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 418.284536][T12010] netlink: 'syz.1.2535': attribute type 6 has an invalid length. [ 419.574226][T12037] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2546'. [ 420.736831][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2559'. [ 421.975558][ T5933] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 422.104963][ T37] audit: type=1326 audit(1758283327.375:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.129647][ T5933] usb 2-1: config 0 has an invalid interface number: 62 but max is 0 [ 422.129678][ T5933] usb 2-1: config 0 has no interface number 0 [ 422.129713][ T5933] usb 2-1: config 0 interface 62 has no altsetting 0 [ 422.131935][ T37] audit: type=1326 audit(1758283327.375:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.133098][ T37] audit: type=1326 audit(1758283327.405:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.133760][ T37] audit: type=1326 audit(1758283327.405:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.134106][ T37] audit: type=1326 audit(1758283327.405:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.134426][ T37] audit: type=1326 audit(1758283327.405:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.135212][ T37] audit: type=1326 audit(1758283327.405:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12096 comm="syz.5.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4535eba9 code=0x7ffc0000 [ 422.141394][ T5933] usb 2-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 422.141425][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.141443][ T5933] usb 2-1: Product: syz [ 422.141457][ T5933] usb 2-1: Manufacturer: syz [ 422.141469][ T5933] usb 2-1: SerialNumber: syz [ 422.174664][ T5933] usb 2-1: config 0 descriptor?? [ 422.460694][ T5933] usb-storage 2-1:0.62: USB Mass Storage device detected [ 422.665404][ T5933] usb 2-1: USB disconnect, device number 33 [ 423.710255][T12126] vivid-000: disconnect [ 423.742035][T12120] vivid-000: reconnect [ 424.165674][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 424.338132][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 424.384209][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.384238][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.401216][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.401245][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.401262][ T9] usb 2-1: Product: syz [ 424.401274][ T9] usb 2-1: Manufacturer: syz [ 424.401287][ T9] usb 2-1: SerialNumber: syz [ 424.475617][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 424.686339][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.686402][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 424.686426][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.728183][ T31] usb 7-1: config 0 descriptor?? [ 424.805832][ T5933] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 424.833910][ T9] usb 2-1: USB disconnect, device number 34 [ 424.958262][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.958312][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 424.958339][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 424.958361][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.958409][ T5933] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.958434][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.981232][ T5933] usb 6-1: config 0 descriptor?? [ 425.042316][T10985] udevd[10985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.408376][ T5925] usb 7-1: USB disconnect, device number 19 [ 425.468382][ T5933] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 425.566511][ T5933] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 425.676267][ T5933] usb 6-1: USB disconnect, device number 24 [ 426.079686][T12139] fido_id[12139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 426.421733][T12149] netlink: 'syz.5.2599': attribute type 3 has an invalid length. [ 426.421758][T12149] netlink: 'syz.5.2599': attribute type 1 has an invalid length. [ 426.421772][T12149] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2599'. [ 426.554671][ T37] audit: type=1326 audit(1758283331.825:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 426.559963][ T37] audit: type=1326 audit(1758283331.835:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 426.622532][ T37] audit: type=1326 audit(1758283331.895:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12152 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2c32d1eba9 code=0x7ffc0000 [ 427.338023][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 427.363756][T12067] syz.7.2560 (12067): drop_caches: 1 [ 427.488479][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.488516][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.488536][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 427.488579][ T9] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 427.488602][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.557075][ T9] usb 7-1: config 0 descriptor?? [ 428.079577][ T9] viewsonic 0003:2133:0018.002F: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.6-1/input0 [ 428.183723][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 428.208503][ T9] usb 7-1: USB disconnect, device number 20 [ 428.370046][T12185] netlink: 'syz.5.2616': attribute type 3 has an invalid length. [ 428.923442][T12182] fido_id[12182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 