last executing test programs: 4.636414142s ago: executing program 4 (id=1589): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x48800) socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.246062631s ago: executing program 4 (id=1593): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) 3.86910574s ago: executing program 4 (id=1596): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.472253479s ago: executing program 1 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.015816549s ago: executing program 4 (id=1601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.915946399s ago: executing program 3 (id=1602): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x117}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5ee", 0x1a}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="17b02850d48a62c7c35d7dce8c40bcb7a00c82d40c9549cbaafd3993092eb21bec08acdb7d986df4097401f80bc6eb907b", 0xffffffe4, 0x30008095, 0x0, 0x0) 2.882483497s ago: executing program 1 (id=1603): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x321, 0x40, 0x6, 0x81, 0x3, @random="3050e9ae9a3c"}, 0x10) unshare(0x2a060400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.595974587s ago: executing program 0 (id=1605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0xfc}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5ee", 0x1a}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="17b02850d48a62c7c35d7dce8c40bcb7a00c82d40c9549cbaafd3993092eb21bec08acdb7d986df4097401f80bc6eb907b", 0xffffffe4, 0x30008095, 0x0, 0x0) 2.571789293s ago: executing program 0 (id=1606): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.432621826s ago: executing program 0 (id=1607): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'ip6_vti0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 2.401481448s ago: executing program 4 (id=1608): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 2.203055186s ago: executing program 0 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824adcbb517b3fc40a6c7e7ee61db5260ed8864b82168abe140b0f26ad2783c5415162393aa893e5a0b2020893ec89522cb2ce95643dde95259db8402e51b"], 0x36) syz_80211_inject_frame(&(0x7f0000000740)=@device_b, &(0x7f0000000780)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x8, 0x3da}}, @random="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"}, 0x5f9) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)) sendmsg$nl_route(r3, 0x0, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r4, 0x40085874, 0x0) 2.1357727s ago: executing program 2 (id=1611): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.075145193s ago: executing program 4 (id=1612): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000ffffffff0000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 1.904076079s ago: executing program 2 (id=1613): socket$inet(0xa, 0x801, 0x84) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x321, 0x40, 0x6, 0x81, 0x3, @random="3050e9ae9a3c"}, 0x10) 1.808696316s ago: executing program 3 (id=1614): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x24000016}, 0x4000082) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) unshare(0x20000400) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x1338000, 0x800}, 0x20) 1.714857002s ago: executing program 3 (id=1615): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 1.699309602s ago: executing program 1 (id=1616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0xfc}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5ee", 0x1a}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="17b02850d48a62c7c35d7dce8c40bcb7a00c82d40c9549cbaafd3993092eb21bec08acdb7d986df4097401f80bc6eb907b", 0xffffffe4, 0x30008095, 0x0, 0x0) 1.572857036s ago: executing program 3 (id=1617): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.315318035s ago: executing program 0 (id=1618): syz_emit_ethernet(0x92, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x5c, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x8000, 0x0, [{0x3, 0x9, "d33e6d4706598090a8030037ffffefffffffff23732407010000ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {}]}}}}}}, 0x0) 1.244087976s ago: executing program 3 (id=1619): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356", 0x11c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5ee", 0x1a}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="17b02850d48a62c7c35d7dce8c40bcb7a00c82d40c9549cbaafd3993092eb21bec08acdb7d986df4097401f80bc6eb907b", 0xffffffe4, 0x30008095, 0x0, 0x0) 1.018514923s ago: executing program 0 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c040) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x41040, 0x0) 780.487755ms ago: executing program 2 (id=1621): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/19, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="20001280080001006873720014000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) 639.189974ms ago: executing program 1 (id=1622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "03653a557f1f53fa", "dc2c800fbd9a7af5c681fecb6901c1df", "a09870a8", "b20c482589041903"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c8", 0x1}], 0x1) readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1) 594.708372ms ago: executing program 2 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x300, 0x0, 0x10046043}, 0x0) 484.949858ms ago: executing program 2 (id=1624): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) 225.371429ms ago: executing program 1 (id=1625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 175.909411ms ago: executing program 3 (id=1626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 6.120436ms ago: executing program 1 (id=1627): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd601569090044"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=1628): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc1c0000004788", 0xc, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x1e00, 0x5e, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): (bridge_slave_1) entered forwarding state [ 84.081013][ T5604] Bluetooth: hci2: command tx timeout [ 84.142755][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.229298][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.269286][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.290938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.291188][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.357591][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.357807][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.473912][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.539177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.539382][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.580894][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.605618][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.605777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.763360][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.850687][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.850885][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.928705][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.928834][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.516273][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.655052][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.979364][ T5602] veth0_vlan: entered promiscuous mode [ 86.000777][ T5604] Bluetooth: hci4: command tx timeout [ 86.000806][ T5604] Bluetooth: hci0: command tx timeout [ 86.027137][ T5592] veth0_vlan: entered promiscuous mode [ 86.079894][ T5604] Bluetooth: hci3: command tx timeout [ 86.079940][ T5599] Bluetooth: hci1: command tx timeout [ 86.125778][ T5602] veth1_vlan: entered promiscuous mode [ 86.155730][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.159735][ T5599] Bluetooth: hci2: command tx timeout [ 86.163621][ T5592] veth1_vlan: entered promiscuous mode [ 86.306130][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.353527][ T5602] veth0_macvtap: entered promiscuous mode [ 86.392373][ T5592] veth0_macvtap: entered promiscuous mode [ 86.396133][ T5602] veth1_macvtap: entered promiscuous mode [ 86.414236][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.445257][ T5592] veth1_macvtap: entered promiscuous mode [ 86.460533][ T5601] veth0_vlan: entered promiscuous mode [ 86.511556][ T5601] veth1_vlan: entered promiscuous mode [ 86.528604][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.547267][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.587797][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.610528][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.689287][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.728657][ T5600] veth0_vlan: entered promiscuous mode [ 86.734543][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.781669][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.787409][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.793501][ T31] cfg80211: failed to load regulatory.db [ 86.819974][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.865827][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.907289][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.963193][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.964174][ T5600] veth1_vlan: entered promiscuous mode [ 87.094044][ T5601] veth0_macvtap: entered promiscuous mode [ 87.312861][ T5601] veth1_macvtap: entered promiscuous mode [ 87.498717][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.548143][ T5591] veth0_vlan: entered promiscuous mode [ 87.553016][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.569250][ T5600] veth0_macvtap: entered promiscuous mode [ 87.617501][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.618140][ T5600] veth1_macvtap: entered promiscuous mode [ 87.625594][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.627868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.627891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.630163][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.632758][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.636616][ T5591] veth1_vlan: entered promiscuous mode [ 87.832339][ T3852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.832357][ T3852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.855576][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.941549][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.984485][ T3852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.984501][ T3852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.093740][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.096659][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.106731][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.108538][ T5591] veth0_macvtap: entered promiscuous mode [ 88.115360][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.124392][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.124408][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.150447][ T5591] veth1_macvtap: entered promiscuous mode [ 88.336797][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.336814][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.629478][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.741392][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.741411][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.746265][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.839111][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.904764][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.904784][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.907349][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.924956][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.944850][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.241212][ T3852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.241231][ T3852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.322349][ T5824] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 91.348649][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.348667][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.722935][ T5833] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.764809][ T5833] team0: entered allmulticast mode [ 91.764833][ T5833] team_slave_0: entered allmulticast mode [ 91.764856][ T5833] team_slave_1: entered allmulticast mode [ 91.826297][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.826317][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.279505][ T5878] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 96.536210][ T5879] nbd0: detected capacity change from 0 to 63 [ 96.847665][ T5599] block nbd0: Receive control failed (result -104) [ 96.894098][ T5875] syz.0.23 (5875) used greatest stack depth: 16544 bytes left [ 98.555722][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.32'. [ 98.565272][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.32'. [ 100.457466][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.457501][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.457516][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.624017][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.624154][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.624170][ T5935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 104.312141][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.312168][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.312183][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.460211][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.460237][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.460251][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.617602][ T5984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.56'. [ 104.617628][ T5984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.56'. [ 104.618737][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.618760][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.55'. [ 107.398898][ T6018] binder: BINDER_SET_CONTEXT_MGR already set [ 107.398914][ T6018] binder: 6017:6018 ioctl 4018620d 200000000040 returned -16 [ 108.840586][ T6035] binder: 6033:6035 ioctl 4018620d 0 returned -22 [ 108.881651][ T6034] loop8: detected capacity change from 0 to 8 [ 109.067523][ T6034] Dev loop8: unable to read RDB block 8 [ 109.067571][ T6034] loop8: unable to read partition table [ 109.067782][ T6034] loop8: partition table beyond EOD, truncated [ 109.067818][ T6034] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 110.847031][ T6060] binder: 6058:6060 ioctl c0306201 200000000080 returned -14 [ 110.855091][ T6060] binder: 6058:6060 ioctl c0306201 2000000003c0 returned -14 [ 112.354537][ T6074] __nla_validate_parse: 11 callbacks suppressed [ 112.354585][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.354604][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.354619][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.746127][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.746153][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.746169][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.823599][ T6079] nbd1: detected capacity change from 0 to 63 [ 112.845626][ T5599] block nbd1: Receive control failed (result -104) [ 112.862461][ T5906] block nbd1: Dead connection, failed to find a fallback [ 112.862490][ T5906] block nbd1: shutting down sockets [ 112.862549][ T5906] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.862595][ T5906] Buffer I/O error on dev nbd1, logical block 2, async page read [ 112.862783][ T5906] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.862797][ T5906] Buffer I/O error on dev nbd1, logical block 3, async page read [ 112.992591][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.992609][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 112.992617][ T6074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.83'. [ 115.344815][ T5730] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.611845][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 115.683640][ T5730] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 115.683670][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.887597][ T5730] usb 3-1: config 0 descriptor?? [ 117.236484][ T5730] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 117.284674][ T5730] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 117.284701][ T5730] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 118.318617][ T6140] netlink: 76 bytes leftover after parsing attributes in process `syz.3.103'. [ 120.078113][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.078138][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.078153][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.295505][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.295529][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.295542][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.467836][ T6161] syzkaller0: entered promiscuous mode [ 120.467861][ T6161] syzkaller0: entered allmulticast mode [ 120.607871][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.607899][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.607914][ T6158] netlink: 52 bytes leftover after parsing attributes in process `syz.0.107'. [ 120.738888][ T6174] binder: 6173:6174 ioctl c0306201 0 returned -14 [ 121.369461][ T6185] netlink: 'syz.3.116': attribute type 5 has an invalid length. [ 121.902075][ T6196] Zero length message leads to an empty skb [ 121.947346][ T6199] syzkaller0: entered promiscuous mode [ 121.947385][ T6199] syzkaller0: entered allmulticast mode [ 123.390229][ T6197] __nla_validate_parse: 2 callbacks suppressed [ 123.390248][ T6197] netlink: 252 bytes leftover after parsing attributes in process `syz.2.119'. [ 124.946669][ T6221] loop8: detected capacity change from 0 to 8 [ 124.988434][ T6221] Dev loop8: unable to read RDB block 8 [ 124.988476][ T6221] loop8: unable to read partition table [ 124.988696][ T6221] loop8: partition table beyond EOD, truncated [ 124.988730][ T6221] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 129.426169][ T63] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 30 seconds [ 129.428548][ T63] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 30 seconds [ 129.428584][ T63] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 30 seconds [ 129.428612][ T63] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 30 seconds [ 130.938901][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 130.973926][ T6249] netlink: 252 bytes leftover after parsing attributes in process `syz.3.136'. [ 131.017337][ T6255] loop8: detected capacity change from 0 to 8 [ 131.027705][ T6255] Dev loop8: unable to read RDB block 8 [ 131.027743][ T6255] loop8: unable to read partition table [ 131.027938][ T6255] loop8: partition table beyond EOD, truncated [ 131.027957][ T6255] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 131.300412][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 131.446647][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.793362][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 132.796079][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.796124][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.796149][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.796167][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.796186][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.805610][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.805699][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.865910][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 132.865939][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 132.865958][ T9] usb 2-1: Manufacturer: syz [ 132.963865][ T9] usb 2-1: config 0 descriptor?? [ 133.313607][ T6287] netlink: 252 bytes leftover after parsing attributes in process `syz.2.149'. [ 133.400283][ T9] rc_core: IR keymap rc-hauppauge not found [ 133.400304][ T9] Registered IR keymap rc-empty [ 133.400879][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.423901][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 134.545614][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 134.654558][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 136.070292][ T6325] binder: BINDER_SET_CONTEXT_MGR already set [ 136.070307][ T6325] binder: 6324:6325 ioctl 4018620d 200000000040 returned -16 [ 136.209155][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.235358][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.249731][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.269742][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.289849][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.309734][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.330348][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.351308][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.567953][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.592070][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 136.656410][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 136.656435][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.654242][ T9] usb 2-1: USB disconnect, device number 2 [ 138.030911][ T6350] netlink: 'syz.1.168': attribute type 5 has an invalid length. [ 138.030933][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 138.067581][ T6350] netlink: 'syz.1.168': attribute type 5 has an invalid length. [ 138.067619][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 138.222384][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.432264][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 138.438896][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.438948][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.438975][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.438995][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.439015][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.442364][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.442392][ T36] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 138.442410][ T36] usb 4-1: Manufacturer: syz [ 138.627349][ T36] usb 4-1: config 0 descriptor?? [ 139.009748][ T36] rc_core: IR keymap rc-hauppauge not found [ 139.009766][ T36] Registered IR keymap rc-empty [ 139.009913][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.033619][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.073002][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 139.224867][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 139.414480][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.444156][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.662728][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.682412][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.709717][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.729757][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.751128][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.769900][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.790260][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.820800][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 140.921776][ T36] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 140.921802][ T36] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.954657][ T36] usb 4-1: USB disconnect, device number 2 [ 143.149695][ T63] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 30 seconds [ 143.149737][ T63] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 30 seconds [ 144.010107][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.901870][ T6427] loop8: detected capacity change from 0 to 8 [ 147.902940][ T6427] Dev loop8: unable to read RDB block 8 [ 147.902981][ T6427] loop8: unable to read partition table [ 147.903186][ T6427] loop8: partition table beyond EOD, truncated [ 147.903203][ T6427] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.138935][ T6429] binder_alloc: 6428: pid 6428 spamming oneway? 1 buffers allocated for a total size of 4096 [ 148.179689][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.389762][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 148.427887][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.427941][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.427977][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.427998][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 148.428021][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.432417][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.432444][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.432464][ T31] usb 2-1: Manufacturer: syz [ 149.723476][ T31] usb 2-1: config 0 descriptor?? [ 149.808977][ T6443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.197'. [ 149.812195][ T6443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.197'. [ 150.100138][ T31] rc_core: IR keymap rc-hauppauge not found [ 150.100158][ T31] Registered IR keymap rc-empty [ 150.100323][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.132776][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.194340][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 150.197319][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 151.223817][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.249758][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.269732][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.289778][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.320259][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.339799][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.369786][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.396914][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.412230][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.429745][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 151.469024][ T31] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 151.469049][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 151.507551][ T31] usb 2-1: USB disconnect, device number 3 [ 151.776680][ T6470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 154.383240][ T6488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.211'. [ 154.410498][ T6488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.211'. [ 159.645604][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.129878][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 162.133880][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.133940][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.133967][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.133988][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.134012][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.135271][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.135297][ T36] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.135317][ T36] usb 4-1: Manufacturer: syz [ 162.235544][ T36] usb 4-1: config 0 descriptor?? [ 162.409697][ T63] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 60 seconds [ 162.409740][ T63] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 60 seconds [ 162.409767][ T63] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 60 seconds [ 162.409795][ T63] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 60 seconds [ 162.549661][ T36] rc_core: IR keymap rc-hauppauge not found [ 162.549679][ T36] Registered IR keymap rc-empty [ 162.549848][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 162.843266][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 163.510480][ T6534] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 163.858633][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 164.246803][ T6538] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 164.289222][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 164.303720][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.332989][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.353103][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.382689][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.410960][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.434873][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.450274][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.482558][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.709338][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 164.719751][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 165.697872][ T36] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 165.697894][ T36] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 165.740719][ T36] usb 4-1: USB disconnect, device number 3 [ 175.109786][ T6584] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 176.073029][ T63] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 60 seconds [ 176.073072][ T63] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 60 seconds [ 176.161570][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.238'. [ 176.179943][ T5708] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.341173][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 176.343371][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.343440][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.343468][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 176.343488][ T5708] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 176.343510][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.347438][ T5708] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.347465][ T5708] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.347484][ T5708] usb 2-1: Manufacturer: syz [ 176.461639][ T5708] usb 2-1: config 0 descriptor?? [ 178.509668][ T5708] rc_core: IR keymap rc-hauppauge not found [ 178.509688][ T5708] Registered IR keymap rc-empty [ 178.509831][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.529777][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.551088][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 