last executing test programs: 4m34.212117194s ago: executing program 2 (id=860): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, 0x52, 0x311, 0x70bd28, 0x2, {0xa}}, 0x14}}, 0x0) 4m33.949659834s ago: executing program 2 (id=865): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x64, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x64}}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m33.61155683s ago: executing program 2 (id=870): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x2040400) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10) 4m33.351988841s ago: executing program 2 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4m33.061597867s ago: executing program 2 (id=876): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000680)="e6", 0x1}], 0x1}}], 0x1, 0x200400c0) 4m32.045527993s ago: executing program 2 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 4m31.40403488s ago: executing program 32 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 4m30.305125414s ago: executing program 0 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) 4m29.887320536s ago: executing program 0 (id=905): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) writev(r0, &(0x7f0000000a80)=[{&(0x7f00000018c0)="f749", 0x2}, {0x0}], 0x2) 4m29.642293522s ago: executing program 0 (id=908): r0 = epoll_create1(0x80000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)={0x4}) 4m29.299194067s ago: executing program 0 (id=912): r0 = socket$unix(0x1, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x81, 0xf7fffff9}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x6}}) 4m29.040953425s ago: executing program 0 (id=915): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m28.770680573s ago: executing program 0 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 4m13.373546863s ago: executing program 33 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 1m28.091657574s ago: executing program 3 (id=2804): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) 1m27.861983445s ago: executing program 3 (id=2807): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000380)=@caif=@dgm={0x25, 0x7, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29b0700000000000000484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000a40)="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", 0x1d2}], 0x2}, 0x8001) 1m27.64682222s ago: executing program 3 (id=2809): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f0000000040)=[{0x3, 0x3, 0x1000}, {0x2, 0x4, 0x1000}, {0x2, 0xa}, {0x4, 0x6f, 0x800}], 0x4) semctl$IPC_RMID(r0, 0x0, 0x0) 1m27.531390275s ago: executing program 3 (id=2810): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 1m27.46792173s ago: executing program 3 (id=2812): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x20000000000001f9, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) 1m26.883649029s ago: executing program 3 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1m26.150340657s ago: executing program 34 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1m3.275690129s ago: executing program 1 (id=3017): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000280)=0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000fc0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x9, 0x7, 0x1, 0x6, 0xf909, 0x341f, 0x0, 0x400, 0x2, 0x8, 0x248, 0x9, 0xffff, 0x6, 0x80000001, 0x9, 0x80, 0x5, 0xff, 0x6, 0x7fffffff, 0xffff7fff, 0x9, 0x8, 0x9, 0xe, 0x1, 0xcda, 0x5, 0x8, 0x4]}) 1m2.965850471s ago: executing program 1 (id=3019): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m2.650377238s ago: executing program 1 (id=3024): r0 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0xb3db2000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1m2.106521105s ago: executing program 1 (id=3026): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1m2.088751733s ago: executing program 4 (id=3027): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@local, 0x34, r1}) 50.421449532s ago: executing program 1 (id=3035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 50.421347615s ago: executing program 4 (id=3036): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 50.419675513s ago: executing program 1 (id=3038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)) 50.419529375s ago: executing program 4 (id=3039): socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0xfffffff8, 0x1000, 0x9, 0x5, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x400, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11001, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x1, 0x100002, 0x8, 0x752, 0x1, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 50.389079915s ago: executing program 4 (id=3043): unshare(0x400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0xfffffec2, &(0x7f0000000500)}, 0x1c) 50.08961055s ago: executing program 4 (id=3045): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x840000c0) 47.753109377s ago: executing program 4 (id=3047): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x4e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x7, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 36.873945412s ago: executing program 35 (id=3038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)) 34.538566966s ago: executing program 6 (id=3057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0xffffff6a, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) 34.390432306s ago: executing program 6 (id=3058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x69, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 34.175403689s ago: executing program 6 (id=3059): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) 34.014634677s ago: executing program 6 (id=3060): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) 33.791130899s ago: executing program 6 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 32.45967645s ago: executing program 36 (id=3047): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x4e, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, 0x10, 0x7, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 21.29578018s ago: executing program 6 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) 19.016355353s ago: executing program 5 (id=3070): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 18.840582443s ago: executing program 5 (id=3071): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001780)) 18.346985671s ago: executing program 5 (id=3072): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.329900046s ago: executing program 5 (id=3073): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15.765939243s ago: executing program 5 (id=3074): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x7c5, 0x0, 0x3, 0xd59f80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x4, 0x596, 0x7, 0x0, 0x2e, 0xd, {0xffff945a, 0x1}, 0x3, 0xed}}) 15.604468456s ago: executing program 5 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) 5.937629971s ago: executing program 37 (id=3069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) 0s ago: executing program 38 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 84209][ T992] usb 6-1: Using ep0 maxpacket: 16 [ 272.287023][ T992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.287052][ T992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.287088][ T992] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 272.287109][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.326779][ T992] usb 6-1: config 0 descriptor?? [ 272.377023][T10008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1705'. [ 272.379909][T10008] IPVS: Error connecting to the multicast addr [ 272.454743][ T5157] Bluetooth: hci5: command 0x0405 tx timeout [ 272.843765][ T992] hid-multitouch 0003:1FD2:6007.0020: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 273.038564][ T6031] usb 6-1: USB disconnect, device number 4 [ 273.600189][T10035] ptrace attach of "./syz-executor exec"[10038] was attempted by "./syz-executor exec"[10035] [ 273.764655][ T1085] kernel write not supported for file /amidi2 (pid: 1085 comm: kworker/1:2) [ 274.363372][T10067] netlink: 'syz.4.1731': attribute type 21 has an invalid length. [ 274.375156][T10067] netlink: 'syz.4.1731': attribute type 21 has an invalid length. [ 274.375180][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 274.700452][T10079] [U]  [ 274.700508][T10079] [U] K{ [ 274.700985][T10079] [U] T 1ŠFFˊ`GJǘGO/MC [ 274.703450][T10079] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 274.733859][T10079] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 274.749598][T10079] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 274.786665][T10079] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 274.787698][T10079] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 274.792930][T10079] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 274.801395][T10079] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 274.845958][T10079] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 274.847326][T10079] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 274.847511][T10079] [U] 22Ʃ۩X?0;3U [ 274.861840][T10079] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 274.862827][T10079] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 274.863519][T10079] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 274.867104][T10079] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 274.868272][T10079] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 274.868328][T10079] [U] EC [ 274.885532][T10079] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 274.927661][T10078] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 275.333085][T10090] vivid-001: disconnect [ 275.341916][T10089] vivid-001: reconnect [ 275.907002][T10109] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 275.907028][T10109] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.927502][T10109] vhci_hcd vhci_hcd.0: Device attached [ 276.116566][ T1085] vhci_hcd: vhci_device speed not set [ 276.174372][ T1085] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 276.184262][ T6031] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 276.356982][ T6031] usb 4-1: config 0 has no interfaces? [ 276.357019][ T6031] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.357041][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.376281][ T6031] usb 4-1: config 0 descriptor?? [ 276.611884][ T31] usb 4-1: USB disconnect, device number 17 [ 276.630233][T10112] vhci_hcd: unknown pdu 1 [ 276.684286][ T1085] vhci_hcd: vhci_device speed not set [ 276.689430][ T1015] vhci_hcd: stop threads [ 276.691555][ T1015] vhci_hcd: release socket [ 276.706531][ T1015] vhci_hcd: disconnect device [ 276.748075][ T1085] usb 39-1: device descriptor read/64, error -71 [ 276.937841][ T1085] vhci_hcd: vhci_device speed not set [ 277.794435][T10161] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 277.794491][T10161] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 277.794542][T10161] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 277.799287][T10161] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.799349][T10161] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 277.799397][T10161] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 277.799445][T10161] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 277.799494][T10161] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 277.799544][T10161] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 277.799593][T10161] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 277.799640][T10161] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.799687][T10161] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 277.799734][T10161] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.799780][T10161] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 277.799883][T10161] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 277.799929][T10161] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 277.800007][T10161] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 277.800172][T10161] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 277.800218][T10161] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 277.800269][T10161] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 277.878619][ T1085] kernel write not supported for file /dsp1 (pid: 1085 comm: kworker/1:2) [ 277.952058][T10161] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 277.953047][T10161] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 277.953104][T10161] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 277.953157][T10161] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 277.953207][T10161] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 278.165156][T10170] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 278.353297][ T1085] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 278.504255][ T1085] usb 2-1: Using ep0 maxpacket: 32 [ 278.506563][ T1085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.506623][ T1085] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 278.506645][ T1085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.518939][ T1085] usb 2-1: config 0 descriptor?? [ 278.585257][ T1085] dvb-usb: found a 'TeVii S662' in warm state. [ 278.585312][ T1085] dw2102: su3000_power_ctrl: 1, initialized 0 [ 278.585942][ T1085] dvb-usb: bulk message failed: -22 (2/0) [ 278.636115][ T1085] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.654271][ T1085] dvbdev: DVB: registering new adapter (TeVii S662) [ 278.654329][ T1085] usb 2-1: media controller created [ 278.654960][ T1085] dvb-usb: bulk message failed: -22 (6/0) [ 278.654978][ T1085] dw2102: i2c transfer failed. [ 278.654997][ T1085] dvb-usb: bulk message failed: -22 (6/0) [ 278.655009][ T1085] dw2102: i2c transfer failed. [ 278.655026][ T1085] dvb-usb: bulk message failed: -22 (6/0) [ 278.655039][ T1085] dw2102: i2c transfer failed. [ 278.655056][ T1085] dvb-usb: bulk message failed: -22 (6/0) [ 278.655068][ T1085] dw2102: i2c transfer failed. [ 278.655084][ T1085] dvb-usb: bulk message failed: -22 (6/0) [ 278.655097][ T1085] dw2102: i2c transfer failed. [ 278.655113][ T1085] dvb-usb: bulk message failed: -22 (6/0) [ 278.655125][ T1085] dw2102: i2c transfer failed. [ 278.655135][ T1085] dvb-usb: MAC address: 02:02:02:02:02:02 [ 278.777759][ T1085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.812179][ T1085] dvb-usb: bulk message failed: -22 (3/0) [ 278.812203][ T1085] dw2102: command 0x0e transfer failed. [ 278.812211][ T1085] dvb-usb: bulk message failed: -22 (3/0) [ 278.812224][ T1085] dw2102: command 0x0e transfer failed. [ 279.044227][ T992] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 279.114327][ T1085] dvb-usb: bulk message failed: -22 (3/0) [ 279.114348][ T1085] dw2102: command 0x0e transfer failed. [ 279.114358][ T1085] dvb-usb: bulk message failed: -22 (3/0) [ 279.114369][ T1085] dw2102: command 0x0e transfer failed. [ 279.114378][ T1085] dvb-usb: bulk message failed: -22 (1/0) [ 279.114389][ T1085] dw2102: command 0x51 transfer failed. [ 279.114398][ T1085] dvb-usb: bulk message failed: -22 (5/0) [ 279.114411][ T1085] dw2102: i2c probe for address 0x68 failed. [ 279.114420][ T1085] dvb-usb: bulk message failed: -22 (5/0) [ 279.114433][ T1085] dw2102: i2c probe for address 0x69 failed. [ 279.114442][ T1085] dvb-usb: bulk message failed: -22 (5/0) [ 279.114453][ T1085] dw2102: i2c probe for address 0x6a failed. [ 279.114477][ T1085] dw2102: probing for demodulator failed. Is the external power switched on? [ 279.114487][ T1085] dvb-usb: no frontend was attached by 'TeVii S662' [ 279.116578][T10168] dvb-usb: bulk message failed: -22 (4/0) [ 279.116596][T10168] dw2102: i2c transfer failed. [ 279.154308][ T6031] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 279.194996][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 279.197714][ T992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.212898][ T992] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 