last executing test programs: 2m34.580451761s ago: executing program 1 (id=479): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 2m30.805507416s ago: executing program 2 (id=484): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@private=0xa010102, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x800}, {@multicast2}, {@dev, 0x4}]}]}}}}}}}, 0x0) 2m30.58706769s ago: executing program 2 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 2m28.978746899s ago: executing program 2 (id=488): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 2m28.712331292s ago: executing program 1 (id=490): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 2m27.265098142s ago: executing program 2 (id=493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getgroups(0x0, &(0x7f0000001080)) keyctl$chown(0x4, r4, 0xee01, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480), 0x0, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m26.722467676s ago: executing program 4 (id=495): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 2m26.030280013s ago: executing program 0 (id=496): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r0, 0x400, 0x4, 0x1) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/243, 0xf3}], 0x1, 0x1, 0x0, 0x0) 2m25.912993059s ago: executing program 1 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x106}, 0x1c) 2m25.83441588s ago: executing program 4 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 2m25.702776527s ago: executing program 1 (id=499): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) chmod(&(0x7f0000000000)='./file0\x00', 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000200)='./file0\x00', 0x90) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 2m25.649184823s ago: executing program 0 (id=500): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 2m25.452979406s ago: executing program 3 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x18, 0x32, 0x9, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004085}, 0x24000) 2m23.730496632s ago: executing program 1 (id=502): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x80047456, &(0x7f0000000340)=0x1ad) 2m23.612884194s ago: executing program 3 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(0x0, 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 2m23.56520772s ago: executing program 4 (id=504): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000240)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0x20, 0xd049, 0x55}, {@broadcast, 0x4e23, 0x2004, 0x8, 0x8, 0x374}}, 0x44) sched_rr_get_interval(r1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file1\x00', 0x2000757) ftruncate(r5, 0x6000000) copy_file_range(r5, 0x0, r5, &(0x7f00000004c0)=0x100, 0x9, 0x0) pipe(&(0x7f0000000d00)) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d, 0x8}, [@func, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) 2m22.1758932s ago: executing program 3 (id=505): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/34, &(0x7f0000000100)=0x22) 2m21.121712561s ago: executing program 0 (id=506): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) 2m20.767153604s ago: executing program 3 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m20.766255022s ago: executing program 1 (id=508): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 2m20.670372713s ago: executing program 2 (id=509): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 2m20.669320304s ago: executing program 4 (id=510): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 2m20.580658621s ago: executing program 0 (id=511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008d0) 2m20.457358644s ago: executing program 3 (id=512): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) 2m19.592803947s ago: executing program 0 (id=513): r0 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x3, 0x0, 0xffffffff, 0x295}) close(r0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 2m19.522956637s ago: executing program 4 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 2m19.14934703s ago: executing program 3 (id=515): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-3', 0x2}]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 2m19.147153935s ago: executing program 2 (id=516): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000)=0x2, 0x4) 2m18.194937181s ago: executing program 4 (id=517): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x1, @mcast1, @loopback={0x300}, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x61}]}}}}}}}, 0x0) 2m18.141174281s ago: executing program 0 (id=518): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 43.142676749s ago: executing program 32 (id=518): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 16.154099645s ago: executing program 33 (id=508): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 0s ago: executing program 34 (id=516): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000)=0x2, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. [ 91.932969][ T1197] cfg80211: failed to load regulatory.db [ 92.666203][ T5824] cgroup: Unknown subsys name 'net' [ 92.904337][ T5824] cgroup: Unknown subsys name 'cpuset' [ 92.939743][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.927944][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.962200][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.965179][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.971402][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.978367][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.979131][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.979875][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.980035][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.984555][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.985819][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.986143][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.987130][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.991850][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.992457][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.998718][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.008756][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.109555][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.111805][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.112763][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.114176][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.116312][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.179059][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.206185][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.210528][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.213765][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.214701][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.120478][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 99.421338][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 99.481491][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 99.487312][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 99.516434][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 100.090067][ T59] Bluetooth: hci1: command tx timeout [ 100.090071][ T5841] Bluetooth: hci0: command tx timeout [ 100.100960][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.102565][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.103298][ T5835] bridge_slave_0: entered allmulticast mode [ 100.106771][ T5835] bridge_slave_0: entered promiscuous mode [ 100.168260][ T59] Bluetooth: hci3: command tx timeout [ 100.168617][ T5841] Bluetooth: hci2: command tx timeout [ 100.174287][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.174437][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.175054][ T5835] bridge_slave_1: entered allmulticast mode [ 100.177994][ T5835] bridge_slave_1: entered promiscuous mode [ 100.328952][ T5841] Bluetooth: hci4: command tx timeout [ 100.729786][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.730011][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.730201][ T5836] bridge_slave_0: entered allmulticast mode [ 100.733447][ T5836] bridge_slave_0: entered promiscuous mode [ 100.844837][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.016371][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.016560][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.016754][ T5836] bridge_slave_1: entered allmulticast mode [ 101.023593][ T5836] bridge_slave_1: entered promiscuous mode [ 101.117198][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.117449][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.117557][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.117690][ T5844] bridge_slave_0: entered allmulticast mode [ 101.121632][ T5844] bridge_slave_0: entered promiscuous mode [ 101.127648][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.127897][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.129313][ T5850] bridge_slave_0: entered allmulticast mode [ 101.132494][ T5850] bridge_slave_0: entered promiscuous mode [ 101.222881][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.223062][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.223208][ T5840] bridge_slave_0: entered allmulticast mode [ 101.225188][ T5840] bridge_slave_0: entered promiscuous mode [ 101.308884][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.309081][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.309313][ T5844] bridge_slave_1: entered allmulticast mode [ 101.311518][ T5844] bridge_slave_1: entered promiscuous mode [ 101.313800][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.313915][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.314067][ T5850] bridge_slave_1: entered allmulticast mode [ 101.316042][ T5850] bridge_slave_1: entered promiscuous mode [ 101.469414][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.469558][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.469751][ T5840] bridge_slave_1: entered allmulticast mode [ 101.471984][ T5840] bridge_slave_1: entered promiscuous mode [ 101.725890][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.821216][ T5835] team0: Port device team_slave_0 added [ 101.964223][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.023977][ T5835] team0: Port device team_slave_1 added [ 102.032157][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.043399][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.168425][ T59] Bluetooth: hci0: command tx timeout [ 102.168598][ T5841] Bluetooth: hci1: command tx timeout [ 102.197684][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.209676][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.213315][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.248251][ T5841] Bluetooth: hci2: command tx timeout [ 102.248286][ T5841] Bluetooth: hci3: command tx timeout [ 102.394711][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.408942][ T5841] Bluetooth: hci4: command tx timeout [ 102.566487][ T5836] team0: Port device team_slave_0 added [ 102.809673][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.809691][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.809721][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.042667][ T5836] team0: Port device team_slave_1 added [ 103.045679][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.045695][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.045724][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.151196][ T5850] team0: Port device team_slave_0 added [ 103.153493][ T5844] team0: Port device team_slave_0 added [ 103.244443][ T5840] team0: Port device team_slave_0 added [ 103.247037][ T5850] team0: Port device team_slave_1 added [ 103.261556][ T5844] team0: Port device team_slave_1 added [ 103.345907][ T5840] team0: Port device team_slave_1 added [ 103.487219][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.487234][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.487254][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.711790][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.711809][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.711836][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.030396][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.030415][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.030436][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.031719][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.031735][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.031762][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.158669][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.158688][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.158716][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.160236][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.160251][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.160280][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.161394][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.161408][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.161427][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.176105][ T5835] hsr_slave_0: entered promiscuous mode [ 104.180692][ T5835] hsr_slave_1: entered promiscuous mode [ 104.184356][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.184374][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.184407][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.248291][ T5841] Bluetooth: hci1: command tx timeout [ 104.248325][ T5841] Bluetooth: hci0: command tx timeout [ 104.328389][ T5841] Bluetooth: hci3: command tx timeout [ 104.328401][ T59] Bluetooth: hci2: command tx timeout [ 104.489472][ T59] Bluetooth: hci4: command tx timeout [ 104.700318][ T5836] hsr_slave_0: entered promiscuous mode [ 104.702033][ T5836] hsr_slave_1: entered promiscuous mode [ 104.703211][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 104.703333][ T5836] Cannot create hsr debugfs directory [ 105.089798][ T5850] hsr_slave_0: entered promiscuous mode [ 105.091459][ T5850] hsr_slave_1: entered promiscuous mode [ 105.092768][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 105.092795][ T5850] Cannot create hsr debugfs directory [ 105.230611][ T5844] hsr_slave_0: entered promiscuous mode [ 105.231876][ T5844] hsr_slave_1: entered promiscuous mode [ 105.232536][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 105.232561][ T5844] Cannot create hsr debugfs directory [ 105.275493][ T5840] hsr_slave_0: entered promiscuous mode [ 105.276632][ T5840] hsr_slave_1: entered promiscuous mode [ 105.277318][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 105.277347][ T5840] Cannot create hsr debugfs directory [ 106.328515][ T59] Bluetooth: hci0: command tx timeout [ 106.328553][ T59] Bluetooth: hci1: command tx timeout [ 106.408221][ T5841] Bluetooth: hci2: command tx timeout [ 106.408255][ T5841] Bluetooth: hci3: command tx timeout [ 106.568509][ T59] Bluetooth: hci4: command tx timeout [ 