429.046087][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2623'. [ 429.046112][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2623'. [ 429.046137][T12200] netlink: 'syz.6.2623': attribute type 11 has an invalid length. [ 429.046152][T12200] netlink: 'syz.6.2623': attribute type 13 has an invalid length. [ 429.346557][T12206] sctp: [Deprecated]: syz.5.2626 (pid 12206) Use of int in maxseg socket option. [ 429.346557][T12206] Use struct sctp_assoc_value instead [ 429.517334][T12212] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2629'. [ 429.517363][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2629'. [ 430.737722][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.739751][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.875506][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 431.026680][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 431.029449][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 431.029520][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 431.029564][ T31] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 431.029588][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.050129][ T31] usb 2-1: config 0 descriptor?? [ 431.245585][ T5932] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 431.395546][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 431.414368][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.414976][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.415024][ T5932] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 431.415048][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.456019][ T5932] usb 6-1: config 0 descriptor?? [ 431.577380][ T31] saitek 0003:06A3:0621.0030: unknown main item tag 0x0 [ 431.577420][ T31] saitek 0003:06A3:0621.0030: unknown main item tag 0x0 [ 431.577446][ T31] saitek 0003:06A3:0621.0030: unknown main item tag 0x0 [ 431.577471][ T31] saitek 0003:06A3:0621.0030: unknown main item tag 0x0 [ 431.577505][ T31] saitek 0003:06A3:0621.0030: unknown main item tag 0x0 [ 431.603093][ T31] saitek 0003:06A3:0621.0030: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 431.691617][ T31] usb 2-1: USB disconnect, device number 35 [ 432.002198][ T5932] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0 [ 432.002254][ T5932] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0 [ 432.002280][ T5932] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0 [ 432.002315][ T5932] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0 [ 432.002339][ T5932] kone 0003:1E7D:2CED.0031: unknown main item tag 0x0 [ 432.027796][ T5932] kone 0003:1E7D:2CED.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 432.188396][ T5932] kone 0003:1E7D:2CED.0031: couldn't init struct kone_device [ 432.188463][ T5932] kone 0003:1E7D:2CED.0031: couldn't install mouse [ 432.210478][ T5932] kone 0003:1E7D:2CED.0031: probe with driver kone failed with error -5 [ 432.250953][T12266] fido_id[12266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 432.333497][ T5932] usb 6-1: USB disconnect, device number 25 [ 432.831410][T12273] fido_id[12273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 433.317418][T12284] tipc: Started in network mode [ 433.317444][T12284] tipc: Node identity 8, cluster identity 4711 [ 433.317467][T12284] tipc: Node number set to 8 [ 435.736654][T12326] pim6reg: entered allmulticast mode [ 435.786165][T12326] pim6reg: left allmulticast mode [ 440.756297][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.275267][ C1] sched: DL replenish lagged too much [ 455.767641][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.815939][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.819112][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.821378][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.822842][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.863330][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.907433][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.910384][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.969605][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.970883][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 456.074622][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 456.112926][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 456.141814][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 456.157090][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 456.162361][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.438951][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 456.474320][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 456.483971][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 456.486300][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 456.495660][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 456.581168][ T5157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 456.625792][ T5157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 456.628989][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 456.660886][ T5157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 456.661892][ T5157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 457.925454][ T5842] Bluetooth: hci2: command tx timeout [ 458.086193][ T5842] Bluetooth: hci6: command tx timeout [ 458.255201][ T5842] Bluetooth: hci7: command tx timeout [ 458.565565][ T5842] Bluetooth: hci8: command tx timeout [ 458.805516][ T5842] Bluetooth: hci9: command tx timeout [ 460.025864][ T5842] Bluetooth: hci2: command tx timeout [ 460.165728][ T5842] Bluetooth: hci6: command tx timeout [ 460.331627][ T5842] Bluetooth: hci7: command tx timeout [ 460.645551][ T5842] Bluetooth: hci8: command tx timeout [ 460.885459][ T5842] Bluetooth: hci9: command tx timeout [ 462.085730][ T5842] Bluetooth: hci2: command tx timeout [ 462.249604][ T5842] Bluetooth: hci6: command tx timeout [ 462.405550][ T5842] Bluetooth: hci7: command tx timeout [ 462.726824][ T5842] Bluetooth: hci8: command tx timeout [ 462.965667][ T5842] Bluetooth: hci9: command tx timeout [ 464.165825][ T5842] Bluetooth: hci2: command tx timeout [ 464.325637][ T5842] Bluetooth: hci6: command tx timeout [ 464.485471][ T5842] Bluetooth: hci7: command tx timeout [ 464.805576][ T5842] Bluetooth: hci8: command tx timeout [ 465.066994][ T5842] Bluetooth: hci9: command tx timeout [ 503.056648][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.664542][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.693961][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.703521][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.729643][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.766579][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.660669][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.684355][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.693545][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.735008][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.783752][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.017325][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 515.038577][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 515.058701][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 515.073727][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 515.074708][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 515.318410][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 515.336047][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 515.347831][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 515.349331][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 515.354414][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 515.628063][T12407] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 515.649680][T12407] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 515.651397][T12407] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 515.673327][T12407] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 515.693249][T12407] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 520.895513][T12407] Bluetooth: hci10: command tx timeout [ 520.896036][T12407] Bluetooth: hci4: command tx timeout [ 520.896374][T12407] Bluetooth: hci0: command tx timeout [ 520.915787][ T5157] Bluetooth: hci11: command tx timeout [ 520.965670][ T5157] Bluetooth: hci12: command tx timeout [ 522.975726][ T5846] Bluetooth: hci4: command tx timeout [ 522.975770][ T5846] Bluetooth: hci10: command tx timeout [ 522.979842][ T5157] Bluetooth: hci0: command tx timeout [ 522.980491][T12407] Bluetooth: hci11: command tx timeout [ 523.045448][T12407] Bluetooth: hci12: command tx timeout [ 525.045613][ T59] Bluetooth: hci10: command tx timeout [ 525.045653][ T59] Bluetooth: hci4: command tx timeout [ 525.051661][ T5157] Bluetooth: hci0: command tx timeout [ 525.054507][T12407] Bluetooth: hci11: command tx timeout [ 525.139402][T12407] Bluetooth: hci12: command tx timeout [ 527.125548][T12407] Bluetooth: hci11: command tx timeout [ 527.125587][T12407] Bluetooth: hci0: command tx timeout [ 527.125609][T12407] Bluetooth: hci4: command tx timeout [ 527.125632][T12407] Bluetooth: hci10: command tx timeout [ 527.205859][ T5157] Bluetooth: hci12: command tx timeout [ 564.138834][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.825298][T12407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.853239][T12407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.854798][T12407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.882239][T12407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.883278][T12407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.980599][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.004141][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.013328][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.014748][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.048841][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 574.005490][ T5157] Bluetooth: hci3: command tx timeout [ 575.125561][ T5157] Bluetooth: hci5: command tx timeout [ 575.250138][T12407] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 575.287627][T12407] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 575.289242][T12407] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 575.316880][T12407] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 575.326151][T12407] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 575.378310][T12407] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 575.438602][ T5846] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 575.440496][ T5846] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 575.443610][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 575.444562][ T5846] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 575.937358][T12407] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 