last executing test programs: 2m4.550830736s ago: executing program 1 (id=3223): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2m4.265383518s ago: executing program 1 (id=3230): r0 = fsopen(&(0x7f0000000100)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/dev/nullb0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c) 2m4.023813326s ago: executing program 1 (id=3234): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x45, 0x0, 0x0, 0x66}, {0x6, 0x1, 0x83, 0x7fff0000}]}) 2m3.925634719s ago: executing program 1 (id=3236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m3.756069428s ago: executing program 1 (id=3240): r0 = syz_io_uring_setup(0x2515, &(0x7f0000000280)={0x0, 0x100002, 0x10100}, &(0x7f0000000000), &(0x7f0000000140)) unshare(0x22020600) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r0, 0x1) 2m2.895592651s ago: executing program 1 (id=3249): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x10, @mcast2={0xfc}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x54}}, 0x0) 2m2.410938333s ago: executing program 32 (id=3249): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x10, @mcast2={0xfc}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x54}}, 0x0) 57.383313524s ago: executing program 3 (id=3750): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 53.865551944s ago: executing program 0 (id=3762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 53.465197441s ago: executing program 5 (id=3764): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) 53.160790129s ago: executing program 3 (id=3765): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 52.55792985s ago: executing program 5 (id=3767): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 52.347367698s ago: executing program 3 (id=3768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 52.324795474s ago: executing program 0 (id=3769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc) 51.901519336s ago: executing program 0 (id=3771): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffdffc}]}, 0x10) 51.528432759s ago: executing program 0 (id=3774): unshare(0x22020600) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 51.196889699s ago: executing program 2 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 50.954943864s ago: executing program 0 (id=3776): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 50.841145097s ago: executing program 5 (id=3777): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x81, 0x40000) read$FUSE(r0, 0x0, 0x0) 50.733543931s ago: executing program 3 (id=3778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x2, {{0xa, 0x4e21, 0x6, @mcast1, 0x9}}, {{0xa, 0x4e23, 0xe, @mcast2, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000800)={0x2, {{0xa, 0x4e29, 0x5, @mcast2, 0x80004}}, 0x1}, 0x90) 50.639117216s ago: executing program 2 (id=3779): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa220000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.478545034s ago: executing program 0 (id=3780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0x80a0000}) 49.843338565s ago: executing program 3 (id=3781): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 49.814766641s ago: executing program 2 (id=3782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 49.493481705s ago: executing program 3 (id=3783): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a000100aa"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 49.48530294s ago: executing program 2 (id=3784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000080)=@md5={0x1, "e8a65c7343ada2675dda8cdeca3b87fc"}, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 49.408863327s ago: executing program 5 (id=3785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 49.031704716s ago: executing program 2 (id=3787): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}], 0x1c) getpeername(r0, 0x0, 0x0) 48.655908812s ago: executing program 5 (id=3788): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, &(0x7f0000000440)=""/236}, 0x20) 48.219990696s ago: executing program 5 (id=3790): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 47.988644372s ago: executing program 2 (id=3791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f00000000c0)) 35.171431561s ago: executing program 33 (id=3780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0x80a0000}) 34.382939623s ago: executing program 34 (id=3783): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a000100aa"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 33.026197848s ago: executing program 35 (id=3790): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 32.436913548s ago: executing program 36 (id=3791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f00000000c0)) 18.025754403s ago: executing program 4 (id=3823): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000001400)=[&(0x7f000050c000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) 17.841281816s ago: executing program 4 (id=3824): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011101000d00204355810700000000000109022400010000400909040204020300020009210700840122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 15.911086983s ago: executing program 4 (id=3825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) 15.706382725s ago: executing program 4 (id=3826): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x7ff, 0x0) 15.555857116s ago: executing program 4 (id=3827): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 15.211119422s ago: executing program 4 (id=3828): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) 0s ago: executing program 37 (id=3828): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) kernel console output (not intermixed with test programs): 2118'. [ 282.218516][T10547] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.272120][T10545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.774586][T10581] netlink: 'syz.0.2129': attribute type 2 has an invalid length. [ 282.835774][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 282.835801][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'. [ 282.835842][T10585] netlink: 'syz.1.2132': attribute type 11 has an invalid length. [ 283.084354][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 283.304831][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'. [ 283.715389][ T5918] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 283.877946][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.877997][ T5918] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 283.878023][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.930859][ T5918] usb 5-1: config 0 descriptor?? [ 284.319175][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2156'. [ 284.393294][ T5918] nintendo 0003:057E:200E.0026: unbalanced collection at end of report description [ 284.396712][ T5918] nintendo 0003:057E:200E.0026: HID parse failed [ 284.408358][ T5918] nintendo 0003:057E:200E.0026: probe - fail = -22 [ 284.408506][ T5918] nintendo 0003:057E:200E.0026: probe with driver nintendo failed with error -22 [ 284.567982][ T10] usb 5-1: USB disconnect, device number 17 [ 284.755353][ T6019] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 284.905289][ T6019] usb 2-1: Using ep0 maxpacket: 16 [ 284.917229][ T6019] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 284.917260][ T6019] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 284.917285][ T6019] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.920686][ T6019] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.920719][ T6019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.920745][ T6019] usb 2-1: Product: syz [ 284.920764][ T6019] usb 2-1: Manufacturer: syz [ 284.920781][ T6019] usb 2-1: SerialNumber: syz [ 285.040354][T10653] Bluetooth: MGMT ver 1.23 [ 285.197105][ T6019] usb 2-1: 0:2 : does not exist [ 285.229326][ T6019] usb 2-1: USB disconnect, device number 18 [ 285.645359][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 285.798590][ T31] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.798628][ T31] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.798659][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.798696][ T31] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 285.798723][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.805325][ T6019] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 285.834359][T10679] hugetlbfs: Bad value '%' for mount option 'size' [ 285.834359][T10679] [ 285.878974][ T31] usb 1-1: config 0 descriptor?? [ 285.956173][ T6019] usb 5-1: Using ep0 maxpacket: 32 [ 285.958704][ T6019] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 285.961916][ T6019] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 285.961944][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.961966][ T6019] usb 5-1: Product: syz [ 285.961982][ T6019] usb 5-1: Manufacturer: syz [ 285.961998][ T6019] usb 5-1: SerialNumber: syz [ 286.027190][ T6019] usb 5-1: config 0 descriptor?? [ 286.029109][T10670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 286.065910][ T6019] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 286.365704][ T31] itetech 0003:06CB:73F6.0027: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0 [ 286.456784][ T5850] usb 5-1: USB disconnect, device number 18 [ 286.456881][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 286.546508][ T5169] usb 1-1: USB disconnect, device number 18 [ 286.606228][T10693] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 286.678272][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 286.828018][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.828056][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.828099][ T31] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 286.828125][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.833538][ T31] usb 2-1: config 0 descriptor?? [ 287.279806][ T31] hid_mf 0003:0079:1846.0028: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 287.279846][ T31] hid_mf 0003:0079:1846.0028: Invalid report, this should never happen! [ 287.279864][ T31] hid_mf 0003:0079:1846.0028: Force feedback init failed. [ 287.476482][ T31] usb 2-1: USB disconnect, device number 19 [ 289.082217][T10731] syz.2.2203 (10731) used greatest stack depth: 17584 bytes left [ 289.405350][ T5169] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 289.555336][ T6019] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 289.578943][ T5169] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.579007][ T5169] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 289.579035][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.616112][ T5169] usb 5-1: config 0 descriptor?? [ 289.644015][ T5169] pwc: Askey VC010 type 2 USB webcam detected. [ 289.710182][ T6019] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 289.710216][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.734879][ T6019] usb 1-1: config 0 descriptor?? [ 289.743832][ T6019] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 290.245393][ T5169] pwc: recv_control_msg error -71 req 02 val 2700 [ 290.249374][ T5169] pwc: recv_control_msg error -71 req 02 val 2c00 [ 290.250107][ T5169] pwc: recv_control_msg error -71 req 04 val 1000 [ 290.250930][ T5169] pwc: recv_control_msg error -71 req 04 val 1300 [ 290.255410][ T5169] pwc: recv_control_msg error -71 req 04 val 1400 [ 290.255940][ T5169] pwc: recv_control_msg error -71 req 02 val 2000 [ 290.256473][ T5169] pwc: recv_control_msg error -71 req 02 val 2100 [ 290.256976][ T5169] pwc: recv_control_msg error -71 req 04 val 1500 [ 290.277113][ T5169] pwc: recv_control_msg error -71 req 02 val 2500 [ 290.295273][ T5169] pwc: recv_control_msg error -71 req 02 val 2400 [ 290.323782][ T5169] pwc: recv_control_msg error -71 req 02 val 2600 [ 290.324334][ T5169] pwc: recv_control_msg error -71 req 02 val 2900 [ 290.324907][ T5169] pwc: recv_control_msg error -71 req 02 val 2800 [ 290.345419][ T5169] pwc: recv_control_msg error -71 req 04 val 1100 [ 290.352836][ T5169] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.379289][ T5169] pwc: Registered as video103. [ 290.382753][ T5169] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 290.389194][ T6019] gspca_cpia1: usb_control_msg 01, error -71 [ 290.389221][ T6019] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 290.420721][ T5169] usb 5-1: USB disconnect, device number 19 [ 290.429993][ T6019] usb 1-1: USB disconnect, device number 19 [ 290.675472][ T5918] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 290.832366][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 290.832398][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 290.832423][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 290.832440][ T5918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 290.832470][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 290.832487][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.837581][ T5918] usb 4-1: config 0 descriptor?? [ 290.855334][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 290.955453][ T5850] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 291.059721][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.059752][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.062654][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.062685][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.062709][ T31] usb 3-1: SerialNumber: syz [ 291.095518][ T5918] hdpvr 4-1:0.0: firmware version 0x88 dated _=&ˆ}nDT,w#ORCf( [ 291.095544][ T5918] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 291.117212][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 291.132768][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.132803][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.132845][ T5850] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 291.132870][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.183708][ T5850] usb 2-1: config 0 descriptor?? [ 291.410069][ T31] usb 3-1: 0:2 : does not exist [ 291.458056][ T31] usb 3-1: USB disconnect, device number 19 [ 291.630779][ T5850] kone 0003:1E7D:2CED.0029: bogus close delimiter [ 291.630804][ T5850] kone 0003:1E7D:2CED.0029: item 0 0 2 10 parsing failed [ 291.631638][ T5850] kone 0003:1E7D:2CED.0029: parse failed [ 291.631729][ T5850] kone 0003:1E7D:2CED.0029: probe with driver kone failed with error -22 [ 291.712159][ T5918] hdpvr 4-1:0.0: Could not setup controls [ 291.712992][ T5918] hdpvr 4-1:0.0: registering videodev failed [ 291.744004][ T5918] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 291.763119][ T5918] usb 4-1: USB disconnect, device number 16 [ 291.824108][ T6019] usb 2-1: USB disconnect, device number 20 [ 292.766535][T10850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.108188][T10860] __nla_validate_parse: 2 callbacks suppressed [ 293.108208][T10860] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2267'. [ 293.108361][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 293.433709][T10866] program syz.3.2270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.475386][ T5824] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 293.625349][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 293.633566][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.636686][ T5824] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 293.636713][ T5824] usb 3-1: config 4 has no interface number 0 [ 293.636756][ T5824] usb 3-1: config 4 interface 30 has no altsetting 0 [ 293.640464][ T5824] usb 3-1: string descriptor 0 read error: -22 [ 293.640619][ T5824] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 293.640648][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.721184][ T5824] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 293.721240][ T5824] dw2102: su3000_power_ctrl: 1, initialized 0 [ 293.721262][ T5824] dvb-usb: bulk message failed: -22 (2/0) [ 293.760316][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.762185][ T5824] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 293.762249][ T5824] usb 3-1: media controller created [ 293.762392][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 293.762410][ T5824] dw2102: i2c transfer failed. [ 293.762428][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 293.762442][ T5824] dw2102: i2c transfer failed. [ 293.762460][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 293.762475][ T5824] dw2102: i2c transfer failed. [ 293.762492][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 293.762508][ T5824] dw2102: i2c transfer failed. [ 293.762525][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 293.762541][ T5824] dw2102: i2c transfer failed. [ 293.762559][ T5824] dvb-usb: bulk message failed: -22 (6/0) [ 293.762573][ T5824] dw2102: i2c transfer failed. [ 293.762584][ T5824] dvb-usb: MAC address: 02:02:02:02:02:02 [ 293.902167][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.929274][T10864] dw2102: i2c rd: len=65 is too big! [ 293.929274][T10864] [ 293.944444][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 293.944469][ T5824] dw2102: command 0x0e transfer failed. [ 293.944480][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 293.944496][ T5824] dw2102: command 0x0e transfer failed. [ 294.245445][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 294.245470][ T5824] dw2102: command 0x0e transfer failed. [ 294.245481][ T5824] dvb-usb: bulk message failed: -22 (3/0) [ 294.245496][ T5824] dw2102: command 0x0e transfer failed. [ 294.245506][ T5824] dvb-usb: bulk message failed: -22 (1/0) [ 294.245521][ T5824] dw2102: command 0x51 transfer failed. [ 294.245531][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 294.245545][ T5824] dw2102: i2c probe for address 0x68 failed. [ 294.245558][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 294.245573][ T5824] dw2102: i2c probe for address 0x69 failed. [ 294.245585][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 294.245601][ T5824] dw2102: i2c probe for address 0x6a failed. [ 294.245612][ T5824] dw2102: probing for demodulator failed. Is the external power switched on? [ 294.245624][ T5824] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 294.485685][ T5824] rc_core: IR keymap rc-tt-1500 not found [ 294.485706][ T5824] Registered IR keymap rc-empty [ 294.487642][ T5824] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 294.492061][ T5824] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input23 [ 294.534507][ T5824] dvb-usb: schedule remote query interval to 250 msecs. [ 294.534531][ T5824] dw2102: su3000_power_ctrl: 0, initialized 1 [ 294.534546][ T5824] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 294.560758][ T5824] usb 3-1: USB disconnect, device number 20 [ 294.719100][ T5824] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 295.455378][ T5850] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 295.611736][ T5850] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 295.611769][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.633328][ T5850] usb 2-1: config 0 descriptor?? [ 295.855307][ T6019] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 296.015411][ T6019] usb 4-1: Using ep0 maxpacket: 32 [ 296.019555][ T6019] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 296.019585][ T6019] usb 4-1: config 0 has no interface number 0 [ 296.028518][ T6019] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 296.028621][ T6019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.028646][ T6019] usb 4-1: Product: syz [ 296.028664][ T6019] usb 4-1: Manufacturer: syz [ 296.028683][ T6019] usb 4-1: SerialNumber: syz [ 296.066101][ T6019] usb 4-1: config 0 descriptor?? [ 296.087827][ T6019] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 296.092547][ T5850] elecom 0003:056E:00E6.002A: unknown main item tag 0x0 [ 296.092575][ T5850] elecom 0003:056E:00E6.002A: unknown main item tag 0x0 [ 296.092594][ T5850] elecom 0003:056E:00E6.002A: unknown main item tag 0x0 [ 296.092612][ T5850] elecom 0003:056E:00E6.002A: unknown main item tag 0x0 [ 296.092630][ T5850] elecom 0003:056E:00E6.002A: unknown main item tag 0x0 [ 296.135062][ T5850] elecom 0003:056E:00E6.002A: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 296.296808][ T5850] usb 2-1: USB disconnect, device number 21 [ 296.371057][ T6019] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 296.459007][ T6019] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 296.481152][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 296.689854][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 296.696504][ T5850] usb 4-1: USB disconnect, device number 17 [ 296.716487][ T5850] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 296.730548][ T5850] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 296.731337][ T5850] quatech2 4-1:0.51: device disconnected [ 296.995352][ T6019] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 297.150498][ T6019] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.150536][ T6019] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.150576][ T6019] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 297.150597][ T6019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.162137][ T6019] usb 1-1: config 0 descriptor?? [ 297.405441][ T5918] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 297.575640][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 297.579595][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.579689][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.579733][ T5918] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 297.579759][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.630110][ T5918] usb 2-1: config 0 descriptor?? [ 297.672068][ T6019] razer 0003:1532:010E.002B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 297.887232][ T6019] usb 1-1: USB disconnect, device number 20 [ 298.322451][ T5918] ft260 0003:0403:6030.002C: failed to retrieve chip version [ 298.322866][ T5918] ft260 0003:0403:6030.002C: probe with driver ft260 failed with error -71 [ 298.347095][ T5918] usb 2-1: USB disconnect, device number 22 [ 298.620554][T11011] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 298.620554][T11011] program syz.0.2339 not setting count and/or reply_len properly [ 299.155423][ T6019] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 299.307671][ T6019] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 299.307704][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.326713][ T6019] usb 3-1: config 0 descriptor?? [ 299.566616][ T6019] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 299.770337][ T6019] [drm:udl_init] *ERROR* Selecting channel failed [ 299.921894][ T6019] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 299.921920][ T6019] [drm] Initialized udl on minor 2 [ 299.964834][ T6019] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 299.989866][ T6019] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 300.030023][ T6019] usb 3-1: USB disconnect, device number 21 [ 300.038070][ T5850] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 300.038728][ T5850] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 301.788904][T11079] syz.0.2373 (11079): drop_caches: 2 [ 301.800722][T11107] netlink: 'syz.3.2386': attribute type 4 has an invalid length. [ 301.800745][T11107] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2386'. [ 302.291239][T11123] mkiss: ax0: crc mode is auto. [ 302.805850][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 302.805967][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 302.806242][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 303.895259][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 303.895392][ T5850] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 304.016858][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2428'. [ 304.016891][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2428'. [ 304.047837][ T5850] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 304.047870][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.048582][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.050125][ T31] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 304.054897][ T31] usb 4-1: string descriptor 0 read error: -22 [ 304.055049][ T31] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 304.055077][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.089323][ T5850] usb 5-1: config 0 descriptor?? [ 304.285864][ T31] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 304.336287][ T5850] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 304.539175][ T5850] [drm:udl_init] *ERROR* Selecting channel failed [ 304.574449][ T5850] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 304.574477][ T5850] [drm] Initialized udl on minor 2 [ 304.602483][ T5850] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.602839][ T5850] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 304.652101][ T5918] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.653694][ T5850] usb 5-1: USB disconnect, device number 20 [ 304.654991][ T5918] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.656689][ T5918] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 304.703930][T11210] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 304.703930][T11210] The task syz.0.2435 (11210) triggered the difference, watch for misbehavior. [ 305.017675][ T31] usb 4-1: device descriptor read/64, error -71 [ 305.265494][ T31] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 305.423908][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.443840][ T31] usb 4-1: device firmware changed [ 305.467222][ T31] usb 4-1: USB disconnect, device number 18 [ 306.342161][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2455'. [ 307.276530][T11290] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 307.276556][T11290] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 307.676032][T11306] pim6reg527: entered allmulticast mode [ 308.641744][T11350] fuse: Bad value for 'user_id' [ 308.641766][T11350] fuse: Bad value for 'user_id' [ 308.656908][ T5918] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 308.823017][ T5918] usb 1-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 308.823089][ T5918] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.823114][ T5918] usb 1-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 308.823144][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 308.823181][ T5918] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 308.823206][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.871091][ T5918] usb 1-1: config 0 descriptor?? [ 309.175293][ T31] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 309.333798][ T5918] nzxt-kraken2 0003:1E71:170E.002D: unknown main item tag 0x0 [ 309.333840][ T5918] nzxt-kraken2 0003:1E71:170E.002D: unknown main item tag 0x0 [ 309.333869][ T5918] nzxt-kraken2 0003:1E71:170E.002D: unknown main item tag 0x0 [ 309.333896][ T5918] nzxt-kraken2 0003:1E71:170E.002D: unknown main item tag 0x0 [ 309.333925][ T5918] nzxt-kraken2 0003:1E71:170E.002D: unknown main item tag 0x0 [ 309.361464][ T5918] nzxt-kraken2 0003:1E71:170E.002D: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 309.378959][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'. [ 309.398894][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.398933][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.403699][ T31] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 309.403731][ T31] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 309.403754][ T31] usb 5-1: Manufacturer: syz [ 309.464375][ T31] usb 5-1: config 0 descriptor?? [ 309.567454][ T5918] usb 1-1: USB disconnect, device number 21 [ 309.900526][ T31] cougar 0003:060B:700A.002E: unknown main item tag 0x0 [ 309.900565][ T31] cougar 0003:060B:700A.002E: unknown main item tag 0x0 [ 309.900594][ T31] cougar 0003:060B:700A.002E: unknown main item tag 0x0 [ 309.900622][ T31] cougar 0003:060B:700A.002E: unknown main item tag 0x0 [ 309.900649][ T31] cougar 0003:060B:700A.002E: unknown main item tag 0x0 [ 309.941079][ T31] cougar 0003:060B:700A.002E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 310.113158][ T10] usb 5-1: USB disconnect, device number 21 [ 310.220046][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2525'. [ 310.220082][T11397] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 310.284277][T11399] random: crng reseeded on system resumption [ 310.410188][T11402] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 310.487218][T11404] tipc: Enabling of bearer rejected, already enabled [ 311.039407][T11430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.179104][T11432] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2541'. [ 311.381120][T11443] program syz.1.2546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.575434][T11451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2549'. [ 311.588117][T11453] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 311.685408][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 311.835342][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 311.838274][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.838309][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.838351][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 311.838384][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.843827][ T10] usb 4-1: config 0 descriptor?? [ 312.227720][ T44] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 312.297771][ T10] uclogic 0003:28BD:0071.002F: interface is invalid, ignoring [ 312.385375][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 312.388489][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.390069][ T44] usb 2-1: config 4 interface 0 has no altsetting 0 [ 312.429727][ T44] usb 2-1: string descriptor 0 read error: -22 [ 312.429839][ T44] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 312.429865][ T44] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 312.488368][ T44] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 312.492480][ T44] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.492937][ T44] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 312.492989][ T44] usb 2-1: media controller created [ 312.545819][ T5824] usb 4-1: USB disconnect, device number 19 [ 312.581216][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.708364][ T44] zl10353_read_register: readreg error (reg=127, ret==0) [ 312.776218][ T44] usb 2-1: USB disconnect, device number 23 [ 312.954954][T11495] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 313.336645][T11507] tmpfs: Cannot change global quota limit on remount [ 314.836618][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 314.836644][T11566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2604'. [ 314.836662][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 314.836678][T11566] netlink: 'syz.0.2604': attribute type 5 has an invalid length. [ 314.971595][T11570] tracefs: Bad value for 'gid' [ 314.971618][T11570] tracefs: Bad value for 'gid' [ 314.989649][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 315.354546][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2610'. [ 315.405699][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 315.550043][T11589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2614'. [ 315.824434][T11596] sp0: Synchronizing with TNC [ 316.395343][ T5824] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 316.547786][ T5824] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.547826][ T5824] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.547851][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.547889][ T5824] usb 4-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 316.547915][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.553699][ T5824] usb 4-1: config 0 descriptor?? [ 317.051833][ T5824] asus 0003:0B05:183D.0030: hidraw0: USB HID v0.08 Device [HID 0b05:183d] on usb-dummy_hcd.3-1/input0 [ 317.051879][ T5824] asus 0003:0B05:183D.0030: Asus input not registered [ 317.054443][ T5824] asus 0003:0B05:183D.0030: probe with driver asus failed with error -12 [ 317.265293][ T10] usb 4-1: USB disconnect, device number 20 [ 317.605295][ T5850] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 317.755593][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 317.764009][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 317.764064][ T5850] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 317.764089][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.775014][ T5850] usb 2-1: config 0 descriptor?? [ 318.208110][ T5850] hid-alps 0003:044E:120B.0031: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.1-1/input0 [ 318.400645][ T5850] usb 2-1: USB disconnect, device number 24 [ 319.597443][T11714] Invalid source name [ 320.745120][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'. [ 320.965353][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 321.065681][T11770] netlink: 'syz.3.2699': attribute type 5 has an invalid length. [ 321.115844][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 321.118966][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.120936][ T10] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 321.120963][ T10] usb 2-1: config 4 has no interface number 0 [ 321.120999][ T10] usb 2-1: config 4 interface 30 has no altsetting 0 [ 321.159788][ T10] usb 2-1: string descriptor 0 read error: -22 [ 321.159944][ T10] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 321.159970][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.221167][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 321.221215][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 321.221235][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 321.237017][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.240632][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 