279.212925][ T992] usb 4-1: config 4 has no interface number 0 [ 279.212955][ T992] usb 4-1: config 4 interface 30 has no altsetting 0 [ 279.225320][ T992] usb 4-1: string descriptor 0 read error: -22 [ 279.225468][ T992] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 279.225488][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.308640][ T6031] usb 7-1: config 0 has an invalid interface number: 30 but max is 0 [ 279.308666][ T6031] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 279.308684][ T6031] usb 7-1: config 0 has no interface number 0 [ 279.308733][ T6031] usb 7-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.308757][ T6031] usb 7-1: config 0 interface 30 has no altsetting 0 [ 279.308787][ T6031] usb 7-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 279.308807][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.346125][ T992] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 279.346171][ T992] dw2102: su3000_power_ctrl: 1, initialized 0 [ 279.346189][ T992] dvb-usb: bulk message failed: -22 (2/0) [ 279.382572][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.384268][ T1085] rc_core: IR keymap rc-tt-1500 not found [ 279.384284][ T1085] Registered IR keymap rc-empty [ 279.386029][ T1085] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 279.389235][ T1085] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 279.399527][ T992] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 279.399581][ T992] usb 4-1: media controller created [ 279.399605][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 279.399619][ T992] dw2102: i2c transfer failed. [ 279.399636][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 279.399647][ T992] dw2102: i2c transfer failed. [ 279.399664][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 279.399676][ T992] dw2102: i2c transfer failed. [ 279.399691][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 279.399703][ T992] dw2102: i2c transfer failed. [ 279.399718][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 279.399730][ T992] dw2102: i2c transfer failed. [ 279.399745][ T992] dvb-usb: bulk message failed: -22 (6/0) [ 279.399758][ T992] dw2102: i2c transfer failed. [ 279.399774][ T992] dvb-usb: MAC address: 02:02:02:02:02:02 [ 279.519149][T10186] dvb-usb: bulk message failed: -22 (5/0) [ 279.519168][T10186] dw2102: i2c transfer failed. [ 279.537272][ T1085] dvb-usb: schedule remote query interval to 250 msecs. [ 279.537294][ T1085] dw2102: su3000_power_ctrl: 0, initialized 1 [ 279.537306][ T1085] dvb-usb: TeVii S662 successfully initialized and connected. [ 279.541314][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.593335][ T6031] usb 7-1: config 0 descriptor?? [ 279.618604][ T1085] usb 2-1: USB disconnect, device number 17 [ 279.692686][ T6031] usb 7-1: unknown interface protocol 0x41, assuming v1 [ 279.692709][ T6031] usb 7-1: 30:2 : does not exist [ 279.788152][ T992] dvb-usb: bulk message failed: -22 (3/0) [ 279.788172][ T992] dw2102: command 0x0e transfer failed. [ 279.788182][ T992] dvb-usb: bulk message failed: -22 (3/0) [ 279.788194][ T992] dw2102: command 0x0e transfer failed. [ 279.797702][T10200] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 279.861688][ T9] usb 7-1: USB disconnect, device number 7 [ 280.094667][ T992] dvb-usb: bulk message failed: -22 (3/0) [ 280.094689][ T992] dw2102: command 0x0e transfer failed. [ 280.094699][ T992] dvb-usb: bulk message failed: -22 (3/0) [ 280.094711][ T992] dw2102: command 0x0e transfer failed. [ 280.094720][ T992] dvb-usb: bulk message failed: -22 (1/0) [ 280.094731][ T992] dw2102: command 0x51 transfer failed. [ 280.094740][ T992] dvb-usb: bulk message failed: -22 (5/0) [ 280.094753][ T992] dw2102: i2c probe for address 0x68 failed. [ 280.094764][ T992] dvb-usb: bulk message failed: -22 (5/0) [ 280.094776][ T992] dw2102: i2c probe for address 0x69 failed. [ 280.094786][ T992] dvb-usb: bulk message failed: -22 (5/0) [ 280.094798][ T992] dw2102: i2c probe for address 0x6a failed. [ 280.094807][ T992] dw2102: probing for demodulator failed. Is the external power switched on? [ 280.094817][ T992] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 280.270587][ T8635] udevd[8635]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.297446][ T992] rc_core: IR keymap rc-tt-1500 not found [ 280.297467][ T992] Registered IR keymap rc-empty [ 280.299151][ T992] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 280.302238][ T992] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input19 [ 280.371896][ T1085] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 280.411698][ T992] dvb-usb: schedule remote query interval to 250 msecs. [ 280.411721][ T992] dw2102: su3000_power_ctrl: 0, initialized 1 [ 280.411733][ T992] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 280.452955][ T992] usb 4-1: USB disconnect, device number 18 [ 280.676289][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1799'. [ 280.824235][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 280.962945][ T992] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 280.986528][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.986576][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 280.986597][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.998737][ T9] usb 5-1: config 0 descriptor?? [ 281.038355][T10225] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 281.054296][ T1085] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 281.204281][ T1085] usb 2-1: Using ep0 maxpacket: 16 [ 281.208844][ T1085] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.208873][ T1085] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.208894][ T1085] usb 2-1: config 0 interface 0 has no altsetting 0 [ 281.208926][ T1085] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 281.208946][ T1085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.279242][ T1085] usb 2-1: config 0 descriptor?? [ 281.499032][ T9] hid_parser_main: 2 callbacks suppressed [ 281.499057][ T9] lenovo 0003:17EF:6062.0021: unknown main item tag 0x1 [ 281.560991][ T9] lenovo 0003:17EF:6062.0021: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 281.681371][ T6031] usb 5-1: USB disconnect, device number 16 [ 281.732168][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732204][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732230][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732255][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732280][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732315][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732341][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732365][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.732390][ T1085] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 281.812847][ T1085] apple 0003:05AC:0247.0022: unexpected long global item [ 281.813708][ T1085] apple 0003:05AC:0247.0022: parse failed [ 281.813800][ T1085] apple 0003:05AC:0247.0022: probe with driver apple failed with error -22 [ 281.814393][ T5943] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 281.980901][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 281.981265][ T9] usb 2-1: USB disconnect, device number 18 [ 282.006284][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.006314][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.006339][ T5943] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 282.006350][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.050044][T10234] fido_id[10234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 282.105769][ T5943] usb 7-1: config 0 descriptor?? [ 282.675317][ T5943] hid-picolcd 0003:04D8:F002.0023: No report with id 0xf3 found [ 282.675341][ T5943] hid-picolcd 0003:04D8:F002.0023: No report with id 0xf4 found [ 282.844858][ T44] usb 7-1: USB disconnect, device number 8 [ 283.154296][T10257] sd 0:0:1:0: device reset [ 283.245605][ T6031] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.394180][ T6031] usb 4-1: Using ep0 maxpacket: 8 [ 283.399979][ T6031] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 283.400006][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.400023][ T6031] usb 4-1: Product: syz [ 283.400036][ T6031] usb 4-1: Manufacturer: syz [ 283.400055][ T6031] usb 4-1: SerialNumber: syz [ 283.411388][ T6031] usb 4-1: config 0 descriptor?? [ 283.435890][ T6031] gspca_main: sq930x-2.14.0 probing 2770:930c [ 283.574861][ T992] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 283.644327][ T5853] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 283.728552][ T992] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.728580][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 283.754650][ T992] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.754676][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.754693][ T992] usb 5-1: Product: syz [ 283.754704][ T992] usb 5-1: Manufacturer: syz [ 283.754716][ T992] usb 5-1: SerialNumber: syz [ 283.763390][ T992] usb 5-1: config 0 descriptor?? [ 283.814816][ T992] usb 5-1: selecting invalid altsetting 0 [ 283.816382][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 283.820928][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.820953][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.820984][ T5853] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 283.821050][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.891611][ T5853] usb 2-1: config 0 descriptor?? [ 284.108147][ T992] usb 5-1: USB disconnect, device number 17 [ 284.114269][ T6031] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 284.282024][ T8594] udevd[8594]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.335521][ T6031] gspca_sq930x: Sensor ov9630 not yet treated [ 284.335679][ T6031] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 284.383740][ T6031] usb 4-1: USB disconnect, device number 19 [ 284.412092][ T5853] koneplus 0003:1E7D:2D51.0024: item fetching failed at offset 1/5 [ 284.412900][ T5853] koneplus 0003:1E7D:2D51.0024: parse failed [ 284.412966][ T5853] koneplus 0003:1E7D:2D51.0024: probe with driver koneplus failed with error -22 [ 284.582634][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 284.583393][T10278] nbd: socks must be embedded in a SOCK_ITEM attr [ 284.602294][ T1085] usb 2-1: USB disconnect, device number 19 [ 285.440853][T10305] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1840'. [ 286.334522][ T992] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 286.466847][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 286.466869][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 286.493211][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 286.513560][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.513590][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.513625][ T992] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 286.513645][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.571615][ T992] usb 4-1: config 0 descriptor?? [ 287.038138][ T992] koneplus 0003:1E7D:2D51.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 287.214928][ T992] koneplus 0003:1E7D:2D51.0025: couldn't init struct koneplus_device [ 287.214984][ T992] koneplus 0003:1E7D:2D51.0025: couldn't install mouse [ 287.221182][ T992] koneplus 0003:1E7D:2D51.0025: probe with driver koneplus failed with error -71 [ 287.261167][ T992] usb 4-1: USB disconnect, device number 20 [ 287.392171][T10368] fido_id[10368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 287.424261][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 287.579882][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 287.579911][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.603015][ T9] usb 6-1: config 0 descriptor?? [ 287.623313][T10372] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1871'. [ 287.644635][ T9] cp210x 6-1:0.0: cp210x converter detected [ 288.073735][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 288.262186][ T6031] usb 6-1: USB disconnect, device number 5 [ 288.303545][ T6031] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 288.434763][ T6031] cp210x 6-1:0.0: device disconnected [ 288.546577][T10400] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1884'. [ 288.884641][T10411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.205533][T10422] sctp: [Deprecated]: syz.3.1895 (pid 10422) Use of int in maxseg socket option. [ 289.205533][T10422] Use struct sctp_assoc_value instead [ 289.325858][T10428] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.325914][T10428] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 289.326005][T10428] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.326173][T10428] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 289.326220][T10428] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 289.326264][T10428] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 289.326400][T10428] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.326444][T10428] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 289.326488][T10428] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 289.326574][T10428] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 289.326620][T10428] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 289.326665][T10428] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 289.459995][ T37] audit: type=1326 audit(1758069264.889:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.460045][ T37] audit: type=1326 audit(1758069264.889:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.460098][ T37] audit: type=1326 audit(1758069264.889:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.460142][ T37] audit: type=1326 audit(1758069264.889:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.460251][ T37] audit: type=1326 audit(1758069264.889:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.466944][ T37] audit: type=1326 audit(1758069264.889:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.466993][ T37] audit: type=1326 audit(1758069264.889:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10430 comm="syz.5.