178.577771][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 178.815987][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.829745][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 178.946553][ T6624] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 179.691133][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.712081][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.746430][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.763568][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.780954][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.799773][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.819771][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 179.840558][ T5708] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 180.112156][ T5708] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.112181][ T5708] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.138588][ T6640] netlink: 136 bytes leftover after parsing attributes in process `syz.3.251'. [ 180.159822][ T5730] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 180.159898][ T5730] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 180.213140][ T5730] usb 3-1: USB disconnect, device number 2 [ 180.214584][ T5708] usb 2-1: USB disconnect, device number 4 [ 184.475789][ T6693] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 186.879777][ T5708] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.932904][ T6701] netlink: 136 bytes leftover after parsing attributes in process `syz.4.264'. [ 192.919173][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.279'. [ 192.939717][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.999798][ T63] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 90 seconds [ 192.999842][ T63] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 90 seconds [ 192.999869][ T63] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 90 seconds [ 192.999897][ T63] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 90 seconds [ 193.097420][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 193.111492][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.111545][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.111572][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.111592][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.111613][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.116830][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.116858][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.116876][ T10] usb 5-1: Manufacturer: syz [ 193.198668][ T10] usb 5-1: config 0 descriptor?? [ 193.477657][ T6768] binder: 6767:6768 ioctl c0306201 2000000003c0 returned -14 [ 193.660019][ T10] rc_core: IR keymap rc-hauppauge not found [ 193.660037][ T10] Registered IR keymap rc-empty [ 193.660154][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.688376][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 193.745504][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 193.749009][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 194.678220][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.806925][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.807072][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.839865][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.859950][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.880074][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.900175][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.919760][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.939755][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.960037][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.979761][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 194.999740][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 195.027407][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 195.027432][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 196.796728][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.290'. [ 196.872489][ T5607] usb 5-1: USB disconnect, device number 2 [ 196.955186][ T6788] netlink: 204 bytes leftover after parsing attributes in process `syz.3.287'. [ 198.278370][ T6814] binder: 6813:6814 ioctl c0306201 200000000080 returned -14 [ 198.279499][ T6814] binder: 6813:6814 ioctl c0306201 2000000003c0 returned -14 [ 201.167880][ T6847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.303'. [ 201.558425][ T6854] binder: 6851:6854 ioctl c0306201 200000000080 returned -14 [ 201.587195][ T6854] binder: 6851:6854 ioctl c0306201 2000000003c0 returned -14 [ 202.087342][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 202.133682][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 202.133811][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 202.151382][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 202.151484][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 202.426212][ T6853] netlink: 204 bytes leftover after parsing attributes in process `syz.1.304'. [ 206.439713][ T63] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 90 seconds [ 206.439755][ T63] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 90 seconds [ 206.491894][ T6898] nbd: must specify a size in bytes for the device [ 206.525062][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'. [ 207.625703][ T6908] binder: 6906:6908 ioctl c0306201 200000000080 returned -14 [ 207.627756][ T6908] binder: 6906:6908 ioctl c0306201 2000000003c0 returned -14 [ 207.828920][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 207.847173][ T6910] netlink: 204 bytes leftover after parsing attributes in process `syz.1.320'. [ 211.297204][ T6953] binder: 6947:6953 ioctl c0306201 200000000080 returned -14 [ 212.147863][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.333'. [ 212.228469][ T6953] binder: 6947:6953 ioctl 4018620d 0 returned -22 [ 212.228699][ T6953] binder: 6947:6953 ioctl c0306201 2000000003c0 returned -14 [ 212.275393][ T6961] binder: BINDER_SET_CONTEXT_MGR already set [ 212.275409][ T6961] binder: 6959:6961 ioctl 4018620d 200000004a80 returned -16 [ 215.689949][ T5730] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 216.009667][ T5730] usb 4-1: Using ep0 maxpacket: 32 [ 217.085900][ T5730] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.085960][ T5730] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.591401][ T5730] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.591430][ T5730] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 217.591449][ T5730] usb 4-1: Product: syz [ 217.591462][ T5730] usb 4-1: Manufacturer: syz [ 217.863936][ T5730] usb 4-1: can't set config #4, error -71 [ 217.894713][ T5730] usb 4-1: USB disconnect, device number 4 [ 217.952683][ T7016] binder: 7015:7016 ioctl c0306201 200000000080 returned -14 [ 217.958248][ T7016] binder: 7015:7016 ioctl 4018620d 0 returned -22 [ 217.958506][ T7016] binder: 7015:7016 ioctl c0306201 2000000003c0 returned -14 [ 221.365711][ T5730] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.495130][ T4958] udevd[4958]: worker [5906] /devices/virtual/block/nbd1 is taking a long time [ 222.495179][ T4958] udevd[4958]: worker [5788] /devices/virtual/block/nbd0 is taking a long time [ 223.770118][ T63] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 120 seconds [ 223.770162][ T63] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 120 seconds [ 223.770190][ T63] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 120 seconds [ 223.770217][ T63] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 120 seconds [ 226.580119][ T7065] binder: 7064:7065 ioctl c0306201 200000000080 returned -14 [ 226.583864][ T7065] binder: 7064:7065 ioctl 4018620d 0 returned -22 [ 226.584075][ T7065] binder: 7064:7065 ioctl c0306201 2000000003c0 returned -14 [ 230.138036][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 232.719825][ T1241] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.874580][ T7103] binder: 7102:7103 ioctl c0306201 200000000080 returned -14 [ 232.876895][ T7103] binder: 7102:7103 ioctl c0306201 0 returned -14 [ 235.415940][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 235.480001][ T7131] netlink: 44 bytes leftover after parsing attributes in process `syz.1.381'. [ 235.656252][ T7141] binder: 7140:7141 ioctl c0306201 200000000080 returned -14 [ 235.658621][ T7141] binder: 7140:7141 ioctl c0306201 0 returned -14 [ 236.086744][ T5324] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.907804][ T5324] usb 4-1: Using ep0 maxpacket: 32 [ 241.401887][ T5324] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 241.401915][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.979811][ T63] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 120 seconds [ 241.979849][ T63] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 120 seconds [ 242.288983][ T5324] usb 4-1: config 0 descriptor?? [ 242.291654][ T5324] usb 4-1: can't set config #0, error -71 [ 243.754737][ T5324] usb 4-1: USB disconnect, device number 5 [ 243.966374][ T7181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'. [ 243.967869][ T7181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'. [ 244.047227][ T7178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.396'. [ 244.050137][ T7182] binder: 7175:7182 ioctl c0306201 200000000080 returned -14 [ 244.062838][ T7182] binder: 7175:7182 ioctl c0306201 0 returned -14 [ 245.563656][ T5730] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 245.739768][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 245.747550][ T5730] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 245.747579][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.804064][ T5730] usb 1-1: config 0 descriptor?? [ 245.894409][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 246.012872][ T5730] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 246.169319][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.170463][ T5730] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 246.170560][ T5730] usb 1-1: media controller created [ 246.981406][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.411'. [ 246.984911][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.066119][ T7221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.411'. [ 247.291276][ T5730] DVB: Unable to find symbol dib7000p_attach() [ 247.291292][ T5730] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 247.295056][ T7226] binder: 7224:7226 ioctl c0306201 200000000080 returned -14 [ 247.389898][ T5730] rc_core: IR keymap rc-dib0700-rc5 not found [ 247.389918][ T5730] Registered IR keymap rc-empty [ 247.390508][ T5730] dvb-usb: could not initialize remote control. [ 247.390519][ T5730] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 247.526846][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'. [ 247.843619][ T6382] usb 1-1: USB disconnect, device number 3 [ 250.131595][ T6382] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 250.434418][ T7266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 250.436855][ T7255] netlink: 204 bytes leftover after parsing attributes in process `syz.0.423'. [ 250.667513][ T7269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.425'. [ 251.937323][ T7273] binder: 7272:7273 ioctl c0306201 200000000080 returned -14 [ 252.091956][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 254.585495][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 150 seconds [ 254.591137][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 150 seconds [ 254.591388][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 150 seconds [ 254.591594][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 150 seconds [ 255.042272][ T5607] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 255.100832][ T5324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 255.209740][ T5607] usb 2-1: Using ep0 maxpacket: 32 [ 255.213597][ T5607] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 255.213624][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.235842][ T5607] usb 2-1: config 0 descriptor?? [ 255.251094][ T5324] usb 3-1: Using ep0 maxpacket: 32 [ 255.265171][ T5324] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.265201][ T5324] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.278113][ T5324] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 255.278141][ T5324] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 255.278160][ T5324] usb 3-1: Product: syz [ 255.278249][ T5324] usb 3-1: Manufacturer: syz [ 255.449388][ T5607] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 255.496517][ T5607] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.497278][ T5607] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 255.498040][ T5607] usb 2-1: media controller created [ 255.502786][ T5324] hub 3-1:4.0: USB hub found [ 256.298878][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.298949][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.348164][ T5324] hub 3-1:4.0: 2 ports detected [ 256.586280][ T5607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.640976][ T7313] binder: 7312:7313 ioctl c0306201 200000000080 returned -14 [ 256.653363][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 256.781645][ T5607] DVB: Unable to find symbol dib7000p_attach() [ 256.781714][ T5607] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 256.849440][ T7317] netlink: 204 bytes leftover after parsing attributes in process `syz.0.441'. [ 257.279793][ T5607] rc_core: IR keymap rc-dib0700-rc5 not found [ 257.279815][ T5607] Registered IR keymap rc-empty [ 257.280104][ T5607] dvb-usb: could not initialize remote control. [ 257.280113][ T5607] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 259.657537][ T6993] usb 2-1: USB disconnect, device number 6 [ 260.824236][ T5607] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 260.871292][ T5730] usb 3-1: USB disconnect, device number 4 [ 260.911206][ T6993] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 261.786177][ T7362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.452'. [ 262.123485][ T7365] binder: 7363:7365 ioctl c0306201 200000000080 returned -14 [ 262.408371][ T7369] netlink: 204 bytes leftover after parsing attributes in process `syz.2.454'. [ 262.889806][ T1241] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 263.069716][ T1241] usb 4-1: Using ep0 maxpacket: 32 [ 263.075458][ T1241] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 263.075487][ T1241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.937181][ T1241] usb 4-1: config 0 descriptor?? [ 264.252034][ T1241] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 264.322303][ T1241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.324160][ T1241] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 264.324215][ T1241] usb 4-1: media controller created [ 264.426718][ T1241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.449695][ T6993] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 264.599671][ T6993] usb 3-1: Using ep0 maxpacket: 32 [ 264.602265][ T6993] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.602296][ T6993] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.604264][ T6993] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 264.604290][ T6993] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 264.604310][ T6993] usb 3-1: Product: syz [ 264.604323][ T6993] usb 3-1: Manufacturer: syz [ 264.681082][ T6993] hub 3-1:4.0: USB hub found [ 264.886603][ T6993] hub 3-1:4.0: 2 ports detected [ 264.888994][ T1241] DVB: Unable to find symbol dib7000p_attach() [ 264.889008][ T1241] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 265.271732][ T1241] rc_core: IR keymap rc-dib0700-rc5 not found [ 265.271752][ T1241] Registered IR keymap rc-empty [ 265.294473][ T7403] netlink: 200 bytes leftover after parsing attributes in process `syz.4.464'. [ 266.086078][ T1241] dvb-usb: could not initialize remote control. [ 266.086092][ T1241] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 266.281939][ T1241] usb 4-1: USB disconnect, device number 6 [ 268.736777][ T1241] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 269.016972][ T7420] binder: 7418:7420 ioctl c0306201 200000000080 returned -14 [ 269.185388][ T6993] usb 3-1: USB disconnect, device number 5 [ 269.222681][ T7423] netlink: 204 bytes leftover after parsing attributes in process `syz.1.469'. [ 270.829725][ T6993] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.981675][ T6993] usb 4-1: Using ep0 maxpacket: 32 [ 270.996398][ T6993] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 270.996426][ T6993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.972967][ T6993] usb 4-1: config 0 descriptor?? [ 272.891065][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 150 seconds [ 272.891108][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 150 seconds [ 274.766515][ T6993] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 274.908558][ T6993] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 274.908636][ T6993] dib0700: firmware download failed at 7 with -22 [ 274.935158][ T6993] usb 4-1: USB disconnect, device number 7 [ 275.049129][ T7468] netlink: 204 bytes leftover after parsing attributes in process `syz.3.483'. [ 275.189741][ T5754] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.119712][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 276.128836][ T5754] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.128868][ T5754] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.302803][ T5754] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.302831][ T5754] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 276.302851][ T5754] usb 2-1: Product: syz [ 276.302865][ T5754] usb 2-1: Manufacturer: syz [ 276.406754][ T5754] hub 2-1:4.0: USB hub found [ 276.610550][ T5754] hub 2-1:4.0: 2 ports detected [ 277.816905][ T7499] Bluetooth: MGMT ver 1.23 [ 278.888007][ T5607] usb 2-1: USB disconnect, device number 7 [ 279.813113][ T5754] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.979749][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 279.981961][ T5754] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 279.981989][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.086611][ T5754] usb 3-1: config 0 descriptor?? [ 281.541280][ T5754] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 281.618971][ T5754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.629661][ T5754] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 281.630928][ T5754] usb 3-1: media controller created [ 281.685459][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.766957][ T5754] DVB: Unable to find symbol dib7000p_attach() [ 281.766972][ T5754] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 281.899771][ T5754] rc_core: IR keymap rc-dib0700-rc5 not found [ 281.899789][ T5754] Registered IR keymap rc-empty [ 281.900053][ T5754] dvb-usb: could not initialize remote control. [ 281.900062][ T5754] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 283.929107][ T5708] usb 3-1: USB disconnect, device number 6 [ 284.019817][ T5708] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 284.289769][ T5754] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 284.476679][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 284.492273][ T5754] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.492306][ T5754] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.557853][ T5754] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 284.557884][ T5754] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 284.557903][ T5754] usb 5-1: Product: syz [ 284.557917][ T5754] usb 5-1: Manufacturer: syz [ 284.613499][ T5754] hub 5-1:4.0: USB hub found [ 285.129514][ T5754] hub 5-1:4.0: 2 ports detected [ 285.820401][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 180 seconds [ 285.820444][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 180 seconds [ 285.820472][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 180 seconds [ 285.820552][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 180 seconds [ 287.140503][ T5607] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 288.061101][ T5607] usb 2-1: Using ep0 maxpacket: 16 [ 288.132604][ T5607] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 288.132650][ T5607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.132676][ T5607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.132697][ T5607] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.132718][ T5607] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.137511][ T5607] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 288.137538][ T5607] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.137556][ T5607] usb 2-1: Manufacturer: syz [ 288.258134][ T5607] usb 2-1: config 0 descriptor?? [ 288.490060][ T5754] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 288.529793][ T5754] usb 5-1: USB disconnect, device number 3 [ 288.817001][ T5607] rc_core: IR keymap rc-hauppauge not found [ 288.817021][ T5607] Registered IR keymap rc-empty [ 288.817186][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 288.839803][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 289.053538][ T5607] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 289.093430][ T5607] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 290.120935][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.139715][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.160008][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.180914][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.201198][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.232216][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.250249][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.269758][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.290770][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.309843][ T5607] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 290.350577][ T5607] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 290.350601][ T5607] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 290.358315][ T5607] usb 2-1: USB disconnect, device number 8 [ 291.352318][ T5754] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 291.669740][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 292.276778][ T5754] usb 5-1: unable to read config index 0 descriptor/all [ 292.276828][ T5754] usb 5-1: can't read configurations, error -71 [ 294.177077][ T5607] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 295.032031][ T5607] usb 3-1: Using ep0 maxpacket: 32 [ 295.039946][ T5607] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.039976][ T5607] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.069242][ T5607] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.069285][ T5607] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 295.069306][ T5607] usb 3-1: Product: syz [ 295.069320][ T5607] usb 3-1: Manufacturer: syz [ 295.187003][ T5607] hub 3-1:4.0: USB hub found [ 295.299102][ T5607] hub 3-1:4.0: 2 ports detected [ 297.552839][ T819] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 297.573273][ T5607] hub 3-1:4.0: set hub depth failed [ 297.602297][ T5607] usb 3-1: USB disconnect, device number 7 [ 297.701261][ T819] usb 5-1: Using ep0 maxpacket: 32 [ 297.708939][ T819] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 297.708969][ T819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.757815][ T819] usb 5-1: config 0 descriptor?? [ 298.976818][ T819] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 298.984230][ T819] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 298.984275][ T819] dib0700: firmware download failed at 7 with -22 [ 298.997989][ T819] usb 5-1: USB disconnect, device number 6 [ 301.750471][ T6382] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 302.509755][ T5708] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 302.663390][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 302.668513][ T5708] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 302.668568][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.668596][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 302.668617][ T5708] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 302.668639][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.840024][ T6382] usb 2-1: Using ep0 maxpacket: 32 [ 303.146819][ T6382] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.147006][ T6382] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.459524][ T5708] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.459643][ T5708] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.459665][ T5708] usb 1-1: Manufacturer: syz [ 303.549741][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 180 seconds [ 303.549799][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 180 seconds [ 303.575584][ T6382] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.575613][ T6382] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 303.575632][ T6382] usb 2-1: Product: syz [ 303.575646][ T6382] usb 2-1: Manufacturer: syz [ 303.619190][ T5708] usb 1-1: config 0 descriptor?? [ 303.746545][ T6382] hub 2-1:4.0: USB hub found [ 303.929734][ T5708] rc_core: IR keymap rc-hauppauge not found [ 303.929755][ T5708] Registered IR keymap rc-empty [ 303.929906][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.938223][ T6382] hub 2-1:4.0: 2 ports detected [ 303.966953][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 303.981330][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 303.984291][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 304.020887][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.039763][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.061426][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.081893][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.099774][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.120721][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.139822][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.163502][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.179888][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.199800][ T5708] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 304.244368][ T5708] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 304.244458][ T5708] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 304.417940][ T5708] usb 1-1: USB disconnect, device number 4 [ 307.539683][ T5324] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 307.543377][ T5754] usb 2-1: USB disconnect, device number 9 [ 309.518667][ T5324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 309.741511][ T5324] usb 4-1: Using ep0 maxpacket: 16 [ 309.751198][ T5324] usb 4-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 309.751261][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.751289][ T5324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 309.751309][ T5324] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 309.751328][ T5324] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.792937][ T5324] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 309.792965][ T5324] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.792983][ T5324] usb 4-1: Manufacturer: syz [ 309.823375][ T5324] usb 4-1: config 0 descriptor?? [ 311.259551][ T7823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 311.267353][ T7823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'. [ 311.389697][ T5324] rc_core: IR keymap rc-hauppauge not found [ 311.389716][ T5324] Registered IR keymap rc-empty [ 311.389866][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.409745][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.432312][ T5324] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 311.439316][ T5324] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 311.462231][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.480365][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.500062][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.521444][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.540778][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.573496][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.598633][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.611859][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.630581][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.820577][ T5324] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.854755][ T5324] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 311.854779][ T5324] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 311.893283][ T5324] usb 4-1: USB disconnect, device number 8 [ 313.238174][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 313.625189][ T7859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.593'. [ 316.209729][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 210 seconds [ 316.209781][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 210 seconds [ 316.209810][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 210 seconds [ 316.209837][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 210 seconds [ 316.253977][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 317.430391][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430458][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.508073][ T7901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.604'. [ 317.589740][ T5754] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 317.739692][ T5754] usb 5-1: Using ep0 maxpacket: 16 [ 317.746703][ T5754] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 317.746825][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.746859][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.746880][ T5754] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.746903][ T5754] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.780160][ T5754] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.780189][ T5754] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.780207][ T5754] usb 5-1: Manufacturer: syz [ 317.876275][ T5754] usb 5-1: config 0 descriptor?? [ 319.871137][ T5754] rc_core: IR keymap rc-hauppauge not found [ 319.871158][ T5754] Registered IR keymap rc-empty [ 319.871308][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 319.898048][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 319.928231][ T5754] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 319.959421][ T5754] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 321.067669][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 321.081456][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.046452][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.090732][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.109757][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.129775][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.152185][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.169745][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.189776][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.209740][ T5754] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.236992][ T5754] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 322.237017][ T5754] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 322.373516][ T5754] usb 5-1: USB disconnect, device number 7 [ 323.461939][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 325.210574][ T5708] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 325.299718][ T5754] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 325.359729][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 325.362523][ T5708] usb 3-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 325.362574][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.362600][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.362620][ T5708] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.362642][ T5708] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.364274][ T5708] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.364301][ T5708] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.364321][ T5708] usb 3-1: Manufacturer: syz [ 325.452887][ T5708] usb 3-1: config 0 descriptor?? [ 325.489737][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 325.492771][ T5754] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 325.492806][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.556365][ T5754] usb 4-1: config 0 descriptor?? [ 325.775805][ T5754] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 325.787379][ T5754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 325.788134][ T5754] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 325.788186][ T5754] usb 4-1: media controller created [ 325.799667][ T5708] rc_core: IR keymap rc-hauppauge not found [ 325.799685][ T5708] Registered IR keymap rc-empty [ 325.799835][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.829702][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 325.881531][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 325.887430][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.915068][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 326.039826][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.059844][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.078225][ T5754] DVB: Unable to find symbol dib7000p_attach() [ 326.078234][ T5754] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 326.903708][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.920622][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.941887][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.959788][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.979787][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 326.999778][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 327.019773][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 327.039919][ T5708] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 327.177382][ T5708] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 327.177407][ T5708] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 327.230197][ T5708] usb 3-1: USB disconnect, device number 8 [ 327.330104][ T5754] rc_core: IR keymap rc-dib0700-rc5 not found [ 327.330125][ T5754] Registered IR keymap rc-empty [ 327.330412][ T5754] dvb-usb: could not initialize remote control. [ 327.330421][ T5754] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 327.377747][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 327.634470][ T5607] usb 4-1: USB disconnect, device number 9 [ 327.889468][ T5607] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 329.694937][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 329.879783][ T6382] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 329.887205][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.894229][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.896826][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.008527][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.040165][ T6382] usb 1-1: Using ep0 maxpacket: 16 [ 330.043984][ T6382] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 330.044037][ T6382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.044063][ T6382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.044083][ T6382] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 330.044104][ T6382] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.046036][ T6382] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 330.046062][ T6382] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 330.046081][ T6382] usb 1-1: Manufacturer: syz [ 330.145074][ T6382] usb 1-1: config 0 descriptor?? [ 330.436118][ T6382] rc_core: IR keymap rc-hauppauge not found [ 330.436138][ T6382] Registered IR keymap rc-empty [ 330.437253][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.457764][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.475108][ T6382] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 330.482089][ T6382] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 330.514675][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.519348][ T5864] nci: nci_ntf_packet: unknown ntf opcode 0x524 [ 330.539805][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.559877][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.580037][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.599756][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.619737][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.786595][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.799924][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.819801][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.839960][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 330.862700][ T6382] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 330.862725][ T6382] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 331.218817][ T6382] usb 1-1: USB disconnect, device number 5 [ 333.149353][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 333.329318][ T8037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.881318][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 210 seconds [ 333.881361][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 210 seconds [ 333.999816][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.036754][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.055511][ T8099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.076706][ T8097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.191187][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 335.394418][ T8115] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 337.096547][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 337.973728][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 340.221980][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 345.197405][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 347.229705][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 240 seconds [ 347.229750][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 240 seconds [ 347.229829][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 240 seconds [ 347.229857][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 240 seconds [ 347.708074][ T8251] syzkaller0: entered promiscuous mode [ 347.708101][ T8251] syzkaller0: entered allmulticast mode [ 349.566542][ T8267] netlink: 592 bytes leftover after parsing attributes in process `syz.1.712'. [ 349.871022][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 353.686019][ T8312] netlink: 592 bytes leftover after parsing attributes in process `syz.2.724'. [ 354.738917][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 356.681117][ T8311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.115473][ T8349] netlink: 592 bytes leftover after parsing attributes in process `syz.2.736'. [ 358.520600][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 358.888945][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 359.408196][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.408269][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.408297][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.447751][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 359.447781][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.447801][ T9] usb 4-1: Manufacturer: syz [ 359.575810][ T9] usb 4-1: config 0 descriptor?? [ 359.745178][ T8394] netlink: 592 bytes leftover after parsing attributes in process `syz.1.750'. [ 361.258441][ T36] usb 4-1: USB disconnect, device number 10 [ 361.832519][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 364.259138][ T8434] netlink: 592 bytes leftover after parsing attributes in process `syz.2.762'. [ 365.299950][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 240 seconds [ 365.299995][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 240 seconds [ 365.900491][ T36] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 367.079680][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 367.082007][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.082077][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.082104][ T36] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 367.082125][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.084053][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.084078][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.084098][ T36] usb 5-1: Manufacturer: syz [ 367.098819][ T36] usb 5-1: config 0 descriptor?? [ 368.796327][ T8477] netlink: 'syz.2.775': attribute type 3 has an invalid length. [ 368.796348][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 368.898122][ T8482] netlink: 592 bytes leftover after parsing attributes in process `syz.0.777'. [ 370.034056][ T36] usb 5-1: USB disconnect, device number 8 [ 372.327283][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.345770][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.352501][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.716618][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'. [ 377.722527][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 270 seconds [ 377.722571][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 270 seconds [ 377.722599][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 270 seconds [ 377.722627][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 270 seconds [ 378.769925][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.769994][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.202291][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.283861][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.307954][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.486918][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.049549][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 396.319894][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 270 seconds [ 396.319931][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 270 seconds [ 398.413494][ T8813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.697551][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.884'. [ 400.925607][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.944994][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.419418][ T8820] bridge_slave_0: left allmulticast mode [ 402.419439][ T8820] bridge_slave_0: left promiscuous mode [ 402.429171][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.532987][ T8820] bridge_slave_1: left allmulticast mode [ 402.533013][ T8820] bridge_slave_1: left promiscuous mode [ 402.533159][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.621029][ T8820] bond0: (slave bond_slave_0): Releasing backup interface [ 402.701444][ T8820] bond0: (slave bond_slave_1): Releasing backup interface [ 402.767549][ T8820] team_slave_0: left allmulticast mode [ 402.790459][ T8820] team0: Port device team_slave_0 removed [ 402.795502][ T8820] team_slave_1: left allmulticast mode [ 402.840600][ T8820] team0: Port device team_slave_1 removed [ 402.844624][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.865807][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.889546][ T8820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.892201][ T8820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.957828][ T8820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.049791][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 300 seconds [ 408.049890][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 300 seconds [ 408.049919][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 300 seconds [ 408.049947][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 300 seconds [ 408.291107][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 411.586089][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 414.799553][ T9035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.936'. [ 416.009275][ T9043] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 423.698717][ T9099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.209698][ T9109] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 426.429095][ T9124] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 428.796406][ T4958] udevd[4958]: worker [5906] /devices/virtual/block/nbd1 timeout; kill it [ 428.796499][ T4958] udevd[4958]: seq 10612 '/devices/virtual/block/nbd1' killed [ 428.796633][ T4958] udevd[4958]: worker [5788] /devices/virtual/block/nbd0 timeout; kill it [ 428.796725][ T4958] udevd[4958]: seq 10477 '/devices/virtual/block/nbd0' killed [ 428.880961][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 300 seconds [ 428.881006][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 300 seconds [ 430.875616][ T9144] binder: 9143:9144 ioctl c0306201 0 returned -14 [ 431.308005][ T9157] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 434.825980][ T9197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.172374][ T9218] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 438.119831][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 330 seconds [ 438.119889][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 330 seconds [ 438.119917][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 330 seconds [ 438.119945][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 330 seconds [ 438.199081][ T36] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 438.369697][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 438.376826][ T36] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.376856][ T36] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.379340][ T36] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 438.379368][ T36] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 438.379388][ T36] usb 4-1: Product: syz [ 438.379401][ T36] usb 4-1: Manufacturer: syz [ 438.455418][ T36] hub 4-1:4.0: USB hub found [ 438.672030][ T36] hub 4-1:4.0: 2 ports detected [ 439.561033][ T9277] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 442.637766][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.637826][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.695466][ T36] usb 4-1: USB disconnect, device number 11 [ 443.013974][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 449.059647][ T9324] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 449.949831][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 449.987012][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 450.066276][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.068992][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.104753][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.119815][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 450.121257][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.121273][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.122590][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 450.122604][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 450.122614][ T9] usb 2-1: Product: syz [ 450.122621][ T9] usb 2-1: Manufacturer: syz [ 450.128649][ T9] hub 2-1:4.0: USB hub found [ 450.200082][ T9349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.351962][ T9349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.356905][ T9] hub 2-1:4.0: 2 ports detected [ 450.484871][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.545145][ T9340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.638023][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.910319][ T9] usb 2-1: USB disconnect, device number 10 [ 453.190522][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 453.606329][ T9390] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 457.430407][ T5708] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 457.579670][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 457.582001][ T5708] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.582031][ T5708] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.583972][ T5708] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 457.583999][ T5708] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 457.584019][ T5708] usb 2-1: Product: syz [ 457.584032][ T5708] usb 2-1: Manufacturer: syz [ 457.614158][ T5708] hub 2-1:4.0: USB hub found [ 457.809370][ T5708] hub 2-1:4.0: 2 ports detected [ 457.816503][ T5324] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 457.969691][ T5324] usb 3-1: Using ep0 maxpacket: 16 [ 457.971689][ T5324] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 457.971741][ T5324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.971769][ T5324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.971789][ T5324] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 457.971811][ T5324] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.972980][ T5324] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 457.973005][ T5324] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 457.973023][ T5324] usb 3-1: Manufacturer: syz [ 457.978933][ T5324] usb 3-1: config 0 descriptor?? [ 458.249689][ T5324] rc_core: IR keymap rc-hauppauge not found [ 458.249709][ T5324] Registered IR keymap rc-empty [ 458.249866][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.279827][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.336044][ T5324] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 458.339300][ T5324] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 458.479447][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.505842][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.521770][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.541418][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.569875][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.599794][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.619741][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.639726][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.659773][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.689994][ T5324] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 458.771890][ T5324] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 458.771914][ T5324] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 458.847468][ T5324] usb 3-1: USB disconnect, device number 9 [ 459.188688][ T5708] hub 2-1:4.0: activate --> -90 [ 459.249729][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 330 seconds [ 459.249771][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 330 seconds [ 459.384992][ T5324] usb 2-1: USB disconnect, device number 11 [ 459.434838][ T5708] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 461.514267][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.967933][ T9468] bridge_slave_0: left allmulticast mode [ 461.967964][ T9468] bridge_slave_0: left promiscuous mode [ 461.968128][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.033507][ T9468] bridge_slave_1: left allmulticast mode [ 462.033538][ T9468] bridge_slave_1: left promiscuous mode [ 462.033700][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.140255][ T9468] bond0: (slave bond_slave_0): Releasing backup interface [ 462.220771][ T9468] bond0: (slave bond_slave_1): Releasing backup interface [ 462.300488][ T9468] team0: Port device team_slave_0 removed [ 462.342343][ T9468] team0: Port device team_slave_1 removed [ 462.345240][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.347729][ T9468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.383137][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.385669][ T9468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.428231][ T9468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 462.447915][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 462.837950][ T9502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.470946][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 463.719936][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 463.770776][ T31] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 463.859930][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.860284][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.860484][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 463.860674][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.966691][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 463.966720][ T31] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 463.966739][ T31] usb 5-1: Manufacturer: syz [ 463.993045][ T31] usb 5-1: config 0 descriptor?? [ 464.259712][ T31] rc_core: IR keymap rc-hauppauge not found [ 464.259735][ T31] Registered IR keymap rc-empty [ 464.259891][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.288944][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.299138][ T9480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.332644][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 464.353043][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input23 [ 464.399093][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.409721][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.441682][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.459782][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.490417][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.530384][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.549781][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.569754][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.599832][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.629763][ T31] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 464.661147][ T31] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 464.661172][ T31] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 464.812538][ T31] usb 5-1: USB disconnect, device number 9 [ 466.147907][ T9546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.310106][ T9546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.338191][ T9546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.389984][ T9545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.560836][ T9562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.568974][ T9562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.609245][ T9562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.649497][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.437956][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 360 seconds [ 468.438118][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 360 seconds [ 468.438219][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 360 seconds [ 468.438319][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 360 seconds [ 470.289661][ T5708] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 470.480509][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 470.484476][ T5708] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.484506][ T5708] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.486364][ T5708] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 470.486390][ T5708] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 470.486409][ T5708] usb 2-1: Product: syz [ 470.486423][ T5708] usb 2-1: Manufacturer: syz [ 470.563454][ T5708] hub 2-1:4.0: USB hub found [ 470.756688][ T9569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.771643][ T5708] hub 2-1:4.0: 2 ports detected [ 470.878623][ T9609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1108'. [ 472.157620][ T5708] hub 2-1:4.0: activate --> -90 [ 472.361617][ T5708] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 472.362082][ T6382] usb 2-1: USB disconnect, device number 12 [ 473.254904][ T9654] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 474.075724][ T9656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.406356][ T5708] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 474.406401][ T5708] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 474.534503][ T1023] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 475.245156][ T5817] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 475.361598][ T3852] wlan1: authentication with 08:02:11:00:00:00 timed out [ 475.473151][ T9642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.648730][ T9695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.969722][ T6382] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 478.281482][ T6382] usb 5-1: Using ep0 maxpacket: 32 [ 478.286973][ T6382] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.287005][ T6382] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.291613][ T6382] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 478.291639][ T6382] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 478.291658][ T6382] usb 5-1: Product: syz [ 478.291671][ T6382] usb 5-1: Manufacturer: syz [ 478.332765][ T6382] hub 5-1:4.0: USB hub found [ 478.743702][ T6382] hub 5-1:4.0: 2 ports detected [ 479.184346][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc900 [ 479.185856][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa108 [ 479.188443][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1008 [ 479.188515][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 479.189730][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9128 [ 479.191871][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x808 [ 479.193796][ T9714] kvm: kvm [9713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc920 [ 479.432057][ T9731] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 480.635384][ T5324] hub 5-1:4.0: activate --> -90 [ 480.975255][ T5324] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 480.986535][ T5324] usb 5-1: USB disconnect, device number 10 [ 481.298518][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 481.926867][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 489.406597][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 360 seconds [ 489.406641][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 360 seconds [ 492.694923][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 493.304338][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 495.595527][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 496.036163][ T9867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.652346][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 498.919790][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 390 seconds [ 498.919835][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 390 seconds [ 498.919863][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 390 seconds [ 498.919890][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 390 seconds [ 500.537135][ T9920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.711823][ T5730] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 500.859686][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 500.861511][ T5730] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.861541][ T5730] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.863252][ T5730] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 500.863278][ T5730] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 500.863298][ T5730] usb 2-1: Product: syz [ 500.863312][ T5730] usb 2-1: Manufacturer: syz [ 501.011051][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 501.133188][ T5730] hub 2-1:4.0: USB hub found [ 501.328055][ T5730] hub 2-1:4.0: 2 ports detected [ 503.972515][ T5730] hub 2-1:4.0: hub_ext_port_status failed (err = -32) [ 505.340019][ T6382] usb 2-1: USB disconnect, device number 13 [ 506.726445][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.755593][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.850697][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 507.019176][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 509.312227][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 509.369733][ T819] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 510.001255][ T819] usb 