321.240694][ T10] usb 2-1: media controller created [ 321.240726][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 321.240744][ T10] dw2102: i2c transfer failed. [ 321.240765][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 321.240781][ T10] dw2102: i2c transfer failed. [ 321.240800][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 321.240817][ T10] dw2102: i2c transfer failed. [ 321.240838][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 321.240852][ T10] dw2102: i2c transfer failed. [ 321.240872][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 321.245811][ T10] dw2102: i2c transfer failed. [ 321.245841][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 321.245860][ T10] dw2102: i2c transfer failed. [ 321.245872][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 321.344888][T11773] sp0: Synchronizing with TNC [ 321.421344][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.511745][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 321.511769][ T10] dw2102: command 0x0e transfer failed. [ 321.511780][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 321.511796][ T10] dw2102: command 0x0e transfer failed. [ 321.573928][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 321.621092][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 321.621119][T11781] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 321.815407][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 321.815447][ T10] dw2102: command 0x0e transfer failed. [ 321.815458][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 321.815492][ T10] dw2102: command 0x0e transfer failed. [ 321.815502][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 321.815518][ T10] dw2102: command 0x51 transfer failed. [ 321.815528][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 321.815543][ T10] dw2102: i2c probe for address 0x68 failed. [ 321.815556][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 321.815571][ T10] dw2102: i2c probe for address 0x69 failed. [ 321.815584][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 321.815598][ T10] dw2102: i2c probe for address 0x6a failed. [ 321.815610][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 321.815622][ T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 321.835546][T11718] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 322.025357][ T10] rc_core: IR keymap rc-tt-1500 not found [ 322.025380][ T10] Registered IR keymap rc-empty [ 322.026838][ T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 322.038930][ T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 322.047198][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 322.047224][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 322.047240][ T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 322.066140][ T10] usb 2-1: USB disconnect, device number 25 [ 322.255921][ T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 322.305038][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 322.418990][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.419027][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.419051][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.419099][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.419126][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.487855][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.487935][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.510215][ T44] usb 5-1: config 0 descriptor?? [ 322.771841][ T5849] Bluetooth: hci4: unexpected event for opcode 0x204e [ 322.977581][ T10] kernel write not supported for file /1138/comm (pid: 10 comm: kworker/0:1) [ 323.034158][ T44] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 323.179310][ T44] usb 5-1: USB disconnect, device number 22 [ 323.238546][T11830] program syz.1.2726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.270196][T11832] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 323.695331][ T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 323.704603][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 323.851507][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 323.851562][ T44] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 323.851589][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.887434][ T44] usb 3-1: config 0 descriptor?? [ 323.981007][T11851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2734'. [ 323.981441][T11849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2734'. [ 324.230478][T11857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.322316][ T44] saitek 0003:06A3:0CD7.0033: item fetching failed at offset 0/3 [ 324.323158][ T44] saitek 0003:06A3:0CD7.0033: parse failed [ 324.323266][ T44] saitek 0003:06A3:0CD7.0033: probe with driver saitek failed with error -22 [ 324.432381][ T44] hid-generic 0001:0009:0001.0034: item fetching failed at offset 0/4 [ 324.433130][ T44] hid-generic 0001:0009:0001.0034: probe with driver hid-generic failed with error -22 [ 324.538689][ T44] usb 3-1: USB disconnect, device number 22 [ 324.710739][T11867] syz.1.2742 (11867): drop_caches: 2 [ 324.711242][T11867] syz.1.2742 (11867): drop_caches: 2 [ 325.630552][T11891] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 325.646993][T11891] tipc: Enabled bearer , priority 5 [ 325.713107][T11896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2756'. [ 326.153111][ T44] hid-generic 0000:0004:0000.0035: unknown main item tag 0x0 [ 326.153152][ T44] hid-generic 0000:0004:0000.0035: unknown main item tag 0x0 [ 326.153180][ T44] hid-generic 0000:0004:0000.0035: unknown main item tag 0x0 [ 326.215501][ T44] hid-generic 0000:0004:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 326.393353][ T44] kernel write not supported for file /dsp1 (pid: 44 comm: kworker/1:1) [ 326.745363][ T10] tipc: Node number set to 4194305 [ 327.535460][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 327.535660][ T5850] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 327.672419][T11960] tipc: Started in network mode [ 327.672454][T11960] tipc: Node identity ac14140f, cluster identity 4711 [ 327.673464][T11960] tipc: Enabled bearer , priority 5 [ 327.685976][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 327.689998][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.690119][ T5850] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 327.690148][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.721363][ T5850] usb 3-1: config 0 descriptor?? [ 327.729817][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.729938][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 327.729970][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.774441][ T10] usb 4-1: config 0 descriptor?? [ 328.222189][ T10] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 328.222229][ T10] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 328.222257][ T10] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 328.222284][ T10] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 328.222311][ T10] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 328.237043][ T10] arvo 0003:1E7D:30D4.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 328.366268][ T44] usb 3-1: USB disconnect, device number 23 [ 328.427114][ T5169] usb 4-1: USB disconnect, device number 21 [ 328.699167][ T5169] IPVS: starting estimator thread 0... [ 328.785331][ T10] tipc: Node number set to 2886997007 [ 328.785584][T11981] IPVS: using max 8 ests per chain, 19200 per kthread [ 329.005295][ T5169] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 329.167979][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 329.168032][ T5169] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 329.168074][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.208315][ T5169] usb 2-1: config 0 descriptor?? [ 329.209554][T11983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.275936][ T44] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 329.425291][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 329.431526][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.431555][ T44] usb 3-1: config 0 has no interface number 0 [ 329.467724][ T44] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 329.467837][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.467859][ T44] usb 3-1: Product: syz [ 329.467875][ T44] usb 3-1: Manufacturer: syz [ 329.467891][ T44] usb 3-1: SerialNumber: syz [ 329.512136][ T44] usb 3-1: config 0 descriptor?? [ 329.526248][ T44] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 329.526280][ T44] usb 3-1: selecting invalid altsetting 1 [ 329.526298][ T44] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 329.560743][ T44] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 329.561199][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 329.561234][ T44] usb 3-1: media controller created [ 329.624391][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.639261][ T5169] belkin 0003:050D:3201.0038: unbalanced collection at end of report description [ 329.640136][ T5169] belkin 0003:050D:3201.0038: parse failed [ 329.640212][ T5169] belkin 0003:050D:3201.0038: probe with driver belkin failed with error -22 [ 329.839062][ T10] usb 2-1: USB disconnect, device number 26 [ 330.715613][ T44] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 330.715759][ T44] zl10353_read_register: readreg error (reg=127, ret==-110) [ 330.828884][ T44] usb 3-1: USB disconnect, device number 24 [ 331.041734][T12027] sp0: Synchronizing with TNC [ 331.296626][T12035] tipc: Enabled bearer , priority 10 [ 332.184403][T12075] netlink: 79 bytes leftover after parsing attributes in process `syz.4.2844'. [ 332.495961][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'. [ 332.619384][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2852'. [ 332.805391][T12098] sp0: Synchronizing with TNC [ 334.305284][ T44] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 334.393362][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 334.465268][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 334.471797][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 334.471838][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.471885][ T44] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 334.471912][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.526613][ T44] usb 3-1: config 0 descriptor?? [ 334.985719][ T44] playstation 0003:054C:0DF2.0039: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 335.143952][ T44] playstation 0003:054C:0DF2.0039: Failed to retrieve feature with reportID 9: -71 [ 335.143995][ T44] playstation 0003:054C:0DF2.0039: Failed to retrieve DualSense pairing info: -71 [ 335.144047][ T44] playstation 0003:054C:0DF2.0039: Failed to get MAC address from DualSense [ 335.144069][ T44] playstation 0003:054C:0DF2.0039: Failed to create dualsense. [ 335.187576][ T44] playstation 0003:054C:0DF2.0039: probe with driver playstation failed with error -71 [ 335.194732][ T44] usb 3-1: USB disconnect, device number 25 [ 335.354862][T12184] mkiss: ax0: crc mode is auto. [ 335.955315][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 335.987724][T12209] block nbd2: Attempted send on invalid socket [ 335.987825][T12209] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.112711][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.112756][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 336.112782][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.138682][ T10] usb 5-1: config 0 descriptor?? [ 336.785264][ T10] video4linux radio48: keene_cmd_set failed (-71) [ 336.785293][ T10] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 336.803289][ T10] usb 5-1: USB disconnect, device number 23 [ 337.071984][T12241] hsr0: entered promiscuous mode [ 337.072501][T12240] hsr0: left promiscuous mode [ 338.078058][T12274] overlayfs: failed to resolve './file1': -2 [ 339.061113][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2961'. [ 339.122351][T12315] lo speed is unknown, defaulting to 1000 [ 339.122482][T12315] lo speed is unknown, defaulting to 1000 [ 339.141440][T12315] lo speed is unknown, defaulting to 1000 [ 339.182531][T12315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.225980][T12315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 339.327724][T12315] lo speed is unknown, defaulting to 1000 [ 339.375369][T12315] lo speed is unknown, defaulting to 1000 [ 339.378502][T12315] lo speed is unknown, defaulting to 1000 [ 339.410520][T12315] lo speed is unknown, defaulting to 1000 [ 339.415050][T12315] lo speed is unknown, defaulting to 1000 [ 339.665315][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 339.816700][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 339.819111][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.819138][ T10] usb 3-1: config 0 has no interface number 0 [ 339.822358][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 339.822387][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.822409][ T10] usb 3-1: Product: syz [ 339.822424][ T10] usb 3-1: Manufacturer: syz [ 339.822439][ T10] usb 3-1: SerialNumber: syz [ 339.855343][ T10] usb 3-1: config 0 descriptor?? [ 339.863735][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 339.863768][ T10] usb 3-1: selecting invalid altsetting 1 [ 339.863787][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 339.886601][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.887038][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 339.887098][ T10] usb 3-1: media controller created [ 339.984524][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.105892][T12360] syz.1.2983 (12360): /proc/12359/oom_adj is deprecated, please use /proc/12359/oom_score_adj instead. [ 341.115644][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 341.115744][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 341.116063][T12322] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 341.302470][ T10] usb 3-1: USB disconnect, device number 26 [ 341.771794][ T38] audit: type=1804 audit(1757193717.022:200): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2993" name="/newroot/638/cgroup.controllers" dev="tmpfs" ino=3233 res=1 errno=0 [ 341.775299][ T38] audit: type=1800 audit(1757193717.022:201): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2993" name="cgroup.controllers" dev="tmpfs" ino=3233 res=0 errno=0 [ 342.138711][T12386] [U]  [ 342.216256][T12391] usb usb8: usbfs: process 12391 (syz.2.2997) did not claim interface 63 before use [ 342.453081][T12399] ptrace attach of "./syz-executor exec"[5857] was attempted by ""[12399] [ 342.490764][ T38] audit: type=1326 audit(1757193717.742:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12402 comm="syz.0.3003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb76cfebe9 code=0x0 [ 342.532994][T12405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3004'. [ 342.653524][T12410] tipc: Enabling of bearer rejected, already enabled [ 342.965368][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 343.121152][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.121191][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.121238][ T10] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 343.121264][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.133554][ T10] usb 3-1: config 0 descriptor?? [ 343.559524][ T10] ortek 0003:1223:3F07.003A: unknown main item tag 0x3 [ 343.559560][ T10] ortek 0003:1223:3F07.003A: item fetching failed at offset 48/69 [ 343.560545][ T10] ortek 0003:1223:3F07.003A: probe with driver ortek failed with error -22 [ 343.608771][T12441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.782273][ T5169] usb 3-1: USB disconnect, device number 27 [ 345.118270][T12488] ALSA: seq fatal error: cannot create timer (-22) [ 345.177068][T12491] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 345.221356][T12494] netlink: 'syz.1.3045': attribute type 10 has an invalid length. [ 345.222643][T12494] batman_adv: batadv0: Adding interface: team0 [ 345.222659][T12494] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.222692][T12494] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 345.261037][T12494] netlink: 'syz.1.3045': attribute type 10 has an invalid length. [ 345.261066][T12494] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3045'. [ 345.261306][T12494] team0: entered promiscuous mode [ 345.261326][T12494] team_slave_0: entered promiscuous mode [ 345.261600][T12494] team_slave_1: entered promiscuous mode [ 345.275068][T12494] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.276539][T12494] batman_adv: batadv0: Interface activated: team0 [ 345.276593][T12494] batman_adv: batadv0: Interface deactivated: team0 [ 345.276619][T12494] batman_adv: batadv0: Removing interface: team0 [ 345.360322][T12494] bridge0: port 3(team0) entered blocking state [ 345.360547][T12494] bridge0: port 3(team0) entered disabled state [ 345.360747][T12494] team0: entered allmulticast mode [ 345.360765][T12494] team_slave_0: entered allmulticast mode [ 345.360790][T12494] team_slave_1: entered allmulticast mode [ 345.418127][T12494] bridge0: port 3(team0) entered blocking state [ 345.418306][T12494] bridge0: port 3(team0) entered forwarding state [ 347.205629][T12563] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 347.205653][T12563] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3079'. [ 347.349084][T12570] binder: 12568:12570 ioctl c0306201 2000000003c0 returned -22 [ 348.650544][T12623] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 348.650544][T12623] program syz.2.3107 not setting count and/or reply_len properly [ 349.334716][T12652] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3117'. [ 350.035463][ T5169] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 350.135350][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 350.187607][ T5169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.187645][ T5169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.187668][ T5169] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.187710][ T5169] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 350.187734][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.249365][ T5169] usb 3-1: config 0 descriptor?? [ 350.329394][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.329492][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.329535][ T44] usb 4-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 350.329561][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.382949][ T44] usb 4-1: config 0 descriptor?? [ 350.675014][ T5169] acrux 0003:1A34:0802.003B: unbalanced collection at end of report description [ 350.686144][ T5169] acrux 0003:1A34:0802.003B: parse failed [ 350.686293][ T5169] acrux 0003:1A34:0802.003B: probe with driver acrux failed with error -22 [ 350.826134][ T44] hid-generic 0003:258A:6A80.003C: hidraw0: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.3-1/input0 [ 350.872173][ T44] usb 3-1: USB disconnect, device number 28 [ 351.036431][ T5918] usb 4-1: USB disconnect, device number 22 [ 351.517056][T12705] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 351.517113][T12705] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 351.517212][T12705] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 351.518260][T12705] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 351.518320][T12705] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 351.518375][T12705] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 351.518518][T12705] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 351.518572][T12705] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 351.518625][T12705] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 351.518730][T12705] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 351.518784][T12705] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 351.518838][T12705] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 352.465529][T12745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3160'. [ 352.469310][T12743] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 352.469334][T12743] UDF-fs: Scanning with blocksize 512 failed [ 352.471624][T12743] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 352.471644][T12743] UDF-fs: Scanning with blocksize 1024 failed [ 352.472138][T12743] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 352.472155][T12743] UDF-fs: Scanning with blocksize 2048 failed [ 352.472566][T12743] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 352.472583][T12743] UDF-fs: Scanning with blocksize 4096 failed [ 352.714282][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 353.375337][ T5169] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 353.525782][ T5169] usb 4-1: Using ep0 maxpacket: 32 [ 353.529586][ T5169] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.532536][ T5169] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 353.532564][ T5169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.532584][ T5169] usb 4-1: Product: syz [ 353.532600][ T5169] usb 4-1: Manufacturer: syz [ 353.532615][ T5169] usb 4-1: SerialNumber: syz [ 353.589798][ T5169] usb 4-1: config 0 descriptor?? [ 353.835403][ T5850] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 353.991183][ T5850] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 353.991222][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0 [ 353.991261][ T5850] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 353.991286][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.998897][ T5850] usb 3-1: config 0 descriptor?? [ 354.000215][T12779] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 354.044253][ T5169] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 354.248004][ T5169] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 354.248501][ T5169] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 354.292276][ T5169] usb 4-1: USB disconnect, device number 23 [ 354.496522][ T5850] lenovo 0003:17EF:60A4.003D: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0 [ 354.653211][ T5918] usb 3-1: USB disconnect, device number 29 [ 356.491482][T12870] tmpfs: User quota inode hardlimit too large. [ 357.516407][T12915] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 357.832564][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 358.212570][T12923] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3245'. [ 358.454942][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 358.454968][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3252'. [ 358.454998][T12933] netlink: 'syz.3.3252': attribute type 6 has an invalid length. [ 359.085959][T12942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3256'. [ 359.258074][T12950] xt_policy: too many policy elements [ 359.359460][ T1174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.578788][T12960] syz.3.3263 (12960) used obsolete PPPIOCDETACH ioctl [ 359.801209][ T1174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.856640][T12967] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3267'. [ 360.180084][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.183026][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.184135][T12976] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3271'. [ 360.184446][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.192969][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.193788][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.380899][ T1174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.398935][T12983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3274'. [ 360.398976][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 360.437019][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3271'. [ 361.067786][ T1174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.988460][ T1174] team0: left allmulticast mode [ 361.988484][ T1174] team_slave_0: left allmulticast mode [ 361.989171][ T1174] team_slave_1: left allmulticast mode [ 361.997350][ T1174] bridge0: port 3(team0) entered disabled state [ 362.117771][ T1174] bridge_slave_1: left allmulticast mode [ 362.118084][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.130117][T13036] netlink: 'syz.3.3297': attribute type 18 has an invalid length. [ 362.211170][ T1174] bridge_slave_0: left allmulticast mode [ 362.211207][ T1174] bridge_slave_0: left promiscuous mode [ 362.211477][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.315883][ T5849] Bluetooth: hci3: command tx timeout [ 362.762531][T13041] netlink: 'syz.0.3301': attribute type 2 has an invalid length. [ 364.301774][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.358236][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.381346][ T1174] bond0 (unregistering): Released all slaves [ 364.395748][ T5849] Bluetooth: hci3: command tx timeout [ 364.443359][T13035] __nla_validate_parse: 2 callbacks suppressed [ 364.443380][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 364.701835][T13048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3304'. [ 364.740780][ T1174] tipc: Disabling bearer [ 364.751122][ T1174] tipc: Disabling bearer [ 364.862148][T13053] program syz.2.3308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.924347][ T1174] tipc: Left network mode [ 365.241697][T12975] chnl_net:caif_netlink_parms(): no params data found [ 365.288601][ T5169] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 365.444865][ T5169] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.444904][ T5169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 365.444940][ T5169] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 365.444965][ T5169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.488373][ T5169] usb 3-1: config 0 descriptor?? [ 365.525855][ T5918] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 365.688252][ T5918] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 365.688317][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.689876][ T5918] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 365.689905][ T5918] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 365.689927][ T5918] usb 5-1: Manufacturer: syz [ 365.699455][ T5918] usb 5-1: config 0 descriptor?? [ 365.895266][ T5918] rc_core: IR keymap rc-hauppauge not found [ 365.895286][ T5918] Registered IR keymap rc-empty [ 365.896912][ T5918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 365.900068][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 365.971681][ T5169] lenovo 0003:17EF:6067.003E: item fetching failed at offset 0/2 [ 365.972507][ T5169] lenovo 0003:17EF:6067.003E: hid_parse failed [ 365.972582][ T5169] lenovo 0003:17EF:6067.003E: probe with driver lenovo failed with error -22 [ 366.193769][T13084] rc rc0: two consecutive events of type space [ 366.201734][ T5918] usb 3-1: USB disconnect, device number 30 [ 366.407522][ T5850] usb 5-1: USB disconnect, device number 24 [ 366.431729][ T10] IPVS: starting estimator thread 0... [ 366.447688][T13096] netlink: 'syz.3.3325': attribute type 2 has an invalid length. [ 366.475370][ T5849] Bluetooth: hci3: command tx timeout [ 366.515409][T13095] IPVS: using max 6 ests per chain, 14400 per kthread [ 366.739193][T13096] bridge: entered promiscuous mode [ 367.257121][ T1174] hsr_slave_0: left promiscuous mode [ 367.257233][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 367.325479][ T1174] hsr_slave_1: left promiscuous mode [ 367.327348][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.327449][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.391344][T13122] overlayfs: missing 'workdir' [ 367.410598][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.410633][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.480694][ T5850] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 367.631717][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 367.634100][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.634132][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.634168][ T5850] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 367.634190][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.644387][ T5850] usb 5-1: config 0 descriptor?? [ 367.644720][ T1174] veth1_macvtap: left promiscuous mode [ 367.649944][ T1174] veth0_macvtap: left promiscuous mode [ 367.650315][ T1174] veth1_vlan: left promiscuous mode [ 367.652405][ T1174] veth0_vlan: left promiscuous mode [ 368.070206][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070248][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070278][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070306][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070334][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070362][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070390][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070418][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070445][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.070473][ T5850] hid-picolcd 0003:04D8:F002.003F: unknown main item tag 0x0 [ 368.138867][ T5850] hid-picolcd 0003:04D8:F002.003F: No report with id 0xf3 found [ 368.138900][ T5850] hid-picolcd 0003:04D8:F002.003F: No report with id 0xf4 found [ 368.273879][ T44] usb 5-1: USB disconnect, device number 25 [ 368.386208][T13142] delete_channel: no stack [ 368.411788][T13146] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 368.559537][ T5849] Bluetooth: hci3: command tx timeout [ 368.816393][ T5918] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 368.998008][ T5918] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 368.998047][ T5918] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.998091][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 368.998127][ T5918] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 368.998153][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.018097][ T5918] usb 3-1: config 0 descriptor?? [ 369.262991][T13165] usb usb8: usbfs: process 13165 (syz.4.3357) did not claim interface 0 before use [ 369.431652][ T5918] sony 0003:054C:024B.0040: unbalanced delimiter at end of report description [ 369.432260][ T5918] sony 0003:054C:024B.0040: parse failed [ 369.432331][ T5918] sony 0003:054C:024B.0040: probe with driver sony failed with error -22 [ 369.639643][ T5169] usb 3-1: USB disconnect, device number 31 [ 371.169497][ T1174] team_slave_1 (unregistering): left promiscuous mode [ 371.185334][ T44] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 371.190093][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 371.383829][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.383867][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.383892][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.383939][ T44] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.383966][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.439594][ T44] usb 3-1: config 0 descriptor?? [ 371.440875][ T1174] team_slave_0 (unregistering): left promiscuous mode [ 371.490851][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 371.884710][ T44] plantronics 0003:047F:FFFF.0041: collection stack underflow [ 371.884734][ T44] plantronics 0003:047F:FFFF.0041: item 0 1 0 12 parsing failed [ 371.901156][ T44] plantronics 0003:047F:FFFF.0041: parse failed [ 371.901266][ T44] plantronics 0003:047F:FFFF.0041: probe with driver plantronics failed with error -22 [ 372.080847][ T44] usb 3-1: USB disconnect, device number 32 [ 373.447496][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 374.218603][T13207] netlink: 'syz.2.3376': attribute type 10 has an invalid length. [ 374.512289][T13179] netlink: 'syz.3.3364': attribute type 3 has an invalid length. [ 374.578092][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.584335][T13207] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 374.613242][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.613395][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.613623][T12975] bridge_slave_0: entered allmulticast mode [ 374.640017][T12975] bridge_slave_0: entered promiscuous mode [ 374.811090][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.811316][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.811551][T12975] bridge_slave_1: entered allmulticast mode [ 374.814209][T12975] bridge_slave_1: entered promiscuous mode [ 374.985030][T13215] loop6: detected capacity change from 0 to 7 [ 375.017452][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.017489][ C1] buffer_io_error: 4 callbacks suppressed [ 375.017501][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.024610][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.024650][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.031639][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.031678][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.036824][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.036862][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.040272][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.040305][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.044082][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.044117][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.054073][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.054109][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.054277][T13215] ldm_validate_partition_table(): Disk read failed. [ 375.054524][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.054556][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.054822][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.054852][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.055906][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.055939][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.056414][T13215] Dev loop6: unable to read RDB block 0 [ 375.058499][T13215] loop6: unable to read partition table [ 375.058788][T13215] loop6: partition table beyond EOD, truncated [ 375.058811][T13215] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 375.481964][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.512455][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.780479][T13241] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3391'. [ 375.976685][T13247] vivid-001: disconnect [ 375.978622][T13246] vivid-001: reconnect [ 376.104574][T12975] team0: Port device team_slave_0 added [ 376.141533][T12975] team0: Port device team_slave_1 added [ 376.536082][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.536101][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.536132][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.639278][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.639298][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.639328][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.800240][ T1174] IPVS: stop unused estimator thread 0... [ 376.818701][T13272] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3406'. [ 377.158671][ T38] audit: type=1326 audit(1757193752.475:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.158963][ T38] audit: type=1326 audit(1757193752.475:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.159561][ T38] audit: type=1326 audit(1757193752.475:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.159902][ T38] audit: type=1326 audit(1757193752.475:206): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.160163][ T38] audit: type=1326 audit(1757193752.475:207): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.160771][ T38] audit: type=1326 audit(1757193752.475:208): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.161939][ T38] audit: type=1326 audit(1757193752.475:209): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=13278 comm="syz.3.