106.909826][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.959972][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.003917][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.056309][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.203642][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.230746][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.273555][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.325429][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.501644][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.546750][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.586551][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.654246][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.838427][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.899202][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.926871][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.992880][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.111381][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.211084][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.256689][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.297948][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.334321][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.381743][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.452693][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.453549][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.496053][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.524989][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.525148][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.652458][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.711513][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.712273][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.765589][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.788945][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.789129][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.903396][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.959440][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.980730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.980979][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.077452][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.077696][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.234599][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.263958][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.302097][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.302377][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.355160][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.355760][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.463160][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.467567][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.553558][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.554556][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.629146][ T1244] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.629298][ T1244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.936416][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.998705][ T5835] veth0_vlan: entered promiscuous mode [ 110.090092][ T5835] veth1_vlan: entered promiscuous mode [ 110.318895][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.466626][ T5836] veth0_vlan: entered promiscuous mode [ 110.470840][ T5835] veth0_macvtap: entered promiscuous mode [ 110.527099][ T5835] veth1_macvtap: entered promiscuous mode [ 110.551975][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.575904][ T5836] veth1_vlan: entered promiscuous mode [ 110.691764][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.726628][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.793487][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.834579][ T1244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.854232][ T1244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.876804][ T1244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.900921][ T1244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.921137][ T5836] veth0_macvtap: entered promiscuous mode [ 110.996802][ T5836] veth1_macvtap: entered promiscuous mode [ 111.006674][ T5844] veth0_vlan: entered promiscuous mode [ 111.183469][ T5844] veth1_vlan: entered promiscuous mode [ 111.230921][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.347799][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.364807][ T5850] veth0_vlan: entered promiscuous mode [ 111.365684][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.365707][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.424077][ T5840] veth0_vlan: entered promiscuous mode [ 111.425780][ T1244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.446024][ T1244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.479336][ T1244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.505381][ T1244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.519356][ T5850] veth1_vlan: entered promiscuous mode [ 111.535756][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.535778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.555573][ T5840] veth1_vlan: entered promiscuous mode [ 111.681546][ T5844] veth0_macvtap: entered promiscuous mode [ 111.801120][ T5844] veth1_macvtap: entered promiscuous mode [ 111.985323][ T5850] veth0_macvtap: entered promiscuous mode [ 112.008892][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.008914][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.024912][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.042802][ T5840] veth0_macvtap: entered promiscuous mode [ 112.046551][ T5850] veth1_macvtap: entered promiscuous mode [ 112.065834][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.096925][ T5840] veth1_macvtap: entered promiscuous mode [ 112.174503][ T3635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.205900][ T3635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.222640][ T3635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.239810][ T3635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.257133][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.257157][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.281452][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.375837][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.393021][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.556515][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.627289][ T1261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.669142][ T1261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.705532][ T1261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.737942][ T1261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.773735][ T1261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.798223][ T1261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.847553][ T1261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.895989][ T1261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.948558][ T5924] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 113.067148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.067171][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.108637][ T5924] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 113.108664][ T5924] usb 1-1: config 0 has no interface number 0 [ 113.139826][ T5924] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 113.139856][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.139876][ T5924] usb 1-1: Product: syz [ 113.139890][ T5924] usb 1-1: Manufacturer: syz [ 113.139905][ T5924] usb 1-1: SerialNumber: syz [ 113.204152][ T5924] usb 1-1: config 0 descriptor?? [ 113.482712][ T5924] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 113.503879][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.503902][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.580887][ T5924] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 113.581818][ T5924] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 113.582322][ T5924] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 113.660216][ T5924] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 113.683554][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.784784][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.784807][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.853260][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.853294][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.888927][ T5923] usb 1-1: USB disconnect, device number 2 [ 113.906357][ T9] usb 4-1: config 0 descriptor?? [ 113.918268][ T9] cp210x 4-1:0.0: cp210x converter detected [ 113.973371][ T5923] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 113.990026][ T5923] keyspan 1-1:0.133: device disconnected [ 113.990055][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.990072][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.306905][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.306926][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.559641][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 114.559702][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 114.594036][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.594059][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.932314][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 115.712529][ T9] usb 4-1: USB disconnect, device number 2 [ 115.781773][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.820692][ T9] cp210x 4-1:0.0: device disconnected [ 116.558987][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.690662][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.728431][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 116.736184][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 116.736212][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 116.736234][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 116.736255][ T9] usb 1-1: config 1 has no interface number 0 [ 116.736304][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.736332][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 116.736376][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 116.736400][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.856314][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 116.857734][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 116.880717][ T31] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.880755][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.880792][ T31] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 116.880817][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.948371][ T31] usb 3-1: config 0 descriptor?? [ 117.146185][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 117.616331][ T31] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 117.616376][ T31] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 117.616417][ T31] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 117.616445][ T31] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 117.616473][ T31] corsair-psu 0003:1B1C:1C09.0001: unknown main item tag 0x0 [ 117.649805][ T31] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 117.664665][ T5916] usb 1-1: USB disconnect, device number 3 [ 117.717367][ T31] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-38) [ 117.737495][ T31] corsair-psu 0003:1B1C:1C09.0001: probe with driver corsair-psu failed with error -38 [ 117.773540][ T31] usb 3-1: USB disconnect, device number 2 [ 117.780335][ T5916] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 118.095062][ T5991] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.431084][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.431120][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.431145][ T5991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.431191][ T5991] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.431215][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.462840][ T5991] usb 2-1: config 0 descriptor?? [ 120.105661][ T5991] plantronics 0003:047F:FFFF.0002: collection stack underflow [ 120.105713][ T5991] plantronics 0003:047F:FFFF.0002: item 0 1 0 12 parsing failed [ 120.106561][ T5991] plantronics 0003:047F:FFFF.0002: parse failed [ 120.106670][ T5991] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 120.251786][ T6010] fido_id[6010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 120.327873][ T45] usb 2-1: USB disconnect, device number 2 [ 120.818276][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.985905][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.985940][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.985984][ T31] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 120.986008][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.096993][ T31] usb 4-1: config 0 descriptor?? [ 121.148326][ T5924] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 121.330773][ T5924] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 121.330801][ T5924] usb 1-1: config 0 has no interface number 0 [ 121.330847][ T5924] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.330874][ T5924] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.330910][ T5924] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 121.330933][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.413117][ T5924] usb 1-1: config 0 descriptor?? [ 121.657647][ T31] cp2112 0003:10C4:EA90.0003: item fetching failed at offset 5/7 [ 121.658651][ T31] cp2112 0003:10C4:EA90.0003: parse failed [ 121.658792][ T31] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -22 [ 121.848856][ T6040] capability: warning: `syz.2.32' uses deprecated v2 capabilities in a way that may be insecure [ 121.939792][ T991] usb 4-1: USB disconnect, device number 3 [ 122.317618][ T5924] uclogic 0003:256C:006E.0004: interface is invalid, ignoring [ 123.338914][ T5924] usb 1-1: USB disconnect, device number 4 [ 124.573103][ T6069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.663133][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663160][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663177][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663191][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663206][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663220][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663234][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663249][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663263][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 126.663277][ T6089] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 127.068744][ T1197] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.229620][ T1197] usb 5-1: Using ep0 maxpacket: 16 [ 127.232479][ T1197] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.232519][ T1197] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.232541][ T1197] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.232576][ T1197] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 127.232599][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.238582][ T1197] usb 5-1: config 0 descriptor?? [ 128.503835][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.503875][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.503903][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.503930][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.503957][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.503984][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.504011][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.504037][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.504064][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.504091][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 128.607664][ T1197] kye 0003:0458:0138.0005: collection stack underflow [ 128.607698][ T1197] kye 0003:0458:0138.0005: item 0 0 0 12 parsing failed [ 128.627041][ T1197] kye 0003:0458:0138.0005: parse failed [ 128.627121][ T1197] kye 0003:0458:0138.0005: probe with driver kye failed with error -22 [ 128.725814][ T31] usb 5-1: USB disconnect, device number 2 [ 131.138560][ T6136] mmap: syz.1.58 (6136) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.354612][ T6047] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.530464][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.530501][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.530524][ T6047] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 132.530570][ T6047] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 132.530594][ T6047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.675390][ T6047] usb 3-1: config 0 descriptor?? [ 133.277665][ T6047] sony 0003:12BA:0100.0006: hidraw0: USB HID v0.00 Device [HID 12ba:0100] on usb-dummy_hcd.2-1/input0 [ 133.277699][ T6047] sony 0003:12BA:0100.0006: failed to claim input [ 133.586426][ T6047] usb 3-1: USB disconnect, device number 3 [ 133.869705][ T6172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'. [ 133.869934][ T6172] team_slave_0: entered promiscuous mode [ 133.869987][ T6172] team_slave_1: entered promiscuous mode [ 133.944006][ T6169] fido_id[6169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 134.076672][ T6170] syz.0.69 (6170) used greatest stack depth: 18952 bytes left [ 134.208202][ T6034] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.823653][ T6034] usb 5-1: Using ep0 maxpacket: 32 [ 136.826219][ T6034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.826279][ T6034] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 136.826305][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.917470][ T6034] usb 5-1: config 0 descriptor?? [ 136.944097][ T6034] dvb-usb: found a 'TeVii S662' in warm