575.966097][T12407] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 575.983121][T12407] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 575.984574][T12407] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 576.000356][T12407] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 576.085452][ T5157] Bluetooth: hci3: command tx timeout [ 577.208616][ T5157] Bluetooth: hci5: command tx timeout [ 577.525581][ T5157] Bluetooth: hci13: command tx timeout [ 577.605469][ T5157] Bluetooth: hci14: command tx timeout [ 578.089048][ T5157] Bluetooth: hci15: command tx timeout [ 578.165638][ T5157] Bluetooth: hci3: command tx timeout [ 579.295809][T12437] Bluetooth: hci5: command tx timeout [ 579.611305][T12437] Bluetooth: hci13: command tx timeout [ 579.685507][T12437] Bluetooth: hci14: command tx timeout [ 580.165561][T12437] Bluetooth: hci15: command tx timeout [ 580.245504][T12437] Bluetooth: hci3: command tx timeout [ 580.682162][T12437] Bluetooth: hci8: command 0x0406 tx timeout [ 580.682212][T12437] Bluetooth: hci6: command 0x0406 tx timeout [ 580.682350][T12437] Bluetooth: hci9: command 0x0406 tx timeout [ 580.682380][T12437] Bluetooth: hci2: command 0x0406 tx timeout [ 580.682407][T12437] Bluetooth: hci7: command 0x0406 tx timeout [ 581.371392][ T5842] Bluetooth: hci5: command tx timeout [ 581.685423][ T5842] Bluetooth: hci13: command tx timeout [ 581.770077][ T5842] Bluetooth: hci14: command tx timeout [ 582.256044][T12437] Bluetooth: hci15: command tx timeout [ 583.765483][T12437] Bluetooth: hci13: command tx timeout [ 583.847140][T12437] Bluetooth: hci14: command tx timeout [ 584.325608][T12437] Bluetooth: hci15: command tx timeout [ 626.170879][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.897397][ T59] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 631.929733][ T59] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 631.931511][ T59] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 631.935443][ T59] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 631.936412][ T59] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 633.371116][ T5847] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 633.391919][ T5847] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 633.415401][ T5847] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 633.416824][ T5847] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 633.417779][ T5847] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 634.747285][T12437] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 634.772259][T12437] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 634.775041][T12437] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 634.805606][T12437] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 634.833052][T12437] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 635.778320][ T5842] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 635.813161][ T5842] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 635.814754][ T5842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 635.873922][ T5842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 635.884678][ T5842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 636.291397][T12407] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 636.319301][T12407] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 636.320879][T12407] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 636.324809][T12407] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 636.325877][T12407] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 638.725791][ T38] INFO: task syz.0.2682:12326 blocked for more than 143 seconds. [ 638.725819][ T38] Not tainted syzkaller #0 [ 638.725830][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.725840][ T38] task:syz.0.2682 state:D stack:25368 pid:12326 tgid:12324 ppid:5837 task_flags:0x400140 flags:0x00004006 [ 638.725900][ T38] Call Trace: [ 638.725907][ T38] [ 638.725922][ T38] __schedule+0x16f3/0x4c20 [ 638.726085][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.726125][ T38] ? __pfx___schedule+0x10/0x10 [ 638.726175][ T38] ? schedule+0x91/0x360 [ 638.726208][ T38] schedule+0x165/0x360 [ 638.726239][ T38] schedule_timeout+0x9a/0x270 [ 638.726292][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 638.726335][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.726365][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.726411][ T38] ? wait_for_completion+0x267/0x5d0 [ 638.726445][ T38] wait_for_completion+0x2bf/0x5d0 [ 638.726491][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 638.726529][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 638.726560][ T38] rcu_barrier+0x463/0x570 [ 638.726595][ T38] netdev_run_todo+0x327/0xea0 [ 638.726674][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 638.726709][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 638.726733][ T38] ? ip6_mroute_setsockopt+0xa84/0xf00 [ 638.726810][ T38] ip6_mroute_setsockopt+0x866/0xf00 [ 638.726848][ T38] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 638.726912][ T38] do_ipv6_setsockopt+0x35a/0x2eb0 [ 638.726992][ T38] ? __pfx_[ 638.726992][ T38] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 638.727037][ T38] ? futex_private_hash_put+0x4b/0x280 [ 638.727063][ T38] ? futex_private_hash_put+0x4b/0x280 [ 638.727082][ T38] ? futex_private_hash_put+0x245/0x280 [ 638.727114][ T38] ? futex_wake+0x4b5/0x560 [ 638.727149][ T38] ? __pfx_futex_wake+0x10/0x10 [ 