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7aaaaebe9 code=0x7ffc0000 [ 377.339828][T12975] hsr_slave_0: entered promiscuous mode [ 377.356499][T12975] hsr_slave_1: entered promiscuous mode [ 377.357652][T12975] debugfs: 'hsr0' already exists in 'hsr' [ 377.357684][T12975] Cannot create hsr debugfs directory [ 377.857431][T13298] binder: 13297:13298 ioctl c0306201 0 returned -14 [ 378.072021][T13305] autofs: Bad value for 'fd' [ 378.083685][ T38] audit: type=1326 audit(1757193753.395:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13301 comm="syz.0.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb76cfebe9 code=0x7ffc0000 [ 378.095883][ T38] audit: type=1326 audit(1757193753.405:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13301 comm="syz.0.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb76cfebe9 code=0x7ffc0000 [ 378.118283][ T38] audit: type=1326 audit(1757193753.435:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13301 comm="syz.0.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb76cfebe9 code=0x7ffc0000 [ 378.643198][T12975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 378.712875][T12975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 378.856102][T12975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 378.926901][T12975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 379.037906][T13337] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 379.263478][T12975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.314960][T12975] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.344183][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.344492][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.423874][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.424605][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.607019][T12975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.702771][T13363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3447'. [ 379.855889][ T5850] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 380.005911][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 380.016005][ T5850] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 380.016044][ T5850] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 380.016069][ T5850] usb 4-1: Product: syz [ 380.016087][ T5850] usb 4-1: Manufacturer: syz [ 380.016104][ T5850] usb 4-1: SerialNumber: syz [ 380.040341][ T5850] usb 4-1: config 0 descriptor?? [ 380.080243][T12975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.092122][ T5850] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 380.208065][ T5169] kernel write not supported for file /sg0 (pid: 5169 comm: kworker/1:2) [ 380.475796][T13385] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 380.724105][ T5850] gspca_zc3xx: reg_w_i err -71 [ 380.724188][ T5850] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 380.746332][ T5850] usb 4-1: USB disconnect, device number 24 [ 381.221393][T12975] veth0_vlan: entered promiscuous mode [ 381.253638][T12975] veth1_vlan: entered promiscuous mode [ 381.348662][T12975] veth0_macvtap: entered promiscuous mode [ 381.354721][T12975] veth1_macvtap: entered promiscuous mode [ 381.416940][T12975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.457188][T12975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.484325][ T1019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.484609][ T1019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.484666][ T1019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.484713][ T1019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.576113][T13412] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3466'. [ 381.576144][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3466'. [ 381.576159][T13412] tipc: MTU too low for tipc bearer [ 381.584207][T13413] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3467'. [ 382.001266][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.001287][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.109798][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.109821][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.238179][T13428] nbd: must specify a device to reconfigure [ 382.526072][T13440] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3478'. [ 382.978291][T13456] tipc: Enabling of bearer rejected, failed to enable media [ 383.079028][T13461] openvswitch: netlink: nsh attribute has 65533 unknown bytes. [ 383.079069][T13461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.929487][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.929559][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.442168][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3519'. [ 384.665046][T13532] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 384.672106][T13532] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 384.672243][T13532] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 384.672405][T13532] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 384.672458][T13532] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 384.672513][T13532] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 384.672664][T13532] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 384.672712][T13532] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 384.672763][T13532] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 384.672856][T13532] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 384.672901][T13532] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 384.672947][T13532] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 384.673034][T13532] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 384.673085][T13532] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 384.673134][T13532] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 384.673180][T13532] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 384.673229][T13532] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 384.673277][T13532] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 384.675721][ T44] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 384.827908][ T44] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 384.827973][ T44] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 384.828000][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.886577][ T44] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 385.926238][ T44] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 385.927212][ T44] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 386.139190][ T10] usb 4-1: USB disconnect, device number 25 [ 386.375319][ T44] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 386.530131][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.530168][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 386.531803][ T44] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 386.531833][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.577366][ T44] usb 5-1: config 0 descriptor?? [ 386.636872][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 386.786291][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 386.788748][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.788785][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 386.788823][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 386.788851][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.794593][ T10] usb 3-1: config 0 descriptor?? [ 387.199140][ T44] Bluetooth: Can't get version to change to load ram patch err [ 387.199160][ T44] Bluetooth: Loading sysconfig file failed [ 387.199202][ T44] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 387.203808][ T44] usb 5-1: USB disconnect, device number 26 [ 387.257175][ T10] hid_parser_main: 1 callbacks suppressed [ 387.257200][ T10] logitech 0003:046D:C219.0042: unknown main item tag 0x0 [ 387.257231][ T10] logitech 0003:046D:C219.0042: unknown main item tag 0x0 [ 387.257259][ T10] logitech 0003:046D:C219.0042: unknown main item tag 0x0 [ 387.257286][ T10] logitech 0003:046D:C219.0042: unknown main item tag 0x0 [ 387.257313][ T10] logitech 0003:046D:C219.0042: unknown main item tag 0x0 [ 387.295962][ T6019] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 387.343198][ T10] logitech 0003:046D:C219.0042: hidraw0: USB HID v0.05 Device [HID 046d:c219] on usb-dummy_hcd.2-1/input0 [ 387.343248][ T10] logitech 0003:046D:C219.0042: no inputs found [ 387.426228][ T5824] usb 3-1: USB disconnect, device number 33 [ 387.445824][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 387.448230][ T6019] usb 6-1: config 12 has an invalid interface number: 212 but max is 0 [ 387.448257][ T6019] usb 6-1: config 12 has no interface number 0 [ 387.451439][ T6019] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 387.451467][ T6019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.451489][ T6019] usb 6-1: Product: syz [ 387.451503][ T6019] usb 6-1: Manufacturer: syz [ 387.451519][ T6019] usb 6-1: SerialNumber: syz [ 387.469002][ T6019] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 387.469100][ T6019] dvb-usb: bulk message failed: -22 (2/0) [ 387.473319][ T6019] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.474384][ T6019] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 387.474452][ T6019] usb 6-1: media controller created [ 387.495272][ T5169] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 387.514230][ T6019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.541361][ T6019] cxusb: set interface failed [ 387.541398][ T6019] dvb-usb: bulk message failed: -22 (1/0) [ 387.541423][ T6019] dvb-usb: bulk message failed: -22 (3/0) [ 387.541444][ T6019] usb 6-1: bluebird_gpio_write failed. [ 387.556476][ T6019] dvb-usb: bulk message failed: -22 (3/0) [ 387.559570][ T6019] usb 6-1: bluebird_gpio_write failed. [ 387.625560][ T6019] DVB: Unable to find symbol dib7000p_attach() [ 387.625577][ T6019] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 387.682906][T13611] dvb-usb: bulk message failed: -22 (3/0) [ 387.693009][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 387.693042][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 387.693093][ T5169] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 387.693116][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.747726][ T5169] usb 4-1: config 0 descriptor?? [ 387.748580][T13615] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 387.775758][ T6019] rc_core: IR keymap rc-dvico-mce not found [ 387.775778][ T6019] Registered IR keymap rc-empty [ 387.777370][ T6019] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 387.780432][ T6019] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input27 [ 387.794566][ T6019] dvb-usb: schedule remote query interval to 100 msecs. [ 387.794590][ T6019] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 387.799162][ T6019] usb 6-1: USB disconnect, device number 2 [ 388.000957][ T6019] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 388.169819][ T5824] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 388.183183][ T5169] gembird 0003:11FF:3331.0043: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 388.357929][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.357966][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 388.358018][ T5824] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 388.358061][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.376059][ T6019] usb 4-1: USB disconnect, device number 26 [ 388.403761][ T5824] usb 5-1: config 0 descriptor?? [ 388.406459][T13621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 388.829168][ T5824] cypress 0003:04B4:DE61.0044: unknown main item tag 0x0 [ 388.832339][ T5824] cypress 0003:04B4:DE61.0044: unknown main item tag 0x0 [ 388.832372][ T5824] cypress 0003:04B4:DE61.0044: unknown main item tag 0x0 [ 388.832400][ T5824] cypress 0003:04B4:DE61.0044: unknown main item tag 0x0 [ 388.832427][ T5824] cypress 0003:04B4:DE61.0044: unknown main item tag 0x0 [ 388.877103][ T5824] cypress 0003:04B4:DE61.0044: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 389.024580][ T6019] usb 5-1: USB disconnect, device number 27 [ 389.231995][T13651] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 389.397993][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.412709][T13655] kAFS: unable to lookup cell 'sէKyy [ 389.412709][T13655] [ 389.412709][T13655] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 389.513211][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.568736][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.703737][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.770888][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.814437][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.856619][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.989824][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.055463][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.106586][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.286329][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.376379][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.420198][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.529338][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.570761][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.612759][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.658778][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.725078][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.781651][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.887324][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.935929][ T6019] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 391.010791][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.076211][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.085811][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 391.088979][ T6019] usb 6-1: unable to get BOS descriptor or descriptor too short [ 391.101408][ T6019] usb 6-1: config 4 interface 0 has no altsetting 0 [ 391.112801][ T6019] usb 6-1: string descriptor 0 read error: -22 [ 391.112903][ T6019] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 391.112929][ T6019] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 391.156982][ T6019] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 391.161606][ T6019] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 391.162035][ T6019] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 391.162088][ T6019] usb 6-1: media controller created [ 391.171269][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.221892][ T6019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.343989][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.367162][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.409463][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.451443][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.496176][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.558957][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.623801][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.665918][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.710124][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.755447][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.820597][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.863930][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.907035][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.948734][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.965912][ T5850] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 391.992473][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.033892][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.083179][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.125696][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.163985][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.164076][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.164116][ T5850] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 392.164140][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.169784][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.198749][ T5850] usb 3-1: config 0 descriptor?? [ 392.276712][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.300326][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.328834][ T6019] zl10353_read_register: readreg error (reg=127, ret==0) [ 392.340461][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.383539][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.443418][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.483118][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.546621][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.588940][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.630437][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.650832][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.683601][ T5850] hid-generic 0003:04F3:0754.0045: failed to start in urb: -90 [ 392.692158][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.743391][ T5850] hid-generic 0003:04F3:0754.0045: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.2-1/input0 [ 392.766873][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.775977][ T6019] usb 6-1: USB disconnect, device number 3 [ 392.802941][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.877310][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.901876][ T5850] usb 3-1: USB disconnect, device number 34 [ 392.918705][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.972037][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.139643][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.203966][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.423269][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.803192][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.181587][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.239571][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.330440][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.371371][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.412567][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.543137][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.657480][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.723703][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.936498][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.944818][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3653'. [ 405.980302][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.019865][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.062060][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.101438][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.126209][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.175980][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.217876][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.308288][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.374365][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.415667][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.456782][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.498222][T13847] sp0: Synchronizing with TNC [ 413.523604][T13913] sctp: [Deprecated]: syz.0.3695 (pid 13913) Use of int in max_burst socket option. [ 413.523604][T13913] Use struct sctp_assoc_value instead [ 413.897127][T13917] program syz.0.3698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.572252][T13919] veth3: entered promiscuous mode [ 414.676277][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.762653][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.803925][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.844721][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.874399][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.943719][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.009147][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.122013][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.161782][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.216278][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.608920][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.661414][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.728867][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.789241][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.860807][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.899318][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.618882][T13957] program syz.0.3716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.506260][ T990] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 419.721394][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 419.724282][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.724315][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.724363][ T990] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 419.724388][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.743762][ T990] usb 4-1: config 0 descriptor?? [ 420.532321][ T990] waltop 0003:172F:0034.0046: item fetching failed at offset 0/2 [ 420.546326][ T990] waltop 0003:172F:0034.0046: probe with driver waltop failed with error -22 [ 420.736784][ T5918] usb 4-1: USB disconnect, device number 27 [ 421.289260][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 421.294875][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 421.324177][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 421.349235][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3742'. [ 422.816050][ T5918] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 423.033514][ T5918] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 423.033544][ T5918] usb 5-1: config 0 has no interface number 0 [ 423.062565][ T5918] usb 5-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 423.062598][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.062620][ T5918] usb 5-1: Product: syz [ 423.062635][ T5918] usb 5-1: Manufacturer: syz [ 423.062651][ T5918] usb 5-1: SerialNumber: syz [ 423.147989][ T5918] usb 5-1: config 0 descriptor?? [ 423.497201][ T5918] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 423.541983][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 423.543892][ T5918] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 423.543953][ T5918] usb 5-1: media controller created [ 423.641129][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.008388][ T5918] DVB: Unable to find symbol dib7000p_attach() [ 424.008407][ T5918] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 424.008423][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 424.010142][ T5918] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 424.010200][ T5918] usb 5-1: media controller created [ 424.018650][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.099791][ T5918] dib0700: the master dib7090 has to be initialized first [ 424.099808][ T5918] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 424.485842][ T5918] rc_core: IR keymap rc-dib0700-rc5 not found [ 424.485863][ T5918] Registered IR keymap rc-empty [ 424.486320][ T5918] dvb-usb: could not initialize remote control. [ 424.486331][ T5918] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 424.856104][ T990] usb 5-1: USB disconnect, device number 28 [ 425.110467][ T990] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 426.565902][T13719] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 426.724600][T13719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.724672][T13719] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 426.724724][T13719] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.724750][T13719] usb 3-1: config 1 interface 1 has no altsetting 0 [ 426.781122][T13719] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.781155][T13719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.781177][T13719] usb 3-1: Product: syz [ 426.781192][T13719] usb 3-1: Manufacturer: syz [ 426.781208][T13719] usb 3-1: SerialNumber: syz [ 426.880428][T13719] cdc_ncm 3-1:1.0: skipping garbage [ 426.880450][T13719] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 426.880493][T13719] cdc_ncm 3-1:1.0: bind() failure [ 427.139689][T14050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 427.345917][T14058] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (28928) [ 427.345944][T14058] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 427.464786][ T990] usb 3-1: USB disconnect, device number 35 [ 428.116336][ T5918] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 428.358341][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.358371][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 428.358429][ T5918] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 428.358456][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.461464][ T5918] usb 5-1: config 0 descriptor?? [ 428.483929][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 428.483983][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 428.686922][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 428.716495][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 428.716562][ T5918] usb 5-1: media controller created [ 428.747500][T14062] dvb-usb: bulk message failed: -22 (2/0) [ 428.749609][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.797767][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 428.797864][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 428.827345][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 428.875801][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 428.875823][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 428.907227][ T5918] usb 5-1: USB disconnect, device number 29 [ 429.123938][T14074] sctp: [Deprecated]: syz.0.3769 (pid 14074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.123938][T14074] Use struct sctp_sack_info instead [ 430.083216][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 430.457275][T14088] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3776'. [ 430.462256][T14088] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3776'. [ 430.495916][ T5918] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 430.686320][ T5918] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 430.686351][ T5918] usb 5-1: config 0 has no interface number 0 [ 430.686386][ T5918] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 430.686428][ T5918] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 430.686458][ T5918] usb 5-1: config 0 interface 255 has no altsetting 0 [ 430.686494][ T5918] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 430.686519][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.774899][ T5918] usb 5-1: config 0 descriptor?? [ 430.832546][ T5918] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 431.854565][T14108] vlan2: entered promiscuous mode [ 431.854587][T14108] macvtap0: entered promiscuous mode [ 440.543462][ T5918] usb 5-1: USB disconnect, device number 30 [ 445.384544][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.617372][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.624603][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.635645][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.636971][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.637787][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.815874][ T5849] Bluetooth: hci5: command tx timeout [ 450.108604][T14173] chnl_net:caif_netlink_parms(): no params data found [ 450.340245][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.378768][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.381544][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.382948][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.383882][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.277820][ T5861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 451.310370][ T5861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 451.338151][ T5861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 451.342554][ T5861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 451.361962][ T5861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 451.836004][ T5861] Bluetooth: hci5: command tx timeout [ 451.982117][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 452.002192][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 452.017022][ T5849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 452.019393][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 452.023166][ T5849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 453.116139][ T5861] Bluetooth: hci6: command tx timeout [ 453.436003][ T5861] Bluetooth: hci7: command tx timeout [ 453.916665][ T5861] Bluetooth: hci5: command tx timeout [ 454.246567][ T5861] Bluetooth: hci8: command tx timeout [ 455.205692][ T5861] Bluetooth: hci6: command tx timeout [ 455.522464][ T5861] Bluetooth: hci7: command tx timeout [ 456.016546][ T5861] Bluetooth: hci5: command tx timeout [ 456.331369][ T5861] Bluetooth: hci8: command tx timeout [ 457.275430][ T5861] Bluetooth: hci6: command tx timeout [ 457.598663][ T5861] Bluetooth: hci7: command tx timeout [ 458.397278][ T5861] Bluetooth: hci8: command tx timeout [ 459.356193][ T5861] Bluetooth: hci6: command tx timeout [ 459.676564][ T5861] Bluetooth: hci7: command tx timeout [ 460.477153][ T5861] Bluetooth: hci8: command tx timeout [ 463.585901][T13719] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 463.735838][T13719] usb 5-1: Using ep0 maxpacket: 32 [ 463.738454][T13719] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 463.738483][T13719] usb 5-1: config 0 has no interface number 0 [ 463.738535][T13719] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.738564][T13719] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.738590][T13719] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.738621][T13719] usb 5-1: config 0 interface 2 has no altsetting 0 [ 463.738657][T13719] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 463.738682][T13719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.846378][T13719] usb 5-1: config 0 descriptor?? [ 464.329324][T13719] hid_parser_main: 2 callbacks suppressed [ 464.329347][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.329377][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.329403][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.329428][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.329454][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.329479][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.329505][T13719] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 464.405760][T13719] uclogic 0003:5543:0781.0047: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input2 [ 464.526679][T13719] usb 5-1: USB disconnect, device number 31 [ 465.108739][T14108] bridge0: port 3(syz_tun) entered disabled state [ 466.891020][T14108] syz_tun (unregistering): left allmulticast mode [ 466.893196][T14108] bridge0: port 3(syz_tun) entered disabled state [ 468.133271][T14173] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.133420][T14173] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.133632][T14173] bridge_slave_0: entered allmulticast mode [ 468.179316][T14173] bridge_slave_0: entered promiscuous mode [ 469.193259][T14173] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.193417][T14173] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.193617][T14173] bridge_slave_1: entered allmulticast mode [ 469.227012][T14173] bridge_slave_1: entered promiscuous mode [ 471.434854][ T1690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.051277][T14173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.178775][T14173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.306961][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 482.324708][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 482.339184][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.340600][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.341462][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.496189][ T5849] Bluetooth: hci0: command tx timeout [ 486.556825][ T5849] Bluetooth: hci0: command tx timeout [ 487.670664][ T1690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.655352][ T5849] Bluetooth: hci0: command tx timeout [ 490.715526][ T5849] Bluetooth: hci0: command tx timeout [ 498.830265][T14173] team0: Port device team_slave_0 added [ 498.886646][T14173] team0: Port device team_slave_1 added [ 506.804790][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.722409][ T1690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.768525][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.781306][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.782751][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.788417][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.789817][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.073345][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.116415][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.120361][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.121689][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.124482][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.935198][ T5861] Bluetooth: hci1: command tx timeout [ 510.176461][ T5861] Bluetooth: hci2: command tx timeout [ 511.607579][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.632084][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.633495][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.634869][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.643276][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.022915][ T5861] Bluetooth: hci1: command tx timeout [ 512.067560][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.097623][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.120819][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.122946][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.123828][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.244728][ T59] Bluetooth: hci2: command tx timeout [ 513.755408][ T59] Bluetooth: hci3: command tx timeout [ 514.076016][ T59] Bluetooth: hci1: command tx timeout [ 514.236049][ T59] Bluetooth: hci4: command tx timeout [ 514.317788][ T59] Bluetooth: hci2: command tx timeout [ 515.835974][ T59] Bluetooth: hci3: command tx timeout [ 516.156488][ T59] Bluetooth: hci1: command tx timeout [ 516.316046][ T59] Bluetooth: hci4: command tx timeout [ 516.396308][ T59] Bluetooth: hci2: command tx timeout [ 517.939633][ T59] Bluetooth: hci3: command tx timeout [ 518.407796][ T59] Bluetooth: hci4: command tx timeout [ 519.995191][ T59] Bluetooth: hci3: command tx timeout [ 520.475368][ T59] Bluetooth: hci4: command tx timeout [ 526.663942][ T1690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.096091][T14225] chnl_net:caif_netlink_parms(): no params data found [ 528.016247][T14234] chnl_net:caif_netlink_parms(): no params data found [ 528.029777][T14232] chnl_net:caif_netlink_parms(): no params data found [ 530.556056][T14225] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.556195][T14225] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.556444][T14225] bridge_slave_0: entered allmulticast mode [ 530.588548][T14225] bridge_slave_0: entered promiscuous mode [ 530.796363][T14225] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.796517][T14225] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.796769][T14225] bridge_slave_1: entered allmulticast mode [ 530.800600][T14225] bridge_slave_1: entered promiscuous mode [ 538.189606][T14225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.219574][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.219738][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.220042][T14234] bridge_slave_0: entered allmulticast mode [ 538.250570][T14234] bridge_slave_0: entered promiscuous mode [ 538.278400][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.278551][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.278814][T14232] bridge_slave_0: entered allmulticast mode [ 538.281773][T14232] bridge_slave_0: entered promiscuous mode [ 538.318788][T14238] chnl_net:caif_netlink_parms(): no params data found [ 538.339753][T14240] chnl_net:caif_netlink_parms(): no params data found [ 538.530250][T14225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.530914][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.531126][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.531375][T14234] bridge_slave_1: entered allmulticast mode [ 538.575865][T14234] bridge_slave_1: entered promiscuous mode [ 538.598691][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.598843][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.599109][T14232] bridge_slave_1: entered allmulticast mode [ 538.628774][T14232] bridge_slave_1: entered promiscuous mode [ 543.464497][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 543.480091][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 543.481489][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 543.482764][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 543.483679][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.515653][ T59] Bluetooth: hci5: command tx timeout [ 547.595727][ T59] Bluetooth: hci5: command tx timeout [ 549.675702][ T59] Bluetooth: hci5: command tx timeout [ 550.237746][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.244842][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.765828][ T59] Bluetooth: hci5: command tx timeout [ 555.574503][ C0] sched: DL replenish lagged too much [ 561.055870][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.083051][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.571114][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.587494][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 567.588960][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 567.590224][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 567.591626][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.258436][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.593816][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 568.614474][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 568.623365][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 568.624690][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 568.652462][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.685325][ T59] Bluetooth: hci0: command tx timeout [ 570.239374][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 570.263571][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 570.264967][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 570.281132][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 570.281981][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 570.715939][ T5849] Bluetooth: hci6: command tx timeout [ 570.916628][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 570.946755][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 570.948185][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 570.949849][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 570.951104][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 571.756212][ T59] Bluetooth: hci0: command tx timeout [ 572.315490][ T59] Bluetooth: hci7: command tx timeout [ 572.798224][ T59] Bluetooth: hci6: command tx timeout [ 573.035693][ T59] Bluetooth: hci8: command tx timeout [ 573.835842][ T59] Bluetooth: hci0: command tx timeout [ 574.395576][ T59] Bluetooth: hci7: command tx timeout [ 574.875850][ T59] Bluetooth: hci6: command tx timeout [ 575.115880][ T59] Bluetooth: hci8: command tx timeout [ 575.915719][ T59] Bluetooth: hci0: command tx timeout [ 576.475557][ T59] Bluetooth: hci7: command tx timeout [ 576.955548][ T59] Bluetooth: hci6: command tx timeout [ 577.195718][ T59] Bluetooth: hci8: command tx timeout [ 578.555604][ T59] Bluetooth: hci7: command tx timeout [ 579.275590][ T59] Bluetooth: hci8: command tx timeout [ 601.529204][T14234] team0: Port device team_slave_0 added [ 603.363293][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 603.381461][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 603.384521][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 603.402900][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 603.403717][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 607.116832][ T59] Bluetooth: hci1: command tx timeout [ 609.197696][ T59] Bluetooth: hci1: command tx timeout [ 611.278062][ T5849] Bluetooth: hci1: command tx timeout [ 613.357487][ T5849] Bluetooth: hci1: command tx timeout [ 629.028559][T14310] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.047549][T14310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.051783][T14310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.053648][T14310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.054603][T14310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.232114][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.405749][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.408724][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.410430][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.411281][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.700802][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.860191][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 630.881361][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 630.882884][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 630.884615][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 630.925300][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 631.001580][ T5849] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 631.027117][ T5849] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 631.028613][ T5849] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 631.030042][ T5849] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 631.030915][ T5849] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 631.115625][ T5849] Bluetooth: hci3: command tx timeout [ 631.435530][ T5849] Bluetooth: hci2: command tx timeout [ 633.035713][ T5849] Bluetooth: hci4: command tx timeout [ 633.115684][ T5849] Bluetooth: hci9: command tx timeout [ 633.195659][ T5849] Bluetooth: hci3: command tx timeout [ 633.521166][ T5849] Bluetooth: hci2: command tx timeout [ 635.115393][ T5849] Bluetooth: hci4: command tx timeout [ 635.195723][ T5849] Bluetooth: hci9: command tx timeout [ 635.275399][ T5849] Bluetooth: hci3: command tx timeout [ 635.595615][ T5849] Bluetooth: hci2: command tx timeout [ 637.195272][ T5849] Bluetooth: hci4: command tx timeout [ 637.285879][ T5849] Bluetooth: hci9: command tx timeout [ 637.359341][ T5849] Bluetooth: hci3: command tx timeout [ 637.675250][ T59] Bluetooth: hci2: command tx timeout [ 639.285886][ T59] Bluetooth: hci4: command tx timeout [ 639.355429][ T59] Bluetooth: hci9: command tx timeout [ 663.323434][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 663.342977][ T5849] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 663.344819][ T5849] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 663.361974][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 663.362832][ T5849] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 665.436016][ T5849] Bluetooth: hci10: command tx timeout [ 667.515592][ T5849] Bluetooth: hci10: command tx timeout [ 667.606983][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 669.595408][ T5849] Bluetooth: hci10: command tx timeout [ 671.675732][ T5849] Bluetooth: hci10: command tx timeout [ 679.023336][ T1690] bridge_slave_1: left allmulticast mode [ 679.023371][ T1690] bridge_slave_1: left promiscuous mode [ 679.023641][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.301334][ T1690] bridge_slave_0: left allmulticast mode [ 679.301371][ T1690] bridge_slave_0: left promiscuous mode [ 679.301657][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.479746][ T5849] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 689.505361][ T5849] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 689.506755][ T5849] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 689.515736][ T5849] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 689.546007][ T5849] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 690.140487][T14310] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 690.162468][T14310] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 690.163894][T14310] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 690.181969][T14310] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 690.183526][T14310] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 691.126508][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.388878][T14339] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 691.412045][T14339] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 691.413502][T14339] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 691.425405][T14339] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 691.440620][T14339] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 691.949337][T14342] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 691.970060][T14342] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 691.971975][T14342] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 691.973238][T14342] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 691.974544][T14342] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 706.476340][ T39] INFO: task syz-executor:14225 blocked for more than 143 seconds. [ 706.476369][ T39] Not tainted syzkaller #0 [ 706.476381][ T39] Blocked by coredump. [ 706.476387][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 706.476401][ T39] task:syz-executor state:D stack:22408 pid:14225 tgid:14225 ppid:1 task_flags:0x40054c flags:0x00004006 [ 706.476469][ T39] Call Trace: [ 706.476477][ T39] [ 706.476491][ T39] __schedule+0x16f3/0x4c20 [ 706.476549][ T39] ? __lock_acquire+0xab9/0xd20 [ 706.476579][ T39] ? __pfx___schedule+0x10/0x10 [ 706.476625][ T39] ? schedule+0x91/0x360 [ 706.476658][ T39] schedule+0x165/0x360 [ 706.476689][ T39] schedule_timeout+0x9a/0x270 [ 706.476725][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 706.476767][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 706.476799][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.476828][ T39] ? wait_for_completion+0x267/0x5d0 [ 706.476861][ T39] wait_for_completion+0x2bf/0x5d0 [ 706.476906][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 706.476944][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 706.476974][ T39] rcu_barrier+0x463/0x570 [ 706.477003][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 706.477037][ T39] netdev_run_todo+0x327/0xea0 [ 706.477064][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 706.477092][ T39] ? __pfx_netdev_run_todo+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 706.477113][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 706.477138][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.477177][ T39] ? netdev_state_change+0x1ca/0x220 [ 706.477210][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 706.477240][ T39] tun_chr_close+0x13f/0x1c0 [ 706.477273][ T39] __fput+0x45b/0xa80 [ 706.477306][ T39] task_work_run+0x1d4/0x260 [ 706.477333][ T39] ? __pfx_[ 706.477333][ T39] ? __pfx_task_work_run+0x10/0x10 [ 706.477355][ T39] ? do_exit+0x6b0/0x2300 [ 706.477373][ T39] ? kmem_cache_free+0x195/0x510 [ 706.477409][ T39] do_exit+0x6b5/0x2300 [ 706.477428][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 706.477467][ T39] ? __lock_acquire+0xab9/0xd20 [ 706.477497][ T39] ? __pfx_do_exit+0x10/0x10 [ 706.477514][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 706.477543][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 706.477578][ T39] do_group_exit+0x21c/0x2d0 [ 706.477604][ T39] get_signal+0x125e/0x1310 [ 706.477653][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 706.477681][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 706.477709][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 706.477760][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 706.477792][ T39] exit_to_user_mode_loop+0x75/0x110 [ 706.477822][ T39] do_syscall_64+0x2bd/0x3b0 [ 706.477843][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.477864][ T39] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.477885][ T39] ? clear_bhb_loop+0x60/0xb0 [ 706.477911][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.477936][ T39] RIP: 0033:0x7f2fbd6f0a7c [ 706.477958][ T39] RSP: 002b:00007ffd9a515a30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 706.477979][ T39] RAX: 0000000000000068 RBX: 00007f2fbe454620 RCX: 00007f2fbd6f0a7c [ 706.477994][ T39] RDX: 0000000000000068 RSI: 00007f2fbe454670 RDI: 0000000000000003 [ 706.478007][ T39] RBP: 0000000000000000 R08: 00007ffd9a515a84 R09: 000000000000000c [ 706.478019][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 706.478032][ T39] R13: 