1-1: Using ep0 maxpacket: 16 [ 510.280645][T10043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.299891][ T819] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 510.299945][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.299972][ T819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 510.299993][ T819] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 510.300016][ T819] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.301533][ T819] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 510.301558][ T819] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 510.301578][ T819] usb 1-1: Manufacturer: syz [ 510.433491][ T819] usb 1-1: config 0 descriptor?? [ 510.869738][ T819] rc_core: IR keymap rc-hauppauge not found [ 510.869759][ T819] Registered IR keymap rc-empty [ 510.869908][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 510.899727][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 510.931488][ T819] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 510.934422][ T819] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 510.974136][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.000009][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.029770][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.050040][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.069729][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.101575][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.129822][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.159791][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.189749][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.209781][ T819] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 511.264735][ T819] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 511.264759][ T819] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 511.301105][ T819] usb 1-1: USB disconnect, device number 6 [ 515.633817][T10131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.377458][T10200] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 517.420512][T10200] bond1: (slave lo): Enslaving as an active interface with an up link [ 517.448604][T10200] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 520.039808][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 390 seconds [ 520.039850][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 390 seconds [ 520.655360][T10213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.628524][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 528.648906][T10339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1325'. [ 529.488036][T10349] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 531.715083][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 420 seconds [ 531.715124][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 420 seconds [ 531.715151][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 420 seconds [ 531.715175][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 420 seconds [ 532.378394][ T1241] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 532.762136][ T1241] usb 1-1: Using ep0 maxpacket: 32 [ 532.764398][ T1241] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.764429][ T1241] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.767745][ T1241] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 532.767770][ T1241] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 532.767790][ T1241] usb 1-1: Product: syz [ 532.767804][ T1241] usb 1-1: Manufacturer: syz [ 532.842083][ T1241] hub 1-1:4.0: USB hub found [ 533.122769][ T1241] hub 1-1:4.0: 2 ports detected [ 534.860517][T10391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1339'. [ 535.499914][ T1241] hub 1-1:4.0: activate --> -90 [ 535.828128][ T1241] hub 1-1:4.0: hub_ext_port_status failed (err = 2) [ 536.032666][ T5864] usb 1-1: Failed to suspend device, error -71 [ 536.034566][ T1241] usb 1-1: USB disconnect, device number 7 [ 537.675406][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 537.712275][T10427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1351'. [ 538.365619][T10443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1360'. [ 540.184907][T10463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1365'. [ 540.309703][ T6382] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 540.599711][ T6382] usb 4-1: Using ep0 maxpacket: 32 [ 540.601779][ T6382] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.601809][ T6382] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.603577][ T6382] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 540.603603][ T6382] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 540.603624][ T6382] usb 4-1: Product: syz [ 540.603636][ T6382] usb 4-1: Manufacturer: syz [ 541.639042][ T6382] hub 4-1:4.0: USB hub found [ 541.644868][ T6382] hub 4-1:4.0: 2 ports detected [ 543.425417][ T6382] hub 4-1:4.0: activate --> -90 [ 543.567224][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1379'. [ 543.626948][ T6382] hub 4-1:4.0: hub_ext_port_status failed (err = 2) [ 544.025218][ T1152] usb 4-1: Failed to suspend device, error -71 [ 544.040291][ T1241] usb 4-1: USB disconnect, device number 12 [ 545.012134][ T6382] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 545.742150][ T6382] usb 1-1: Using ep0 maxpacket: 16 [ 546.010104][ T6382] usb 1-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 546.010161][ T6382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.010188][ T6382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.010211][ T6382] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 546.010233][ T6382] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.012595][ T6382] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 546.012628][ T6382] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 546.012648][ T6382] usb 1-1: Manufacturer: syz [ 546.445729][ T6382] usb 1-1: config 0 descriptor?? [ 546.482128][T10526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.517069][T10526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.534255][T10526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.605341][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.254744][ T6382] rc_core: IR keymap rc-hauppauge not found [ 547.254764][ T6382] Registered IR keymap rc-empty [ 547.255011][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 547.269772][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 548.242524][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 548.293731][ T6382] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 549.296988][ T6382] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 550.295601][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 552.893086][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 552.909927][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 552.932310][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 552.949711][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 552.979728][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.004276][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.021473][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.044107][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.056963][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 420 seconds [ 553.057005][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 420 seconds [ 553.071946][ T6382] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 553.184155][ T6382] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 553.184180][ T6382] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 553.321768][ T6382] usb 1-1: USB disconnect, device number 8 [ 554.913810][T10576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1398'. [ 558.223796][T10582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.235771][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 560.387255][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.391060][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.394385][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.439332][T10661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.440105][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 450 seconds [ 562.440275][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 450 seconds [ 562.440376][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 450 seconds [ 562.440476][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 450 seconds [ 562.497450][ T1241] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 562.739716][ T1241] usb 3-1: Using ep0 maxpacket: 32 [ 562.742277][ T1241] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.742308][ T1241] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.748482][ T1241] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 562.748510][ T1241] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 562.748531][ T1241] usb 3-1: Product: syz [ 562.748545][ T1241] usb 3-1: Manufacturer: syz [ 562.883590][ T1241] hub 3-1:4.0: USB hub found [ 563.096760][ T1241] hub 3-1:4.0: 2 ports detected [ 564.406565][ T1241] hub 3-1:4.0: activate --> -90 [ 564.608964][ T1241] hub 3-1:4.0: hub_ext_port_status failed (err = 3) [ 564.813187][ T211] usb 3-1: Failed to suspend device, error -71 [ 564.837590][ T1241] usb 3-1: USB disconnect, device number 10 [ 565.216071][T10719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.258779][T10719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.263158][T10719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.292343][T10718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.160790][T10747] Bluetooth: hci0: invalid len left 7, exp >= 108 [ 566.575685][T10758] netlink: 'syz.4.1454': attribute type 13 has an invalid length. [ 566.650032][T10756] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 567.391480][ T36] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 567.500731][ T5817] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.541987][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 567.549216][ T36] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 567.549271][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.549298][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 567.549319][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 567.549340][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.581304][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 567.581331][ T36] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 567.581349][ T36] usb 4-1: Manufacturer: syz [ 567.609324][ T36] usb 4-1: config 0 descriptor?? [ 567.711551][ T5817] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.711599][ T5817] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.711635][ T5817] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.964460][T10787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.986520][T10787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.002823][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.002875][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.023751][T10787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.046976][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.050030][ T36] rc_core: IR keymap rc-hauppauge not found [ 568.050047][ T36] Registered IR keymap rc-empty [ 568.050187][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.070851][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.094047][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 568.104365][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 568.115287][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.130073][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.150039][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.169887][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.190215][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.220075][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.240971][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.259809][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.280580][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.300851][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 568.352859][ T36] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 568.352875][ T36] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 568.420174][ T36] usb 4-1: USB disconnect, device number 13 [ 570.483469][T10839] netlink: 'syz.4.1484': attribute type 13 has an invalid length. [ 571.516896][T10854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1489'. [ 571.768770][T10858] netlink: 'syz.1.1491': attribute type 8 has an invalid length. [ 572.757800][T10885] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 578.732295][T10946] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 579.210404][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'. [ 579.306887][T10962] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.467685][T10964] bond6: (slave veth3): Enslaving as an active interface with an up link [ 581.273283][T11018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1545'. [ 581.676575][T11026] IPv6: addrconf: prefix option has invalid lifetime [ 581.866787][T11029] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 581.986376][T11032] netlink: 'syz.2.1552': attribute type 13 has an invalid length. [ 582.578497][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'. [ 582.895825][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.896282][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.399844][ T7161] block nbd1: Possible stuck request ffff888026a50000: control (read@0,1024B). Runtime 450 seconds [ 583.399876][ T7161] block nbd1: Possible stuck request ffff888026a501c0: control (read@1024,1024B). Runtime 450 seconds [ 583.531395][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.537421][T11032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.464334][T11043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.572756][T11046] bond2: (slave veth3): Enslaving as an active interface with an up link [ 584.834397][ T5864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.831412][ T5864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.840929][ T5864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.841499][ T5864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.858736][T11088] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 587.229921][T11106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1571'. [ 589.436491][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 589.582800][T11163] netlink: 'syz.4.1589': attribute type 13 has an invalid length. [ 589.588519][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 589.609432][T11152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.866993][T11156] bond2: (slave veth3): Enslaving as an active interface with an up link [ 590.124785][T11181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1595'. [ 590.454132][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1596'. [ 