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 289.632277][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 289.734290][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 289.895215][T10441] [U] [ 290.251436][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1912'. [ 290.251473][T10456] netlink: 'syz.1.1912': attribute type 5 has an invalid length. [ 290.323319][T10464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1915'. [ 290.487389][ T5943] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 290.638082][ T5943] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 290.638110][ T5943] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 290.638160][ T5943] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 290.638182][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.669187][ T5943] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 290.865799][ T5943] gspca_sn9c2028: read1 error -71 [ 290.866223][ T5943] gspca_sn9c2028: read1 error -71 [ 290.866622][ T5943] gspca_sn9c2028: read1 error -71 [ 290.866710][ T5943] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71 [ 290.886923][ T5943] usb 4-1: USB disconnect, device number 21 [ 290.942414][T10457] syz.6.1911 (10457) used greatest stack depth: 17000 bytes left [ 292.762681][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1942'. [ 292.762703][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1942'. [ 292.762731][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1942'. [ 292.794183][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1942'. [ 294.624209][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 294.779987][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.780036][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 294.780056][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.806342][ T9] usb 5-1: config 0 descriptor?? [ 295.209002][T10572] tipc: Started in network mode [ 295.209042][T10572] tipc: Node identity e0000002, cluster identity 3 [ 295.209316][T10572] tipc: Enabling of bearer rejected, failed to enable media [ 295.297478][ T9] hid-corsair-void 0003:1B1C:0A0F.0026: item fetching failed at offset 0/3 [ 295.298271][ T9] hid-corsair-void 0003:1B1C:0A0F.0026: parse failed (reason: -22) [ 295.298373][ T9] hid-corsair-void 0003:1B1C:0A0F.0026: probe with driver hid-corsair-void failed with error -22 [ 295.475122][ T992] usb 5-1: USB disconnect, device number 18 [ 295.964964][ T37] audit: type=1400 audit(1758069271.399:189): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10587 comm="syz.6.1973" src=1 dest=20000 netif=wpan0 [ 296.655033][T10614] netlink: 'syz.1.1985': attribute type 29 has an invalid length. [ 296.674000][T10614] netlink: 'syz.1.1985': attribute type 29 has an invalid length. [ 297.764175][ T992] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 297.849392][T10653] tipc: Started in network mode [ 297.849419][T10653] tipc: Node identity ac14142e, cluster identity 4711 [ 297.882117][T10653] tipc: Enabling of bearer rejected, failed to enable media [ 297.921755][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 297.930452][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.930483][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.930521][ T992] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 297.930542][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.945173][ T5943] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 297.992977][ T992] usb 5-1: config 0 descriptor?? [ 298.094160][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 298.098059][ T5943] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.098084][ T5943] usb 6-1: config 0 has no interface number 0 [ 298.117673][ T5943] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 298.117703][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.117720][ T5943] usb 6-1: Product: syz [ 298.117785][ T5943] usb 6-1: Manufacturer: syz [ 298.117798][ T5943] usb 6-1: SerialNumber: syz [ 298.229066][ T5943] usb 6-1: config 0 descriptor?? [ 298.296892][ T5943] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 298.296929][ T5943] usb 6-1: selecting invalid altsetting 1 [ 298.298290][ T5943] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 298.373533][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2006'. [ 298.534181][ T5943] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.539855][ T5943] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 298.539977][ T5943] usb 6-1: media controller created [ 298.630491][ T992] glorious 0003:258A:0033.0027: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 298.746477][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.787964][ T1085] usb 5-1: USB disconnect, device number 19 [ 298.981793][ T5943] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 298.981851][ T5943] zl10353_read_register: readreg error (reg=127, ret==-71) [ 298.985403][ T5943] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 299.047376][T10673] fido_id[10673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 299.205164][T10682] netlink: 'syz.6.2017': attribute type 1 has an invalid length. [ 299.205187][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2017'. [ 299.205202][T10682] nbd: illegal input index 65544 [ 299.277531][ T5943] usb 6-1: USB disconnect, device number 6 [ 299.560135][T10695] overlayfs: workdir and upperdir must be separate subtrees [ 300.234235][ T6031] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.304606][ T5853] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 300.384919][ T6031] usb 5-1: Using ep0 maxpacket: 32 [ 300.399479][ T6031] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.399508][ T6031] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 300.399534][ T6031] usb 5-1: config 0 interface 0 has no altsetting 0 [ 300.399567][ T6031] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 300.399587][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.416145][ T6031] usb 5-1: config 0 descriptor?? [ 300.489132][ T5853] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.489164][ T5853] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 300.489247][ T5853] usb 7-1: config 0 interface 0 has no altsetting 0 [ 300.489280][ T5853] usb 7-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 300.489301][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.530855][ T5853] usb 7-1: config 0 descriptor?? [ 300.533716][T10712] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 300.882286][ T6031] hid (null): unknown global tag 0xc [ 300.882307][ T6031] hid (null): global environment stack underflow [ 300.950714][T10733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.950855][T10733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.955406][ T6031] corsair-cpro 0003:1B1C:0C10.0028: unknown global tag 0xc [ 300.955430][ T6031] corsair-cpro 0003:1B1C:0C10.0028: item 0 1 1 12 parsing failed [ 300.956317][ T6031] corsair-cpro 0003:1B1C:0C10.0028: probe with driver corsair-cpro failed with error -22 [ 300.956815][T10733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.956900][T10733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.957185][T10733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.957255][T10733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.957516][T10733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.957588][T10733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.957864][T10733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 300.957933][T10733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 300.970657][ T5853] uclogic 0003:28BD:0074.0029: interface is invalid, ignoring [ 300.974204][ T5896] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 300.974415][ T44] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 301.119060][ T5943] usb 5-1: USB disconnect, device number 20 [ 301.167188][ T44] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 301.167217][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.167235][ T44] usb 2-1: Product: syz [ 301.167248][ T44] usb 2-1: Manufacturer: syz [ 301.167260][ T44] usb 2-1: SerialNumber: syz [ 301.183884][ T44] usb 2-1: config 0 descriptor?? [ 301.217502][ T5896] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.217531][ T5896] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.217562][ T5896] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 301.217582][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.218666][ T5853] usb 7-1: USB disconnect, device number 9 [ 301.310932][ T5896] usb 4-1: config 0 descriptor?? [ 301.318040][ T44] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 301.679008][ T44] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 301.779273][ T5896] wacom 0003:056A:0333.002A: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.3-1/input0 [ 301.918949][ T44] usb 2-1: USB disconnect, device number 20 [ 301.948672][ T5943] usb 4-1: USB disconnect, device number 22 [ 302.083847][T10736] fido_id[10736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 302.405677][ T5943] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 302.565268][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 302.592458][ T5943] usb 6-1: config 12 has an invalid interface number: 212 but max is 0 [ 302.592493][ T5943] usb 6-1: config 12 has no interface number 0 [ 302.614919][ T5943] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 302.614947][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.614964][ T5943] usb 6-1: Product: syz [ 302.614977][ T5943] usb 6-1: Manufacturer: syz [ 302.614988][ T5943] usb 6-1: SerialNumber: syz [ 302.716515][ T5943] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 302.716584][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 302.761183][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.776918][ T5943] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 302.776975][ T5943] usb 6-1: media controller created [ 302.828723][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.862878][ T5943] cxusb: set interface failed [ 302.862897][ T5943] dvb-usb: bulk message failed: -22 (1/0) [ 302.862918][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 302.862935][ T5943] usb 6-1: bluebird_gpio_write failed. [ 302.886911][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 302.886936][ T5943] usb 6-1: bluebird_gpio_write failed. [ 302.934925][T10744] dvb-usb: bulk message failed: -22 (4/0) [ 302.934947][T10744] cxusb: i2c read failed [ 303.180960][ T5943] DVB: Unable to find symbol dib7000p_attach() [ 303.180975][ T5943] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 303.290820][T10768] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 303.414440][ T5943] rc_core: IR keymap rc-dvico-mce not found [ 303.414460][ T5943] Registered IR keymap rc-empty [ 303.416363][ T5943] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 303.454265][ T5943] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input24 [ 303.498523][ T5943] dvb-usb: schedule remote query interval to 100 msecs. [ 303.498546][ T5943] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 303.541674][ T5943] usb 6-1: USB disconnect, device number 7 [ 303.674279][ T6031] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 303.781946][ T5943] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 303.836723][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.836755][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.836791][ T6031] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 303.836812][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.866460][ T6031] usb 4-1: config 0 descriptor?? [ 304.283953][ T6031] playstation 0003:054C:0DF2.002B: unbalanced delimiter at end of report description [ 304.294405][ T6031] playstation 0003:054C:0DF2.002B: Parse failed [ 304.294480][ T6031] playstation 0003:054C:0DF2.002B: probe with driver playstation failed with error -22 [ 304.494974][ T992] usb 4-1: USB disconnect, device number 23 [ 304.498110][T10792] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2068'. [ 304.498131][T10792] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2068'. [ 305.199054][T10809] Bluetooth: MGMT ver 1.23 [ 305.481556][T10822] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2083'. [ 306.323187][T10845] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2093'. [ 306.323211][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 306.671872][T10857] : renamed from bond_slave_0 (while UP) [ 306.986389][T10869] netlink: 'syz.6.2104': attribute type 66 has an invalid length. [ 307.034243][ T5943] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 307.189656][ T5943] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 307.189684][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.189703][ T5943] usb 4-1: Product: syz [ 307.189715][ T5943] usb 4-1: Manufacturer: syz [ 307.189728][ T5943] usb 4-1: SerialNumber: syz [ 307.239287][ T5943] usb 4-1: config 0 descriptor?? [ 307.520235][ T992] usb 4-1: USB disconnect, device number 24 [ 307.756430][ T8709] udevd[8709]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.242037][T10906] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 308.242059][T10906] CUSE: unknown device info "3ܟ,̘" [ 308.242070][T10906] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 308.242070][T10906] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 308.242085][T10906] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|0htvw 7:" [ 308.242097][T10906] CUSE: DEVNAME unspecified [ 308.264345][ T6031] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 308.277485][T10908] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 308.414391][ T6031] usb 5-1: Using ep0 maxpacket: 32 [ 308.420538][ T6031] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.420565][ T6031] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 308.420588][ T6031] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.420618][ T6031] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 308.420639][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.510298][ T6031] usb 5-1: config 0 descriptor?? [ 308.541716][T10911] macsec1: entered promiscuous mode [ 308.844248][ T5896] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 308.978217][ T6031] betop 0003:20BC:5500.002C: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.4-1/input0 [ 308.978259][ T6031] betop 0003:20BC:5500.002C: no inputs found [ 308.996785][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.996815][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.996850][ T5896] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 308.996870][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.078873][ T5896] usb 2-1: config 0 descriptor?? [ 309.178024][ T6031] usb 5-1: USB disconnect, device number 21 [ 309.356813][T10926] fido_id[10926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 309.502816][ T5896] hid_parser_main: 841 callbacks suppressed [ 309.502838][ T5896] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 309.502866][ T5896] isku 0003:1E7D:319C.002D: unknown main item tag 0x0 [ 309.526804][ T5943] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 309.543062][ T5896] isku 0003:1E7D:319C.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 309.699167][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.699198][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.699288][ T5943] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 309.699309][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.758777][ T5896] isku 0003:1E7D:319C.002D: couldn't init struct isku_device [ 309.758830][ T5896] isku 0003:1E7D:319C.002D: couldn't install keyboard [ 309.761871][ T5943] usb 6-1: config 0 descriptor?? [ 309.789014][ T5896] isku 0003:1E7D:319C.002D: probe with driver isku failed with error -71 [ 309.875301][ T5896] usb 2-1: USB disconnect, device number 21 [ 310.188245][ T5943] cmedia_hs100b 0003:0D8C:0014.002E: item fetching failed at offset 5/7 [ 310.189221][ T5943] cmedia_hs100b 0003:0D8C:0014.002E: probe with driver cmedia_hs100b failed with error -22 [ 310.355977][T10935] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2137'. [ 310.391442][ T5943] usb 6-1: USB disconnect, device number 8 [ 311.254160][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 311.406994][ T5943] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 311.426559][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.426591][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.426615][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.426643][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.426683][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.426704][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.505297][ T9] usb 5-1: config 0 descriptor?? [ 311.566695][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 311.568948][ T5943] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 311.568971][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.619248][ T5943] usb 6-1: config 0 descriptor?? [ 311.640697][ T5943] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 311.974758][ T9] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 312.153328][ T9] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 312.168683][ T9] usb 5-1: USB disconnect, device number 22 [ 312.261789][ T5943] gspca_vc032x: reg_w err -71 [ 312.261816][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261826][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261834][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261841][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261850][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261856][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261864][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261871][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261878][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261886][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261893][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261901][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261908][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261916][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261924][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261932][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261939][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261947][ T5943] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.261958][ T5943] gspca_vc032x: Unknown sensor... [ 312.262041][ T5943] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 312.313619][ T5943] usb 6-1: USB disconnect, device number 9 [ 312.462798][T10993] fido_id[10993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 312.524183][ T37] audit: type=1800 audit(1758069287.939:190): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.2167" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 312.794534][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 312.794558][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2169'. [ 312.794583][T11005] netlink: 'syz.3.2169': attribute type 12 has an invalid length. [ 312.794596][T11005] netlink: 'syz.3.2169': attribute type 11 has an invalid length. [ 313.237872][T11018] tipc: Enabling of bearer rejected, failed to enable media [ 313.324190][ T37] audit: type=1326 audit(1758069288.749:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.324243][ T37] audit: type=1326 audit(1758069288.749:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.354299][ T37] audit: type=1326 audit(1758069288.779:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.354351][ T37] audit: type=1326 audit(1758069288.779:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.354393][ T37] audit: type=1326 audit(1758069288.779:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.354440][ T37] audit: type=1326 audit(1758069288.779:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.354480][ T37] audit: type=1326 audit(1758069288.779:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11022 comm="syz.6.