last executing test programs: 14.560324449s ago: executing program 2 (id=762): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r4 = userfaultfd(0x801) r5 = syz_open_dev$video4linux(&(0x7f0000000240), 0x145, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x3011}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, &(0x7f0000000240)=""/127, &(0x7f0000000180)=""/25, &(0x7f00000004c0)=""/229, 0x3000}) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r9) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000019dc0)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 14.036500167s ago: executing program 0 (id=764): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x8a0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, 0x0}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r1}, 0x14) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000140)={0x60, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) 13.447853174s ago: executing program 1 (id=767): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000040000000a800002000000000000000008"], 0x24}}, 0x0) 13.005512491s ago: executing program 1 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 12.786828865s ago: executing program 1 (id=769): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}]}, 0x30}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.415992959s ago: executing program 1 (id=770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r3 = getegid() r4 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x10}}, @dontfrag={{0x10}}], 0x20}, 0x0) r5 = openat$cuse(0xffffff9c, &(0x7f00000014c0), 0x2, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xee00]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0xffffffffffffffff, 0x0, r7, 0x0, 0x9}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0, 0x0}, &(0x7f0000001540)=0xc) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000200)=[0x7f, 0x7f, 0x5, 0x7fff, 0x7], &(0x7f0000000240)=[0xff82, 0xfe], &(0x7f0000000280)=[0x2]}) syz_mount_image$fuse(&(0x7f0000001440), &(0x7f0000000300)='./bus\x00', 0xc4481, &(0x7f0000001580)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}]}}, 0x0, 0x0, &(0x7f0000001640)="d558f84091c069331ea8b1e383a21fa44dfaca90b8e952a9ad578251e0d7142d883ffef2b300470f2001cfc2bdf9eff76bbdd9643632b7ab313fa846321f8b6891e53eb46659492fb74b25aae26964a25aea4b6d1ab05248aff4afeaab872f934d66") setresgid(r2, r3, r8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) keyctl$invalidate(0x15, r10) 11.907828547s ago: executing program 3 (id=773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) getegid() r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x10}}, @dontfrag={{0x10}}], 0x20}, 0x0) openat$cuse(0xffffff9c, &(0x7f00000014c0), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xee00]) 11.348346422s ago: executing program 1 (id=786): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xe0ca, 0x8}, 0xc) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 11.249972155s ago: executing program 3 (id=776): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 11.23772907s ago: executing program 2 (id=777): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000003680), 0x4, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.u'}, 0x15) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x59555956, 0x0, 0x0, 0x0, 0xb}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) semget(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r4, 0x0) write$binfmt_misc(r3, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) socket$nl_route(0x10, 0x3, 0x0) 11.120599199s ago: executing program 3 (id=780): socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) syz_io_uring_setup(0x4b15, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x400c4152, &(0x7f0000000300)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000800)={0x4}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001800168014000180100006"], 0x40}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002222000400000000000000031f95fae8ade7e036042a9011070200000083000000000b09007a150b5d8c"], 0x0}, 0x0) 10.936198066s ago: executing program 4 (id=781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 10.883862013s ago: executing program 0 (id=782): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}]}, 0x30}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.883666678s ago: executing program 1 (id=783): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) 10.51850043s ago: executing program 4 (id=784): socket$netlink(0x10, 0x3, 0xf) writev(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x7, "86f745a7ce60d43b773fd8714a5c64274fdec0adb16d4ffc728ce26885a68d3f"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) unshare(0x4040600) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002c00)={'nr0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 10.463821827s ago: executing program 0 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) getegid() r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x10}}, @dontfrag={{0x10}}], 0x20}, 0x0) openat$cuse(0xffffff9c, &(0x7f00000014c0), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xee00]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0xffffffffffffffff, 0x0, r3, 0x0, 0x9}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200}) 9.999500438s ago: executing program 2 (id=787): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$invalidate(0x15, r1) 9.738088252s ago: executing program 2 (id=788): getgroups(0x1, &(0x7f0000000140)=[0xee00]) 9.507827452s ago: executing program 0 (id=789): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x208c40, 0x0) r0 = memfd_create(&(0x7f0000000000)='-\'#{\\\x00', 0x0) cachestat(r0, &(0x7f0000000040), 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x4ef7e228, 0x95f, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x58, 0x1, 0x7}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000022000b0fd25a806c8c6f94f903", 0x11}, {&(0x7f0000002a00)="ce8efd", 0x3}], 0x2}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = syz_open_dev$video4linux(&(0x7f0000000240), 0x145, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x101b}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) r4 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) bind$packet(r4, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r7 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r6) close(r7) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 9.36093077s ago: executing program 2 (id=790): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) 8.947164887s ago: executing program 2 (id=791): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0xc1, 0x0, 0x4, 0x49, @remote, @loopback, 0x0, 0x0, 0x100000}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 8.589170236s ago: executing program 0 (id=792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.695506628s ago: executing program 4 (id=793): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000700), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x8a0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, 0x0}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r1}, 0x14) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000140)={0x60, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x1, "85"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) 5.529829147s ago: executing program 3 (id=794): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @main=@item_4={0x3, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "9bc500"}]}}, 0x0}, 0x0) 5.155602989s ago: executing program 0 (id=795): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_gettime(0x2, &(0x7f0000000200)) write$apparmor_current(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='permhat '], 0x7c) socket$kcm(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="c7ed0a79b7014892f2ef5cd15625408bd1f05d3badebf8a6891ec43c37", 0x1d}], 0x1) ftruncate(r0, 0x80079a0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010000304000000000000000000007400", @ANYRES32=r6, @ANYBLOB="08000000000000000a0001"], 0x2c}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendfile(r3, r0, 0x0, 0xffff) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80001, 0x102, 0x9}, 0x18) 2.261215585s ago: executing program 3 (id=796): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80000001, 0x0]}]}]}, 0x2c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.17080519s ago: executing program 4 (id=797): syz_usb_connect(0x0, 0x1a2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b6a57e4086005b0bc5e10102030109029001020000000009040000020e0100000a2401000000020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08810855d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed230743f2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4bab8aac95498fb6033f760602c1a8b1eac2150072501000000000905000000000000000725010000000007250100000000090400000eb03748000a2401000000020102052405"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0200007d00000005df000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6576626f6825ffffff8102000000000000ff03ff9200000034007002007dfa673effeb09b5351f5bde05"], 0x21d) 1.757405428s ago: executing program 3 (id=798): socket$netlink(0x10, 0x3, 0xf) writev(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x7, "86f745a7ce60d43b773fd8714a5c64274fdec0adb16d4ffc728ce26885a68d3f"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) unshare(0x4040600) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='setgroups\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000002c00)={'nr0\x00'}) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc080) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) socket$unix(0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x11c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0xc8, 0x8, 0x0, 0x1, [{0x68, 0x1e02, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce85"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x11c}, 0x1, 0x600}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9e", 0x1}], 0x1) unshare(0x22020400) 137.580671ms ago: executing program 4 (id=800): getgroups(0x1, &(0x7f0000000140)=[0xee00]) 0s ago: executing program 4 (id=801): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0xe0ca, 0x8}, 0xc) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 0 descriptor?? [ 239.208359][ T5285] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 239.243366][ T7732] Node 0 DMA32 free:1446492kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:21020kB inactive_anon:0kB active_file:25348kB inactive_file:12012kB unevictable:1536kB writepending:1220kB present:3129332kB managed:2552476kB mlocked:0kB bounce:0kB free_pcp:1016kB local_pcp:272kB free_cma:0kB [ 239.276537][ T7732] lowmem_reserve[]: 0 0 0 0 0 [ 239.281632][ T7732] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:112kB