state. [ 136.944154][ T6034] dw2102: su3000_power_ctrl: 1, initialized 0 [ 136.944692][ T6034] dvb-usb: bulk message failed: -22 (2/0) [ 137.058650][ T6034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.074947][ T6034] dvbdev: DVB: registering new adapter (TeVii S662) [ 137.075054][ T6034] usb 5-1: media controller created [ 137.103279][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 137.103303][ T6034] dw2102: i2c transfer failed. [ 137.103332][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 137.103348][ T6034] dw2102: i2c transfer failed. [ 137.103366][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 137.103381][ T6034] dw2102: i2c transfer failed. [ 137.103399][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 137.103414][ T6034] dw2102: i2c transfer failed. [ 137.103432][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 137.103446][ T6034] dw2102: i2c transfer failed. [ 137.103464][ T6034] dvb-usb: bulk message failed: -22 (6/0) [ 137.103479][ T6034] dw2102: i2c transfer failed. [ 137.103490][ T6034] dvb-usb: MAC address: 02:02:02:02:02:02 [ 137.219837][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.286441][ T6034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.322689][ T6034] dvb-usb: bulk message failed: -22 (3/0) [ 137.322716][ T6034] dw2102: command 0x0e transfer failed. [ 137.322727][ T6034] dvb-usb: bulk message failed: -22 (3/0) [ 137.322742][ T6034] dw2102: command 0x0e transfer failed. [ 137.360097][ T5991] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.379518][ T31] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.379579][ T31] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.379603][ T31] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.379631][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.379667][ T31] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 137.379691][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.416237][ T31] usb 1-1: config 0 descriptor?? [ 137.588237][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 137.594939][ T5991] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.594975][ T5991] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.595013][ T5991] usb 3-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 137.595104][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.665321][ T6034] dvb-usb: bulk message failed: -22 (3/0) [ 137.665346][ T6034] dw2102: command 0x0e transfer failed. [ 137.665356][ T6034] dvb-usb: bulk message failed: -22 (3/0) [ 137.665370][ T6034] dw2102: command 0x0e transfer failed. [ 137.665380][ T6034] dvb-usb: bulk message failed: -22 (1/0) [ 137.665395][ T6034] dw2102: command 0x51 transfer failed. [ 137.665404][ T6034] dvb-usb: bulk message failed: -22 (5/0) [ 137.665419][ T6034] dw2102: i2c probe for address 0x68 failed. [ 137.665431][ T6034] dvb-usb: bulk message failed: -22 (5/0) [ 137.665445][ T6034] dw2102: i2c probe for address 0x69 failed. [ 137.665457][ T6034] dvb-usb: bulk message failed: -22 (5/0) [ 137.665471][ T6034] dw2102: i2c probe for address 0x6a failed. [ 137.665502][ T6034] dw2102: probing for demodulator failed. Is the external power switched on? [ 137.665513][ T6034] dvb-usb: no frontend was attached by 'TeVii S662' [ 138.352348][ T5991] usb 3-1: config 0 descriptor?? [ 138.490978][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.491089][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.797270][ T31] uclogic 0003:28BD:0042.0007: interface is invalid, ignoring [ 138.800417][ T6034] rc_core: IR keymap rc-tt-1500 not found [ 138.800437][ T6034] Registered IR keymap rc-empty [ 138.833721][ T6034] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 138.919980][ T5991] thrustmaster 0003:044F:B300.0008: hidraw0: USB HID v0.03 Device [HID 044f:b300] on usb-dummy_hcd.2-1/input0 [ 138.920022][ T5991] thrustmaster 0003:044F:B300.0008: no inputs found [ 138.927019][ T6034] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 139.018266][ T5902] usb 1-1: USB disconnect, device number 5 [ 139.086548][ T6034] dvb-usb: schedule remote query interval to 250 msecs. [ 139.086573][ T6034] dw2102: su3000_power_ctrl: 0, initialized 1 [ 139.086587][ T6034] dvb-usb: TeVii S662 successfully initialized and connected. [ 139.171562][ T6034] usb 5-1: USB disconnect, device number 3 [ 139.203992][ T5924] usb 3-1: USB disconnect, device number 4 [ 139.595553][ T6221] fido_id[6221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.030853][ T6034] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 140.381995][ T6233] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.497366][ T5924] hid_parser_main: 644 callbacks suppressed [ 140.497391][ T5924] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 140.551961][ T6034] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.555912][ T5924] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 140.752127][ T6034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.752160][ T6034] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.752204][ T6034] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 140.752230][ T6034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.852594][ T6034] usb 2-1: config 0 descriptor?? [ 141.398355][ T6034] kovaplus 0003:1E7D:2D50.000A: item fetching failed at offset 2/5 [ 141.400378][ T6034] kovaplus 0003:1E7D:2D50.000A: parse failed [ 141.400458][ T6034] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -22 [ 141.662765][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.690622][ T6235] fido_id[6235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.708645][ T6034] usb 2-1: USB disconnect, device number 3 [ 141.823847][ T5902] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.823881][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.854614][ T5902] usb 5-1: config 0 descriptor?? [ 141.907824][ T5902] cp210x 5-1:0.0: cp210x converter detected [ 141.974741][ T6251] random: crng reseeded on system resumption [ 142.508378][ T5902] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 142.508407][ T5902] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 142.554705][ T5902] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.567593][ T5902] usb 5-1: USB disconnect, device number 4 [ 142.584002][ T5902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.584844][ T5902] cp210x 5-1:0.0: device disconnected [ 142.968128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.131433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 143.268107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.408103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.418167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.448103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.618210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.618247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.618318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.618395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.458383][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 147.099753][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.670715][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.670769][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 148.670794][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.716985][ T45] usb 3-1: config 0 descriptor?? [ 149.128995][ T5923] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 149.181836][ T45] logitech 0003:046D:C50C.000B: unbalanced delimiter at end of report description [ 149.182698][ T45] logitech 0003:046D:C50C.000B: parse failed [ 149.182808][ T45] logitech 0003:046D:C50C.000B: probe with driver logitech failed with error -22 [ 149.285771][ T5923] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.285807][ T5923] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 149.285834][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.285869][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 149.285892][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.369846][ T1197] usb 3-1: USB disconnect, device number 5 [ 149.400226][ T5923] usb 2-1: config 0 descriptor?? [ 149.420828][ T6297] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.883644][ T5923] logitech 0003:046D:C24F.000C: unbalanced collection at end of report description [ 149.912942][ T5923] logitech 0003:046D:C24F.000C: parse failed [ 149.913051][ T5923] logitech 0003:046D:C24F.000C: probe with driver logitech failed with error -22 [ 150.133643][ T5923] usb 2-1: USB disconnect, device number 4 [ 150.508337][ T991] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.668240][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 150.671530][ T991] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.671558][ T991] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.671586][ T991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.671621][ T991] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 150.671644][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.755428][ T991] usb 5-1: config 0 descriptor?? [ 151.308706][ T991] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 151.308747][ T991] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 151.308776][ T991] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 151.308804][ T991] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 151.308833][ T991] magicmouse 0003:05AC:0324.000D: unknown main item tag 0x0 [ 151.429768][ T991] magicmouse 0003:05AC:0324.000D: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 151.430395][ T991] magicmouse 0003:05AC:0324.000D: magicmouse input not registered [ 151.477856][ T991] magicmouse 0003:05AC:0324.000D: probe with driver magicmouse failed with error -12 [ 151.520388][ T6047] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 151.553142][ T991] usb 5-1: USB disconnect, device number 5 [ 151.683204][ T6047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.683255][ T6047] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 151.683279][ T6047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.754327][ T6047] usb 2-1: config 0 descriptor?? [ 152.151966][ T6323] fido_id[6323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 152.312800][ T6047] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 152.312838][ T6047] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 152.312866][ T6047] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 152.312893][ T6047] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 152.312920][ T6047] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 152.421002][ T6047] lenovo 0003:17EF:6047.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 152.506877][ T6047] lenovo 0003:17EF:6047.000E: Failed to switch F7/9/11 mode: -71 [ 152.519121][ T6047] lenovo 0003:17EF:6047.000E: Failed to switch middle button: -71 [ 152.522678][ T6047] lenovo 0003:17EF:6047.000E: Fn-lock setting failed: -71 [ 152.525873][ T6047] lenovo 0003:17EF:6047.000E: Sensitivity setting failed: -71 [ 152.606482][ T6047] usb 2-1: USB disconnect, device number 5 [ 155.122360][ T6336] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 155.387348][ T6337] fido_id[6337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 156.009871][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.270737][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.436058][ T5916] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 156.436104][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.475484][ T5916] usb 5-1: config 0 descriptor?? [ 156.549598][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 156.651575][ T5929] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 156.651695][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 156.651741][ T5929] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 156.651766][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.733775][ T5929] usb 4-1: config 0 descriptor?? [ 157.026725][ T5916] pantherlord 0003:0F30:0111.000F: item fetching failed at offset 0/4 [ 157.027584][ T5916] pantherlord 0003:0F30:0111.000F: parse failed [ 157.027662][ T5916] pantherlord 0003:0F30:0111.000F: probe with driver pantherlord failed with error -22 [ 157.231407][ T5916] usb 5-1: USB disconnect, device number 6 [ 157.311153][ T5929] kye 0003:0458:5019.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 157.314189][ T5929] kye 0003:0458:5019.0010: unexpected long global item [ 157.315076][ T5929] kye 0003:0458:5019.0010: parse failed [ 157.315153][ T5929] kye 0003:0458:5019.0010: probe with driver kye failed with error -22 [ 157.511683][ T45] usb 4-1: USB disconnect, device number 4 [ 158.191593][ T5929] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 158.428268][ T991] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 158.637520][ T5929] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.637557][ T5929] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.637581][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.637618][ T5929] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 158.637642][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.174924][ T5929] usb 3-1: config 0 descriptor?? [ 159.608263][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 159.619661][ T991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 159.619696][ T991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 159.619725][ T991] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.635731][ T991] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 159.635767][ T991] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 159.635791][ T991] usb 2-1: Product: syz [ 159.635808][ T991] usb 2-1: Manufacturer: syz [ 159.635825][ T991] usb 2-1: SerialNumber: syz [ 159.638206][ T6047] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 159.729334][ T991] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 159.822018][ T6047] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.822052][ T6047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.856894][ T6047] usb 1-1: config 0 descriptor?? [ 159.877282][ T6047] cp210x 1-1:0.0: cp210x converter detected [ 159.979398][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.138788][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.138828][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.138857][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.138885][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.138913][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.138940][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.138974][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.139001][ T5929] holtek_mouse 0003:04D9:A067.0011: unknown main item tag 0x0 [ 160.160243][ T5929] holtek_mouse 0003:04D9:A067.0011: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 160.234244][ T5929] usb 2-1: USB disconnect, device number 6 [ 160.234384][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 160.272634][ T5923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.272663][ T5923] usb 4-1: config 0 has no interface number 0 [ 160.272778][ T5923] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.272806][ T5923] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.272827][ T5923] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.272931][ T5923] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 160.272954][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.353546][ T6393] netlink: 204 bytes leftover after parsing attributes in process `syz.4.148'. [ 160.416952][ T45] usb 3-1: USB disconnect, device number 6 [ 160.595364][ T6047] usb 1-1: cp210x converter now attached to ttyUSB0 [ 160.621670][ T5923] usb 4-1: config 0 descriptor?? [ 160.753167][ T6047] usb 1-1: USB disconnect, device number 6 [ 160.877882][ T5929] appletouch 2-1:1.0: input: appletouch disconnected [ 161.015744][ T6400] team_slave_0: left promiscuous mode [ 161.025970][ T6400] team_slave_1: left promiscuous mode [ 161.037441][ T6047] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.094095][ T5923] hid (null): report_id 35660 is invalid [ 161.210375][ T6047] cp210x 1-1:0.0: device disconnected [ 161.375910][ T5923] uclogic 0003:28BD:0042.0012: failed retrieving string descriptor #100: -71 [ 161.375977][ T5923] uclogic 0003:28BD:0042.0012: failed retrieving pen parameters: -71 [ 161.375995][ T5923] uclogic 0003:28BD:0042.0012: pen probing failed: -71 [ 161.376012][ T5923] uclogic 