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11360beba9 code=0x7ffc0000 [ 313.540824][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 313.874160][ T6031] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 314.024135][ T6031] usb 6-1: Using ep0 maxpacket: 32 [ 314.026693][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.026722][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.026759][ T6031] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 314.026781][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.088130][ T6031] usb 6-1: config 0 descriptor?? [ 314.095035][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'. [ 314.095129][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 314.219598][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 314.768637][ T6031] ft260 0003:0403:6030.0030: failed to retrieve chip version [ 314.769039][ T6031] ft260 0003:0403:6030.0030: probe with driver ft260 failed with error -71 [ 314.820829][ T6031] usb 6-1: USB disconnect, device number 10 [ 315.002435][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 315.002595][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 315.145830][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2203'. [ 315.224217][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 315.278385][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 315.383740][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.383789][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.10 [ 315.383811][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.433176][ T31] usb 5-1: config 0 descriptor?? [ 315.740413][T11087] tipc: Started in network mode [ 315.740442][T11087] tipc: Node identity e0000002, cluster identity 4711 [ 315.740750][T11087] tipc: Enabling of bearer rejected, failed to enable media [ 315.872494][ T31] logitech 0003:046D:C626.0031: ignoring exceeding usage max [ 315.885668][ T31] logitech 0003:046D:C626.0031: unbalanced delimiter at end of report description [ 315.888869][ T31] logitech 0003:046D:C626.0031: parse failed [ 315.888986][ T31] logitech 0003:046D:C626.0031: probe with driver logitech failed with error -22 [ 316.038557][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2213'. [ 316.095754][ T9] usb 5-1: USB disconnect, device number 23 [ 316.264230][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 316.307173][T11104] tipc: Enabling of bearer rejected, failed to enable media [ 316.418033][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.420278][ T31] usb 4-1: config 3 has an invalid interface number: 8 but max is 3 [ 316.420303][ T31] usb 4-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 316.420321][ T31] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 316.420339][ T31] usb 4-1: config 3 has no interface number 0 [ 316.420385][ T31] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 316.420410][ T31] usb 4-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 316.420433][ T31] usb 4-1: config 3 interface 8 has no altsetting 0 [ 316.497742][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 316.497771][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.497789][ T31] usb 4-1: Product: syz [ 316.497800][ T31] usb 4-1: Manufacturer: syz [ 316.497813][ T31] usb 4-1: SerialNumber: syz [ 316.846268][ T31] appledisplay 4-1:3.8: Error while getting initial brightness: -71 [ 316.846406][ C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 316.872381][ T31] appledisplay 4-1:3.8: probe with driver appledisplay failed with error -71 [ 316.887716][ T31] usbhid 4-1:3.8: can't add hid device: -22 [ 316.887823][ T31] usbhid 4-1:3.8: probe with driver usbhid failed with error -22 [ 316.924483][ T31] usb 4-1: USB disconnect, device number 25 [ 317.114310][ T5943] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 317.175831][ T5157] Bluetooth: hci5: command 0x0405 tx timeout [ 317.261552][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.261627][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.264318][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 317.268168][ T5943] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.268198][ T5943] usb 7-1: config 0 interface 0 has no altsetting 0 [ 317.268229][ T5943] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 317.268250][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.283128][ T5943] usb 7-1: config 0 descriptor?? [ 317.936170][ T5853] usb 7-1: USB disconnect, device number 10 [ 318.034144][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 318.061162][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 318.061184][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 318.061208][T11150] netlink: 'syz.4.2240': attribute type 12 has an invalid length. [ 318.184615][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 318.187306][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.187361][ T31] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 318.187382][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.232079][ T31] usb 2-1: config 0 descriptor?? [ 318.247386][ T31] dvb-usb: found a 'TeVii S662' in warm state. [ 318.247437][ T31] dw2102: su3000_power_ctrl: 1, initialized 0 [ 318.247455][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 318.283100][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.293816][ T31] dvbdev: DVB: registering new adapter (TeVii S662) [ 318.293874][ T31] usb 2-1: media controller created [ 318.293901][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 318.293913][ T31] dw2102: i2c transfer failed. [ 318.293931][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 318.293944][ T31] dw2102: i2c transfer failed. [ 318.293960][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 318.293972][ T31] dw2102: i2c transfer failed. [ 318.293988][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 318.294001][ T31] dw2102: i2c transfer failed. [ 318.339928][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 318.339948][ T31] dw2102: i2c transfer failed. [ 318.339965][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 318.339979][ T31] dw2102: i2c transfer failed. [ 318.339988][ T31] dvb-usb: MAC address: 02:02:02:02:02:02 [ 318.429519][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.460225][T11140] dw2102: i2c rd: len=257 is too big! [ 318.460225][T11140] [ 318.583874][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 318.583894][ T31] dw2102: command 0x0e transfer failed. [ 318.583903][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 318.583915][ T31] dw2102: command 0x0e transfer failed. [ 318.884140][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 318.884162][ T31] dw2102: command 0x0e transfer failed. [ 318.884171][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 318.884183][ T31] dw2102: command 0x0e transfer failed. [ 318.884191][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 318.884203][ T31] dw2102: command 0x51 transfer failed. [ 318.884211][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 318.884223][ T31] dw2102: i2c probe for address 0x68 failed. [ 318.884233][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 318.884244][ T31] dw2102: i2c probe for address 0x69 failed. [ 318.884252][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 318.884263][ T31] dw2102: i2c probe for address 0x6a failed. [ 318.884272][ T31] dw2102: probing for demodulator failed. Is the external power switched on? [ 318.884281][ T31] dvb-usb: no frontend was attached by 'TeVii S662' [ 319.171153][T11169] net_ratelimit: 1052 callbacks suppressed [ 319.171174][T11169] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 319.354191][ T31] rc_core: IR keymap rc-tt-1500 not found [ 319.354210][ T31] Registered IR keymap rc-empty [ 319.357549][ T31] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 319.360847][ T31] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input26 [ 319.404671][ T31] dvb-usb: schedule remote query interval to 250 msecs. [ 319.404693][ T31] dw2102: su3000_power_ctrl: 0, initialized 1 [ 319.404705][ T31] dvb-usb: TeVii S662 successfully initialized and connected. [ 319.447186][ T31] usb 2-1: USB disconnect, device number 22 [ 319.643076][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 319.768605][ T31] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 319.980752][ T37] audit: type=1800 audit(1758069295.409:198): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2258" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 320.074166][ T31] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 320.250978][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.251004][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.251059][ T31] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 320.251081][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.299754][ T31] usb 2-1: config 0 descriptor?? [ 320.320000][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 320.320238][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 320.343720][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.353185][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 320.353245][ T31] usb 2-1: media controller created [ 320.369325][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.405322][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 320.405436][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.445984][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 320.474726][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 320.474749][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.655402][ T6031] dvb-usb: bulk message failed: -22 (1/0) [ 320.655449][ T6031] dvb-usb: error while querying for an remote control event. [ 320.755263][T11208] tipc: Started in network mode [ 320.755293][T11208] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 320.756868][T11208] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 320.795676][ T5943] usb 2-1: USB disconnect, device number 23 [ 320.797368][T11208] tipc: Enabled bearer , priority 10 [ 321.019580][ T5943] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 321.877873][ T5896] tipc: Node number set to 1 [ 322.384958][T11263] netdevsim netdevsim3: Direct firmware load for . [ 322.384958][T11263] failed with error -2 [ 322.384985][T11263] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 322.384985][T11263] [ 323.894357][ T44] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 324.049758][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 324.049791][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 324.049833][ T44] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 324.049854][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.112331][ T44] usb 7-1: config 0 descriptor?? [ 324.118124][T11310] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 324.590912][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.590949][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.590973][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.590996][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.591019][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.591043][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.591072][ T44] waltop 0003:172F:0500.0033: unknown main item tag 0x0 [ 324.658387][ T44] waltop 0003:172F:0500.0033: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.6-1/input0 [ 324.791923][T11335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.810116][ T5853] usb 7-1: USB disconnect, device number 11 [ 324.893620][T11336] fido_id[11336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 325.734786][ T5943] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 325.884214][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 325.893362][ T5943] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 325.893390][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.893408][ T5943] usb 4-1: Product: syz [ 325.893420][ T5943] usb 4-1: Manufacturer: syz [ 325.893431][ T5943] usb 4-1: SerialNumber: syz [ 325.946297][ T5943] usb 4-1: config 0 descriptor?? [ 325.973149][ T5943] gspca_main: sq905-2.14.0 probing 2770:9120 [ 326.503045][T11379] netlink: 'syz.1.2343': attribute type 6 has an invalid length. [ 326.574778][ T5943] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 326.574869][ T5943] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 326.634619][ T5943] usb 4-1: USB disconnect, device number 26 [ 327.825740][T11421] futex_wake_op: syz.5.2364 tries to shift op by -1; fix this program [ 327.897116][T11424] xt_l2tp: missing protocol rule (udp|l2tpip) [ 328.114657][T11430] netlink: 'syz.5.2368': attribute type 1 has an invalid length. [ 328.114681][T11430] netlink: 'syz.5.2368': attribute type 2 has an invalid length. [ 328.115455][T11430] netlink: 'syz.5.2368': attribute type 1 has an invalid length. [ 328.115471][T11430] netlink: 'syz.5.2368': attribute type 2 has an invalid length. [ 328.224214][ T5896] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 328.382308][ T5896] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 328.382334][ T5896] usb 2-1: config 0 has no interface number 0 [ 328.382366][ T5896] usb 2-1: config 0 interface 128 has no altsetting 0 [ 328.408290][ T5896] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 328.408319][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.408338][ T5896] usb 2-1: Product: syz [ 328.408350][ T5896] usb 2-1: Manufacturer: syz [ 328.408363][ T5896] usb 2-1: SerialNumber: syz [ 328.413941][ T5896] usb 2-1: config 0 descriptor?? [ 328.482619][ T5896] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 328.482708][ T5896] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 328.483232][ T5896] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 328.500246][T11438] openvswitch: netlink: IPv6 tunnel dst address is zero [ 328.613825][T11440] netlink: 'syz.6.2374': attribute