638.727195][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.727233][ T38] ipv6_setsockopt+0x59/0x170 [ 638.727276][ T38] rawv6_setsockopt+0x23b/0x5b0 [ 638.727331][ T38] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 638.727364][ T38] ? sock_common_setsockopt+0x36/0xc0 [ 638.727431][ T38] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 638.727462][ T38] do_sock_setsockopt+0x179/0x1b0 [ 638.727521][ T38] __x64_sys_setsockopt+0x145/0x1b0 [ 638.727560][ T38] do_syscall_64+0xfa/0x3b0 [ 638.727579][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.727608][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.727630][ T38] ? clear_bhb_loop+0x60/0xb0 [ 638.727657][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.727677][ T38] RIP: 0033:0x7f2c32d1eba9 [ 638.727696][ T38] RSP: 002b:00007f2c30f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 638.727719][ T38] RAX: ffffffffffffffda RBX: 00007f2c32f65fa0 RCX: 00007f2c32d1eba9 [ 638.727735][ T38] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 638.727748][ T38] RBP: 00007f2c32da1e19 R08: 0000000000000004 R09: 0000000000000000 [ 638.727761][ T38] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 638.727775][ T38] R13: 00007f2c32f66038 R14: 00007f2c32f65fa0 R15: 00007ffd7f8a8db8 [ 638.727811][ T38] [ 638.727826][ T38] INFO: task syz-executor:12369 blocked for more than 143 seconds. [ 638.727841][ T38] Not tainted syzkaller #0 [ 638.727851][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.727859][ T38] task:syz-executor state:D stack:26376 pid:12369 tgid:12369 ppid:1 task_flags:0x400140 flags:0x00004004 [ 638.727922][ T38] Call Trace: [ 638.727929][ T38] [ 638.727943][ T38] __schedule+0x16f3/0x4c20 [ 638.727996][ T38] ? __kernel_text_address+0xd/0x40 [ 638.728023][ T38] ? __pfx___schedule+0x10/0x10 [ 638.728075][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.728118][ T38] rt_mutex_schedule+0x77/0xf0 [ 638.728139][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 638.728166][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 638.728212][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 638.728242][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 638.728268][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 638.728305][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.728340][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 638.728373][ T38] ? bpf_lsm_capable+0x9/0x20 [ 638.728398][ T38] ? security_capable+0x7e/0x2e0 [ 638.728432][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 638.728507][ T38] mutex_lock_nested+0x16a/0x1d0 [ 638.728531][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 638.728560][ T38] rtnl_newlink+0x8db/0x1c70 [ 638.728598][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.728628][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.728666][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.728701][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.728743][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.728795][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 638.728831][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 638.728857][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 638.728895][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.728953][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.728981][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 638.729008][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.729037][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 638.729060][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.729111][ T38] netlink_rcv_skb+0x205/0x470 [ 638.729178][ T38] ? __lock_acquire+0xab9/0xd20 [ 638.729205][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.729236][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.729278][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.729317][ T38] netlink_unicast+0x843/0xa10 [ 638.729355][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 638.729383][ T38] ? netlink_sendmsg+0x642/0xb30 [ 638.729409][ T38] ? skb_put+0x11b/0x210 [ 638.729445][ T38] netlink_sendmsg+0x805/0xb30 [ 638.729484][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.729523][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.729545][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.729575][ T38] __sock_sendmsg+0x21c/0x270 [ 638.729606][ T38] __sys_sendto+0x3c7/0x520 [ 638.729639][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 638.729686][ T38] ? fput_close_sync+0x119/0x200 [ 638.729725][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 638.729746][ T38] ? rt_spin_unlock+0x65/0x80 [ 638.729778][ T38] __x64_sys_sendto+0xde/0x100 [ 638.729813][ T38] do_syscall_64+0xfa/0x3b0 [ 638.729831][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.729860][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.729881][ T38] ? clear_bhb_loop+0x60/0xb0 [ 638.729906][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.729927][ T38] RIP: 0033:0x7f9b4c7a0a3c [ 638.729944][ T38] RSP: 002b:00007fffd93c82b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 638.729965][ T38] RAX: ffffffffffffffda RBX: 00007f9b4d514620 RCX: 00007f9b4c7a0a3c [ 638.729981][ T38] RDX: 000000000000002c RSI: 00007f9b4d514670 RDI: 0000000000000003 [ 638.729995][ T38] RBP: 0000000000000000 R08: 00007fffd93c8304 R09: 000000000000000c [ 638.730008][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 