0000000000000000 R14: 00007f2fbe454670 R15: 0000000000000000 [ 706.478063][ T39] [ 706.478099][ T39] [ 706.478099][ T39] Showing all locks held in the system: [ 706.478109][ T39] 2 locks held by ksoftirqd/0/15: [ 706.478124][ T39] 1 lock held by khungtaskd/39: [ 706.478136][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 706.478187][ T39] 4 locks held by kworker/u9:0/59: [ 706.478199][ T39] #0: ffff88802bf6f938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.478279][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.478338][ T39] #2: ffff8880523c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 706.478396][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 706.478460][ T39] 3 locks held by kworker/u8:6/1019: [ 706.478474][ T39] #0: ffff88803068d138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.478533][ T39] #1: ffffc90004c27bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.478594][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 706.478654][ T39] 2 locks held by kworker/u8:7/1174: [ 706.478669][ T39] 4 locks held by kworker/u8:10/1690: [ 706.478682][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.478746][ T39] #1: ffffc90006017bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.478804][ T39] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 706.478867][ T39] #3: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 706.478942][ T39] 3 locks held by kworker/u8:14/3676: [ 706.478955][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.479014][ T39] #1: ffffc9000e08fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.479073][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 706.479125][ T39] 3 locks held by kworker/1:2/5169: [ 706.479139][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.479198][ T39] #1: ffffc90010587bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.479255][ T39] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 706.479311][ T39] 2 locks held by getty/5604: [ 706.479323][ T39] #0: ffff88823bf6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 706.479391][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 706.479460][ T39] 4 locks held by kworker/u9:2/5849: [ 706.479471][ T39] #0: ffff888020f21938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.479529][ T39] #1: ffffc900043e7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.479583][ T39] #2: ffff88806b6ac0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 706.479635][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 706.479688][ T39] 4 locks held by kworker/u9:5/5861: [ 706.479700][ T39] #0: ffff888023052938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.479765][ T39] #1: ffffc90004577bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.479820][ T39] #2: ffff88803d3b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 706.479872][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 706.479945][ T39] 15 locks held by kworker/0:4/5918: [ 706.479960][ T39] 3 locks held by kworker/1:6/7448: [ 706.479972][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.480030][ T39] #1: ffffc9000e00fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.480088][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 706.480142][ T39] 2 locks held by kworker/0:8/13740: [ 706.480156][ T39] 1 lock held by syz-executor/14225: [ 706.480169][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 706.480221][ T39] 1 lock held by syz-executor/14232: [ 706.480234][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 706.480297][ T39] 1 lock held by syz-executor/14234: [ 706.480309][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 706.480358][ T39] 1 lock held by syz-executor/14238: [ 706.480370][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 706.480418][ T39] 1 lock held by syz-executor/14240: [ 706.480430][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 706.480480][ T39] 2 locks held by syz-executor/14273: [ 706.480492][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 706.480547][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 706.480596][ T39] 3 locks held by syz-executor/14284: [ 706.480608][ T39] #0: ffff8880630f0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 706.480661][ T39] #1: ffff8880630f00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 706.480724][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 706.480773][ T39] 3 locks held by syz-executor/14287: [ 706.480785][ T39] #0: ffff888044598e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 706.480837][ T39] #1: ffff8880445980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 706.480893][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 706.480941][ T39] 2 locks held by syz-executor/14291: [ 706.480953][ T39] #0: ffff88804a278e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 706.481004][ T39] #1: ffff88804a2780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 706.481060][ T39] 3 locks held by syz-executor/14293: [ 706.481073][ T39] #0: ffff88804b514e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 706.481125][ T39] #1: ffff88804b5140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 706.481180][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 706.481229][ T39] 4 locks held by syz-executor/14302: [ 706.481241][ T39] #0: ffff88806e3ece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 706.481293][ T39] #1: ffff88806e3ec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 706.481349][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 706.481396][ T39] #3: ffff88806e83d358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 706.481459][ T39] 2 locks held by syz-executor/14306: [ 706.481471][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 706.481524][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 706.481576][ T39] 2 locks held by syz-executor/14308: [ 706.481588][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 706.481641][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 706.481693][ T39] 2 locks held by syz-executor/14313: [ 706.481705][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 706.481771][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 706.481822][ T39] 2 locks held by syz-executor/14315: [ 706.481833][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 706.481884][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 706.481934][ T39] 2 locks held by syz-executor/14327: [ 706.481946][ T39] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 706.482001][ T39] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 706.482052][ T39] 1 lock held by syz-executor/14331: [ 706.482064][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 706.482114][ T39] 1 lock held by syz-executor/14333: [ 706.482126][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 706.482175][ T39] 1 lock held by syz-executor/14337: [ 706.482187][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 706.482236][ T39] 4 locks held by kworker/u9:3/14339: [ 706.482248][ T39] #0: ffff888032c53138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 706.482303][ T39] #1: ffffc90004917bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 706.482357][ T39] #2: ffff88802c5780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 706.482409][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 706.482461][ T39] 1 lock held by syz-executor/14340: [ 706.482473][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 706.482523][ T39] 1 lock held by dhcpcd/14343: [ 706.482535][ T39] #0: ffff88802a13a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 706.482589][ T39] 1 lock held by dhcpcd/14344: [ 706.482599][ T39] #0: ffff888067b6e350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 706.482652][ T39] [ 706.482657][ T39] ============================================= [ 706.482657][ T39] [ 706.482672][ T39] NMI backtrace for cpu 1 [ 706.482699][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 706.482732][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.482745][ T39] Call Trace: [ 706.482752][ T39] [ 706.482760][ T39] dump_stack_lvl+0x189/0x250 [ 706.482795][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.482827][ T39] ? __pfx__printk+0x10/0x10 [ 706.482862][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 706.482891][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 706.482920][ T39] ? __pfx__printk+0x10/0x10 [ 706.482947][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 706.482976][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 706.483005][ T39] watchdog+0xf93/0xfe0 [ 706.483038][ T39] ? watchdog+0x1de/0xfe0 [ 706.483070][ T39] kthread+0x70e/0x8a0 [ 706.483105][ T39] ? __pfx_watchdog+0x10/0x10 [ 706.483130][ T39] ? __pfx_kthread+0x10/0x10 [ 706.483168][ T39] ? __pfx_kthread+0x10/0x10 [ 706.483200][ T39] ret_from_fork+0x3f9/0x770 [ 706.483230][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 706.483263][ T39] ? __switch_to_asm+0x39/0x70 [ 706.483281][ T39] ? __switch_to_asm+0x33/0x70 [ 706.483299][ T39] ? __pfx_kthread+0x10/0x10 [ 706.483330][ T39] ret_from_fork_asm+0x1a/0x30 [ 706.483367][ T39] [ 706.483374][ T39] Sending NMI from CPU 1 to CPUs 0: [ 706.483402][ C0] NMI backtrace for cpu 0 [ 706.483416][ C0] CPU: 0 UID: 0 PID: 5918 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 706.483435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.483446][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 706.483495][ C0] RIP: 0010:__lock_acquire+0x2d0/0xd20 [ 706.483520][ C0] Code: c7 10 4c 8b 6c 24 68 4d 89 6c c7 18 65 8b 15 b3 53 5a 10 31 f6 85 d2 40 0f 95 c6 31 d2 83 bf 04 0b 00 00 00 0f 95 c2 c1 e2 0d e6 0e 09 d6 8b 54 24 1c c1 e2 0f 0f b7 d2 09 f2 41 83 e4 03 41 [ 706.483536][ C0] RSP: 0018:ffffc90004d463b0 EFLAGS: 00000046 [ 706.483551][ C0] RAX: 000000000000002d RBX: ffffffff8d9a8bc0 RCX: 000000000000000b [ 706.483563][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802e781dc0 [ 706.483575][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af90c4b [ 706.483586][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ab47 R12: 0000000000000002 [ 706.483599][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802e7828e0 [ 706.483611][ C0] FS: 0000000000000000(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 706.483626][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.483638][ C0] CR2: 00007fec50036d00 CR3: 000000005c1b8000 CR4: 00000000003526f0 [ 706.483654][ C0] Call Trace: [ 706.483660][ C0] [ 706.483671][ C0] ? rt_spin_lock+0x1bb/0x2c0 [ 706.483691][ C0] lock_acquire+0x120/0x360 [ 706.483715][ C0] ? rt_spin_lock+0x1bb/0x2c0 [ 706.483743][ C0] rt_spin_lock+0x1d7/0x2c0 [ 706.483763][ C0] ? rt_spin_lock+0x1bb/0x2c0 [ 706.483784][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 706.483807][ C0] ? unwind_next_frame+0xa5/0x2390 [ 706.483835][ C0] ___slab_alloc+0x25f/0xdc0 [ 706.483864][ C0] ? dst_alloc+0x105/0x170 [ 706.483884][ C0] ? dst_alloc+0x105/0x170 [ 706.483900][ C0] kmem_cache_alloc_noprof+0xe6/0x310 [ 706.483926][ C0] dst_alloc+0x105/0x170 [ 706.483945][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 706.483970][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 706.483989][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 706.484026][ C0] ? __lock_acquire+0xab9/0xd20 [ 706.484051][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 706.484074][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 706.484099][ C0] ip_route_output_flow+0x2a/0x150 [ 706.484114][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 706.484137][ C0] ip_route_me_harder+0x6d2/0x1030 [ 706.484164][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 706.484198][ C0] synproxy_send_tcp+0x359/0x6c0 [ 706.484230][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 706.484264][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 706.484291][ C0] ? nft_symhash_dump+0x218/0x270 [ 706.484318][ C0] ? synproxy_pernet+0x45/0x270 [ 706.484340][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 706.484362][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 706.484383][ C0] ? nf_ip_checksum+0x13c/0x510 [ 706.484404][ C0] nft_synproxy_do_eval+0x345/0x570 [ 706.484426][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 706.484445][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 706.484479][ C0] nft_do_chain+0x409/0x1920 [ 706.484503][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 706.484524][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 706.484545][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 706.484576][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 706.484600][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 706.484626][ C0] nft_do_chain_inet+0x25d/0x340 [ 706.484644][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 706.484669][ C0] ? NF_HOOK+0x9a/0x3a0 [ 706.484693][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 706.484713][ C0] nf_hook_slow+0xc2/0x220 [ 706.484742][ C0] NF_HOOK+0x206/0x3a0 [ 706.484767][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 706.484793][ C0] ? NF_HOOK+0x9a/0x3a0 [ 706.484817][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 706.484852][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 706.484878][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 706.484904][ C0] ? skb_dst+0x4f/0xd0 [ 706.484927][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 706.484953][ C0] NF_HOOK+0x30c/0x3a0 [ 706.484981][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 706.485008][ C0] ? NF_HOOK+0x9a/0x3a0 [ 706.485033][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 706.485058][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 706.485087][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 706.485109][ C0] __netif_receive_skb+0x143/0x380 [ 706.485143][ C0] ? rt_spin_unlock+0x65/0x80 [ 706.485164][ C0] ? process_backlog+0x27b/0x900 [ 706.485185][ C0] process_backlog+0x31e/0x900 [ 706.485230][ C0] __napi_poll+0xb3/0x540 [ 706.485253][ C0] net_rx_action+0x707/0xe00 [ 706.485297][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 706.485320][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 706.485347][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 706.485361][ C0] ? __local_bh_enable_ip+0x1b2/0x270 [ 706.485389][ C0] handle_softirqs+0x22f/0x710 [ 706.485414][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 706.485439][ C0] __local_bh_enable_ip+0x179/0x270 [ 706.485464][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 706.485491][ C0] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 706.485515][ C0] wg_socket_send_skb_to_peer+0x199/0x200 [ 706.485542][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 706.485565][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 706.485589][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 706.485610][ C0] process_scheduled_works+0xade/0x17b0 [ 706.485642][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 706.485670][ C0] worker_thread+0x8a0/0xda0 [ 706.485701][ C0] kthread+0x70e/0x8a0 [ 706.485728][ C0] ? __pfx_worker_thread+0x10/0x10 [ 706.485749][ C0] ? __pfx_kthread+0x10/0x10 [ 706.485775][ C0] ? __pfx_kthread+0x10/0x10 [ 706.485801][ C0] ret_from_fork+0x3f9/0x770 [ 706.485823][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 706.485847][ C0] ? __switch_to_asm+0x39/0x70 [ 706.485861][ C0] ? __switch_to_asm+0x33/0x70 [ 706.485894][ C0] ? __pfx_kthread+0x10/0x10 [ 706.485921][ C0] ret_from_fork_asm+0x1a/0x30 [ 706.485945][ C0] [ 706.725034][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 706.725055][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 706.725077][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.725090][ T39] Call Trace: [ 706.725099][ T39] [ 706.725108][ T39] dump_stack_lvl+0x99/0x250 [ 706.725142][ T39] ? __asan_memcpy+0x40/0x70 [ 706.725165][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.725195][ T39] ? __pfx__printk+0x10/0x10 [ 706.725230][ T39] vpanic+0x281/0x750 [ 706.725263][ T39] ? __pfx_vpanic+0x10/0x10 [ 706.725293][ T39] ? preempt_schedule+0xae/0xc0 [ 706.725325][ T39] ? preempt_schedule_common+0x83/0xd0 [ 706.725360][ T39] panic+0xb9/0xc0 [ 706.725390][ T39] ? __pfx_panic+0x10/0x10 [ 706.725422][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 706.725453][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 706.725483][ T39] watchdog+0xfd2/0xfe0 [ 706.725525][ T39] ? watchdog+0x1de/0xfe0 [ 706.725557][ T39] kthread+0x70e/0x8a0 [ 706.725592][ T39] ? __pfx_watchdog+0x10/0x10 [ 706.725620][ T39] ? __pfx_kthread+0x10/0x10 [ 706.725656][ T39] ? __pfx_kthread+0x10/0x10 [ 706.725688][ T39] ret_from_fork+0x3f9/0x770 [ 706.725717][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 706.725748][ T39] ? __switch_to_asm+0x39/0x70 [ 706.725767][ T39] ? __switch_to_asm+0x33/0x70 [ 706.725785][ T39] ? __pfx_kthread+0x10/0x10 [ 706.725818][ T39] ret_from_fork_asm+0x1a/0x30 [ 706.725853][ T39] [ 706.726198][ T39] Kernel Offset: disabled