type 21 has an invalid length. [ 328.613847][T11440] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2374'. [ 328.613924][T11440] netlink: 'syz.6.2374': attribute type 4 has an invalid length. [ 328.613936][T11440] netlink: 'syz.6.2374': attribute type 5 has an invalid length. [ 328.613948][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2374'. [ 328.787145][ T44] usb 2-1: USB disconnect, device number 24 [ 330.101780][T11490] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 330.101842][T11490] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 330.101933][T11490] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.102062][T11490] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 330.102109][T11490] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 330.102152][T11490] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 330.102196][T11490] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 330.102276][T11490] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.102322][T11490] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 330.102365][T11490] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 330.324697][T11493] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2399'. [ 330.749325][T11511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2409'. [ 332.721843][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2439'. [ 333.444723][T11577] tipc: Enabling of bearer rejected, failed to enable media [ 334.582183][T11619] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.655295][T11619] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.666380][T11676] mkiss: ax0: crc mode is auto. [ 336.999238][T11687] tracefs: Bad value for 'gid' [ 336.999256][T11687] tracefs: Bad value for 'gid' [ 337.909744][T11711] bridge_slave_0: left allmulticast mode [ 337.911872][T11711] bridge_slave_0: left promiscuous mode [ 337.915749][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.003179][T11711] bridge_slave_1: left allmulticast mode [ 338.003211][T11711] bridge_slave_1: left promiscuous mode [ 338.003453][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.167636][T11711] bond0: (slave bond_slave_0): Releasing backup interface [ 338.279648][T11711] bond0: (slave bond_slave_1): Releasing backup interface [ 338.453121][T11711] team0: Port device team_slave_0 removed [ 338.466962][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 338.521695][T11711] team0: Port device team_slave_1 removed [ 338.523974][T11711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.525467][T11711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.570442][T11711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.570474][T11711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.674425][ T5896] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 338.718202][ T5853] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.825865][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 338.828210][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.828238][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.828268][ T5896] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 338.828289][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.879928][ T5896] usb 5-1: config 0 descriptor?? [ 339.054375][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.174247][ T44] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 339.284517][ T5943] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 339.319673][ T5896] waltop 0003:172F:0034.0034: item fetching failed at offset 0/2 [ 339.320548][ T5896] waltop 0003:172F:0034.0034: probe with driver waltop failed with error -22 [ 339.334537][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 339.347553][ T44] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.347577][ T44] usb 6-1: config 0 has no interface number 0 [ 339.348770][T11749] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 339.357143][ T44] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.357169][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.357188][ T44] usb 6-1: Product: syz [ 339.357200][ T44] usb 6-1: Manufacturer: syz [ 339.357212][ T44] usb 6-1: SerialNumber: syz [ 339.367407][ T44] usb 6-1: config 0 descriptor?? [ 339.378973][ T44] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 339.507514][ T5943] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 339.507564][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 339.507603][ T5943] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 339.507625][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.566440][ T5943] usb 2-1: config 0 descriptor?? [ 339.586952][ T31] usb 5-1: USB disconnect, device number 24 [ 339.767160][ T44] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 339.863729][ T44] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 339.876061][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 340.048838][ T5943] kye 0003:0458:0138.0035: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 340.112279][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 340.124276][ T5943] usb 6-1: USB disconnect, device number 11 [ 340.205494][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 340.211847][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.212799][ T5943] quatech2 6-1:0.51: device disconnected [ 340.298448][ T44] usb 2-1: USB disconnect, device number 25 [ 340.594347][ T5853] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 340.748128][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.748158][ T5853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.748193][ T5853] usb 7-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 340.748214][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.764931][ T5853] usb 7-1: config 0 descriptor?? [ 341.264297][ T5853] ntrig 0003:1B96:0012.0036: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.6-1/input0 [ 341.466687][ T5853] usb 7-1: USB disconnect, device number 12 [ 341.657411][T11784] fido_id[11784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 342.184217][ T5943] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 342.338675][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.338700][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.340459][ T5943] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 342.340485][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 342.340503][ T5943] usb 2-1: SerialNumber: syz [ 342.663668][ T5943] usb 2-1: 0:2 : does not exist [ 342.720211][ T5943] usb 2-1: USB disconnect, device number 26 [ 342.998206][T10274] udevd[10274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.263614][T11839] netdevsim netdevsim5: Direct firmware load for . [ 343.263614][T11839] failed with error -2 [ 343.263641][T11839] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 343.263641][T11839] [ 343.364287][ T5853] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 343.514225][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 343.516880][ T5853] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.516910][ T5853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 343.516942][ T5853] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 343.516963][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.548707][ T5853] usb 4-1: config 0 descriptor?? [ 343.554288][ T44] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 343.707899][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.707926][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.709787][ T44] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.709929][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.709948][ T44] usb 5-1: SerialNumber: syz [ 344.074949][ T5853] microsoft 0003:045E:009D.0037: unknown main item tag 0x0 [ 344.074987][ T5853] microsoft 0003:045E:009D.0037: unknown main item tag 0x0 [ 344.075069][ T5853] microsoft 0003:045E:009D.0037: unknown main item tag 0x0 [ 344.075093][ T5853] microsoft 0003:045E:009D.0037: unknown main item tag 0x0 [ 344.075117][ T5853] microsoft 0003:045E:009D.0037: unknown main item tag 0x0 [ 344.256907][ T5853] microsoft 0003:045E:009D.0037: hidraw0: USB HID v0.02 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 [ 344.256938][ T5853] microsoft 0003:045E:009D.0037: no inputs found [ 344.256951][ T5853] microsoft 0003:045E:009D.0037: could not initialize ff, continuing anyway [ 344.259037][ T44] usb 5-1: 0:2 : does not exist [ 344.334716][ T5853] usb 4-1: USB disconnect, device number 27 [ 344.371927][ T44] usb 5-1: USB disconnect, device number 25 [ 344.680893][T10274] udevd[10274]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.708963][T11868] fido_id[11868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 344.764648][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2580'. [ 344.764722][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2580'. [ 344.764752][T11871] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2580'. [ 344.774497][ T5943] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 344.955892][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 344.968211][ T5943] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 344.968236][ T5943] usb 2-1: config 1 has no interface number 0 [ 344.968284][ T5943] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.968306][ T5943] usb 2-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 344.968328][ T5943] usb 2-1: config 1 interface 214 has no altsetting 0 [ 344.983612][ T5943] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 344.983640][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.983658][ T5943] usb 2-1: Product: syz [ 344.983671][ T5943] usb 2-1: Manufacturer: syz [ 344.983684][ T5943] usb 2-1: SerialNumber: syz [ 345.067115][T11866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.067238][T11866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 345.069863][ T5943] ums-alauda 2-1:1.214: USB Mass Storage device detected [ 345.114582][ T5943] scsi host1: usb-storage 2-1:1.214 [ 345.138917][T11882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2584'. [ 345.311090][ T6031] usb 2-1: USB disconnect, device number 27 [ 345.344154][ T44] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 345.510819][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 345.513495][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.513523][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.513559][ T44] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 345.513580][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.548404][ T44] usb 5-1: config 0 descriptor?? [ 345.819341][T11897] tmpfs: Cannot retroactively limit inodes [ 346.031613][ T44] hid_mf 0003:0079:1801.0038: item fetching failed at offset 0/2 [ 346.032402][ T44] hid_mf 0003:0079:1801.0038: HID parse failed. [ 346.032473][ T44] hid_mf 0003:0079:1801.0038: probe with driver hid_mf failed with error -22 [ 346.170888][ T5896] usb 5-1: USB disconnect, device number 26 [ 346.434199][ T5853] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 346.591539][ T5853] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 346.591568][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.591585][ T5853] usb 2-1: Product: syz [ 346.591598][ T5853] usb 2-1: Manufacturer: syz [ 346.591611][ T5853] usb 2-1: SerialNumber: syz [ 346.594538][ T5943] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 346.599819][ T5853] usb 2-1: config 0 descriptor?? [ 346.616171][ T5853] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 346.616193][ T5853] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 346.616254][ T5853] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 346.744176][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 346.746863][ T5943] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 346.751826][ T5943] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 346.751853][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.751882][ T5943] usb 4-1: Product: syz [ 346.751895][ T5943] usb 4-1: Manufacturer: syz [ 346.751907][ T5943] usb 4-1: SerialNumber: syz [ 346.806719][ T5943] usb 4-1: config 0 descriptor?? [ 346.822697][ T44] usb 2-1: USB disconnect, device number 28 [ 346.862137][ T5943] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 346.862208][ T5943] usb 4-1: setting power ON [ 346.862227][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 346.891947][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.892750][ T5943] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 346.892804][ T5943] usb 4-1: media controller created [ 346.954692][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.010264][ T5943] usb 4-1: selecting invalid altsetting 6 [ 347.010289][ T5943] usb 4-1: digital interface selection failed (-22) [ 347.010303][ T5943] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 347.012581][ T5943] usb 4-1: setting power OFF [ 347.012723][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 347.012740][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 347.012750][ T5943] (NULL device *): no alternate interface [ 347.065957][T11913] dvb-usb: bulk message failed: -22 (3/0) [ 347.172780][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 347.192541][ T5943] usb 4-1: USB disconnect, device number 28 [ 347.336470][T11931] max out of range [ 347.434207][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 347.589385][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.589417][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.589438][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.589480][ T44] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 347.589501][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.607707][ T44] usb 5-1: config 0 descriptor?? [ 347.974345][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.053078][ T44] dragonrise 0003:0079:0011.0039: invalid report_count -326368751 [ 348.053102][ T44] dragonrise 0003:0079:0011.0039: item 0 4 1 9 parsing failed [ 348.053928][ T44] dragonrise 0003:0079:0011.0039: parse failed [ 348.053990][ T44] dragonrise 0003:0079:0011.0039: probe with driver dragonrise failed with error -22 [ 348.310604][ T44] usb 5-1: USB disconnect, device number 27 [ 348.612807][T11966] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 348.612865][T11966] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 348.612952][T11966] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 348.613041][T11966] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 348.613092][T11966] comedi comedi3: 8255: I/O port conflict (0x5c952397,4) [ 348.613140][T11966] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 348.613186][T11966] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 348.613234][T11966] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 349.493961][T11993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.497387][T11993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.511243][T11993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.511336][T11993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.511642][T11993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.511722][T11993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.512014][T11993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.512090][T11993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.512372][T11993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.512447][T11993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.824210][ T5943] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 349.864943][ T37] audit: type=1400 audit(1758069325.299:199): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12001 comm="syz.1.2642" src=1 dest=20000 netif=wpan0 [ 350.010779][ T5943] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 350.010809][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.010826][ T5943] usb 5-1: Product: syz [ 350.010839][ T5943] usb 5-1: Manufacturer: syz [ 350.010851][ T5943] usb 5-1: SerialNumber: syz [ 350.037097][ T5943] usb 5-1: config 0 descriptor?? [ 