inactive_anon:0kB active_file:156kB inactive_file:592kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 239.331454][ T7732] lowmem_reserve[]: 0 0 0 0 0 [ 239.337929][ T7732] Node 1 Normal free:3931460kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.449558][ T7732] lowmem_reserve[]: 0 0 0 0 0 [ 239.486575][ T7732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.768699][ T7732] Node 0 DMA32: 48*4kB (UME) 440*8kB (ME) 497*16kB (UME) 263*32kB (ME) 90*64kB (ME) 30*128kB (ME) 16*256kB (M) 5*512kB (ME) 13*1024kB (UM) 11*2048kB (UM) 335*4096kB (M) = 1444336kB [ 239.788647][ T7732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 239.802593][ T7732] Node 1 Normal: 167*4kB (UME) 47*8kB (UME) 37*16kB (UME) 179*32kB (UME) 86*64kB (UME) 28*128kB (UME) 17*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 952*4096kB (M) = 3931460kB [ 239.822831][ T7732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.833658][ T7732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.843300][ T7732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.868379][ T7818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.906785][ T7732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.916552][ T7732] 11485 total pagecache pages [ 239.921821][ T7732] 0 pages in swap cache [ 239.926744][ T7732] Free swap = 124552kB [ 239.935937][ T7732] Total swap = 124996kB [ 239.978905][ T7732] 2097051 pages RAM [ 239.982903][ T7732] 0 pages HighMem/MovableOnly [ 239.988788][ T7732] 427082 pages reserved [ 239.993136][ T7732] 0 pages cma reserved [ 240.046514][ T7818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.302859][ T937] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 240.353884][ T937] usb 3-1: USB disconnect, device number 23 [ 240.493926][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 240.493947][ T29] audit: type=1326 audit(1727457937.700:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 240.544628][ T1849] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 240.552531][ T29] audit: type=1326 audit(1727457937.730:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 240.669389][ T25] usb 4-1: USB disconnect, device number 20 [ 240.745722][ T1849] usb 5-1: device descriptor read/64, error -71 [ 240.927460][ T7834] netlink: 'syz.2.450': attribute type 3 has an invalid length. [ 241.005933][ T1849] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 241.076139][ T5285] usb 2-1: USB disconnect, device number 29 [ 241.168277][ T7838] xt_NFQUEUE: number of total queues is 0 [ 241.176081][ T1849] usb 5-1: device descriptor read/64, error -71 [ 241.185808][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 241.305686][ T1849] usb usb5-port1: attempt power cycle [ 241.335774][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 241.362607][ T8] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 241.372089][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.401188][ T8] usb 3-1: Product: syz [ 241.416756][ T8] usb 3-1: Manufacturer: syz [ 241.442696][ T8] usb 3-1: SerialNumber: syz [ 241.465487][ T8] usb 3-1: config 0 descriptor?? [ 241.493005][ T8] usb-storage 3-1:0.0: USB Mass Storage device detected [ 241.505856][ T5285] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 241.521481][ T8] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 0007: 1 [ 241.544685][ T8] usb-storage 3-1:0.0: This device (04e6,0007,0144 S 3e P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.11.0-syzkaller-11558-g075dbe9f6e3c) [ 241.544685][ T8] Please send a copy of this message to and [ 241.666086][ T5285] usb 2-1: Using ep0 maxpacket: 32 [ 241.675768][ T1849] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 241.693677][ T5285] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 241.747198][ T5285] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 241.747350][ T8] usb 3-1: USB disconnect, device number 24 [ 241.768737][ T1849] usb 5-1: device descriptor read/8, error -71 [ 241.778665][ T5283] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 241.805748][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 241.845773][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.371401][ T5246] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 242.372364][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.411452][ T5283] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.429002][ T5283] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 242.443989][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.455654][ T1849] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 242.465668][ T5283] usb 4-1: Product: syz [ 242.475763][ T5283] usb 4-1: Manufacturer: syz [ 242.480915][ T1849] usb 5-1: device descriptor read/8, error -71 [ 242.498821][ T5283] usb 4-1: SerialNumber: syz [ 242.521562][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 242.540135][ T7838] xt_NFQUEUE: number of total queues is 0 [ 242.578900][ T5288] usb 2-1: USB disconnect, device number 30 [ 242.603749][ T1849] usb usb5-port1: unable to enumerate USB device [ 243.257868][ T4668] bcm5974 4-1:1.0: could not read from device [ 243.315864][ T5283] usb 4-1: USB disconnect, device number 21 [ 243.333101][ T4668] bcm5974 4-1:1.0: could not read from device [ 243.501825][ T7486] udevd[7486]: Error opening device "/dev/input/event4": No such file or directory [ 243.565308][ T7486] udevd[7486]: Unable to EVIOCGABS device "/dev/input/event4" [ 243.620466][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.654790][ T7486] udevd[7486]: Unable to EVIOCGABS device "/dev/input/event4" [ 243.685652][ T5289] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 243.709858][ T7486] udevd[7486]: Unable to EVIOCGABS device "/dev/input/event4" [ 243.750549][ T7486] udevd[7486]: Unable to EVIOCGABS device "/dev/input/event4" [ 243.877782][ T5289] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 243.894435][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 243.915973][ T7889] openvswitch: netlink: Missing key (keys=40, expected=80) [ 243.978577][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.046032][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.081435][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.159461][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.344751][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.413571][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.454187][ T5246] Bluetooth: hci2: command tx timeout [ 244.469145][ T5289] usb 5-1: config 16 interface 0 has no altsetting 0 [ 244.514701][ T5289] usb 5-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=f7.6a [ 244.560304][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.083720][ T29] audit: type=1326 audit(1727457942.290:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.163497][ T29] audit: type=1326 audit(1727457942.290:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.203632][ T29] audit: type=1326 audit(1727457942.290:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.228937][ T29] audit: type=1326 audit(1727457942.290:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.253089][ T29] audit: type=1326 audit(1727457942.290:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.276415][ T29] audit: type=1326 audit(1727457942.290:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.298527][ T29] audit: type=1326 audit(1727457942.290:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.322262][ T29] audit: type=1326 audit(1727457942.290:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 245.375674][ T5289] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 245.415892][ T5283] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 245.423666][ T5285] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 245.550491][ T5289] usb 4-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 245.559965][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.571054][ T5289] usb 4-1: Product: syz [ 245.575517][ T5289] usb 4-1: Manufacturer: syz [ 245.580440][ T5289] usb 4-1: SerialNumber: syz [ 245.587254][ T5289] usb 4-1: config 0 descriptor?? [ 245.597413][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 245.606758][ T5283] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 245.620612][ T5289] r8712u: register rtl8712_netdev_ops to netdev_ops [ 245.627598][ T5289] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 245.637715][ T5283] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 245.651276][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.659760][ T5283] usb 2-1: Product: syz [ 245.664057][ T5283] usb 2-1: Manufacturer: syz [ 245.673558][ T5285] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.685615][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.693703][ T5285] usb 1-1: Product: syz [ 245.703597][ T5283] usb 2-1: SerialNumber: syz [ 245.709731][ T5285] usb 1-1: Manufacturer: syz [ 245.714846][ T5285] usb 1-1: SerialNumber: syz [ 245.740969][ T5285] usb 1-1: config 0 descriptor?? [ 245.750912][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 245.972121][ T5285] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.115730][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 246.124743][ T7927] program syz.3.