0003:28BD:0042.0012: failed probing parameters: -71 [ 161.376121][ T5923] uclogic 0003:28BD:0042.0012: probe with driver uclogic failed with error -71 [ 161.424917][ T5923] usb 4-1: USB disconnect, device number 5 [ 163.287881][ T6418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.159'. [ 163.568517][ T6034] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.734657][ T6034] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 163.734687][ T6034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.734704][ T6034] usb 4-1: Product: syz [ 163.734717][ T6034] usb 4-1: Manufacturer: syz [ 163.734730][ T6034] usb 4-1: SerialNumber: syz [ 163.780136][ T6034] usb 4-1: config 0 descriptor?? [ 163.802217][ T6034] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 164.548286][ T6034] gspca_sunplus: reg_r err -110 [ 165.550125][ T6208] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.722715][ T6208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.722778][ T6208] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 165.722801][ T6208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.742457][ T6208] usb 2-1: config 0 descriptor?? [ 165.848286][ T5929] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.013250][ T5929] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.013281][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.013301][ T5929] usb 1-1: Product: syz [ 166.013315][ T5929] usb 1-1: Manufacturer: syz [ 166.013329][ T5929] usb 1-1: SerialNumber: syz [ 166.128614][ T5929] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.131603][ T6208] usb 2-1: USB disconnect, device number 7 [ 167.186832][ T5916] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.298378][ T5902] usb 4-1: USB disconnect, device number 6 [ 167.851427][ T5902] usb 1-1: USB disconnect, device number 7 [ 168.227108][ T6487] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 168.227139][ T6487] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.276516][ T6487] vhci_hcd vhci_hcd.0: Device attached [ 168.339133][ T5916] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 168.339822][ T5916] ath9k_htc: Failed to initialize the device [ 168.343454][ T5902] usb 1-1: ath9k_htc: USB layer deinitialized [ 168.478340][ T991] vhci_hcd: vhci_device speed not set [ 168.529813][ T6034] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 168.554408][ T991] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 168.696250][ T6034] usb 5-1: config 0 has no interfaces? [ 168.696290][ T6034] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.696314][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.746412][ T6034] usb 5-1: config 0 descriptor?? [ 168.995686][ T6489] vhci_hcd: unknown pdu 1 [ 169.031502][ T6034] usb 5-1: USB disconnect, device number 7 [ 169.041326][ T157] vhci_hcd: stop threads [ 169.050018][ T157] vhci_hcd: release socket [ 169.063939][ T157] vhci_hcd: disconnect device [ 169.074748][ T991] vhci_hcd: vhci_device speed not set [ 170.285887][ T59] Bluetooth: Wrong link type (-71) [ 170.458252][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.626692][ T991] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.626727][ T991] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.626753][ T991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.626786][ T991] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 170.626810][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.684412][ T991] usb 2-1: config 0 descriptor?? [ 171.233903][ T991] itetech 0003:06CB:73F6.0014: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.1-1/input0 [ 171.346374][ T5916] usb 2-1: USB disconnect, device number 8 [ 171.731648][ T6522] fido_id[6522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.501464][ T991] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.714660][ T991] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 172.714692][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.714714][ T991] usb 4-1: Product: syz [ 172.714729][ T991] usb 4-1: Manufacturer: syz [ 172.714745][ T991] usb 4-1: SerialNumber: syz [ 172.755124][ T991] usb 4-1: config 0 descriptor?? [ 172.788390][ T991] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 173.368467][ T5916] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.373935][ T991] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 173.374026][ T991] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 173.418467][ T991] usb 4-1: USB disconnect, device number 7 [ 173.478243][ T5929] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.522404][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.522446][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.522488][ T5916] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 173.522512][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.531395][ T5916] usb 3-1: config 0 descriptor?? [ 173.668235][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 173.672224][ T5929] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.672269][ T5929] usb 2-1: config 0 has no interface number 0 [ 173.683212][ T5929] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 173.683307][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.683331][ T5929] usb 2-1: Product: syz [ 173.683347][ T5929] usb 2-1: Manufacturer: syz [ 173.683361][ T5929] usb 2-1: SerialNumber: syz [ 173.794193][ T5929] usb 2-1: config 0 descriptor?? [ 173.827518][ T5929] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 173.827551][ T5929] usb 2-1: selecting invalid altsetting 1 [ 173.827567][ T5929] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 173.973013][ T5929] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.975475][ T5929] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 173.975535][ T5929] usb 2-1: media controller created [ 174.131417][ T5916] hid_mf 0003:0079:1846.0015: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 174.131451][ T5916] hid_mf 0003:0079:1846.0015: Invalid report, this should never happen! [ 174.131464][ T5916] hid_mf 0003:0079:1846.0015: Force feedback init failed. [ 174.201936][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.275371][ T5916] usb 3-1: USB disconnect, device number 7 [ 174.794020][ T6552] overlayfs: failed to resolve './file0': -2 [ 175.131879][ T6546] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 175.150831][ T6550] fido_id[6550]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.187833][ T5929] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 175.187896][ T5929] zl10353_read_register: readreg error (reg=127, ret==-71) [ 175.190995][ T5929] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 175.458406][ T5929] usb 2-1: USB disconnect, device number 9 [ 175.758293][ T991] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.974226][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 175.978471][ T991] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.978497][ T991] usb 1-1: config 0 has no interface number 0 [ 175.989165][ T991] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.989195][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.989215][ T991] usb 1-1: Product: syz [ 175.989230][ T991] usb 1-1: Manufacturer: syz [ 175.989244][ T991] usb 1-1: SerialNumber: syz [ 176.039291][ T991] usb 1-1: config 0 descriptor?? [ 176.063183][ T991] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 176.063211][ T991] usb 1-1: selecting invalid altsetting 1 [ 176.063227][ T991] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 176.090529][ T991] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.090802][ T991] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 176.090838][ T991] usb 1-1: media controller created [ 176.136647][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.288779][ T991] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 176.288849][ T991] zl10353_read_register: readreg error (reg=127, ret==-71) [ 176.289335][ T991] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 176.439666][ T991] usb 1-1: USB disconnect, device number 8 [ 176.878340][ T5916] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 176.895347][ T59] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 176.895547][ T59] Bluetooth: hci3: Injecting HCI hardware error event [ 176.902373][ T59] Bluetooth: hci3: hardware error 0x00 [ 177.064235][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.064292][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 177.064317][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 177.064339][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 177.064358][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.071419][ T5916] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 177.071454][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 177.071476][ T5916] usb 2-1: Product: syz [ 177.071493][ T5916] usb 2-1: Manufacturer: syz [ 177.071509][ T5916] usb 2-1: SerialNumber: syz [ 177.201753][ T5916] usb 2-1: config 0 descriptor?? [ 177.285301][ T6581] mkiss: ax0: crc mode is auto. [ 177.507319][ T5916] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 177.507654][ T5916] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 177.683840][ T5916] usb 2-1: USB disconnect, device number 10 [ 179.012426][ T6606] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 179.228418][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.289728][ T59] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 179.400348][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 179.436836][ T45] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 179.436867][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.436887][ T45] usb 4-1: Product: syz [ 179.436901][ T45] usb 4-1: Manufacturer: syz [ 179.436916][ T45] usb 4-1: SerialNumber: syz [ 179.522154][ T45] usb 4-1: config 0 descriptor?? [ 179.534063][ T45] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 179.534133][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 179.582705][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 179.616872][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.624504][ T45] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 179.624574][ T45] usb 4-1: media controller created [ 179.816754][ T6604] dvb-usb: bulk message failed: -22 (4/0) [ 179.816779][ T6604] cxusb: i2c read failed [ 179.820823][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.848340][ T6208] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.927411][ T38] audit: type=1400 audit(1757944352.472:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6618 comm="syz.4.234" src=1 dest=20000 netif=wpan0 [ 179.969366][ T45] cxusb: set interface failed [ 179.969387][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 180.001575][ T6208] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 180.001639][ T6208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.004132][ T6208] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 180.004160][ T6208] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 180.004180][ T6208] usb 2-1: Manufacturer: syz [ 180.040767][ T6208] usb 2-1: config 0 descriptor?? [ 180.115704][ T45] DVB: Unable to find symbol mt352_attach() [ 180.115721][ T45] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 180.118221][ T6034] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.241606][ T6208] rc_core: IR keymap rc-hauppauge not found [ 180.241630][ T6208] Registered IR keymap rc-empty [ 180.260329][ T6208] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 180.268245][ T6034] usb 1-1: Using ep0 maxpacket: 32 [ 180.268249][ T45] rc_core: IR keymap rc-dvico-portable not found [ 180.268264][ T45] Registered IR keymap rc-empty [ 180.271751][ T45] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 180.279119][ T6208] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 180.291017][ T6034] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 180.291067][ T6034] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.291129][ T6034] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 180.291156][ T6034] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.291185][ T6034] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.320330][ T45] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input8 [ 180.372101][ T6034] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.372131][ T6034] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.372152][ T6034] usb 1-1: Product: syz [ 180.372166][ T6034] usb 1-1: Manufacturer: syz [ 180.372180][ T6034] usb 1-1: SerialNumber: syz [ 180.409956][ T45] dvb-usb: schedule remote query interval to 100 msecs. [ 180.409979][ T45] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 180.471932][ T6034] usb 1-1: config 0 descriptor?? [ 180.491733][ T6034] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 180.521437][ T6034] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 180.531254][ T1197] dvb-usb: bulk message failed: -22 (1/0) [ 180.592556][ T45] usb 4-1: USB disconnect, device number 8 [ 180.620222][ C1] igorplugusb 2-1:0.0: receive overflow, at least 9 lost [ 180.639716][ T1197] dvb-usb: bulk message failed: -22 (1/0) [ 180.760287][ T6034] usb 1-1: USB disconnect, device number 9 [ 180.790547][ T6034] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 180.927883][ T991] usb 2-1: USB disconnect, device number 11 [ 181.125516][ T6634] netlink: 52 bytes leftover after parsing attributes in process `syz.4.241'. [ 181.125698][ T6634] Zero length message leads to an empty skb [ 181.240730][ T45] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 181.668203][ T991] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 181.837874][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.837909][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.837947][ T991] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 181.837971][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.009185][ T991] usb 3-1: config 0 descriptor?? [ 183.459791][ T991] sunplus 0003:04FC:05D8.0016: unknown main item tag 0x0 [ 183.459845][ T991] sunplus 0003:04FC:05D8.0016: unknown main item tag 0x0 [ 183.459872][ T991] sunplus 0003:04FC:05D8.0016: unknown main item tag 0x0 [ 183.459897][ T991] sunplus 0003:04FC:05D8.0016: unknown main item tag 0x0 [ 183.459923][ T991] sunplus 0003:04FC:05D8.0016: unknown main item tag 0x0 [ 183.504854][ T5923] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.530006][ T991] sunplus 0003:04FC:05D8.0016: hidraw0: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 183.641583][ T991] usb 3-1: USB disconnect, device number 8 [ 183.691881][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 183.707378][ T5923] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 183.707409][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.707429][ T5923] usb 5-1: Product: syz [ 183.707443][ T5923] usb 5-1: Manufacturer: syz [ 183.707457][ T5923] usb 5-1: SerialNumber: syz [ 183.777181][ T5923] usb 5-1: config 0 descriptor?? [ 183.787876][ T5923] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 184.242920][ T5923] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 184.243349][ T6663] fido_id[6663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 185.164295][ T5923] usb 5-1: USB disconnect, device number 8 [ 185.199865][ T5923] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 185.200573][ T5923] visor 5-1:0.0: device disconnected [ 185.599182][ T6034] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.757060][ T6034] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.770356][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.770391][ T6034] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.770456][ T6034] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 185.770475][ T6034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.838461][ T6034] usb 4-1: config 0 descriptor?? [ 186.407190][ T6034] uclogic 0003:5543:0064.0017: item fetching failed at offset 0/3 [ 186.433070][ T6034] uclogic 0003:5543:0064.0017: parse failed [ 186.433190][ T6034] uclogic 0003:5543:0064.0017: probe with driver uclogic failed with error -22 [ 186.906967][ T45] usb 4-1: USB disconnect, device number 9 [ 188.428256][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.558387][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 189.561834][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.561868][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.561916][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 