350.095246][ T5943] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 350.232299][T12010] netlink: 716 bytes leftover after parsing attributes in process `syz.3.2648'. [ 350.707376][ T5943] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 350.707476][ T5943] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 350.737703][ T5943] usb 5-1: USB disconnect, device number 28 [ 350.980749][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2657'. [ 350.980775][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2657'. [ 351.394203][T12043] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 351.727948][T12061] netlink: 'syz.1.2666': attribute type 322 has an invalid length. [ 351.991773][T12064] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.2668'. [ 354.392003][T12125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.392039][T12125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.479698][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2703'. [ 354.983036][T12155] delete_channel: no stack [ 354.983457][T12154] delete_channel: no stack [ 355.082357][T12125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.082390][T12125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.548940][T12125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.548978][T12125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.791683][T12175] net_ratelimit: 1052 callbacks suppressed [ 355.791704][T12175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.791791][T12175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.792170][T12175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.792247][T12175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.792532][T12175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.792601][T12175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.792965][T12175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.793048][T12175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.793318][T12175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.793389][T12175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 356.345312][T12125] bond0: (slave netdevsim0): Releasing backup interface [ 356.463562][T12125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.463598][T12125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.569701][T12190] pimreg3: entered allmulticast mode [ 357.040339][ T1391] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.040370][ T1391] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.106504][ T67] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.106535][ T67] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.216179][T12212] netlink: 'syz.6.2740': attribute type 2 has an invalid length. [ 357.380682][ T1498] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.380713][ T1498] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.389179][ T1498] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.389210][ T1498] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.884607][T12236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2752'. [ 358.455351][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 358.635776][T12261] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 358.635802][T12261] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 358.772657][T12265] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 358.772657][T12265] [ 358.861307][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2767'. [ 359.844198][ T5896] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 359.997335][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.997366][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.997402][ T5896] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 359.997423][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.002763][ T5896] usb 2-1: config 0 descriptor?? [ 360.014238][ T5853] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 360.172192][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 360.172223][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.172264][ T5853] usb 5-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 360.172284][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.211643][ T5853] usb 5-1: config 0 descriptor?? [ 360.461158][ T5896] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 360.461194][ T5896] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 360.461228][ T5896] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 360.461253][ T5896] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 360.461278][ T5896] sunplus 0003:04FC:05D8.003A: unknown main item tag 0x0 [ 360.536749][ T5896] sunplus 0003:04FC:05D8.003A: hidraw0: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 360.594240][ T6031] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 360.737622][ T5853] wacom 0003:056A:0217.003B: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 360.739740][ T1085] usb 2-1: USB disconnect, device number 29 [ 360.754271][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 360.770848][ T6031] usb 6-1: unable to get BOS descriptor or descriptor too short [ 360.774279][ T6031] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 360.774307][ T6031] usb 6-1: config 8 interface 0 has no altsetting 0 [ 360.804522][ T6031] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 360.804552][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.804570][ T6031] usb 6-1: Product: syz [ 360.804583][ T6031] usb 6-1: Manufacturer: syz [ 360.804595][ T6031] usb 6-1: SerialNumber: syz [ 360.904406][ T5853] usb 5-1: USB disconnect, device number 29 [ 360.938309][T12313] fido_id[12313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 361.035364][T12306] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 361.279063][ T6031] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.279121][ T6031] usb 6-1: selecting invalid altsetting 0 [ 361.434554][ T6031] usb 6-1: USB disconnect, device number 12 [ 361.729024][ T8862] udevd[8862]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.434250][ T5943] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 362.599342][ T5943] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 362.599402][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.601727][ T5943] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 362.601751][ T5943] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 362.601769][ T5943] usb 5-1: Manufacturer: syz [ 362.659292][ T5943] usb 5-1: config 0 descriptor?? [ 362.814337][ T5943] rc_core: IR keymap rc-hauppauge not found [ 362.814359][ T5943] Registered IR keymap rc-empty [ 362.821042][ T5943] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 362.848232][ T5943] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input32 [ 363.102449][ C0] igorplugusb 5-1:0.0: receive overflow, at least 9 lost [ 363.414789][ T6031] usb 5-1: USB disconnect, device number 30 [ 363.943589][ T1467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.152361][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2824'. [ 364.661495][ T1467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.777445][T12400] dummy0: entered promiscuous mode [ 364.777608][T12400] macsec1: entered promiscuous mode [ 364.797482][T12406] program syz.1.2833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.853372][T12400] dummy0: left promiscuous mode [ 365.112543][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.137756][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.156674][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.158287][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.159123][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.294636][T12418] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2838'. [ 365.499416][ T1467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.088552][ T1467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.983586][T12467] random: crng reseeded on system resumption [ 367.140867][ T1467] bridge_slave_1: left allmulticast mode [ 367.140900][ T1467] bridge_slave_1: left promiscuous mode [ 367.141157][ T1467] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.174150][ T5843] Bluetooth: hci0: command tx timeout [ 367.223737][ T1467] bridge_slave_0: left allmulticast mode [ 367.223767][ T1467] bridge_slave_0: left promiscuous mode [ 367.224205][ T1467] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.577139][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2869'. [ 367.774765][ T5943] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 367.924275][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 367.928133][ T5943] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.928158][ T5943] usb 7-1: config 0 has no interface number 0 [ 367.932154][ T5943] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 367.932181][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.932199][ T5943] usb 7-1: Product: syz [ 367.932211][ T5943] usb 7-1: Manufacturer: syz [ 367.932224][ T5943] usb 7-1: SerialNumber: syz [ 367.971830][ T5943] usb 7-1: config 0 descriptor?? [ 367.993212][ T5943] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 368.638251][ T5943] gspca_spca1528: reg_w err -71 [ 368.654414][ T5943] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 368.674559][ T5943] usb 7-1: USB disconnect, device number 13 [ 369.254195][ T5843] Bluetooth: hci0: command tx timeout [ 369.794197][ T31] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 369.935506][ T1467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.954969][ T31] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.954996][ T31] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.955014][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 369.955042][ T31] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 369.955062][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.963527][ T31] usb 6-1: config 0 descriptor?? [ 370.037824][ T1467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.090850][ T1467] bond0 (unregistering): Released all slaves [ 370.207089][T12503] bridge_slave_1: entered promiscuous mode [ 370.429168][ T1467] tipc: Left network mode [ 370.462075][ T31] holtek 0003:1241:5015.003C: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 370.462108][ T31] holtek 0003:1241:5015.003C: no inputs found [ 370.655236][ T9] usb 6-1: USB disconnect, device number 13 [ 370.983659][T12524] fido_id[12524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 371.286985][ T37] audit: type=1800 audit(1758069346.719:200): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2890" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 371.334615][ T5843] Bluetooth: hci0: command tx timeout [ 371.589463][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2894'. [ 371.589488][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2894'. [ 371.756525][T12412] chnl_net:caif_netlink_parms(): no params data found [ 372.746604][T12584] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 373.288762][ T1467] hsr_slave_0: left promiscuous mode [ 373.384252][ T1467] hsr_slave_1: left promiscuous mode [ 373.385180][ T1467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.385207][ T1467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.414206][ T5843] Bluetooth: hci0: command tx timeout [ 373.458851][ T1467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.458883][ T1467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.700978][ T1467] veth1_macvtap: left promiscuous mode [ 373.701104][ T1467] veth0_macvtap: left promiscuous mode [ 373.701391][ T1467] veth1_vlan: left promiscuous mode [ 373.701619][ T1467] veth0_vlan: left promiscuous mode [ 373.725913][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2914'. [ 374.604158][ T1085] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 374.672520][T12627] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 374.697857][T12627] block nbd6: Attempted send on invalid socket [ 374.697965][T12627] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.755581][ T1085] usb 5-1: Using ep0 maxpacket: 8 [ 374.762120][ T1085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.762179][ T1085] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.793643][ T1085] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.793669][ T1085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 374.793686][ T1085] usb 5-1: SerialNumber: syz [ 374.825789][ T1085] cdc_acm 5-1:1.0: skipping garbage [ 374.825810][ T1085] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 374.825827][ T1085] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 374.825860][ T1085] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 374.987409][T12632] random: crng reseeded on system resumption [ 375.069797][ T5943] usb 5-1: USB disconnect, device number 31 [ 375.098847][T12632] Restarting kernel threads ... [ 375.112853][T12632] Done restarting kernel threads. [ 375.911732][ T37] audit: type=1326 audit(1758069351.329:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 375.911793][ T37] audit: type=1326 audit(1758069351.339:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 375.912070][ T37] audit: type=1326 audit(1758069351.339:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 375.946776][ T37] audit: type=1326 audit(1758069351.379:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5567a8ebe3 code=0x7ffc0000 [ 375.946826][ T37] audit: type=1326 audit(1758069351.379:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5567a8ebe3 code=0x7ffc0000 [ 375.946865][ T37] audit: type=1326 audit(1758069351.379:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 375.946902][ T37] audit: type=1326 audit(1758069351.379:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 375.983906][ T37] audit: type=1326 audit(1758069351.409:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 375.996523][ T37] audit: type=1326 audit(1758069351.429:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12654 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5567a8eba9 code=0x7ffc0000 [ 376.381753][T12668] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 376.404575][T12668] block nbd1: Attempted send on invalid socket [ 376.404602][T12668] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.014701][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2948'. [ 377.382600][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 377.494344][ T5843] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 377.748322][T12702] random: crng reseeded on system resumption [ 377.870434][T12705] syz.1.2961 uses old SIOCAX25GETINFO [ 378.473433][ T37] audit: type=1400 audit(1758069353.899:210): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12722 comm="syz.1.2969" src=1 dest=20000 netif=wpan0 [ 378.682719][T12727] netlink: 'syz.1.2971': attribute type 1 has an invalid length. [ 378.713855][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.713938][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.329312][ T1467] team0 (unregistering): Port device team_slave_1 removed [ 379.587323][ T1467] team0 (unregistering): Port device team_slave_0 removed [ 381.513941][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 381.517133][ T5843] Bluetooth: hci2: Injecting HCI hardware error event [ 381.522293][ T5157] Bluetooth: hci2: hardware error 0x00 [ 382.418934][T12412] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.419143][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.419375][T12412] bridge_slave_0: entered allmulticast mode [ 382.448349][T12412] bridge_slave_0: entered promiscuous mode [ 382.496818][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.496957][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.497189][T12412] bridge_slave_1: entered allmulticast mode [ 382.499899][T12412] bridge_slave_1: entered promiscuous mode [ 382.554495][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 382.716885][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.716915][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.716951][ T5896] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 382.716972][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.734472][ T5896] usb 6-1: config 0 descriptor?? [ 383.000762][T12412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.053941][T12412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.203149][ T5896] kone 0003:1E7D:2CED.003D: unknown main item tag 0x4 [ 383.238540][ T5896] kone 0003:1E7D:2CED.