638.730020][ T38] R13: 0000000000000000 R14: 00007f9b4d514670 R15: 0000000000000000 [ 638.730055][ T38] [ 638.730079][ T38] [ 638.730079][ T38] Showing all locks held in the system: [ 638.730090][ T38] 7 locks held by ktimers/1/29: [ 638.730111][ T38] 2 locks held by kworker/1:0/31: [ 638.730124][ T38] 1 lock held by khungtaskd/38: [ 638.730135][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 638.730189][ T38] 3 locks held by kworker/u8:3/57: [ 638.730200][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.730254][ T38] #1: ffffc9000123fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.730306][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 638.730355][ T38] 4 locks held by kworker/u9:0/59: [ 638.730366][ T38] #0: ffff8880750f4138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.730423][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.730477][ T38] #2: ffff8880778880a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 638.730554][ T38] #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 638.730617][ T38] 3 locks held by kworker/u8:10/1508: [ 638.730629][ T38] #0: ffff888030121938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.730680][ T38] #1: ffffc90005347bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.730755][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 638.730858][ T38] 2 locks held by kworker/u8:11/3530: [ 638.730868][ T38] 3 locks held by kworker/u8:15/3645: [ 638.730879][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.730929][ T38] #1: ffffc9000db4fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.730979][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 638.731027][ T38] 4 locks held by kworker/u9:1/5157: [ 638.731038][ T38] #0: ffff88804a3a4138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.731095][ T38] #1: ffffc9000fa97bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.731155][ T38] #2: ffff88805972c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 638.731205][ T38] #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 638.731258][ T38] 2 locks held by getty/5600: [ 638.731270][ T38] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 638.731327][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 638.731380][ T38] 5 locks held by syz-executor/5826: [ 638.731392][ T38] 4 locks held by kworker/u9:2/5842: [ 638.731403][ T38] #0: ffff88805da0f938 ((wq_completion)hci20#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.731459][ T38] #1: ffffc90004ca7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.731511][ T38] #2: ffff88805923c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 638.731561][ T38] #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 638.731613][ T38] 6 locks held by kworker/u9:4/5846: [ 638.731624][ T38] #0: ffff8880333b6138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.731675][ T38] #1: ffffc90004ce7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.731727][ T38] #2: ffff888036f38e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 638.731801][ T38] #3: ffff888036f380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 638.731876][ T38] #4: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 638.731952][ T38] #5: ffff88806a9d6b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 638.732023][ T38] 4 locks held by kworker/u9:5/5847: [ 638.732035][ T38] #0: ffff8880353d0138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.732092][ T38] #1: ffffc90004cf7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.732153][ T38] #2: ffff888085c400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 638.732203][ T38] #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 638.732255][ T38] 1 lock held by syz-executor/5850: [ 638.732267][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 638.732327][ T38] 3 locks held by kworker/0:6/5960: [ 638.732345][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.732395][ T38] #1: ffffc90005387bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.732446][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 638.732543][ T38] 1 lock held by syz.0.2682/12326: [ 638.732555][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 638.732602][ T38] 1 lock held by syz.7.2687/12338: [ 638.732614][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 638.732669][ T38] 1 lock held by syz.5.2688/12340: [ 638.732680][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 638.732727][ T38] 1 lock held by syz.6.2692/12349: [ 638.732738][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 638.732793][ T38] 3 locks held by kworker/1:7/12350: [ 638.732805][ T38] 2 locks held by kworker/1:8/12351: [ 638.732816][ T38] 3 locks held by syz-executor/12358: [ 638.732828][ T38] #0: ffff88803aa1ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 638.732878][ T38] #1: ffff88803aa1c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 638.732932][ T38] #2: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 638.732980][ T38] 3 locks held by syz-executor/12359: [ 638.732991][ T38] #0: ffff8880290cce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 638.733042][ T38] #1: ffff8880290cc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 638.733095][ T38] #2: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 638.733152][ T38] 3 locks held by syz-executor/12360: [ 638.733163][ T38] #0: ffff8880290c8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 638.733212][ T38] #1: ffff8880290c80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 638.733265][ T38] #2: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 638.733312][ T38] 1 lock held by syz-executor/12369: [ 638.733323][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 638.733377][ T38] 2 locks held by kworker/1:12/12382: [ 638.733389][ T38] 2 locks held by kworker/1:13/12383: [ 638.733401][ T38] 1 lock held by syz-executor/12391: [ 638.733412][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.733491][ T38] 1 lock held by syz-executor/12396: [ 638.733503][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.733550][ T38] 1 lock held by syz-executor/12401: [ 638.733562][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.733609][ T38] 1 lock held by syz-executor/12402: [ 638.733620][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.733668][ T38] 4 locks held by kworker/u9:3/12405: [ 638.733680][ T38] #0: ffff888143f35138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.733732][ T38] #1: ffffc90005587bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.733785][ T38] #2: ffff88804df00e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 638.733833][ T38] #3: ffff88804df000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 638.733887][ T38] 1 lock held by syz-executor/12406: [ 638.733898][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.733947][ T38] 1 lock held by syz-executor/12420: [ 638.733958][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734006][ T38] 1 lock held by syz-executor/12424: [ 638.734017][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734067][ T38] 1 lock held by syz-executor/12429: [ 638.734079][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734134][ T38] 1 lock held by syz-executor/12430: [ 638.734145][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734192][ T38] 1 lock held by syz-executor/12434: [ 638.734204][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734251][ T38] 4 locks held by kworker/u9:7/12437: [ 638.734263][ T38] #0: ffff88802ce17938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 638.734318][ T38] #1: ffffc90005177bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 638.734371][ T38] #2: ffff88806d0780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 638.734422][ T38] #3: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 638.734473][ T38] 1 lock held by syz-executor/12448: [ 638.734484][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734534][ T38] 1 lock held by syz-executor/12453: [ 638.734546][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734593][ T38] 1 lock held by syz-executor/12458: [ 638.734604][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734651][ T38] 1 lock held by syz-executor/12460: [ 638.734663][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734711][ T38] 1 lock held by syz-executor/12462: [ 638.734722][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 638.734771][ T38] [ 638.734776][ T38] ============================================= [ 638.734776][ T38] [ 638.734786][ T38] NMI backtrace for cpu 0 [ 638.734800][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.734822][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.734833][ T38] Call Trace: [ 638.734841][ T38] [ 638.734850][ T38] dump_stack_lvl+0x189/0x250 [ 638.734882][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.734911][ T38] ? __pfx__printk+0x10/0x10 [ 638.734947][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 638.735022][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 638.735051][ T38] ? __pfx__printk+0x10/0x10 [ 638.735078][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.735116][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 638.735150][ T38] watchdog+0xf93/0xfe0 [ 638.735176][ T38] ? watchdog+0x1de/0xfe0 [ 638.735203][ T38] kthread+0x70e/0x8a0 [ 638.735236][ T38] ? __pfx_watchdog+0x10/0x10 [ 638.735261][ T38] ? __pfx_kthread+0x10/0x10 [ 638.735296][ T38] ? __pfx_kthread+0x10/0x10 [ 638.735327][ T38] ret_from_fork+0x436/0x7d0 [ 638.735356][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 638.735403][ T38] ? __switch_to_asm+0x39/0x70 [ 638.735422][ T38] ? __switch_to_asm+0x33/0x70 [ 638.735439][ T38] ? __pfx_kthread+0x10/0x10 [ 638.735470][ T38] ret_from_fork_asm+0x1a/0x30 [ 638.735508][ T38] [ 638.735576][ T38] Sending NMI from CPU 0 to CPUs 1: [ 638.735606][ C1] NMI backtrace for cpu 1 [ 638.735623][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.735641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.735650][ C1] RIP: 0010:unwind_next_frame+0x29d/0x2390 [ 638.735675][ C1] Code: e8 9d 8f 48 3d 6c fd 4a 90 0f 87 0c 18 00 00 45 39 e8 48 bd 00 00 00 00 00 fc ff df 0f 84 03 02 00 00 4a 8d 14 ad fc 84 2a 8f <45> 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 1c 10 00 [ 638.735689][ C1] RSP: 0018:ffffc90000a3ea38 EFLAGS: 00000206 [ 638.735704][ C1] RAX: ffffffff8fb39344 RBX: dffffc0000000000 RCX: 5b4b1ab2b9fffd00 [ 638.735717][ C1] RDX: ffffffff8f38f6c8 RSI: ffffffff8fb3930e RDI: ffffffff8b621620 [ 638.735728][ C1] RBP: dffffc0000000000 R08: 0000000000039c7c R09: ffffffff8172c165 [ 638.735740][ C1] R10: ffffc90000a3eb58 R11: ffffffff81aaf310 R12: ffffffff821dad65 [ 638.735751][ C1] R13: 0000000000039c73 R14: ffffc90000a3eb08 R15: 0000000000011dad [ 638.735762][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 638.735776][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.735787][ C1] CR2: 00007fbe8d1a9e80 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 638.735812][ C1] Call Trace: [ 638.735818][ C1] [ 638.735828][ C1] ? unwind_next_frame+0xa5/0x2390 [ 638.735849][ C1] ? kasan_save_free_info+0x46/0x50 [ 638.735876][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.735895][ C1] arch_stack_walk+0x11c/0x150 [ 638.735919][ C1] ? kasan_save_free_info+0x46/0x50 [ 638.735936][ C1] stack_trace_save+0x9c/0xe0 [ 638.735952][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 638.735972][ C1] ? __lock_acquire+0xab9/0xd20 [ 638.735992][ C1] kasan_save_track+0x3e/0x80 [ 638.736009][ C1] ? kasan_save_track+0x3e/0x80 [ 638.736025][ C1] ? kasan_save_free_info+0x46/0x50 [ 638.736064][ C1] kasan_save_free_info+0x46/0x50 [ 638.736079][ C1] __kasan_slab_free+0x5b/0x80 [ 638.736097][ C1] ? skb_release_data+0x62d/0x7c0 [ 638.736112][ C1] kmem_cache_free+0x195/0x510 [ 638.736135][ C1] skb_release_data+0x62d/0x7c0 [ 638.736155][ C1] consume_skb+0x9e/0xf0 [ 638.736177][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 638.736233][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 638.736251][ C1] ? nf_ip_checksum+0x13c/0x510 [ 638.736290][ C1] nft_synproxy_do_eval+0x345/0x570 [ 638.736310][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 638.736335][ C1] nft_do_chain+0x40c/0x1920 [ 638.736375][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 638.736404][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 638.736427][ C1] nft_do_chain_inet+0x25d/0x340 [ 638.736460][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 638.736476][ C1] ? __lock_acquire+0xab9/0xd20 [ 638.736501][ C1] ? NF_HOOK+0x9a/0x3a0 [ 638.736540][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 638.736558][ C1] nf_hook_slow+0xc2/0x220 [ 638.736597][ C1] NF_HOOK+0x206/0x3a0 [ 638.736617][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 638.736638][ C1] ? NF_HOOK+0x9a/0x3a0 [ 638.736656][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 638.736675][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 638.736697][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 638.736718][ C1] ? skb_dst+0x4f/0xd0 [ 638.736739][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 638.736760][ C1] NF_HOOK+0x30c/0x3a0 [ 638.736780][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 638.736800][ C1] ? NF_HOOK+0x9a/0x3a0 [ 638.736819][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 638.736839][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 638.736872][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 638.736891][ C1] __netif_receive_skb+0x143/0x380 [ 638.736910][ C1] ? rt_spin_unlock+0x65/0x80 [ 638.736929][ C1] ? process_backlog+0x27b/0x900 [ 638.736949][ C1] process_backlog+0x31e/0x900 [ 638.736974][ C1] __napi_poll+0xb3/0x540 [ 638.736995][ C1] net_rx_action+0x707/0xe00 [ 638.737013][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.737043][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 638.737079][ C1] handle_softirqs+0x22f/0x710 [ 638.737102][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 638.737126][ C1] run_ktimerd+0xcf/0x190 [ 638.737147][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 638.737171][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 638.737189][ C1] smpboot_thread_fn+0x53f/0xa60 [ 638.737208][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 638.737230][ C1] kthread+0x70e/0x8a0 [ 638.737253][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 638.737272][ C1] ? __pfx_kthread+0x10/0x10 [ 638.737296][ C1] ? __pfx_kthread+0x10/0x10 [ 638.737317][ C1] ret_from_fork+0x436/0x7d0 [ 638.737338][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 638.737359][ C1] ? __switch_to_asm+0x39/0x70 [ 638.737374][ C1] ? __switch_to_asm+0x33/0x70 [ 638.737387][ C1] ? __pfx_kthread+0x10/0x10 [ 638.737409][ C1] ret_from_fork_asm+0x1a/0x30 [ 638.737432][ C1] [ 638.945445][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 638.945469][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.945494][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.945506][ T38] Call Trace: [ 638.945514][ T38] [ 638.945525][ T38] dump_stack_lvl+0x99/0x250 [ 638.945563][ T38] ? __asan_memcpy+0x40/0x70 [ 638.945586][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.945617][ T38] ? __pfx__printk+0x10/0x10 [ 638.945654][ T38] vpanic+0x281/0x750 [ 638.945687][ T38] ? __pfx_vpanic+0x10/0x10 [ 638.945714][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 638.945735][ T38] ? preempt_schedule+0xae/0xc0 [ 638.945767][ T38] ? preempt_schedule_common+0x83/0xd0 [ 638.945803][ T38] panic+0xb9/0xc0 [ 638.945832][ T38] ? __pfx_panic+0x10/0x10 [ 638.945861][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 638.945891][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 638.945921][ T38] watchdog+0xfd2/0xfe0 [ 638.945954][ T38] ? watchdog+0x1de/0xfe0 [ 638.945986][ T38] kthread+0x70e/0x8a0 [ 638.946021][ T38] ? __pfx_watchdog+0x10/0x10 [ 638.946046][ T38] ? __pfx_kthread+0x10/0x10 [ 638.946082][ T38] ? __pfx_kthread+0x10/0x10 [ 638.946123][ T38] ret_from_fork+0x436/0x7d0 [ 638.946154][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 638.946187][ T38] ? __switch_to_asm+0x39/0x70 [ 638.946205][ T38] ? __switch_to_asm+0x33/0x70 [ 638.946222][ T38] ? __pfx_kthread+0x10/0x10 [ 638.946254][ T38] ret_from_fork_asm+0x1a/0x30 [ 638.946291][ T38] [ 638.946684][ T38] Kernel Offset: disabled