189.561940][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.624659][ T45] usb 2-1: config 0 descriptor?? [ 190.096296][ T45] kye 0003:0458:0087.0018: unknown main item tag 0x0 [ 190.096332][ T45] kye 0003:0458:0087.0018: unknown main item tag 0x0 [ 190.159467][ T45] kye 0003:0458:0087.0018: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0 [ 190.301999][ T5924] usb 2-1: USB disconnect, device number 12 [ 190.349775][ T6714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.269'. [ 190.373959][ T6712] fido_id[6712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 190.646552][ T6720] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 191.188469][ T6208] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 191.347559][ T6208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.347594][ T6208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.347633][ T6208] usb 1-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 191.347655][ T6208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.407007][ T6208] usb 1-1: config 0 descriptor?? [ 192.068521][ T6208] ntrig 0003:1B96:0012.0019: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.0-1/input0 [ 192.410859][ T6208] usb 1-1: USB disconnect, device number 10 [ 192.676499][ T6741] fido_id[6741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 195.788250][ T5923] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.946410][ T5923] usb 5-1: config 0 has an invalid interface number: 62 but max is 0 [ 195.946440][ T5923] usb 5-1: config 0 has no interface number 0 [ 195.946474][ T5923] usb 5-1: config 0 interface 62 has no altsetting 0 [ 196.001208][ T5923] usb 5-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c [ 196.001249][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.001281][ T5923] usb 5-1: Product: syz [ 196.001296][ T5923] usb 5-1: Manufacturer: syz [ 196.001310][ T5923] usb 5-1: SerialNumber: syz [ 196.271529][ T5923] usb 5-1: config 0 descriptor?? [ 196.937821][ T5923] usb-storage 5-1:0.62: USB Mass Storage device detected [ 197.304837][ T6781] validate_nla: 44 callbacks suppressed [ 197.304861][ T6781] netlink: 'syz.0.293': attribute type 12 has an invalid length. [ 197.304875][ T6781] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.293'. [ 197.386163][ T5923] usb 5-1: USB disconnect, device number 9 [ 198.598550][ T5991] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.762394][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 198.777770][ T5991] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 198.777801][ T5991] usb 5-1: config 0 has no interface number 0 [ 198.777854][ T5991] usb 5-1: config 0 interface 12 has no altsetting 0 [ 198.787025][ T5991] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 198.787056][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.787077][ T5991] usb 5-1: Product: syz [ 198.787092][ T5991] usb 5-1: Manufacturer: syz [ 198.787107][ T5991] usb 5-1: SerialNumber: syz [ 198.801607][ T5991] usb 5-1: config 0 descriptor?? [ 199.850466][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.851370][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.378278][ T5991] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 200.378350][ T5991] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 200.378366][ T5991] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 200.378466][ T5991] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 200.442966][ T5991] usb 5-1: USB disconnect, device number 10 [ 200.548241][ T6034] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.652657][ T6827] capability: warning: `syz.0.311' uses 32-bit capabilities (legacy support in use) [ 200.698227][ T6034] usb 4-1: Using ep0 maxpacket: 16 [ 200.701098][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.701130][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.701171][ T6034] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 200.701196][ T6034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.723352][ T6034] usb 4-1: config 0 descriptor?? [ 201.177756][ T6034] hid-picolcd 0003:04D8:F002.001A: unbalanced collection at end of report description [ 201.192771][ T6034] hid-picolcd 0003:04D8:F002.001A: device report parse failed [ 201.192904][ T6034] hid-picolcd 0003:04D8:F002.001A: probe with driver hid-picolcd failed with error -22 [ 201.381133][ T5991] usb 4-1: USB disconnect, device number 10 [ 201.398199][ T45] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 201.439968][ T6047] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.550803][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.550858][ T45] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 201.550884][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.556674][ T45] usb 1-1: config 0 descriptor?? [ 201.602519][ T6047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.602550][ T6047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.602587][ T6047] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 201.602607][ T6047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.650326][ T6047] usb 5-1: config 0 descriptor?? [ 202.069047][ T45] waltop 0003:172F:0502.001B: unknown main item tag 0x2 [ 202.069083][ T45] waltop 0003:172F:0502.001B: item fetching failed at offset 4/5 [ 202.069981][ T45] waltop 0003:172F:0502.001B: probe with driver waltop failed with error -22 [ 202.150280][ T6047] hid-retrode 0003:0403:97C1.001C: unknown main item tag 0x0 [ 202.168402][ T6047] hid-retrode 0003:0403:97C1.001C: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 202.249825][ T6047] usb 1-1: USB disconnect, device number 11 [ 202.330332][ T6034] usb 5-1: USB disconnect, device number 11 [ 202.651659][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.799923][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 202.802706][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.802736][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.802758][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.802799][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.802822][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.898331][ T45] usb 2-1: config 0 descriptor?? [ 203.501388][ T6047] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.641199][ T45] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 204.641257][ T45] microsoft 0003:045E:07DA.001D: unbalanced collection at end of report description [ 204.642235][ T45] microsoft 0003:045E:07DA.001D: parse failed [ 204.642343][ T45] microsoft 0003:045E:07DA.001D: probe with driver microsoft failed with error -22 [ 204.755115][ T6047] usb 4-1: Using ep0 maxpacket: 16 [ 204.757897][ T6047] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.757925][ T6047] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.757945][ T6047] usb 4-1: config 0 interface 0 has no altsetting 0 [ 204.757974][ T6047] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 204.757994][ T6047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.794305][ T6047] usb 4-1: config 0 descriptor?? [ 204.839394][ T6034] usb 2-1: USB disconnect, device number 13 [ 205.242227][ T6047] nzxt-smart2 0003:1E71:2009.001E: item fetching failed at offset 2/5 [ 205.243173][ T6047] nzxt-smart2 0003:1E71:2009.001E: probe with driver nzxt-smart2 failed with error -22 [ 205.442702][ T6047] usb 4-1: USB disconnect, device number 11 [ 206.898338][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 207.298227][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 207.340356][ T5929] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 207.340386][ T5929] usb 4-1: config 0 has no interface number 0 [ 207.340447][ T5929] usb 4-1: config 0 interface 12 has no altsetting 0 [ 207.361152][ T5929] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 207.361184][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.361310][ T5929] usb 4-1: Product: syz [ 207.361327][ T5929] usb 4-1: Manufacturer: syz [ 207.361343][ T5929] usb 4-1: SerialNumber: syz [ 207.469059][ T5929] usb 4-1: config 0 descriptor?? [ 210.702833][ T6047] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 210.860757][ T6047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.860796][ T6047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 210.860825][ T6047] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.860869][ T6047] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 210.860893][ T6047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.866743][ T5929] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 210.866787][ T5929] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 210.866800][ T5929] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 210.866864][ T5929] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 211.032347][ T5929] usb 4-1: USB disconnect, device number 12 [ 211.034525][ T6047] usb 1-1: config 0 descriptor?? [ 211.035613][ T6902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 211.377607][ T6047] usbhid 1-1:0.0: can't add hid device: -71 [ 211.377727][ T6047] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.398775][ T6047] usb 1-1: USB disconnect, device number 12 [ 212.198963][ T5929] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.410792][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.410858][ T5929] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.410886][ T5929] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.410910][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.410946][ T5929] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 213.410970][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.596535][ T5929] usb 2-1: config 0 descriptor?? [ 214.324989][ T5929] kye 0003:0458:5015.001F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 214.347103][ T5929] kye 0003:0458:5015.001F: unknown main item tag 0x1 [ 214.421496][ T5929] kye 0003:0458:5015.001F: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 214.421531][ T5929] kye 0003:0458:5015.001F: tablet-enabling feature report not found [ 214.421547][ T5929] kye 0003:0458:5015.001F: tablet enabling failed [ 214.544931][ T5929] usb 2-1: USB disconnect, device number 14 [ 214.838651][ T6939] fido_id[6939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 215.468231][ T5929] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.621103][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.621158][ T5929] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 215.621183][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.667228][ T5929] usb 2-1: config 0 descriptor?? [ 215.678168][ T6047] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 215.828465][ T6047] usb 3-1: Using ep0 maxpacket: 16 [ 215.833421][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.833452][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.833474][ T6047] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.833516][ T6047] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.833537][ T6047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.943939][ T6047] usb 3-1: config 0 descriptor?? [ 216.166919][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.166958][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.166984][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.167010][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.167036][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.167061][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.167098][ T5929] steelseries 0003:1038:12C2.0020: unknown main item tag 0x0 [ 216.408642][ T5924] usb 2-1: USB disconnect, device number 15 [ 216.483627][ T6047] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 216.484153][ T6047] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 216.507942][ T6047] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 216.507975][ T6047] microsoft 0003:045E:07DA.0021: no inputs found [ 216.507988][ T6047] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 216.678255][ T5929] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 216.701282][ T5924] usb 3-1: USB disconnect, device number 9 [ 216.797804][ T6963] fido_id[6963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 217.091887][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.092031][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.092075][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 217.092098][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.102388][ T5929] usb 1-1: config 0 descriptor?? [ 218.818540][ T5929] usb 1-1: USB disconnect, device number 13 [ 219.209331][ T6047] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 219.372617][ T6047] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.372647][ T6047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 219.372702][ T6047] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 219.372726][ T6047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.417500][ T6047] usb 2-1: config 0 descriptor?? [ 219.498230][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.636852][ T6988] xt_time: unknown flags 0xf4 [ 219.648532][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 219.650910][ T45] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 219.653687][ T45] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 219.653714][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.653732][ T45] usb 4-1: Product: syz [ 219.653743][ T45] usb 4-1: Manufacturer: syz [ 219.653755][ T45] usb 4-1: SerialNumber: syz [ 219.709849][ T45] usb 4-1: config 0 descriptor?? [ 219.724245][ T6034] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.732795][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 219.732859][ T45] usb 4-1: setting power ON [ 219.732877][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 219.769242][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.770080][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 219.770155][ T45] usb 4-1: media controller created [ 219.878140][ T6034] usb 1-1: Using ep0 maxpacket: 32 [ 219.881954][ T6034] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 219.881981][ T6034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.893384][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.968384][ T6984] dvb-usb: bulk message failed: -22 (3/0) [ 219.993833][ T6034] usb 1-1: config 0 descriptor?? [ 220.090650][ T6047] Bluetooth: Can't get version to change to load ram patch err [ 220.090670][ T6047] Bluetooth: Loading sysconfig file failed [ 220.090772][ T6047] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 220.127907][ T45] usb 4-1: selecting invalid altsetting 6 [ 220.127930][ T45] usb 4-1: digital interface selection failed (-22) [ 220.127946][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 220.144525][ T6047] usb 2-1: USB disconnect, device number 16 [ 220.159606][ T45] usb 4-1: setting power OFF [ 220.159802][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 220.159822][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 220.159835][ T45] (NULL device *): no alternate interface [ 220.276460][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 220.327863][ T45] usb 4-1: USB disconnect, device number 13 [ 220.381943][ T6052] udevd[6052]: setting mode of /dev/bus/usb/004/013 to 020664 failed: No such file or directory [ 220.382957][ T6052] udevd[6052]: setting owner of /dev/bus/usb/004/013 to uid=0, gid=0 failed: No such file or directory [ 220.600386][ T6034] konepure 0003:1E7D:2DBE.0023: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 220.759079][ T6047] usb 1-1: USB disconnect, device number 14 [ 220.794852][ T7003] warning: `syz.3.379' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.928240][ T6034] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.033248][ T7010] netlink: 'syz.4.381': attribute type 10 has an invalid length. [ 221.088147][ T6034] usb 3-1: Using ep0 maxpacket: 8 [ 221.092759][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.103322][ T6034] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 221.103354][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.103378][ T6034] usb 3-1: Product: syz [ 221.103395][ T6034] usb 3-1: Manufacturer: syz [ 221.103412][ T6034] usb 3-1: SerialNumber: syz [ 221.142629][ T7010] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 221.166225][ T6034] usb 3-1: config 0 descriptor?? [ 