590.541619][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1598'. [ 590.581302][T11196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1596'. [ 590.644130][T11190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.858808][T11195] bond2: (slave veth3): Enslaving as an active interface with an up link [ 590.900054][T11194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.072698][T11196] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 591.254872][T11197] bond3: (slave veth5): Enslaving as an active interface with an up link [ 591.994867][T11232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1609'. [ 592.148346][T11235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.178495][T11235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.188807][T11235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.242475][T11234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.000044][ T7161] block nbd0: Possible stuck request ffff888026a27000: control (read@1024,1024B). Runtime 480 seconds [ 593.000111][ T7161] block nbd0: Possible stuck request ffff888026a271c0: control (read@2048,1024B). Runtime 480 seconds [ 593.000141][ T7161] block nbd0: Possible stuck request ffff888026a27380: control (read@3072,1024B). Runtime 480 seconds [ 593.000169][ T7161] block nbd0: Possible stuck request ffff888026a35080: control (read@0,1024B). Runtime 480 seconds [ 593.528127][T11263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1621'. [ 594.239909][ T38] INFO: task udevd:5788 blocked in I/O wait for more than 1[ 594.239909][ T38] INFO: task udevd:5788 blocked in I/O wait for more than 144 seconds. [ 594.239933][ T38] Not tainted syzkaller #0 [ 594.239943][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.239952][ T38] task:udevd state:D stack:22024 pid:5788 tgid:5788 ppid:4958 task_flags:0x400140 flags:0x00080802 [ 594.240017][ T38] Call Trace: [ 594.240025][ T38] [ 594.240037][ T38] __schedule+0x1681/0x54c0 [ 594.240111][ T38] ? __pfx___schedule+0x10/0x10 [ 594.240146][ T38] ? schedule+0x90/0x360 [ 594.240175][ T38] schedule+0x164/0x360 [ 594.240202][ T38] io_schedule+0x80/0xe0 [ 594.240222][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 594.240373][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 594.240400][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 594.240444][ T38] ? filemap_add_folio+0x3d9/0x610 [ 594.240475][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 594.240495][ T38] ? do_read_cache_folio+0x433/0x560 [ 594.240520][ T38] do_read_cache_folio+0x1a7/0x560 [ 594.240541][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 594.240607][ T38] read_part_sector+0xb8/0x2b0 [ 594.240680][ T38] adfspart_check_POWERTEC+0x9a/0x7a0 [ 594.240706][ T38] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 594.240784][ T38] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 594.240809][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 594.240844][ T38] bdev_disk_changed+0x817/0x1770 [ 594.240890][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 594.240918][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.240943][ T38] blkdev_get_whole+0x2e5/0x480 [ 594.240973][ T38] bdev_open+0x31e/0xcc0 [ 594.241007][ T38] blkdev_open+0x485/0x620 [ 594.241035][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 594.241060][ T38] do_dentry_open+0x83d/0x13e0 [ 594.241159][ T38] vfs_open+0x3b/0x350 [ 594.241181][ T38] ? path_openat+0x2e2b/0x38a0 [ 594.241227][ T38] path_openat+0x2e43/0x38a0 [ 594.241282][ T38] ? __pfx_path_openat+0x10/0x10 [ 594.241307][ T38] ? kasan_save_track+0x4f/0x80 [ 594.241348][ T38] ? kasan_save_track+0x3e/0x80 [ 594.241364][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 594.241382][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 594.241437][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.241498][ T38] do_file_open+0x23e/0x4a0 [ 594.241518][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.241542][ T38] ? __pfx_do_file_open+0x10/0x10 [ 594.241560][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 594.244393][ T38] ? alloc_fd+0x64e/0x6c0 [ 594.244513][ T38] do_sys_openat2+0x113/0x200 [ 594.244540][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 594.244604][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 594.244635][ T38] ? rcu_is_watching+0x15/0xb0 [ 594.244717][ T38] __x64_sys_openat+0x138/0x170 [ 594.244745][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.244773][ T38] do_syscall_64+0x15f/0xf80 [ 594.244794][ T38] ? clear_bhb_loop+0x40/0x90 [ 594.244817][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.244840][ T38] RIP: 0033:0x7ff0c405d407 [ 594.244862][ T38] RSP: 002b:00007ffdba607ec0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 594.244884][ T38] RAX: ffffffffffffffda RBX: 00007ff0c3f6f880 RCX: 00007ff0c405d407 [ 594.244898][ T38] RDX: 00000000000a0800 RSI: 000055cc430a2a10 RDI: ffffffffffffff9c [ 594.244911][ T38] RBP: 000055cc43089910 R08: 0000000000000000 R09: 0000000000000000 [ 594.244923][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cc430da1b0 [ 594.244935][ T38] R13: 000055cc43097190 R14: 0000000000000000 R15: 000055cc430da1b0 [ 594.244967][ T38] [ 594.244978][ T38] INFO: task udevd:5906 blocked in I/O wait for more than 144 seconds. [ 594.244994][ T38] Not tainted syzkaller #0 [ 594.245004][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.245011][ T38] task:udevd state:D stack:20952 pid:5906 tgid:5906 ppid:4958 task_flags:0x400140 flags:0x00080002 [ 594.245054][ T38] Call Trace: [ 594.245060][ T38] [ 594.245072][ T38] __schedule+0x1681/0x54c0 [ 594.245131][ T38] ? __pfx___schedule+0x10/0x10 [ 594.245165][ T38] ? schedule+0x90/0x360 [ 594.245194][ T38] schedule+0x164/0x360 [ 594.245222][ T38] io_schedule+0x80/0xe0 [ 594.245242][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 594.245288][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 594.245330][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 594.245359][ T38] ? filemap_add_folio+0x3d9/0x610 [ 594.245390][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 594.245410][ T38] ? do_read_cache_folio+0x433/0x560 [ 594.245435][ T38] do_read_cache_folio+0x1a7/0x560 [ 594.245455][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 594.245486][ T38] read_part_sector+0xb8/0x2b0 [ 594.245512][ T38] adfspart_check_POWERTEC+0x9a/0x7a0 [ 594.245538][ T38] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 594.245563][ T38] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 594.245587][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 594.245623][ T38] bdev_disk_changed+0x817/0x1770 [ 594.245668][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 594.245696][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.245721][ T38] blkdev_get_whole+0x2e5/0x480 [ 594.245751][ T38] bdev_open+0x31e/0xcc0 [ 594.245790][ T38] blkdev_open+0x485/0x620 [ 594.245819][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 594.245842][ T38] do_dentry_open+0x83d/0x13e0 [ 594.245878][ T38] vfs_open+0x3b/0x350 [ 594.245899][ T38] ? path_openat+0x2e2b/0x38a0 [ 594.245923][ T38] path_openat+0x2e43/0x38a0 [ 594.245978][ T38] ? __pfx_path_openat+0x10/0x10 [ 594.246002][ T38] ? kasan_save_track+0x4f/0x80 [ 594.246019][ T38] ? kasan_save_track+0x3e/0x80 [ 594.246036][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 594.246053][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 594.246081][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 594.246113][ T38] do_file_open+0x23e/0x4a0 [ 594.246133][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.249876][ T38] ? __pfx_do_file_open+0x10/0x10 [ 594.249900][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 594.249947][ T38] ? alloc_fd+0x64e/0x6c0 [ 594.249983][ T38] do_sys_openat2+0x113/0x200 [ 594.250015][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 594.250037][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 594.250067][ T38] ? rcu_is_watching+0x15/0xb0 [ 594.250097][ T38] __x64_sys_openat+0x138/0x170 [ 594.250124][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.250143][ T38] do_syscall_64+0x15f/0xf80 [ 594.250163][ T38] ? clear_bhb_loop+0x40/0x90 [ 594.250185][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.250203][ T38] RIP: 0033:0x7ff0c405d407 [ 594.250219][ T38] RSP: 002b:00007ffdba607ec0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 594.250239][ T38] RAX: ffffffffffffffda RBX: 00007ff0c3f6f880 RCX: 00007ff0c405d407 [ 594.250266][ T38] RDX: 00000000000a0800 RSI: 000055cc430b2f10 RDI: ffffffffffffff9c [ 594.250279][ T38] RBP: 000055cc43089910 R08: 0000000000000000 R09: 0000000000000000 [ 594.250291][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cc43091650 [ 594.250303][ T38] R13: 000055cc43097190 R14: 0000000000000000 R15: 000055cc43091650 [ 594.250332][ T38] [ 594.250365][ T38] [ 594.250365][ T38] Showing all locks held in the system: [ 594.250374][ T38] 4 locks held by pr/legacy/17: [ 594.250392][ T38] 1 lock held by khungtaskd/38: [ 594.250401][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 594.250453][ T38] 2 locks held by kworker/u8:5/68: [ 594.250463][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 594.250507][ T38] #1: ffffc9000153fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 594.250570][ T38] 2 locks held by udevd/4958: [ 594.250582][ T38] 2 locks held by getty/5349: [ 594.250591][ T38] #0: ffff88803314a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 594.250691][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 594.250764][ T38] 9 locks held by syz-executor/5592: [ 594.250775][ T38] 9 locks held by syz-executor/5600: [ 594.250793][ T38] 1 lock held by udevd/5788: [ 594.250802][ T38] #0: ffff8880269bb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 594.250848][ T38] 2 locks held by kworker/u8:14/5864: [ 594.250859][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 594.250899][ T38] #1: ffffc900051cfc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 594.250941][ T38] 1 lock held by udevd/5906: [ 594.250951][ T38] #0: ffff8880269fb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 594.250994][ T38] 1 lock held by udevd/6266: [ 594.251016][ T38] 1 lock held by syz.4.1612/11242: [ 594.251026][ T38] 1 lock held by syz.0.1620/11258: [ 594.251036][ T38] [ 594.251041][ T38] ============================================= [ 594.251041][ T38] [ 594.251059][ T38] NMI backtrace for cpu 0 [ 594.251082][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 594.251103][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.251114][ T38] Call Trace: [ 594.251121][ T38] [ 594.251128][ T38] dump_stack_lvl+0xe8/0x150 [ 594.251149][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 594.251172][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 594.251193][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 594.251218][ T38] sys_info+0x135/0x170 [ 594.251236][ T38] watchdog+0xfd3/0x1030 [ 594.251295][ T38] ? watchdog+0x1c9/0x1030 [ 594.251322][ T38] kthread+0x388/0x470 [ 594.251344][ T38] ? __pfx_watchdog+0x10/0x10 [ 594.251361][ T38] ? __pfx_kthread+0x10/0x10 [ 594.251384][ T38] ret_from_fork+0x514/0xb70 [ 594.251405][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 594.251424][ T38] ? __switch_to+0xc79/0x1410 [ 594.251451][ T38] ? __pfx_kthread+0x10/0x10 [ 594.251473][ T38] ret_from_fork_asm+0x1a/0x30 [ 594.251509][ T38] [ 594.251534][ T38] Sending NMI from CPU 0 to CPUs 1: [ 594.251563][ C1] NMI backtrace for cpu 1 [ 594.251596][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 594.251614][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.251622][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 594.251703][ C1] Code: e8 ee 47 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f 51 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da df eb 05 cc 44 89 f9 80 e1 07 [ 594.251715][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 594.251729][ C1] RAX: 1ffffffff3362a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 594.251739][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 594.251748][ C1] RBP: ffffffff99b15930 R08: 0000000000000000 R09: 0000000000000000 [ 594.251765][ C1] R10: dffffc0000000000 R11: ffffffff85342900 R12: dffffc0000000000 [ 594.251776][ C1] R13: 0000000000000000 R14: ffffffff99b156a0 R15: 0000000000000000 [ 594.251785][ C1] FS: 0000000000000000(0000) GS:ffff88812627a000(0000) knlGS:0000000000000000 [ 594.251798][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.251808][ C1] CR2: 00007fcf24273ff8 CR3: 0000000039298000 CR4: 00000000003526f0 [ 594.251821][ C1] Call Trace: [ 594.251827][ C1] [ 594.251834][ C1] wait_for_lsr+0x1aa/0x2f0 [ 594.251855][ C1] serial8250_console_write+0x120d/0x1b90 [ 594.251880][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 594.251898][ C1] ? console_flush_one_record+0xfa/0xb90 [ 594.251978][ C1] ? console_flush_one_record+0x48f/0xb90 [ 594.251998][ C1] console_flush_one_record+0x68b/0xb90 [ 594.252019][ C1] ? console_flush_one_record+0xfa/0xb90 [ 594.252039][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 594.252058][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.252075][ C1] legacy_kthread_func+0x1b6/0x250 [ 594.252094][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 594.252111][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 594.252154][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 594.252174][ C1] kthread+0x388/0x470 [ 594.252191][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 594.252207][ C1] ? __pfx_kthread+0x10/0x10 [ 594.252225][ C1] ret_from_fork+0x514/0xb70 [ 594.252241][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 594.252256][ C1] ? __switch_to+0xc79/0x1410 [ 594.252277][ C1] ? __pfx_kthread+0x10/0x10 [ 594.252294][ C1] ret_from_fork_asm+0x1a/0x30 [ 594.252319][ C1] [ 594.256275][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 594.256292][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 594.256312][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.256322][ T38] Call Trace: [ 594.256330][ T38] [ 594.256337][ T38] vpanic+0x56c/0xa60 [ 594.256361][ T38] ? __pfx___schedule+0x10/0x10 [ 594.256387][ T38] ? __pfx_vpanic+0x10/0x10 [ 594.256416][ T38] panic+0xc5/0xd0 [ 594.256436][ T38] ? __pfx_panic+0x10/0x10 [ 594.256457][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 594.256487][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 594.256513][ T38] watchdog+0x102c/0x1030 [ 594.256539][ T38] ? watchdog+0x1c9/0x1030 [ 594.256564][ T38] kthread+0x388/0x470 [ 594.256586][ T38] ? __pfx_watchdog+0x10/0x10 [ 594.256603][ T38] ? __pfx_kthread+0x10/0x10 [ 594.256626][ T38] ret_from_fork+0x514/0xb70 [ 594.256650][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 594.256670][ T38] ? __switch_to+0xc79/0x1410 [ 594.256696][ T38] ? __pfx_kthread+0x10/0x10 [ 594.256719][ T38] ret_from_fork_asm+0x1a/0x30 [ 594.256753][ T38] [ 594.256898][ T38] Kernel Offset: disabled