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.172455][ T7920] bond0: entered promiscuous mode [ 246.178356][ T7920] bond_slave_0: entered promiscuous mode [ 246.184650][ T7920] bond_slave_1: entered promiscuous mode [ 246.212012][ T5289] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 246.219228][ T5289] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 246.227029][ T5289] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 246.291831][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.315040][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 246.324860][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.336660][ T8] usb 3-1: Product: syz [ 246.340895][ T8] usb 3-1: Manufacturer: syz [ 246.347421][ T8] usb 3-1: SerialNumber: syz [ 246.371525][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input36 [ 246.441695][ T1849] usb 4-1: USB disconnect, device number 22 [ 246.453105][ T4668] bcm5974 2-1:1.0: could not read from device [ 246.510718][ T4668] bcm5974 2-1:1.0: could not read from device [ 246.520982][ T5283] usb 2-1: USB disconnect, device number 31 [ 246.564492][ T4668] bcm5974 2-1:1.0: could not read from device [ 246.584868][ T8] usb 5-1: USB disconnect, device number 28 [ 246.592080][ T4668] bcm5974 2-1:1.0: could not read from device [ 246.619395][ T4668] bcm5974 3-1:1.0: could not read from device [ 246.635364][ T5289] usb 3-1: USB disconnect, device number 25 [ 246.807246][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 246.906076][ T7931] loop4: detected capacity change from 0 to 7 [ 246.919086][ T7931] buffer_io_error: 4 callbacks suppressed [ 246.919107][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.942308][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.951509][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.959957][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.969604][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 246.981125][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.001430][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.013367][ T7931] ldm_validate_partition_table(): Disk read failed. [ 247.022685][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.046666][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.070336][ T7931] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.090974][ T7931] Dev loop4: unable to read RDB block 0 [ 247.127667][ T7931] loop4: unable to read partition table [ 247.156273][ T7931] loop4: partition table beyond EOD, truncated [ 247.164259][ T7931] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 247.164259][ T7931] ) failed (rc=-5) [ 247.378552][ T7944] netlink: 56 bytes leftover after parsing attributes in process `syz.2.477'. [ 247.384825][ T7946] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.478'. [ 247.413750][ T7946] netlink: zone id is out of range [ 247.429655][ T7946] netlink: zone id is out of range [ 247.443187][ T7946] netlink: zone id is out of range [ 247.448735][ T7946] netlink: zone id is out of range [ 247.454004][ T7946] netlink: zone id is out of range [ 247.460187][ T7946] netlink: zone id is out of range [ 247.473582][ T7946] netlink: zone id is out of range [ 247.498976][ T7948] batadv0: mtu less than device minimum [ 247.505963][ T7946] netlink: zone id is out of range [ 247.522604][ T7946] netlink: zone id is out of range [ 247.536182][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 247.778009][ T7954] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !0x0000000000000007184467440737 [ 248.583642][ T7956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.592017][ T7956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.610390][ T7956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.621954][ T7956] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.629998][ T7956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.636241][ T7956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.645860][ T7956] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.661065][ T7956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.667636][ T7956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 248.674534][ T7956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 248.683851][ T7956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.705837][ T7956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.716558][ T7956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.975719][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 249.016882][ T5289] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 249.125883][ T5288] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 249.133651][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 249.144488][ T8] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 249.153786][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.161940][ T8] usb 2-1: Product: syz [ 249.167791][ T8] usb 2-1: Manufacturer: syz [ 249.172487][ T8] usb 2-1: SerialNumber: syz [ 249.189465][ T8] usb 2-1: config 0 descriptor?? [ 249.189469][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.189508][ T5289] usb 5-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 249.195820][ T937] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 249.218500][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.228443][ T8] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 249.257877][ T5289] usb 5-1: config 0 descriptor?? [ 249.277116][ T5289] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.310726][ T5285] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.324895][ T5288] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 249.327895][ T5285] usb 1-1: USB disconnect, device number 24 [ 249.342179][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.352600][ T5289] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 249.356607][ T5288] usb 3-1: Product: syz [ 249.379014][ T5288] usb 3-1: Manufacturer: syz [ 249.389685][ T5288] usb 3-1: SerialNumber: syz [ 249.398054][ T937] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 249.447190][ T937] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 249.459074][ T5288] usb 3-1: config 0 descriptor?? [ 249.469028][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.490625][ T937] usb 4-1: Product: syz [ 249.498965][ T937] usb 4-1: Manufacturer: syz [ 249.503714][ T937] usb 4-1: SerialNumber: syz [ 249.542338][ T937] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 249.550570][ T7954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.480'. [ 249.567967][ T5289] usb 5-1: USB disconnect, device number 29 [ 249.669568][ T8] gspca_m5602: Failed to find a sensor [ 249.678785][ T8] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 249.693111][ T5288] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 249.704041][ T8] usb 2-1: USB disconnect, device number 32 [ 249.740417][ T4668] bcm5974 4-1:1.0: could not read from device [ 249.758018][ T4668] bcm5974 4-1:1.0: could not read from device [ 249.767008][ T937] usb 4-1: USB disconnect, device number 23 [ 249.896760][ T5246] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.526414][ T7980] netlink: 36 bytes leftover after parsing attributes in process `syz.3.490'. [ 250.535782][ T5289] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 250.562809][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 250.562994][ T29] audit: type=1326 audit(1727457947.770:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 250.591281][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.599696][ T29] audit: type=1326 audit(1727457947.770:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 250.623805][ T29] audit: type=1326 audit(1727457947.770:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 250.646452][ T29] audit: type=1326 audit(1727457947.770:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7979 comm="syz.3.490" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 250.675690][ T5286] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 250.685894][ T5246] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.692067][ T5246] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.698618][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.714191][ T5289] usb 2-1: string descriptor 0 read error: -22 [ 250.720796][ T5289] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 250.740371][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.757488][ T5289] usb 2-1: config 0 descriptor?? [ 250.840700][ T5286] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 250.861118][ T5286] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 250.871162][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.879970][ T5286] usb 5-1: Product: syz [ 250.884574][ T5286] usb 5-1: Manufacturer: syz [ 250.890338][ T5286] usb 5-1: SerialNumber: syz [ 250.913146][ T5286] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input38 [ 251.137491][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 251.163377][ T5288] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 251.191179][ T5288] usb 3-1: USB disconnect, device number 26 [ 251.307742][ T7975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.350670][ T5289] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 251.400200][ T5289] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 251.430569][ T5246] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 251.440794][ T5289] dib0700: firmware download failed at 7 with -22 [ 251.464731][ T5289] usb 2-1: USB disconnect, device number 33 [ 251.535982][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 251.585394][ T7995] loop4: detected capacity change from 0 to 7 [ 251.594271][ T7995] ldm_validate_partition_table(): Disk read failed. [ 251.604130][ T7995] Dev loop4: unable to read RDB block 0 [ 251.612084][ T7995] loop4: unable to read partition table [ 251.618405][ T7995] loop4: partition table beyond EOD, truncated [ 251.625756][ T7995] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 251.625756][ T7995] ) failed (rc=-5) [ 251.650442][ T4668] bcm5974 5-1:1.0: could not read from device [ 251.733278][ T5286] usb 5-1: USB disconnect, device number 30 [ 251.867556][ T5239] udevd[5239]: Error opening device "/dev/input/event4": No such file or directory [ 251.877454][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.886026][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.893753][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.909569][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.996126][ T5246] Bluetooth: hci4: command 0x0c1a tx timeout [ 252.025730][ T5246] Bluetooth: hci4: unexpected event for opcode 0x202f [ 252.079113][ T8004] : entered promiscuous mode [ 252.570556][ T8017] netlink: 'syz.1.500': attribute type 11 has an invalid length. [ 252.578537][ T5286] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 252.613879][ T8017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'. [ 252.750281][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 252.765804][ T5246] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.765920][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.771964][ T5242] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.785265][ T5286] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 252.805260][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.815732][ T5286] usb 3-1: Product: syz [ 252.820009][ T5286] usb 3-1: Manufacturer: syz [ 252.824727][ T5286] usb 3-1: SerialNumber: syz [ 252.837702][ T5286] usb 3-1: config 0 descriptor?? [ 252.855512][ T5286] gspca_main: spca500-2.14.0 probing 046d:0900 [ 252.864158][ T5289] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 252.896531][ T55] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 253.047859][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.058207][ T5289] usb 2-1: config 0 has no interfaces? [ 253.063840][ T5289] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.073073][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.128220][ T5289] usb 2-1: config 0 descriptor?? [ 253.143262][ T5286] gspca_spca500: reg write: error -71 [ 253.157220][ T5286] gspca_spca500: reg write: error -71 [ 253.163937][ T5286] gspca_spca500: reg write: error -71 [ 253.179855][ T5286] gspca_spca500: reg write: error -71 [ 253.186938][ T5286] gspca_spca500: reg write: error -71 [ 253.192905][ T5286] gspca_spca500: reg write: error -71 [ 253.200269][ T5286] gspca_spca500: reg write: error -71 [ 253.206213][ T5286] gspca_spca500: reg write: error -71 [ 253.240620][ T5286] gspca_spca500: reg write: error -71 [ 253.249608][ T5286] gspca_spca500: reg write: error -71 [ 253.256617][ T5286] gspca_spca500: reg write: error -71 [ 253.274253][ T5286] gspca_spca500: reg write: error -71 [ 253.300423][ T5286] gspca_spca500: reg write: error -71 [ 253.314133][ T5286] gspca_spca500: reg write: error -71 [ 253.333202][ T5286] usb 3-1: USB disconnect, device number 27 [ 253.835787][ T937] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 253.918682][ T5289] usb 2-1: USB disconnect, device number 34 [ 253.996725][ T937] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 254.026749][ T937] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 254.050365][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.061377][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.108664][ T937] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 254.216932][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.315708][ T5286] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 254.348146][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.409426][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'. [ 254.508426][ T5286] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.514056][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.525631][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.574687][ T5286] usb 4-1: Product: syz [ 254.591363][ T5286] usb 4-1: Manufacturer: syz [ 254.607648][ T5286] usb 4-1: SerialNumber: syz [ 254.638068][ T5286] usb 4-1: config 0 descriptor?? [ 254.682392][ T8051] vhci_hcd: default hub control req: 8018 v0000 i0000 l0 [ 254.714049][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 254.830661][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.851031][ T5242] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.865762][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.878727][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.883802][ T5286] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 254.898016][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.909876][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.917710][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.935975][ T5288] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 255.018211][ T53] bridge_slave_0: left allmulticast mode [ 255.045426][ T53] bridge_slave_0: left promiscuous mode [ 255.072169][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.096572][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 255.112047][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.134273][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.186152][ T937] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 255.197911][ T5288] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.310108][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.353544][ T5288] usb 2-1: config 0 descriptor?? [ 255.378126][ T5288] hub 2-1:0.0: USB hub found [ 255.401528][ T937] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 255.432160][ T937] stv0680 1-1:4.0: last error: 81, command = 0xcb [ 255.497223][ T937] usb 1-1: USB disconnect, device number 25 [ 255.591628][ T5288] hub 2-1:0.0: 1 port detected [ 256.055341][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073473][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.258938][ T5288] hub 2-1:0.0: activate --> -90 [ 256.326193][ T5286] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 256.393902][ T5286] usb 4-1: USB disconnect, device number 24 [ 256.715795][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.729515][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.741739][ T53] bond0 (unregistering): Released all slaves [ 257.021638][ T55] Bluetooth: hci2: command tx timeout [ 257.335510][ T5288] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 257.786110][ T55] Bluetooth: hci3: unexpected event 0x03 length: 16 > 11 [ 257.977799][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.022300][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.059766][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.086366][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.147473][ T53] hsr0: left allmulticast mode [ 258.158198][ T53] veth1_macvtap: left promiscuous mode [ 258.172785][ T53] veth0_macvtap: left promiscuous mode [ 258.182603][ T53] veth1_vlan: left promiscuous mode [ 258.193502][ T53] veth0_vlan: left promiscuous mode [ 259.088324][ T55] Bluetooth: hci2: command tx timeout [ 259.162298][ T53] team0 (unregistering): Port device team_slave_1 removed [ 259.273916][ T53] team0 (unregistering): Port device team_slave_0 removed [ 260.136889][ T5288] usb 2-1: USB disconnect, device number 35 [ 260.436400][ T8057] chnl_net:caif_netlink_parms(): no params data found [ 260.832333][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.851127][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.886770][ T8057] bridge_slave_0: entered allmulticast mode [ 260.893566][ T8057] bridge_slave_0: entered promiscuous mode [ 260.900261][ T5288] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 261.066341][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 261.072482][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.087512][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.123273][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.137962][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.162038][ T8057] bridge_slave_1: entered allmulticast mode [ 261.176717][ T55] Bluetooth: hci2: command tx timeout [ 261.188207][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.206233][ T8057] bridge_slave_1: entered promiscuous mode [ 261.265655][ T5288] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.302715][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.328373][ T5288] usb 1-1: config 0 descriptor?? [ 261.401633][ T8057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.470763][ T8057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.752225][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.800128][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.810234][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.819495][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.827619][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 261.835020][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.842739][ T5288] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 261.850159][ T5288] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 261.858063][ T5288] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 261.870954][ T5288] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 261.884365][ T5288] microsoft 0003:045E:07DA.000C: no inputs found [ 261.891172][ T5288] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 261.922952][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.970227][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.981578][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.003442][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.013313][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 262.032384][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.172121][ T8057] team0: Port device team_slave_0 added [ 262.184794][ T8057] team0: Port device team_slave_1 added [ 262.282972][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.290312][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.317173][ T8057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.335503][ T5288] usb 1-1: USB disconnect, device number 26 [ 262.339034][ T8057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.360520][ T8057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.387972][ T8057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.490841][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.535726][ T5289] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 262.562740][ T8057] hsr_slave_0: entered promiscuous mode [ 262.573672][ T8057] hsr_slave_1: entered promiscuous mode [ 262.580203][ T8057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.589180][ T8057] Cannot create hsr debugfs directory [ 262.624528][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.696288][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 262.710057][ T5289] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 262.730002][ T5289] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 262.753449][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.763564][ T5289] usb 2-1: Product: syz [ 262.770470][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.781156][ T5289] usb 2-1: Manufacturer: syz [ 262.788411][ T5289] usb 2-1: SerialNumber: syz [ 262.796329][ T5289] usb 2-1: config 0 descriptor?? [ 262.813170][ T5289] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 262.860380][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.256463][ T55] Bluetooth: hci2: command tx timeout [ 263.429017][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 263.759179][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.862738][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 263.949717][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.045888][ T55] Bluetooth: hci0: command tx timeout [ 264.145110][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.159601][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.173657][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.181407][ T8168] bridge_slave_0: entered allmulticast mode [ 264.189350][ T8168] bridge_slave_0: entered promiscuous mode [ 264.198471][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.211993][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.219713][ T8168] bridge_slave_1: entered allmulticast mode [ 264.227233][ T8168] bridge_slave_1: entered promiscuous mode [ 264.296988][ T55] Bluetooth: hci3: command tx timeout [ 264.307691][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.426618][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.444827][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.462398][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.470471][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.478338][ T8169] bridge_slave_0: entered allmulticast mode [ 264.485380][ T8169] bridge_slave_0: entered promiscuous mode [ 264.494426][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.502764][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.511068][ T8169] bridge_slave_1: entered allmulticast mode [ 264.521818][ T8169] bridge_slave_1: entered promiscuous mode [ 264.548610][ T8057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.561995][ T8057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.622384][ T8168] team0: Port device team_slave_0 added [ 264.654945][ T8057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.680260][ T8057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.710139][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.725160][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.759312][ T8168] team0: Port device team_slave_1 added [ 264.911276][ T8169] team0: Port device team_slave_0 added [ 264.930484][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.938864][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.965797][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.993252][ T53] team0: left allmulticast mode [ 264.998488][ T53] team_slave_0: left allmulticast mode [ 265.004540][ T53] team_slave_1: left allmulticast mode [ 265.016095][ T53] bridge0: port 3(team0) entered disabled state [ 265.028479][ T5289] gspca_zc3xx: i2c_w status error 4a [ 265.034766][ T53] bridge_slave_1: left allmulticast mode [ 265.040884][ T53] bridge_slave_1: left promiscuous mode [ 265.047661][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.058386][ T53] bridge_slave_0: left allmulticast mode [ 265.064122][ T53] bridge_slave_0: left promiscuous mode [ 265.070711][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.083792][ T53] bridge_slave_1: left allmulticast mode [ 265.089856][ T53] bridge_slave_1: left promiscuous mode [ 265.096057][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.108351][ T53] bridge_slave_0: left allmulticast mode [ 265.114109][ T53] bridge_slave_0: left promiscuous mode [ 265.120267][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.155983][ T5288] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 265.233038][ T5289] gspca_zc3xx: reg_w_i err -71 [ 265.319576][ T5288] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.329924][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.339264][ T5288] usb 1-1: Product: syz [ 265.343509][ T5288] usb 1-1: Manufacturer: syz [ 265.348641][ T5288] usb 1-1: SerialNumber: syz [ 265.355415][ T5288] usb 1-1: config 0 descriptor?? [ 265.572597][ T5288] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 265.880693][ T5289] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 265.888509][ T5289] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 265.905101][ T5289] usb 2-1: USB disconnect, device number 36 [ 266.023466][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.045370][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.059353][ T53] bond0 (unregistering): Released all slaves [ 266.129993][ T55] Bluetooth: hci0: command tx timeout [ 266.196122][ T5288] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 266.365857][ T55] Bluetooth: hci3: command tx timeout [ 266.466361][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.490411][ T53] bond_slave_0: left promiscuous mode [ 266.568769][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.590032][ T53] bond_slave_1: left promiscuous mode [ 266.606836][ T53] bond0 (unregistering): Released all slaves [ 266.646305][ T8169] team0: Port device team_slave_1 added [ 266.787977][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.795094][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.863017][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.019228][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.035828][ T5285] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 267.053943][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.095014][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.203042][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.216154][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.244065][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.266865][ T5285] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 267.285706][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.315176][ T5285] usb 2-1: Product: syz [ 267.335036][ T5285] usb 2-1: Manufacturer: syz [ 267.340670][ T8168] hsr_slave_0: entered promiscuous mode [ 267.346666][ T5285] usb 2-1: SerialNumber: syz [ 267.356633][ T8168] hsr_slave_1: entered promiscuous mode [ 267.366805][ T5285] usb 2-1: config 0 descriptor?? [ 267.384650][ T8168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.392930][ T8168] Cannot create hsr debugfs directory [ 267.518941][ T8169] hsr_slave_0: entered promiscuous mode [ 267.528158][ T8169] hsr_slave_1: entered promiscuous mode [ 267.542191][ T8169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.550254][ T8169] Cannot create hsr debugfs directory [ 267.596932][ T5285] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 267.605045][ T5285] usb 2-1: setting power ON [ 267.616769][ T5285] dvb-usb: bulk message failed: -22 (2/0) [ 267.627711][ T5285] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 267.642408][ T5285] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 267.653452][ T5285] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 267.688529][ T5285] usb 2-1: USB disconnect, device number 37 [ 267.846996][ T5289] usb 1-1: USB disconnect, device number 27 [ 268.033413][ T55] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 268.101574][ T53] hsr_slave_0: left promiscuous mode [ 268.104135][ T55] Bluetooth: hci4: unexpected event for opcode 0x2036 [ 268.114400][ T53] hsr_slave_1: left promiscuous mode [ 268.122183][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.135768][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.155716][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.163239][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.206503][ T55] Bluetooth: hci0: command tx timeout [ 268.228607][ T53] hsr_slave_0: left promiscuous mode [ 268.234943][ T53] hsr_slave_1: left promiscuous mode [ 268.242836][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.250898][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.259266][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.267063][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.296898][ T29] audit: type=1326 audit(1727457965.510:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 268.310589][ T53] veth1_macvtap: left promiscuous mode [ 268.326932][ T53] veth0_macvtap: left promiscuous mode [ 268.332608][ T53] veth1_vlan: left promiscuous mode [ 268.338600][ T53] veth0_vlan: left promiscuous mode [ 268.342334][ T29] audit: type=1326 audit(1727457965.510:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 268.369978][ T53] veth1_macvtap: left promiscuous mode [ 268.377805][ T53] veth0_macvtap: left promiscuous mode [ 268.383491][ T53] veth1_vlan: left promiscuous mode [ 268.390214][ T53] veth0_vlan: left promiscuous mode [ 268.446055][ T55] Bluetooth: hci3: command tx timeout [ 269.074947][ T29] audit: type=1326 audit(1727457966.290:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.107763][ T29] audit: type=1326 audit(1727457966.310:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.135483][ T29] audit: type=1326 audit(1727457966.310:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.159375][ T29] audit: type=1326 audit(1727457966.310:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.182957][ T29] audit: type=1326 audit(1727457966.310:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.239568][ T29] audit: type=1326 audit(1727457966.310:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.262369][ T29] audit: type=1326 audit(1727457966.310:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.297181][ T53] team_slave_1 (unregistering): left promiscuous mode [ 269.308855][ T29] audit: type=1326 audit(1727457966.310:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8248 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 269.339819][ T53] team0 (unregistering): Port device team_slave_1 removed [ 269.397058][ T53] team_slave_0 (unregistering): left promiscuous mode [ 269.411764][ T53] team0 (unregistering): Port device team_slave_0 removed [ 269.856098][ T8] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 270.037925][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.055751][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.073628][ T8] usb 2-1: Product: syz [ 270.085492][ T8] usb 2-1: Manufacturer: syz [ 270.094224][ T8] usb 2-1: SerialNumber: syz [ 270.116491][ T8] usb 2-1: config 0 descriptor?? [ 270.285889][ T55] Bluetooth: hci0: command tx timeout [ 270.344800][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.529335][ T53] team0 (unregistering): Port device team_slave_1 removed [ 270.531726][ T55] Bluetooth: hci3: command tx timeout [ 270.594408][ T53] team0 (unregistering): Port device team_slave_0 removed [ 270.984060][ T8] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 271.380658][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.544974][ T8057] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.576080][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.583222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.605455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.612791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.713855][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 271.835346][ T8057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.889808][ T8] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 271.905723][ T8] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 271.965652][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 271.994269][ T8] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 272.017742][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 272.028967][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.040003][ T8057] veth0_vlan: entered promiscuous mode [ 272.116612][ T8168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.125991][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 272.135043][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 272.144577][ T5246] Bluetooth: hci4: hardware error 0x00 [ 272.188820][ T8168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.212229][ T8057] veth1_vlan: entered promiscuous mode [ 272.226988][ T8168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.269556][ T8] ath6kl: Failed to submit usb control message: -71 [ 272.286133][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 272.293263][ T8] ath6kl: Unable to send get target info: -71 [ 272.307873][ T8168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.329093][ T8] ath6kl: Failed to init ath6kl core: -71 [ 272.350670][ T8] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 272.383977][ T8] usb 1-1: USB disconnect, device number 28 [ 272.494497][ T8057] veth0_macvtap: entered promiscuous mode [ 272.520795][ T8057] veth1_macvtap: entered promiscuous mode [ 272.569206][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.599342][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.615492][ T5287] usb 2-1: USB disconnect, device number 38 [ 