221.231474][ T6034] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 221.231509][ T6034] dvb-usb: bulk message failed: -22 (2/0) [ 221.242243][ T6034] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.249982][ T6034] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 221.250049][ T6034] usb 3-1: media controller created [ 221.327651][ T6034] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.417113][ T6998] dvb-usb: bulk message failed: -22 (4/0) [ 221.417136][ T6998] cxusb: i2c read failed [ 221.456262][ T6034] cxusb: set interface failed [ 221.456281][ T6034] dvb-usb: bulk message failed: -22 (1/0) [ 221.628327][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 221.666386][ T6034] DVB: Unable to find symbol mt352_attach() [ 221.666401][ T6034] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 221.780910][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.780944][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.780983][ T45] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 221.781007][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.828297][ T6034] rc_core: IR keymap rc-dvico-portable not found [ 221.828319][ T6034] Registered IR keymap rc-empty [ 221.830178][ T6034] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 221.833472][ T6034] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 221.941048][ T6034] dvb-usb: schedule remote query interval to 100 msecs. [ 221.941071][ T6034] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 221.986606][ T6034] usb 3-1: USB disconnect, device number 10 [ 222.048232][ T6047] dvb-usb: bulk message failed: -22 (1/0) [ 222.063994][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 222.064115][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 222.064143][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 222.631189][ T45] usb 4-1: config 0 descriptor?? [ 223.188851][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 223.188887][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 223.303586][ T45] ntrig 0003:1B96:0012.0024: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.3-1/input0 [ 223.363257][ T6034] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 223.525573][ T45] usb 4-1: USB disconnect, device number 14 [ 223.740782][ T7035] fido_id[7035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 225.630684][ T7052] netlink: 168 bytes leftover after parsing attributes in process `syz.2.398'. [ 227.045973][ T7070] ubi31: attaching mtd0 [ 227.046007][ T7070] ubi31 error: ubi_attach_mtd_dev: bad VID header (536940548) or data offsets (536940612) [ 227.327739][ T7075] netlink: 76 bytes leftover after parsing attributes in process `syz.2.405'. [ 227.505790][ T5902] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 227.658127][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 227.663371][ T5902] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.664574][ T7079] netlink: 204 bytes leftover after parsing attributes in process `syz.0.406'. [ 227.664596][ T7079] netlink: 'syz.0.406': attribute type 5 has an invalid length. [ 227.665567][ T5902] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 227.665591][ T5902] usb 4-1: config 4 has no interface number 0 [ 227.665625][ T5902] usb 4-1: config 4 interface 30 has no altsetting 0 [ 227.739331][ T5902] usb 4-1: string descriptor 0 read error: -22 [ 227.739493][ T5902] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 227.739517][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.786484][ T5902] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 227.786531][ T5902] dw2102: su3000_power_ctrl: 1, initialized 0 [ 227.786552][ T5902] dvb-usb: bulk message failed: -22 (2/0) [ 228.079695][ T5991] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.128551][ T5929] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 228.486918][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.488139][ T5902] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 228.488196][ T5902] usb 4-1: media controller created [ 228.488224][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 228.488238][ T5902] dw2102: i2c transfer failed. [ 228.488255][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 228.488268][ T5902] dw2102: i2c transfer failed. [ 228.488286][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 228.488300][ T5902] dw2102: i2c transfer failed. [ 228.488317][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 228.488331][ T5902] dw2102: i2c transfer failed. [ 228.488348][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 228.488362][ T5902] dw2102: i2c transfer failed. [ 228.488378][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 228.488392][ T5902] dw2102: i2c transfer failed. [ 228.488401][ T5902] dvb-usb: MAC address: 02:02:02:02:02:02 [ 228.601583][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.618957][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 228.650636][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 228.650689][ T5929] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 228.650714][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.654648][ T7059] dw2102: i2c rd: len=65 is too big! [ 228.654648][ T7059] [ 228.714777][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 228.714799][ T5902] dw2102: command 0x0e transfer failed. [ 228.714808][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 228.714821][ T5902] dw2102: command 0x0e transfer failed. [ 228.795418][ T5929] usb 2-1: config 0 descriptor?? [ 228.799699][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.799738][ T5991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.799783][ T5991] usb 5-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 228.799811][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.957023][ T5991] usb 5-1: config 0 descriptor?? [ 229.018253][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 229.018276][ T5902] dw2102: command 0x0e transfer failed. [ 229.018287][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 229.018302][ T5902] dw2102: command 0x0e transfer failed. [ 229.018311][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 229.018326][ T5902] dw2102: command 0x51 transfer failed. [ 229.019941][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 229.021122][ T5902] dw2102: i2c probe for address 0x68 failed. [ 229.021140][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 229.021166][ T5902] dw2102: i2c probe for address 0x69 failed. [ 229.021178][ T5902] dvb-usb: bulk message failed: -22 (5/0) [ 229.021192][ T5902] dw2102: i2c probe for address 0x6a failed. [ 229.021202][ T5902] dw2102: probing for demodulator failed. Is the external power switched on? [ 229.021212][ T5902] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 229.408124][ T5902] rc_core: IR keymap rc-tt-1500 not found [ 229.408145][ T5902] Registered IR keymap rc-empty [ 229.410003][ T5902] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 229.413381][ T5902] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11 [ 229.467956][ T5902] dvb-usb: schedule remote query interval to 250 msecs. [ 229.467978][ T5902] dw2102: su3000_power_ctrl: 0, initialized 1 [ 229.467992][ T5902] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 229.512210][ T5902] usb 4-1: USB disconnect, device number 15 [ 229.621327][ T5991] ntrig 0003:1B96:0012.0026: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.4-1/input0 [ 229.712094][ T5929] uclogic 0003:5543:0781.0025: hidraw1: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 230.778413][ T6034] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 230.778690][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 230.918258][ T6034] usb 3-1: device descriptor read/64, error -32 [ 232.823083][ T6034] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 233.129103][ T5991] usb 5-1: USB disconnect, device number 12 [ 233.131399][ T5929] usb 2-1: USB disconnect, device number 17 [ 233.252658][ T5902] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 233.260732][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.260779][ T6034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.262690][ T6034] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 233.262718][ T6034] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 233.262747][ T6034] usb 3-1: Manufacturer: syz [ 233.513299][ T6034] usb 3-1: config 0 descriptor?? [ 233.730370][ T6034] usbhid 3-1:0.0: can't add hid device: -71 [ 233.730504][ T6034] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.758361][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.760347][ T6034] usb 3-1: USB disconnect, device number 12 [ 233.798253][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 233.918221][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 233.921006][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.921051][ T45] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 233.921074][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.991047][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 234.486948][ T45] usb 1-1: config 0 descriptor?? [ 234.648413][ T5929] usb 2-1: device descriptor read/all, error -71 [ 235.016645][ T45] magicmouse 0003:05AC:0265.0027: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 235.183624][ T5902] usb 1-1: USB disconnect, device number 15 [ 235.194279][ T5924] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 235.348277][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 235.402803][ T7141] fido_id[7141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.449852][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.449886][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.451492][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.451520][ T5924] usb 3-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 235.451541][ T5924] usb 3-1: Manufacturer: syz [ 235.641021][ T5924] usb 3-1: config 0 descriptor?? [ 235.664191][ T5924] hub 3-1:0.0: USB hub found [ 236.468211][ T5924] hub 3-1:0.0: 1 port detected [ 236.671668][ T5924] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 236.671697][ T5924] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 236.705320][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 236.705447][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 236.762038][ T5924] usb 3-1: USB disconnect, device number 13 [ 237.083003][ T5929] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 237.231033][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.231063][ T5929] usb 5-1: config 0 has no interface number 0 [ 237.231122][ T5929] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 237.231147][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.279579][ T5929] usb 5-1: config 0 descriptor?? [ 237.307327][ T5929] usb 5-1: selecting invalid altsetting 1 [ 237.322836][ T5929] dvb_ttusb_budget: ttusb_init_controller: error [ 237.322856][ T5929] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 237.531938][ T5929] DVB: Unable to find symbol cx22700_attach() [ 237.608934][ T5929] DVB: Unable to find symbol tda10046_attach() [ 237.608951][ T5929] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 237.617883][ T5929] usb 5-1: USB disconnect, device number 13 [ 237.986647][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 239.598229][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.745482][ T5924] IPVS: starting estimator thread 0... [ 239.751167][ T45] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 239.751235][ T45] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.751265][ T45] usb 5-1: config 2 interface 0 has no altsetting 0 [ 239.765035][ T45] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 239.765072][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.765092][ T45] usb 5-1: Product: syz [ 239.765107][ T45] usb 5-1: Manufacturer: syz [ 239.765121][ T45] usb 5-1: SerialNumber: syz [ 239.908461][ T7188] IPVS: using max 7 ests per chain, 16800 per kthread [ 240.082169][ T45] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22 [ 240.098585][ T45] usb 5-1: USB disconnect, device number 14 [ 242.620947][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 244.858228][ T5902] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 245.049412][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 245.049461][ T5902] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 245.049500][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.068297][ T5820] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 245.070656][ T5902] usb 2-1: config 0 descriptor?? [ 245.075920][ T7228] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.510884][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.510935][ T5820] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 245.510960][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.394392][ T5820] usb 3-1: config 0 descriptor?? [ 246.596849][ T5902] hid_parser_main: 14 callbacks suppressed [ 246.596872][ T5902] elan 0003:04F3:0755.0028: unknown main item tag 0x0 [ 246.596901][ T5902] elan 0003:04F3:0755.0028: item fetching failed at offset 3/5 [ 246.607592][ T5902] elan 0003:04F3:0755.0028: Hid Parse failed [ 246.607718][ T5902] elan 0003:04F3:0755.0028: probe with driver elan failed with error -22 [ 246.673061][ T5923] usb 2-1: USB disconnect, device number 20 [ 247.091133][ T5923] usb 3-1: USB disconnect, device number 14 [ 247.140610][ T38] audit: type=1400 audit(1757944419.662:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7255 comm="syz.0.470" src=1 dest=20000 netif=wpan0 [ 248.075601][ T7266] xt_l2tp: missing protocol rule (udp|l2tpip) [ 252.328447][ T1197] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 254.113819][ T6047] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.173230][ T1197] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.177217][ T1197] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 254.177247][ T1197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.177268][ T1197] usb 5-1: Product: syz [ 254.177282][ T1197] usb 5-1: Manufacturer: syz [ 254.177312][ T1197] usb 5-1: SerialNumber: syz [ 254.278176][ T6047] usb 1-1: Using ep0 maxpacket: 8 [ 254.283173][ T6047] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.285500][ T6047] usb 1-1: config 4 interface 0 has no altsetting 0 [ 254.296390][ T6047] usb 1-1: string descriptor 0 read error: -22 [ 254.296579][ T6047] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 254.296606][ T6047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.422712][ T1197] usb 5-1: can't set config #2, error -71 [ 254.426569][ T6047] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 254.445738][ T6047] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 254.446161][ T6047] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 254.446210][ T6047] usb 1-1: media controller created [ 254.473784][ T1197] usb 5-1: USB disconnect, device number 15 [ 254.473941][ T7314] netlink: 'syz.2.488': attribute type 6 has an invalid length. [ 254.613885][ T7300] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 254.864003][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.898201][ T6047] zl10353_read_register: readreg error (reg=127, ret==0) [ 255.703103][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 255.858309][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 255.861479][ T5923] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 255.861506][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.128239][ T5923] usb 4-1: config 0 descriptor?? [ 256.143797][ T5923] gspca_main: sq930x-2.14.0 probing 041e:403c [ 256.144465][ T6047] usb 1-1: USB disconnect, device number 16 [ 257.078321][ T5923] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 257.078428][ T5923] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 257.173362][ T5923] usb 4-1: USB disconnect, device number 16 [ 260.910817][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.910881][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.677238][ T7385] mkiss: ax0: crc mode is auto. [ 298.248038][ C0] sched: DL replenish lagged too much [ 323.638429][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.686252][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.339727][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.609963][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.136352][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.155073][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.150193][ T39] INFO: task kworker/0:7:6034 blocked for more than 145 seconds. [ 463.150228][ T39] Not tainted syzkaller #0 [ 463.150240][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.150255][ T39] task:kworker/0:7 state:D stack:21240 pid:6034 tgid:6034 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 463.150324][ T39] Workqueue: events_power_efficient reg_check_chans_work [ 463.150373][ T39] Call Trace: [ 463.150381][ T39] [ 463.150397][ T39] __schedule+0x16f3/0x4c20 [ 463.150460][ T39] ? __pfx___schedule+0x10/0x10 [ 463.150520][ T39] rt_mutex_schedule+0x77/0xf0 [ 463.150543][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 463.150586][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 463.150617][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 463.150647][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 463.150675][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 463.150700][ T39] ? __lock_acquire+0xab9/0xd20 [ 463.150743][ T39] ? reg_check_chans_work+0x164/0xf30 [ 463.150781][ T39] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 463.150808][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 463.150842][ T39] ? reg_check_chans_work+0x164/0xf30 [ 463.150881][ T39] mutex_lock_nested+0x16a/0x1d0 [ 463.150915][ T39] reg_check_chans_work+0x164/0xf30 [ 463.150955][ T39] ? __lock_acquire+0xab9/0xd20 [ 463.150994][ T39] ? __pfx_reg_check_chans_work+0x10/0x10 [ 463.151029][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 463.151029][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 463.151064][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.151097][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 463.151123][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 463.151153][ T39] process_scheduled_works+0xade/0x17b0 [ 463.151214][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.151263][ T39] worker_thread+0x8a0/0xda0 [ 463.151307][ T39] ? __kthread_parkme+0x7b/0x200 [ 463.151347][ T39] kthread+0x70e/0x8a0 [ 463.151385][ T39] ? __pfx_worker_thread+0x10/0x10 [ 463.151414][ T39] ? __pfx_kthread+0x10/0x10 [ 463.151453][ T39] ? __pfx_kthread+0x10/0x10 [ 463.151488][ T39] ret_from_fork+0x439/0x7d0 [ 463.151521][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 463.151557][ T39] ? __switch_to_asm+0x39/0x70 [ 463.151578][ T39] ? __switch_to_asm+0x33/0x70 [ 463.151598][ T39] ? __pfx_kthread+0x10/0x10 [ 463.151632][ T39] ret_from_fork_asm+0x1a/0x30 [ 463.151673][ T39] [ 463.151686][ T39] INFO: task kworker/u8:19:7072 blocked for more than 145 seconds. [ 463.151701][ T39] Not tainted syzkaller #0 [ 463.151712][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.151722][ T39] task:kworker/u8:19 state:D stack:22824 pid:7072 tgid:7072 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 463.151782][ T39] Workqueue: ipv6_addrconf addrconf_verify_work [ 463.151809][ T39] Call Trace: [ 463.151816][ T39] [ 463.151830][ T39] __schedule+0x16f3/0x4c20 [ 463.151900][ T39] ? __pfx___schedule+0x10/0x10 [ 463.151960][ T39] rt_mutex_schedule+0x77/0xf0 [ 463.151982][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 463.152023][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 463.152055][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 463.152084][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 463.152112][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 463.152151][ T39] ? addrconf_verify_work+0x19/0x30 [ 463.152187][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 463.152219][ T39] ? addrconf_verify_work+0x19/0x30 [ 463.152244][ T39] mutex_lock_nested+0x16a/0x1d0 [ 463.152269][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.152306][ T39] addrconf_verify_work+0x19/0x30 [ 463.152331][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 463.152355][ T39] process_scheduled_works+0xade/0x17b0 [ 463.152413][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.152460][ T39] worker_thread+0x8a0/0xda0 [ 463.152517][ T39] kthread+0x70e/0x8a0 [ 463.152554][ T39] ? __pfx_worker_thread+0x10/0x10 [ 463.152582][ T39] ? __pfx_kthread+0x10/0x10 [ 463.152620][ T39] ? __pfx_kthread+0x10/0x10 [ 463.152655][ T39] ret_from_fork+0x439/0x7d0 [ 463.152686][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 463.152722][ T39] ? __switch_to_asm+0x39/0x70 [ 463.152742][ T39] ? __switch_to_asm+0x33/0x70 [ 463.152762][ T39] ? __pfx_kthread+0x10/0x10 [ 463.152796][ T39] ret_from_fork_asm+0x1a/0x30 [ 463.152836][ T39] [ 463.152869][ T39] [ 463.152869][ T39] Showing all locks held in the system: [ 463.152878][ T39] 2 locks held by kthreadd/2: [ 463.152892][ T39] 3 locks held by kworker/0:0/9: [ 463.152904][ T39] 4 locks held by kworker/0:1/10: [ 463.152916][ T39] #0: ffff88805c88c138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.152981][ T39] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.153056][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.153112][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.153162][ T39] 5 locks held by kworker/u8:0/12: [ 463.153174][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.153229][ T39] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.153286][ T39] #2: ffff88804a800898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.153345][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.153401][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.153457][ T39] 5 locks held by kworker/u8:1/13: [ 463.153469][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.153525][ T39] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.153582][ T39] #2: ffff88805ede0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.153641][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.153696][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.153753][ T39] 2 locks held by ksoftirqd/0/15: [ 463.153765][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.153820][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.153885][ T39] 2 locks held by rcuc/0/20: [ 463.153896][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.153951][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.154008][ T39] 6 locks held by rcuc/1/28: [ 463.154020][ T39] 4 locks held by kworker/1:0/31: [ 463.154033][ T39] 6 locks held by kworker/u8:2/37: [ 463.154045][ T39] #0: ffff8880360ae138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.154108][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.154166][ T39] #2: ffff88802ecad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 463.154224][ T39] #3: ffff888021b36350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 463.154279][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.154335][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.154392][ T39] 1 lock held by khungtaskd/39: [ 463.154404][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 463.154457][ T39] 7 locks held by kworker/u8:3/57: [ 463.154472][ T39] 5 locks held by kworker/u8:4/67: [ 463.154483][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.154540][ T39] #1: ffffc9000152fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.154617][ T39] #2: ffff888049400898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.154677][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.154738][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.154798][ T39] 5 locks held by kworker/u8:5/157: [ 463.154810][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.154874][ T39] #1: ffffc90003b1fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.154931][ T39] #2: ffff88805f0c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.154991][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.155046][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.155106][ T39] 4 locks held by kworker/0:2/991: [ 463.155118][ T39] #0: ffff888030ad4938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.155180][ T39] #1: ffffc90004917bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.155256][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.155311][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.155369][ T39] 5 locks held by kworker/u8:6/1157: [ 463.155382][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.155437][ T39] #1: ffffc90004f27bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.155494][ T39] #2: ffff88805f510898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.155553][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.155608][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.155665][ T39] 5 locks held by kworker/u8:7/1164: [ 463.155678][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.155734][ T39] #1: ffffc90004fd7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.155791][ T39] #2: ffff88805e880898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.155850][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.155916][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.155974][ T39] 2 locks held by kworker/1:2/1197: [ 463.155988][ T39] 5 locks held by kworker/u8:8/1244: [ 463.156000][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.156057][ T39] #1: ffffc90005257bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.156113][ T39] #2: ffff88805f1d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.156173][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.156228][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.156285][ T39] 2 locks held by aoe_tx0/1324: [ 463.156298][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.156353][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.156422][ T39] 3 locks held by kworker/u8:10/3597: [ 463.156435][ T39] 7 locks held by kworker/u8:11/3635: [ 463.156447][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.156504][ T39] #1: ffffc9000ddbfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.156563][ T39] #2: ffff88805db20300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 463.156631][ T39] #3: ffff88805dad0120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 463.156694][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 463.156749][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.156806][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.156879][ T39] 3 locks held by dhcpcd/5499: [ 463.156891][ T39] #0: ffffffff8e0b08f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x1bc/0x5a0 [ 463.156947][ T39] #1: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.157001][ T39] #2: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.157054][ T39] 5 locks held by dhcpcd/5500: [ 463.157068][ T39] 2 locks held by getty/5595: [ 463.157080][ T39] #0: ffff88823bf748a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 463.157145][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 463.157202][ T39] 5 locks held by kworker/1:3/5820: [ 463.157214][ T39] #0: ffff88805c56dd38 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.157277][ T39] #1: ffffc900049a7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.157355][ T39] #2: ffff8880217483f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 463.157412][ T39] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.157464][ T39] #4: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.157522][ T39] 4 locks held by syz-executor/5824: [ 463.157534][ T39] #0: ffff888028d4b088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x19f/0x3d0 [ 463.157585][ T39] #1: ffff888033f68600 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f7/0x1190 [ 463.157648][ T39] #2: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.157701][ T39] #3: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.157753][ T39] 2 locks held by syz-executor/5835: [ 463.157777][ T39] #0: ffff888036cb8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 463.157832][ T39] #1: ffff888036cb80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 463.197993][ T39] 1 lock held by syz-executor/5836: [ 463.198011][ T39] #0: ffff8880322860d0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 463.198082][ T39] 4 locks held by syz-executor/5840: [ 463.198094][ T39] #0: ffff8880369e0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 463.198153][ T39] #1: ffff8880369e00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 463.198216][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 463.198268][ T39] #3: ffff88802664bb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 463.198337][ T39] 3 locks held by syz-executor/5844: [ 463.198350][ T39] #0: ffff8880320600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_unregister_dev+0x2e7/0x510 [ 463.198405][ T39] #1: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.198460][ T39] #2: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.198513][ T39] 4 locks held by kworker/u9:5/5845: [ 463.198525][ T39] #0: ffff888030230938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.198584][ T39] #1: ffffc90004b57bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.198642][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.198699][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.198761][ T39] 4 locks held by kworker/R-wg-cr/5883: [ 463.198774][ T39] #0: ffff88805c56e138 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.198837][ T39] #1: ffffc90004d67ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.198923][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.198980][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.199038][ T39] 2 locks held by napi/wg0-0/5897: [ 463.199051][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.199108][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.199165][ T39] 4 locks held by kworker/0:3/5902: [ 463.199178][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.199236][ T39] #1: ffffc90004e67bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.199295][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.199353][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.199412][ T39] 4 locks held by kworker/1:4/5916: [ 463.199424][ T39] #0: ffff88805c56c538 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.199488][ T39] #1: ffffc90004f57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.199567][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.199624][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.199682][ T39] 5 locks held by kworker/0:4/5923: [ 463.199694][ T39] #0: ffff88805c67b138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.199757][ T39] #1: ffffc90005007bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.199836][ T39] #2: ffff88802ecad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 463.199911][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.199967][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.200024][ T39] 2 locks held by kworker/0:5/5924: [ 463.200037][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.200094][ T39] #1: ffffc90005017bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.200151][ T39] 4 locks held by kworker/1:5/5929: [ 463.200164][ T39] #0: ffff88805c215138 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.200227][ T39] #1: ffffc90005097bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.200305][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.200360][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.200418][ T39] 4 locks held by kworker/0:6/5987: [ 463.200430][ T39] #0: ffff88805c684938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.200492][ T39] #1: ffffc90005227bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.200568][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.200624][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.200682][ T39] 4 locks held by kworker/1:6/5991: [ 463.200695][ T39] #0: ffff88805c684938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.200758][ T39] #1: ffffc900052d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.200836][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.200900][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.200959][ T39] 4 locks held by kworker/0:7/6034: [ 463.200971][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.201029][ T39] #1: ffffc90005267bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.201087][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 463.201149][ T39] #3: ffff88805f510898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 463.201213][ T39] 3 locks held by kworker/0:8/6047: [ 