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 383.452760][ T1085] usb 6-1: USB disconnect, device number 14 [ 383.595507][ T37] audit: type=1400 audit(1758069359.029:211): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12773 comm="syz.1.2992" src=1 dest=20000 netif=wpan0 [ 383.662854][ T5157] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 383.832475][T12412] team0: Port device team_slave_0 added [ 383.922885][T12412] team0: Port device team_slave_1 added [ 383.997361][T12781] fido_id[12781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 384.017934][ T1467] IPVS: stop unused estimator thread 0... [ 384.516038][T12803] netlink: 'syz.1.3001': attribute type 3 has an invalid length. [ 384.516059][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 384.518461][T12412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.518476][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.518500][T12412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.569071][T12412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.569087][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.569112][T12412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.286019][T12412] hsr_slave_0: entered promiscuous mode [ 385.287498][T12412] hsr_slave_1: entered promiscuous mode [ 385.289682][T12412] debugfs: 'hsr0' already exists in 'hsr' [ 385.289707][T12412] Cannot create hsr debugfs directory [ 385.304181][ T1085] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 385.473501][ T1085] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.473557][ T1085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 385.473583][ T1085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 385.473606][ T1085] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 385.482368][ T1085] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 385.482397][ T1085] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 385.482415][ T1085] usb 5-1: Manufacturer: syz [ 385.569109][ T1085] usb 5-1: config 0 descriptor?? [ 385.814293][ T5896] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 385.968769][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 385.971189][ T5896] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 385.971214][ T5896] usb 7-1: config 0 has no interface number 0 [ 385.977360][ T5896] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 385.977387][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.977404][ T5896] usb 7-1: Product: syz [ 385.977416][ T5896] usb 7-1: Manufacturer: syz [ 385.977429][ T5896] usb 7-1: SerialNumber: syz [ 386.006311][ T5896] usb 7-1: config 0 descriptor?? [ 386.023251][ T5896] smsc95xx v2.0.0 [ 386.023267][ T5896] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 386.023532][ T5896] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 386.094145][ T1085] rc_core: IR keymap rc-hauppauge not found [ 386.094164][ T1085] Registered IR keymap rc-empty [ 386.096873][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.116778][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.121268][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 386.121298][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 386.160290][ T1085] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 386.163606][ T1085] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 386.295604][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.315835][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.334744][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.354501][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.363280][ T9] usb 7-1: USB disconnect, device number 14 [ 386.377427][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.394506][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.414583][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.438964][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.454515][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.458577][T12840] net_ratelimit: 1052 callbacks suppressed [ 386.458594][T12840] openvswitch: netlink: Duplicate or invalid key (type 0). [ 386.458622][T12840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.474478][ T1085] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 386.497286][ T1085] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 386.497310][ T1085] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 386.526778][ T1085] usb 5-1: USB disconnect, device number 32 [ 387.382380][T12412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 388.679057][ T1085] kernel write not supported for file /sg0 (pid: 1085 comm: kworker/1:2) [ 389.207847][ T37] audit: type=1326 audit(1758069364.639:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12886 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 389.208111][ T37] audit: type=1326 audit(1758069364.639:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12886 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 389.266132][ T37] audit: type=1326 audit(1758069364.699:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12886 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 389.266180][ T37] audit: type=1326 audit(1758069364.699:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12886 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 389.266215][ T37] audit: type=1326 audit(1758069364.699:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12886 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ddfeba9 code=0x7ffc0000 [ 396.914634][T12412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.094137][ T5852] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 398.254207][ T5852] usb 7-1: Using ep0 maxpacket: 16 [ 398.261719][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.261749][ T5852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.261770][ T5852] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 398.261818][ T5852] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 398.261839][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.348806][ T5852] usb 7-1: config 0 descriptor?? [ 398.877844][ T5852] microsoft 0003:045E:07DA.003E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 398.877877][ T5852] microsoft 0003:045E:07DA.003E: no inputs found [ 398.877889][ T5852] microsoft 0003:045E:07DA.003E: could not initialize ff, continuing anyway [ 399.059033][ T5852] usb 7-1: USB disconnect, device number 15 [ 399.133684][T12918] fido_id[12918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 400.444009][ C0] sched: DL replenish lagged too much [ 415.109670][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.140947][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.142955][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.152334][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.153247][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.333935][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3057'. [ 415.617079][T12960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3058'. [ 417.254289][ T5157] Bluetooth: hci4: command tx timeout [ 418.431757][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.458500][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.460110][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.462204][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.463501][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 419.334265][ T5157] Bluetooth: hci4: command tx timeout [ 420.624913][ T5157] Bluetooth: hci6: command tx timeout [ 421.414246][ T5157] Bluetooth: hci4: command tx timeout [ 422.694240][ T5157] Bluetooth: hci6: command tx timeout [ 423.494327][ T5157] Bluetooth: hci4: command tx timeout [ 424.774509][ T5157] Bluetooth: hci6: command tx timeout [ 424.829563][ T5157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.851723][ T5157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.853182][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.870907][ T5157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.872103][ T5157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 426.854864][ T5157] Bluetooth: hci6: command tx timeout [ 427.014280][ T5157] Bluetooth: hci7: command tx timeout [ 428.466225][T12412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 429.094378][ T5157] Bluetooth: hci7: command tx timeout [ 431.174590][ T5157] Bluetooth: hci7: command tx timeout [ 431.454246][ T6031] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 431.610081][ T6031] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 431.610111][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.610130][ T6031] usb 6-1: Product: syz [ 431.610142][ T6031] usb 6-1: Manufacturer: syz [ 431.610154][ T6031] usb 6-1: SerialNumber: syz [ 432.382774][ T6031] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 432.382834][ T6031] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 432.387870][ T6031] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.257554][ T5157] Bluetooth: hci7: command tx timeout [ 439.934295][ T6031] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 440.144813][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.144889][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.208584][ T6031] usb 6-1: USB disconnect, device number 15 [ 444.840282][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 444.863848][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 444.872883][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 444.886066][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 444.887023][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 451.276192][ T5157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 451.298016][ T5157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 451.299585][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 451.300912][ T5157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 451.301834][ T5157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 452.616074][ T5157] Bluetooth: hci8: command tx timeout [ 453.414160][ T5157] Bluetooth: hci9: command tx timeout [ 454.704292][ T5157] Bluetooth: hci8: command tx timeout [ 455.494953][ T5157] Bluetooth: hci9: command tx timeout [ 456.782203][ T5157] Bluetooth: hci8: command tx timeout [ 457.574167][ T5157] Bluetooth: hci9: command tx timeout [ 457.783175][T13013] chnl_net:caif_netlink_parms(): no params data found [ 457.828074][T13009] chnl_net:caif_netlink_parms(): no params data found [ 457.861473][T12954] chnl_net:caif_netlink_parms(): no params data found [ 458.025969][T12985] chnl_net:caif_netlink_parms(): no params data found [ 458.854253][ T5157] Bluetooth: hci8: command tx timeout [ 459.654056][ T5157] Bluetooth: hci9: command tx timeout [ 460.618667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.735540][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.398135][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.429836][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.441458][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.443468][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.467132][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.530446][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.561687][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.592159][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.602137][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.611750][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.875114][ T5843] Bluetooth: hci0: command tx timeout [ 485.024138][ T5839] Bluetooth: hci2: command tx timeout [ 485.024830][ T5839] Bluetooth: hci0: command tx timeout [ 485.452350][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 485.485560][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 485.489782][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 485.490938][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 485.491761][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 487.094223][ T5157] Bluetooth: hci0: command tx timeout [ 487.094263][ T5157] Bluetooth: hci2: command tx timeout [ 487.575871][ T5839] Bluetooth: hci10: command tx timeout [ 489.175359][ T5839] Bluetooth: hci2: command tx timeout [ 489.175391][ T5839] Bluetooth: hci0: command tx timeout [ 489.654210][ T5157] Bluetooth: hci10: command tx timeout [ 491.254201][ T5157] Bluetooth: hci2: command tx timeout [ 491.734453][ T5157] Bluetooth: hci10: command tx timeout [ 493.311991][T12968] chnl_net:caif_netlink_parms(): no params data found [ 493.814247][ T5157] Bluetooth: hci10: command tx timeout [ 501.595020][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.595098][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.353310][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 505.375985][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 505.377821][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 505.379399][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 505.380215][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.191301][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 511.212729][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 511.223140][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 511.234798][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 511.235695][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 535.016327][T13088] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 535.036259][T13088] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 535.040437][T13088] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 535.059493][T13088] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 535.060416][T13088] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 538.502165][ T5839] Bluetooth: hci5: command tx timeout [ 539.414743][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 539.438210][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 539.440171][ T5843] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 539.442059][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 539.444605][ T5843] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 540.534507][ T5843] Bluetooth: hci5: command tx timeout [ 540.535048][ T5843] Bluetooth: hci11: command tx timeout [ 542.614216][ T5157] Bluetooth: hci11: command tx timeout [ 542.614249][ T5157] Bluetooth: hci5: command tx timeout [ 544.696375][ T5843] Bluetooth: hci5: command tx timeout [ 544.696412][ T5843] Bluetooth: hci11: command tx timeout [ 546.521425][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.546767][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.548168][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.602927][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.620700][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.774272][ T5843] Bluetooth: hci11: command tx timeout [ 552.215276][T13088] Bluetooth: hci12: command tx timeout [ 554.294279][ T5843] Bluetooth: hci4: command tx timeout [ 554.294983][ T5843] Bluetooth: hci13: command tx timeout [ 554.295233][ T5843] Bluetooth: hci12: command tx timeout [ 556.374246][ T5843] Bluetooth: hci12: command tx timeout [ 556.374278][ T5843] Bluetooth: hci13: command tx timeout [ 556.374298][ T5843] Bluetooth: hci4: command tx timeout [ 558.454202][ T5839] Bluetooth: hci13: command tx timeout [ 558.454234][ T5839] Bluetooth: hci12: command tx timeout [ 558.458025][ T5843] Bluetooth: hci4: command tx timeout [ 560.534352][ T5843] Bluetooth: hci4: command tx timeout [ 560.534387][ T5843] Bluetooth: hci13: command tx timeout [ 