272.629110][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.639741][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.650203][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.660870][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.670870][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.681774][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.705025][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.791150][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.820325][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.853725][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.871209][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.883142][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.895232][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.913448][ T8057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.928471][ T8057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.947581][ T8057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.984793][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.028015][ T8169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.084995][ T8169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.112632][ T8057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.129499][ T8057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.143335][ T8057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.168380][ T8057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.186801][ T8169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.200064][ T8169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.266172][ T5285] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 273.291647][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.376411][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.383570][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.443403][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.450687][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.470525][ T5285] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 273.527194][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.548514][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.616051][ T5285] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 273.638335][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.666891][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.676225][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.694381][ T5285] usb 2-1: Product: syz [ 273.715339][ T5285] usb 2-1: Manufacturer: syz [ 273.719708][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.723725][ T5285] usb 2-1: SerialNumber: syz [ 273.779377][ T5285] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39 [ 273.803286][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.890645][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.897929][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.986023][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 274.009305][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.054488][ T8168] veth0_vlan: entered promiscuous mode [ 274.068593][ T8168] veth1_vlan: entered promiscuous mode [ 274.103148][ T8168] veth0_macvtap: entered promiscuous mode [ 274.114498][ T8168] veth1_macvtap: entered promiscuous mode [ 274.139203][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.149906][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.160120][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.170894][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.180962][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.192724][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.202923][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.213835][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.223969][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.235881][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.248023][ T5246] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 274.256758][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.277516][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.284665][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.308462][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.324075][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.334210][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.356167][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.374304][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.385068][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.395808][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.423968][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.435798][ T5289] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 274.450197][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.468842][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.487967][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.507122][ T4668] bcm5974 2-1:1.0: could not read from device [ 274.532009][ T5285] usb 2-1: USB disconnect, device number 39 [ 274.541308][ T8169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.551928][ T8169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.553255][ T5239] bcm5974 2-1:1.0: could not read from device [ 274.612866][ T8168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.631591][ T8168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.643233][ T8168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.659846][ T5289] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 274.660756][ T8168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.681455][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.704077][ T5289] usb 1-1: Product: syz [ 274.748939][ T5289] usb 1-1: Manufacturer: syz [ 274.753633][ T5289] usb 1-1: SerialNumber: syz [ 274.766541][ T5239] udevd[5239]: Error opening device "/dev/input/event4": No such device [ 274.773465][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.784134][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 274.805215][ T5289] usb 1-1: config 0 descriptor?? [ 274.814079][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 274.857753][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 274.865395][ T5239] udevd[5239]: Unable to EVIOCGABS device "/dev/input/event4" [ 274.906094][ T5239] udevd[5239]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 275.057417][ T8169] veth0_vlan: entered promiscuous mode [ 275.058435][ T4683] udevd[4683]: worker [5239] terminated by signal 6 (Aborted) [ 275.097162][ T5289] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.122132][ T4683] udevd[4683]: worker [5239] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39/event4' [ 275.126816][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.147142][ T8169] veth1_vlan: entered promiscuous mode [ 275.173609][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.301702][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.312145][ T8169] veth0_macvtap: entered promiscuous mode [ 275.329111][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.343048][ T8169] veth1_macvtap: entered promiscuous mode [ 275.466942][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.501487][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.541240][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.563606][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.593172][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.613418][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.640493][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.661604][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.680690][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.691963][ T5289] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 275.711365][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.742871][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.766893][ T8351] vivid-002: ================= START STATUS ================= [ 275.783862][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.794075][ T8351] vivid-002: Radio HW Seek Mode: Bounded [ 275.801091][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.811356][ T8351] vivid-002: Radio Programmable HW Seek: false [ 275.850268][ T8351] vivid-002: RDS Rx I/O Mode: [ 275.872801][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.900269][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.904886][ T1849] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 275.918053][ T8351] Block I/O [ 275.927353][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.946311][ T8351] vivid-002: Generate RBDS Instead of RDS: false [ 275.955664][ T8351] vivid-002: RDS Reception: true [ 275.961158][ T8351] vivid-002: RDS Program Type: 0 inactive [ 275.973550][ T8351] vivid-002: RDS PS Name: inactive [ 275.982522][ T8351] vivid-002: RDS Radio Text: inactive [ 275.988137][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.005111][ T8351] vivid-002: RDS Traffic Announcement: false inactive [ 276.019816][ T8351] vivid-002: RDS Traffic Program: false inactive [ 276.034181][ T8351] vivid-002: RDS Music: false inactive [ 276.044304][ T8351] vivid-002: ================== END STATUS ================== [ 276.060457][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.081040][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.101247][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.120057][ T1849] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 276.145454][ T1849] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 276.177070][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.184100][ T1849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.220268][ T1849] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 276.229396][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.259931][ T1849] usb 3-1: config 0 has no interface number 0 [ 276.275223][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.275366][ T1849] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 276.296904][ T8169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.307722][ T8169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.319809][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.354423][ T1849] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.380868][ T8169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.405787][ T8169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.418162][ T8169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.418837][ T1849] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 276.465794][ T8169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.496718][ T1849] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 276.530119][ T1849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.566107][ T1849] usb 3-1: config 0 descriptor?? [ 276.578128][ T1849] gspca_main: spca561-2.14.0 probing abcd:cdee [ 276.782365][ T1849] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 276.821900][ T1849] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.830733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.830763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.885504][ T1849] usb 3-1: MIDIStreaming interface descriptor not found [ 276.944092][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.987912][ T1849] usb 3-1: USB disconnect, device number 28 [ 276.995065][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.037575][ T5289] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 277.071111][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.129494][ T8385] xt_socket: unknown flags 0x4 [ 277.232324][ T25] usb 1-1: USB disconnect, device number 29 [ 277.249985][ T5289] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.302460][ T5289] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 277.326959][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.349778][ T5289] usb 4-1: Product: syz [ 277.354010][ T5289] usb 4-1: Manufacturer: syz [ 277.389316][ T5289] usb 4-1: SerialNumber: syz [ 277.480895][ T5289] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input40 [ 277.495289][ T8396] netlink: 208 bytes leftover after parsing attributes in process `syz.0.570'. [ 278.126236][ T5284] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 278.220617][ T4668] bcm5974 4-1:1.0: could not read from device [ 278.239727][ T25] usb 4-1: USB disconnect, device number 25 [ 278.255096][ T7486] bcm5974 4-1:1.0: could not read from device [ 278.295750][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 278.304429][ T5284] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 278.335024][ T4668] bcm5974 4-1:1.0: could not read from device [ 278.345040][ T5284] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 278.379467][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.432962][ T5284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.442803][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.451433][ T5284] usb 3-1: Product: syz [ 278.456009][ T5284] usb 3-1: Manufacturer: syz [ 278.460666][ T5284] usb 3-1: SerialNumber: syz [ 278.511038][ T7486] udevd[7486]: Error opening device "/dev/input/event4": No such device [ 278.535781][ T8] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 278.708490][ T8] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 278.726153][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.755832][ T8] usb 1-1: config 0 has no interface number 0 [ 278.775913][ T8] usb 1-1: config 0 interface 82 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 278.801628][ T8] usb 1-1: config 0 interface 82 altsetting 0 endpoint 0x8 has invalid maxpacket 166, setting to 64 [ 278.812931][ T8] usb 1-1: config 0 interface 82 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.839615][ T5289] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 278.889916][ T8] usb 1-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 278.902349][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.902583][ T5284] usb 3-1: 0:2 : does not exist [ 278.915730][ T8] usb 1-1: Product: syz [ 278.919938][ T8] usb 1-1: Manufacturer: syz [ 278.924578][ T8] usb 1-1: SerialNumber: syz [ 278.936279][ T5283] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 278.960074][ T8] usb 1-1: config 0 descriptor?? [ 278.969605][ T8422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 278.979101][ T5284] usb 3-1: USB disconnect, device number 29 [ 279.031558][ T5289] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 279.068113][ T5289] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 279.099409][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.119849][ T5283] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.132616][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.145695][ T5289] usb 2-1: Product: syz [ 279.149930][ T5289] usb 2-1: Manufacturer: syz [ 279.163116][ T5283] usb 5-1: Product: syz [ 279.178124][ T5289] usb 2-1: SerialNumber: syz [ 279.188270][ T5283] usb 5-1: Manufacturer: syz [ 279.192938][ T5283] usb 5-1: SerialNumber: syz [ 279.211166][ T5289] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input41 [ 279.220070][ T8] kaweth 1-1:0.82: Firmware present in device. [ 279.234065][ T5283] usb 5-1: config 0 descriptor?? [ 279.414740][ T8] kaweth 1-1:0.82: Error reading configuration (-71), no net device created [ 279.445845][ T8] kaweth 1-1:0.82: probe with driver kaweth failed with error -5 [ 279.463568][ T5283] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.472657][ T8] usb 1-1: USB disconnect, device number 30 [ 279.933525][ T4668] bcm5974 2-1:1.0: could not read from device [ 279.980080][ T4668] bcm5974 2-1:1.0: could not read from device [ 279.987509][ T5289] usb 2-1: USB disconnect, device number 40 [ 280.172173][ T5283] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 280.214635][ T7488] udevd[7488]: Error opening device "/dev/input/event4": No such file or directory [ 280.267700][ T7488] udevd[7488]: Unable to EVIOCGABS device "/dev/input/event4" [ 280.275367][ T7488] udevd[7488]: Unable to EVIOCGABS device "/dev/input/event4" [ 280.319466][ T7488] udevd[7488]: Unable to EVIOCGABS device "/dev/input/event4" [ 280.327487][ T8483] netlink: 'syz.0.593': attribute type 13 has an invalid length. [ 280.359866][ T7488] udevd[7488]: Unable to EVIOCGABS device "/dev/input/event4" [ 280.380701][ T8483] veth0_macvtap: left promiscuous mode [ 280.410605][ T8483] macvtap0: entered allmulticast mode [ 280.435084][ T8483] macvtap0: refused to change device tx_queue_len [ 280.650830][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.599'. [ 280.695688][ T5289] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 280.786121][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 280.863050][ T8507] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.603'. [ 280.888142][ T5289] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 280.905420][ T5289] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 280.916281][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.932621][ T5289] usb 2-1: Product: syz [ 280.938564][ T5289] usb 2-1: Manufacturer: syz [ 280.943238][ T5289] usb 2-1: SerialNumber: syz [ 280.948745][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 280.965140][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 280.977809][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.007710][ T5289] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input42 [ 281.026959][ T25] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 281.042190][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.053015][ T25] usb 4-1: Product: syz [ 281.058321][ T25] usb 4-1: Manufacturer: syz [ 281.077305][ T25] usb 4-1: SerialNumber: syz [ 281.096081][ T25] usb 4-1: config 0 descriptor?? [ 281.215305][ T4668] bcm5974 2-1:1.0: could not read from device [ 281.233370][ T4668] bcm5974 2-1:1.0: could not read from device [ 281.247550][ T5289] usb 2-1: USB disconnect, device number 41 [ 281.368739][ T25] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 281.398744][ C1] powermate: config urb returned -71 [ 281.404569][ C1] powermate: config urb returned -71 [ 281.410503][ C1] powermate: config urb returned -71 [ 281.416092][ C1] powermate: config urb returned -71 [ 281.448696][ T25] usb 4-1: USB disconnect, device number 26 [ 281.448756][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 281.460593][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 281.515005][ T5289] usb 5-1: USB disconnect, device number 31 [ 281.773297][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 282.143974][ T8] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 282.308125][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.330377][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 282.350798][ T8] usb 5-1: config 127 has an invalid interface number: 217 but max is 0 [ 282.364496][ T8] usb 5-1: config 127 has no interface number 0 [ 282.373072][ T8] usb 5-1: config 127 interface 217 altsetting 5 endpoint 0xA has invalid maxpacket 45322, setting to 64 [ 282.386728][ T8] usb 5-1: config 127 interface 217 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 282.412272][ T8] usb 5-1: config 127 interface 217 has no altsetting 0 [ 282.434489][ T8] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice=2b.b1 [ 282.454329][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.485021][ T8] usb 5-1: Product: syz [ 282.489774][ T8] usb 5-1: Manufacturer: syz [ 282.494786][ T8] usb 5-1: SerialNumber: syz [ 282.516117][ T5287] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 282.527753][ T8] usb 5-1: Interface #217 referenced by multiple IADs [ 282.709320][ T5287] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.725889][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.737757][ T5287] usb 3-1: Product: syz [ 282.744438][ T5287] usb 3-1: Manufacturer: syz [ 282.750423][ T5287] usb 3-1: SerialNumber: syz [ 282.782616][ T8] whiteheat 5-1:127.217: required endpoints missing [ 282.793724][ T5287] usb 3-1: config 0 descriptor?? [ 282.831682][ T8] usb 5-1: USB disconnect, device number 32 [ 282.888974][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 283.016488][ T5287] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.562228][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 283.628683][ T5287] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 283.725723][ T52] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 283.892026][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.899260][ T8595] netlink: 104 bytes leftover after parsing attributes in process `syz.4.643'. [ 283.909178][ T52] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 283.911781][ T8595] netlink: 104 bytes leftover after parsing attributes in process `syz.4.643'. [ 283.930753][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.937099][ T52] usb 2-1: config 0 descriptor?? [ 283.954898][ T52] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22 [ 284.190408][ T5289] usb 2-1: USB disconnect, device number 42 [ 284.254690][ T8604] netlink: 'syz.0.648': attribute type 2 has an invalid length. [ 284.295721][ T8604] netlink: 'syz.0.648': attribute type 8 has an invalid length. [ 284.335299][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.0.648'. [ 284.467573][ T8612] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 284.615634][ T5287] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 284.689453][ T8620] netlink: 64 bytes leftover after parsing attributes in process `syz.3.655'. [ 284.766279][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 284.777314][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.803985][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 