463.201225][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.201282][ T39] #1: ffffc90005067bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.201339][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 463.201394][ T39] 7 locks held by kworker/u8:15/6205: [ 463.201407][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.201464][ T39] #1: ffffc90003fcfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.201524][ T39] #2: ffff88803617d300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 463.201588][ T39] #3: ffff88805d4dc920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 463.201652][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 463.201707][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.201763][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.201821][ T39] 5 locks held by kworker/u8:16/6331: [ 463.201834][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.201900][ T39] #1: ffffc900046efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.201958][ T39] #2: ffff888049a20898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.202018][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.202075][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.202131][ T39] 6 locks held by kworker/u8:17/6334: [ 463.202145][ T39] 5 locks held by kworker/u8:18/7071: [ 463.202157][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.202215][ T39] #1: ffffc9000c277bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.202273][ T39] #2: ffff88805eb80898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 463.202333][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.202390][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.202447][ T39] 3 locks held by kworker/u8:19/7072: [ 463.202460][ T39] #0: ffff88802fe01138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.202517][ T39] #1: ffffc9000c287bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.202576][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 463.202633][ T39] 5 locks held by kworker/u8:20/7073: [ 463.202648][ T39] 6 locks held by kworker/0:9/7409: [ 463.202661][ T39] #0: ffff88805c0b9138 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.202723][ T39] #1: ffffc9000fbefbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.202801][ T39] #2: ffff88803471d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 463.202863][ T39] #3: ffff888021b303f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 463.202919][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.202975][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.203033][ T39] 4 locks held by kworker/u8:22/7410: [ 463.203048][ T39] 4 locks held by kworker/u8:26/7414: [ 463.203060][ T39] #0: ffff88805c73e938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.203135][ T39] #1: ffffc9000fc0fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.203191][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.203245][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.203300][ T39] 4 locks held by kworker/0:10/7416: [ 463.203313][ T39] #0: ffff88805bf53938 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.203374][ T39] #1: ffffc9000fbcfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.203449][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.203503][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.203558][ T39] 5 locks held by kworker/1:9/7417: [ 463.203571][ T39] #0: ffff88805c88c138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.203632][ T39] #1: ffffc9000fb7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.203708][ T39] #2: ffff88805d9fc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 463.203762][ T39] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.203814][ T39] #4: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.203870][ T39] 4 locks held by kworker/1:10/7418: [ 463.203883][ T39] #0: ffff888030ad4938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.203944][ T39] #1: ffffc9000fc2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.204019][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.204092][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.204150][ T39] 4 locks held by kworker/1:11/7420: [ 463.204163][ T39] #0: ffff88805c678138 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.204225][ T39] #1: ffffc9000facfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.204303][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.204359][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.204417][ T39] 3 locks held by syz-executor/7421: [ 463.204430][ T39] #0: ffffffff8e0b08f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x1bc/0x5a0 [ 463.204486][ T39] #1: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.204538][ T39] #2: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.204591][ T39] 4 locks held by kworker/0:12/7422: [ 463.204604][ T39] #0: ffff88805c693538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.204662][ T39] #1: ffffc9000faffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.204737][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.204793][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.204857][ T39] 2 locks held by syz-executor/7424: [ 463.204869][ T39] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.204922][ T39] #1: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.204974][ T39] 1 lock held by dhcpcd/7425: [ 463.204987][ T39] #0: ffff88803dd8ccb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 463.205049][ T39] 4 locks held by kworker/0:13/7426: [ 463.205061][ T39] #0: ffff88805c687d38 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.205125][ T39] #1: ffffc9000fc6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.205203][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.205259][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.205316][ T39] 7 locks held by kworker/u8:29/7428: [ 463.205329][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.205386][ T39] #1: ffffc9000fc8fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.205446][ T39] #2: ffff888049cfb300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 463.205514][ T39] #3: ffff888049d9f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 463.205577][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 463.205631][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.205686][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.205744][ T39] 4 locks held by kworker/0:14/7431: [ 463.205757][ T39] #0: ffff88805c215138 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.205818][ T39] #1: ffffc90004b07bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.205907][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.205964][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.206028][ T39] 3 locks held by syz-executor/7433: [ 463.206041][ T39] #0: ffff8880323418d0 (&mm->mmap_lock){++++}-{4:4}, at: setup_arg_pages+0x2b3/0xaa0 [ 463.206095][ T39] #1: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 463.206148][ T39] #2: ffff88801daeca58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 463.206200][ T39] 4 locks held by kworker/0:15/7434: [ 463.206213][ T39] #0: ffff88805c678138 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.206280][ T39] #1: ffffc900049e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.206360][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.206416][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.206479][ T39] 4 locks held by kworker/1:12/7435: [ 463.206491][ T39] #0: ffff88805c67b138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.206555][ T39] #1: ffffc90005477bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.206634][ T39] #2: ffff88802ecad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 463.206692][ T39] #3: ffff888021b36350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 463.206750][ T39] 6 locks held by kworker/u8:33/7436: [ 463.206763][ T39] #0: ffff888035064138 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 463.206820][ T39] #1: ffffc9000fdb7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 463.206887][ T39] #2: ffff8880384715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 463.206943][ T39] #3: ffff88823bf7c9e0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 463.206999][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 463.207056][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 463.207115][ T39] [ 463.207121][ T39] ============================================= [ 463.207121][ T39] [ 463.207144][ T39] NMI backtrace for cpu 0 [ 463.207168][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.207194][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.207208][ T39] Call Trace: [ 463.207217][ T39] [ 463.207226][ T39] dump_stack_lvl+0x189/0x250 [ 463.207264][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.207297][ T39] ? __pfx__printk+0x10/0x10 [ 463.207335][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 463.207367][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 463.207398][ T39] ? __pfx__printk+0x10/0x10 [ 463.207427][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 463.207455][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 463.207485][ T39] watchdog+0xf93/0xfe0 [ 463.207519][ T39] ? watchdog+0x1de/0xfe0 [ 463.207560][ T39] kthread+0x70e/0x8a0 [ 463.207598][ T39] ? __pfx_watchdog+0x10/0x10 [ 463.207625][ T39] ? __pfx_kthread+0x10/0x10 [ 463.207663][ T39] ? __pfx_kthread+0x10/0x10 [ 463.207697][ T39] ret_from_fork+0x439/0x7d0 [ 463.207730][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 463.207765][ T39] ? __switch_to_asm+0x39/0x70 [ 463.207785][ T39] ? __switch_to_asm+0x33/0x70 [ 463.207804][ T39] ? __pfx_kthread+0x10/0x10 [ 463.207839][ T39] ret_from_fork_asm+0x1a/0x30 [ 463.207891][ T39] [ 463.207900][ T39] Sending NMI from CPU 0 to CPUs 1: [ 463.207982][ C1] NMI backtrace for cpu 1 [ 463.207997][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 463.208018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 463.208035][ C1] RIP: 0010:__ip6_local_out+0x44c/0x870 [ 463.208066][ C1] Code: e5 49 c1 ed 03 43 80 7c 35 00 00 74 08 4c 89 e7 e8 39 7f 55 f8 49 8b 1c 24 89 de 83 e6 01 31 ff e8 c9 49 f6 f7 f6 c3 01 75 0f 5f 44 f6 f7 43 80 7c 35 00 00 75 4a eb 50 e8 90 c1 db f7 89 c3 [ 463.208082][ C1] RSP: 0018:ffffc90000a3eb80 EFLAGS: 00000246 [ 463.208098][ C1] RAX: ffffffff89c829a7 RBX: ffff8880286c58c0 RCX: ffff88801cac1dc0 [ 463.208113][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.208124][ C1] RBP: ffffc90000a3ec88 R08: 0000000000000000 R09: 0000000000000100 [ 463.208137][ C1] R10: dffffc0000000000 R11: ffffed10073bc401 R12: ffff8880570c3418 [ 463.208151][ C1] R13: 1ffff1100ae18683 R14: dffffc0000000000 R15: ffff8880570c33c0 [ 463.208165][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 463.208180][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.208193][ C1] CR2: 00007f9dcc1bfff8 CR3: 00000000236bc000 CR4: 00000000003526f0 [ 463.208209][ C1] Call Trace: [ 463.208216][ C1] [ 463.208224][ C1] ? xfrm_lookup_with_ifid+0x1553/0x1a90 [ 463.208248][ C1] ? __pfx___ip6_local_out+0x10/0x10 [ 463.208275][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 463.208296][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 463.208318][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 463.208340][ C1] ip6_local_out+0x26/0x70 [ 463.208367][ C1] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 463.208400][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 463.208428][ C1] ? rcu_is_watching+0x15/0xb0 [ 463.208462][ C1] ? __build_skb_around+0x257/0x3e0 [ 463.208491][ C1] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 463.208520][ C1] ? skb_put+0x11b/0x210 [ 463.208547][ C1] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 463.208585][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 463.208622][ C1] ? nft_log_eval+0x1a4/0xab0 [ 463.208647][ C1] ? synproxy_pernet+0x45/0x270 [ 463.208669][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 463.208692][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 463.208714][ C1] ? nf_ip_checksum+0x13c/0x510 [ 463.208735][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 463.208758][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 463.208777][ C1] ? __local_bh_enable_ip+0x1b2/0x270 [ 463.208800][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.208835][ C1] nft_do_chain+0x409/0x1920 [ 463.208863][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 463.208879][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 463.208926][ C1] nft_do_chain_inet+0x25d/0x340 [ 463.208945][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 463.208963][ C1] ? __lock_acquire+0xab9/0xd20 [ 463.208993][ C1] ? NF_HOOK+0x9a/0x3a0 [ 463.209017][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 463.209037][ C1] nf_hook_slow+0xc5/0x220 [ 463.209066][ C1] NF_HOOK+0x206/0x3a0 [ 463.209091][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 463.209116][ C1] ? NF_HOOK+0x9a/0x3a0 [ 463.209138][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 463.209163][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 463.209194][ C1] ip6_input+0x16a/0x270 [ 463.209218][ C1] ? ip6_input+0x23/0x270 [ 463.209243][ C1] NF_HOOK+0x309/0x3a0 [ 463.209266][ C1] ? skb_orphan+0xaf/0xd0 [ 463.209290][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 463.209313][ C1] ? NF_HOOK+0x9a/0x3a0 [ 463.209336][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 463.209361][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 463.209392][ C1] __netif_receive_skb+0xd3/0x380 [ 463.209415][ C1] ? rt_spin_unlock+0x65/0x80 [ 463.209439][ C1] ? process_backlog+0x27b/0x900 [ 463.209462][ C1] process_backlog+0x31e/0x900 [ 463.209493][ C1] __napi_poll+0xb3/0x540 [ 463.209518][ C1] net_rx_action+0x707/0xe00 [ 463.209541][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.209578][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 463.209637][ C1] handle_softirqs+0x22f/0x710 [ 463.209665][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 463.209694][ C1] run_ktimerd+0xcf/0x190 [ 463.209720][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 463.209744][ C1] ? schedule+0x91/0x360 [ 463.209772][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 463.209795][ C1] smpboot_thread_fn+0x53f/0xa60 [ 463.209818][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 463.209845][ C1] kthread+0x70e/0x8a0 [ 463.209876][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 463.209898][ C1] ? __pfx_kthread+0x10/0x10 [ 463.209928][ C1] ? __pfx_kthread+0x10/0x10 [ 463.209957][ C1] ret_from_fork+0x439/0x7d0 [ 463.209981][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 463.210008][ C1] ? __switch_to_asm+0x39/0x70 [ 463.210026][ C1] ? __switch_to_asm+0x33/0x70 [ 463.210041][ C1] ? __pfx_kthread+0x10/0x10 [ 463.210069][ C1] ret_from_fork_asm+0x1a/0x30 [ 463.210096][ C1] [ 464.478043][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 464.478068][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.478095][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.478109][ T39] Call Trace: [ 464.478118][ T39] [ 464.478127][ T39] dump_stack_lvl+0x99/0x250 [ 464.478166][ T39] ? __asan_memcpy+0x40/0x70 [ 464.478191][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.478224][ T39] ? __pfx__printk+0x10/0x10 [ 464.478262][ T39] vpanic+0x281/0x750 [ 464.478297][ T39] ? __pfx_vpanic+0x10/0x10 [ 464.478327][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 464.478350][ T39] ? preempt_schedule+0xae/0xc0 [ 464.478384][ T39] ? preempt_schedule_common+0x83/0xd0 [ 464.478422][ T39] panic+0xb9/0xc0 [ 464.478454][ T39] ? __pfx_panic+0x10/0x10 [ 464.478487][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 464.478521][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 464.478553][ T39] watchdog+0xfd2/0xfe0 [ 464.478587][ T39] ? watchdog+0x1de/0xfe0 [ 464.478622][ T39] kthread+0x70e/0x8a0 [ 464.478661][ T39] ? __pfx_watchdog+0x10/0x10 [ 464.478687][ T39] ? __pfx_kthread+0x10/0x10 [ 464.478727][ T39] ? __pfx_kthread+0x10/0x10 [ 464.478768][ T39] ret_from_fork+0x439/0x7d0 [ 464.478812][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 464.478847][ T39] ? __switch_to_asm+0x39/0x70 [ 464.478866][ T39] ? __switch_to_asm+0x33/0x70 [ 464.478884][ T39] ? __pfx_kthread+0x10/0x10 [ 464.478918][ T39] ret_from_fork_asm+0x1a/0x30 [ 464.478955][ T39] [ 464.479326][ T39] Kernel Offset: disabled