563.029243][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.029321][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.640898][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 566.666790][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 566.668324][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 566.669659][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 566.671370][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 568.774337][T13088] Bluetooth: hci6: command tx timeout [ 570.854216][T13088] Bluetooth: hci6: command tx timeout [ 571.980293][ T38] INFO: task syz.4.3047:12932 blocked for more than 143 seconds. [ 571.980323][ T38] Not tainted syzkaller #0 [ 571.980334][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.980346][ T38] task:syz.4.3047 state:D stack:26584 pid:12932 tgid:12930 ppid:5847 task_flags:0x400140 flags:0x00004006 [ 571.980400][ T38] Call Trace: [ 571.980407][ T38] [ 571.980421][ T38] __schedule+0x16f3/0x4c20 [ 571.980475][ T38] ? __lock_acquire+0xab9/0xd20 [ 571.980498][ T38] ? __pfx___schedule+0x10/0x10 [ 571.980536][ T38] ? schedule+0x91/0x360 [ 571.980562][ T38] schedule+0x165/0x360 [ 571.980587][ T38] schedule_timeout+0x9a/0x270 [ 571.980609][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 571.980653][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.980676][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.980697][ T38] ? wait_for_completion+0x267/0x5d0 [ 571.980722][ T38] wait_for_completion+0x2bf/0x5d0 [ 571.980758][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 571.980789][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 571.980814][ T38] rcu_barrier+0x463/0x570 [ 571.980844][ T38] netdev_run_todo+0x327/0xea0 [ 571.980865][ T38] ? full_name_hash+0x92/0xe0 [ 571.980886][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 571.980908][ T38] ? dev_ifsioc+0xc19/0xf00 [ 571.980938][ T38] dev_ioctl+0x853/0x1150 [ 571.980965][ T38] sock_ioctl+0x71c/0x790 [ 571.980988][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 571.981011][ T38] ? __fget_files+0x3a6/0x420 [ 571.981032][ T38] ? __fget_files+0x2a/0x420 [ 571.981058][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 571.981078][ T38] ? __pfx_sock_ioctl+0x10/0x10 [ 571.981096][ T38] __se_sys_ioctl+0xfc/0x170 [ 571.981119][ T38] do_sysca[ 571.981119][ T38] do_syscall_64+0xfa/0x3b0 [ 571.981135][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.981158][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.981175][ T38] ? clear_bhb_loop+0x60/0xb0 [ 571.981196][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.981218][ T38] RIP: 0033:0x7f5567a8eba9 [ 571.981238][ T38] RSP: 002b:00007f5565cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.981257][ T38] RAX: ffffffffffffffda RBX: 00007f5567cd6090 RCX: 00007f5567a8eba9 [ 571.981271][ T38] RDX: 0000200000000680 RSI: 00000000000089f2 RDI: 0000000000000003 [ 571.981283][ T38] RBP: 00007f5567b11e19 R08: 0000000000000000 R09: 0000000000000000 [ 571.981294][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.981305][ T38] R13: 00007f5567cd6128 R14: 00007f5567cd6090 R15: 00007ffe77232fe8 [ 571.981337][ T38] [ 571.981367][ T38] [ 571.981367][ T38] Showing all locks held in the system: [ 571.981378][ T38] 6 locks held by rcuc/0/20: [ 571.981390][ T38] 1 lock held by khungtaskd/38: [ 571.981400][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 571.981447][ T38] 3 locks held by kworker/u8:5/87: [ 571.981457][ T38] #0: ffff88814cf8c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 571.981504][ T38] #1: ffffc9000159fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 571.981549][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 571.981602][ T38] 3 locks held by kworker/u8:12/1467: [ 571.981612][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 571.981662][ T38] #1: ffffc9000585fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 571.981705][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 571.981747][ T38] 2 locks held by kworker/u8:13/1478: [ 571.981770][ T38] 1 lock held by dhcpcd/5503: [ 571.981780][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 571.981824][ T38] 2 locks held by getty/5595: [ 571.981834][ T38] #0: ffff88823bf328a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 571.981882][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 571.981927][ T38] 3 locks held by kworker/1:3/5852: [ 571.981936][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 571.981980][ T38] #1: ffffc90004c8fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 571.982022][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 571.982067][ T38] 2 locks held by kworker/0:5/5911: [ 571.982082][ T38] 1 lock held by syz-executor/12412: [ 571.982092][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 571.982134][ T38] 1 lock held by syz.1.3038/12910: [ 571.982144][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 571.982185][ T38] 1 lock held by syz.4.3047/12932: [ 571.982195][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 571.982236][ T38] 1 lock held by syz-executor/12954: [ 571.982247][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 571.982293][ T38] 1 lock held by syz-executor/12968: [ 571.982302][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 571.982347][ T38] 1 lock held by syz-executor/12985: [ 571.982357][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 571.982402][ T38] 1 lock held by syz.6.3069/12991: [ 571.982412][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 571.982457][ T38] 1 lock held by syz.5.3075/13005: [ 571.982467][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 571.982511][ T38] 2 locks held by syz-executor/13009: [ 571.982521][ T38] #0: ffffffff8f1d79e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 571.982571][ T38] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 571.982616][ T38] 2 locks held by syz-executor/13013: [ 571.982626][ T38] #0: ffffffff8f1d79e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 571.982681][ T38] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 571.982725][ T38] 1 lock held by syz-executor/13052: [ 571.982735][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.982777][ T38] 1 lock held by syz-executor/13055: [ 571.982788][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.982827][ T38] 1 lock held by syz-executor/13063: [ 571.982837][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.982878][ T38] 1 lock held by syz-executor/13074: [ 571.982888][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.982929][ T38] 1 lock held by syz-executor/13079: [ 571.982939][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.982980][ T38] 1 lock held by syz-executor/13087: [ 571.982990][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.983031][ T38] 1 lock held by syz-executor/13092: [ 571.983041][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.983083][ T38] 1 lock held by syz-executor/13098: [ 571.983092][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.983133][ T38] 1 lock held by syz-executor/13104: [ 571.983143][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 571.983183][ T38] 1 lock held by syz-executor/13109: [ 571.983194][ T38] [ 571.983199][ T38] ============================================= [ 571.983199][ T38] [ 571.983213][ T38] NMI backtrace for cpu 1 [ 571.983237][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 571.983286][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 571.983310][ T38] Call Trace: [ 571.983327][ T38] [ 571.983343][ T38] dump_stack_lvl+0x189/0x250 [ 571.983412][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.983465][ T38] ? __pfx__printk+0x10/0x10 [ 571.983497][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 571.983521][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 571.983543][ T38] ? __pfx__printk+0x10/0x10 [ 571.983566][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 571.983588][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 571.983611][ T38] watchdog+0xf93/0xfe0 [ 571.983716][ T38] ? watchdog+0x1de/0xfe0 [ 571.983743][ T38] kthread+0x70e/0x8a0 [ 571.983769][ T38] ? __pfx_watchdog+0x10/0x10 [ 571.983789][ T38] ? __pfx_kthread+0x10/0x10 [ 571.983815][ T38] ? __pfx_kthread+0x10/0x10 [ 571.983839][ T38] ret_from_fork+0x439/0x7d0 [ 571.983863][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 571.983892][ T38] ? __switch_to_asm+0x39/0x70 [ 571.983905][ T38] ? __switch_to_asm+0x33/0x70 [ 571.983916][ T38] ? __pfx_kthread+0x10/0x10 [ 571.983937][ T38] ret_from_fork_asm+0x1a/0x30 [ 571.983967][ T38] [ 571.984024][ T38] Sending NMI from CPU 1 to CPUs 0: [ 571.984055][ C0] NMI backtrace for cpu 0 [ 571.984070][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 571.984090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 571.984100][ C0] RIP: 0010:kasan_check_range+0x0/0x2c0 [ 571.984125][ C0] Code: 48 c7 c6 7e be 21 8d e8 7e 1c 0a ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba [ 571.984139][ C0] RSP: 0018:ffffc90000196818 EFLAGS: 00000086 [ 571.984154][ C0] RAX: 00000000ffffffff RBX: ffff8880b8845680 RCX: ffffffff819cbf72 [ 571.984167][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b8845680 [ 571.984178][ C0] RBP: ffffc900001968d0 R08: 0000000000000000 R09: ffffffff8af93bd4 [ 571.984190][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ac07 R12: ffff8880b8845690 [ 571.984203][ C0] R13: ffff8880b8845688 R14: 1ffff11017108ad2 R15: 1ffff11017108ad1 [ 571.984217][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 571.984230][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.984242][ C0] CR2: 00007f84d44d8580 CR3: 000000003c06a000 CR4: 00000000003526f0 [ 571.984257][ C0] Call Trace: [ 571.984262][ C0] [ 571.984269][ C0] do_raw_spin_lock+0x112/0x290 [ 571.984290][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.984313][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 571.984336][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 571.984364][ C0] rt_spin_lock+0x144/0x2c0 [ 571.984381][ C0] ? stack_depot_save_flags+0x40/0x860 [ 571.984405][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 571.984425][ C0] ? kasan_save_track+0x4f/0x80 [ 571.984441][ C0] ? kasan_save_track+0x3e/0x80 [ 571.984458][ C0] ? kasan_save_free_info+0x46/0x50 [ 571.984472][ C0] ? __kasan_slab_free+0x5b/0x80 [ 571.984492][ C0] ___slab_alloc+0x25f/0xdc0 [ 571.984505][ C0] ? __netif_receive_skb+0x143/0x380 [ 571.984524][ C0] ? process_backlog+0x31e/0x900 [ 571.984544][ C0] ? __local_bh_enable_ip+0x179/0x270 [ 571.984563][ C0] ? rcu_cpu_kthread+0xc3d/0x1b50 [ 571.984583][ C0] ? __alloc_skb+0x112/0x2d0 [ 571.984606][ C0] ? __alloc_skb+0x112/0x2d0 [ 571.984626][ C0] kmem_cache_alloc_node_noprof+0xf2/0x330 [ 571.984651][ C0] __alloc_skb+0x112/0x2d0 [ 571.984675][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 571.984706][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 571.984728][ C0] ? nft_tunnel_get_reduce+0x330/0x640 [ 571.984750][ C0] ? synproxy_pernet+0x45/0x270 [ 571.984770][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 571.984790][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 571.984808][ C0] ? nf_ip_checksum+0x13c/0x510 [ 571.984827][ C0] nft_synproxy_do_eval+0x345/0x570 [ 571.984847][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 571.984864][ C0] ? nft_do_chain+0x103/0x1920 [ 571.984909][ C0] nft_do_chain+0x409/0x1920 [ 571.984934][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 571.984970][ C0] nft_do_chain_inet+0x25d/0x340 [ 571.984987][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 571.985003][ C0] ? __lock_acquire+0xab9/0xd20 [ 571.985030][ C0] ? NF_HOOK+0x9a/0x3a0 [ 571.985051][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 571.985068][ C0] nf_hook_slow+0xc5/0x220 [ 571.985092][ C0] NF_HOOK+0x206/0x3a0 [ 571.985113][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 571.985133][ C0] ? NF_HOOK+0x9a/0x3a0 [ 571.985153][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 571.985171][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 571.985194][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 571.985216][ C0] ? skb_dst+0x4f/0xd0 [ 571.985236][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 571.985258][ C0] NF_HOOK+0x309/0x3a0 [ 571.985279][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 571.985299][ C0] ? NF_HOOK+0x9a/0x3a0 [ 571.985319][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 571.985340][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 571.985367][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 571.985386][ C0] __netif_receive_skb+0x143/0x380 [ 571.985404][ C0] ? rt_spin_unlock+0x65/0x80 [ 571.985424][ C0] ? process_backlog+0x27b/0x900 [ 571.985444][ C0] process_backlog+0x31e/0x900 [ 571.985470][ C0] __napi_poll+0xb3/0x540 [ 571.985491][ C0] net_rx_action+0x707/0xe00 [ 571.985510][ C0] ? arch_stack_walk+0x11c/0x150 [ 571.985534][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 571.985555][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 571.985578][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 571.985604][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 571.985629][ C0] handle_softirqs+0x22f/0x710 [ 571.985653][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 571.985679][ C0] __local_bh_enable_ip+0x179/0x270 [ 571.985698][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 571.985722][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 571.985743][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 571.985763][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 571.985789][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 571.985817][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 571.985840][ C0] ? __lock_acquire+0xab9/0xd20 [ 571.985860][ C0] ? __pfx___schedule+0x10/0x10 [ 571.985894][ C0] ? schedule+0x91/0x360 [ 571.985918][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 571.985937][ C0] smpboot_thread_fn+0x53f/0xa60 [ 571.985957][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 571.985981][ C0] kthread+0x70e/0x8a0 [ 571.986004][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 571.986023][ C0] ? __pfx_kthread+0x10/0x10 [ 571.986047][ C0] ? __pfx_kthread+0x10/0x10 [ 571.986070][ C0] ret_from_fork+0x439/0x7d0 [ 571.986091][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 571.986113][ C0] ? __switch_to_asm+0x39/0x70 [ 571.986128][ C0] ? __switch_to_asm+0x33/0x70 [ 571.986142][ C0] ? __pfx_kthread+0x10/0x10 [ 571.986164][ C0] ret_from_fork_asm+0x1a/0x30 [ 571.986188][ C0] [ 572.182517][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 572.182537][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 572.182557][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.182568][ T38] Call Trace: [ 572.182575][ T38] [ 572.182584][ T38] dump_stack_lvl+0x99/0x250 [ 572.182612][ T38] ? __asan_memcpy+0x40/0x70 [ 572.182631][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.182652][ T38] ? __pfx__printk+0x10/0x10 [ 572.182683][ T38] vpanic+0x281/0x750 [ 572.182708][ T38] ? __pfx_vpanic+0x10/0x10 [ 572.182728][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 572.182745][ T38] ? preempt_schedule+0xae/0xc0 [ 572.182769][ T38] ? preempt_schedule_common+0x83/0xd0 [ 572.182797][ T38] panic+0xb9/0xc0 [ 572.182818][ T38] ? __pfx_panic+0x10/0x10 [ 572.182841][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 572.182865][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 572.182888][ T38] watchdog+0xfd2/0xfe0 [ 572.182914][ T38] ? watchdog+0x1de/0xfe0 [ 572.182944][ T38] kthread+0x70e/0x8a0 [ 572.182971][ T38] ? __pfx_watchdog+0x10/0x10 [ 572.182991][ T38] ? __pfx_kthread+0x10/0x10 [ 572.183018][ T38] ? __pfx_kthread+0x10/0x10 [ 572.183041][ T38] ret_from_fork+0x439/0x7d0 [ 572.183064][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 572.183090][ T38] ? __switch_to_asm+0x39/0x70 [ 572.183105][ T38] ? __switch_to_asm+0x33/0x70 [ 572.183119][ T38] ? __pfx_kthread+0x10/0x10 [ 572.183142][ T38] ret_from_fork_asm+0x1a/0x30 [ 572.183173][ T38] [ 572.183480][ T38] Kernel Offset: disabled