284.830330][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.859794][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.888144][ T5287] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 284.900405][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.911404][ T5287] usb 5-1: Product: syz [ 284.925115][ T5287] usb 5-1: Manufacturer: syz [ 284.931593][ T5287] usb 5-1: SerialNumber: syz [ 284.943138][ T5287] usb 5-1: config 0 descriptor?? [ 284.966598][ T8623] loop4: detected capacity change from 0 to 7 [ 284.980925][ T5287] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input44 [ 284.999055][ T8623] buffer_io_error: 18 callbacks suppressed [ 284.999071][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.022420][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.031412][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.076905][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.085104][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.104601][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.104678][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.104759][ T8623] ldm_validate_partition_table(): Disk read failed. [ 285.104792][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.104846][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.104945][ T8623] Buffer I/O error on dev loop4, logical block 0, async page read [ 285.105020][ T8623] Dev loop4: unable to read RDB block 0 [ 285.105399][ T8623] loop4: unable to read partition table [ 285.108476][ T8623] loop4: partition table beyond EOD, truncated [ 285.108543][ T8623] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 285.108543][ T8623] ) failed (rc=-5) [ 285.179931][ T5284] usb 3-1: USB disconnect, device number 30 [ 285.315743][ T5287] rc_core: IR keymap rc-imon-pad not found [ 285.380948][ T5287] Registered IR keymap rc-empty [ 285.386792][ T5287] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 285.397455][ T5287] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 285.412340][ T5287] imon:send_packet: packet tx failed (-71) [ 285.437497][ T5287] imon 5-1:0.0: remote input dev register failed [ 285.454482][ T5287] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 285.506592][ T5287] imon 5-1:0.0: unable to initialize intf0, err 0 [ 285.513286][ T5287] imon:imon_probe: failed to initialize context! [ 285.525969][ T5287] imon 5-1:0.0: unable to register, err -19 [ 285.543711][ T5287] usb 5-1: USB disconnect, device number 33 [ 285.665686][ T5284] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 285.827717][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.840837][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.848865][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 285.851723][ T5284] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 285.868920][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.879184][ T5284] usb 3-1: config 0 descriptor?? [ 285.955819][ T5282] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 286.009763][ T8643] netlink: 'syz.4.664': attribute type 30 has an invalid length. [ 286.022657][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.042281][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 286.065235][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 286.086966][ T25] usb 2-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 286.096630][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.105057][ T25] usb 2-1: Product: syz [ 286.111887][ T25] usb 2-1: Manufacturer: syz [ 286.121194][ T25] usb 2-1: SerialNumber: syz [ 286.129304][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 286.136030][ T25] usb 2-1: config 0 descriptor?? [ 286.161842][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.189201][ T5282] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 286.215739][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.235131][ T5282] usb 4-1: Product: syz [ 286.241468][ T5282] usb 4-1: Manufacturer: syz [ 286.257554][ T5282] usb 4-1: SerialNumber: syz [ 286.278633][ T5282] usb 4-1: config 0 descriptor?? [ 286.321975][ T5284] stadia 0003:18D1:9400.000D: unbalanced collection at end of report description [ 286.339331][ T5284] stadia 0003:18D1:9400.000D: parse failed [ 286.345456][ T5284] stadia 0003:18D1:9400.000D: probe with driver stadia failed with error -22 [ 286.356270][ T25] usb 2-1: USB disconnect, device number 43 [ 286.526794][ T5289] usb 3-1: USB disconnect, device number 31 [ 286.703377][ T5282] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 286.712954][ T5282] usb 4-1: No valid video chain found. [ 286.791420][ T8651] __nla_validate_parse: 1 callbacks suppressed [ 286.791441][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.668'. [ 286.917128][ T52] usb 4-1: USB disconnect, device number 27 [ 287.455787][ T25] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 287.575921][ T52] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 287.637489][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 287.666077][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.674142][ T25] usb 5-1: Product: syz [ 287.685942][ T25] usb 5-1: Manufacturer: syz [ 287.694757][ T25] usb 5-1: SerialNumber: syz [ 287.723700][ T25] usb 5-1: config 0 descriptor?? [ 287.725255][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 287.752648][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 287.779739][ T52] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 287.802019][ T52] usb 2-1: config 0 has no interface number 0 [ 287.832939][ T52] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 287.863628][ T52] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 287.882560][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.898955][ T52] usb 2-1: Product: syz [ 287.903382][ T52] usb 2-1: Manufacturer: syz [ 287.909813][ T52] usb 2-1: SerialNumber: syz [ 287.923044][ T52] usb 2-1: config 0 descriptor?? [ 287.940074][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 288.551732][ T52] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 288.562203][ T25] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 288.597713][ T52] usb 2-1: USB disconnect, device number 44 [ 289.167105][ T8738] dvmrp0: entered allmulticast mode [ 289.178505][ T8737] dvmrp0: left allmulticast mode [ 289.256280][ T5284] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 289.417327][ T5284] usb 3-1: config 0 interface 0 has no altsetting 0 [ 289.425687][ T52] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 289.434244][ T5284] usb 3-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 289.465304][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.510433][ T5284] usb 3-1: config 0 descriptor?? [ 289.586583][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.608497][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.626168][ T52] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 289.655593][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.679150][ T52] usb 4-1: config 0 descriptor?? [ 290.129961][ T5283] usb 3-1: USB disconnect, device number 32 [ 290.151289][ T8] usb 5-1: USB disconnect, device number 34 [ 290.164969][ T52] steelseries 0003:1038:12B6.000F: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 290.315160][ T52] steelseries 0003:1038:12B6.000F: hid_hw_raw_request() failed with -71 [ 290.358777][ T52] usb 4-1: USB disconnect, device number 28 [ 290.772806][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 290.800914][ T8783] loop4: detected capacity change from 0 to 7 [ 290.813514][ T8783] buffer_io_error: 4 callbacks suppressed [ 290.813528][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.833787][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.852997][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.860970][ T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 290.885489][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.935176][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.960010][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.980262][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.980327][ T8783] ldm_validate_partition_table(): Disk read failed. [ 290.980379][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.980461][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.980543][ T8783] Buffer I/O error on dev loop4, logical block 0, async page read [ 290.980657][ T8783] Dev loop4: unable to read RDB block 0 [ 290.980873][ T8783] loop4: unable to read partition table [ 290.981051][ T8783] loop4: partition table beyond EOD, truncated [ 290.981075][ T8783] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 290.981075][ T8783] ) failed (rc=-5) [ 291.010291][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.129727][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.140311][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 291.150333][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.155859][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 291.167402][ T8] usb 5-1: config 0 descriptor?? [ 291.315794][ T25] usb 2-1: device descriptor read/64, error -71 [ 291.575672][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 291.586447][ T8] magicmouse 0003:05AC:0269.0010: unbalanced delimiter at end of report description [ 291.612294][ T8] magicmouse 0003:05AC:0269.0010: magicmouse hid parse failed [ 291.629579][ T8] magicmouse 0003:05AC:0269.0010: probe with driver magicmouse failed with error -22 [ 291.735804][ T5284] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 291.745680][ T25] usb 2-1: device descriptor read/64, error -71 [ 291.814910][ T5282] usb 5-1: USB disconnect, device number 35 [ 291.858501][ T25] usb usb2-port1: attempt power cycle [ 291.909238][ T5284] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 291.919501][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.927816][ T5284] usb 4-1: Product: syz [ 291.932289][ T5284] usb 4-1: Manufacturer: syz [ 291.955857][ T5284] usb 4-1: SerialNumber: syz [ 291.990175][ T5284] usb 4-1: config 0 descriptor?? [ 292.212936][ T5284] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 292.225856][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 292.265063][ T25] usb 2-1: device descriptor read/8, error -71 [ 292.475769][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 292.505801][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 292.534902][ T25] usb 2-1: device descriptor read/8, error -71 [ 292.625756][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 292.632845][ T8] usb 3-1: config 0 has no interfaces? [ 292.638677][ T8] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 292.649728][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.658193][ T25] usb usb2-port1: unable to enumerate USB device [ 292.661150][ T8] usb 3-1: config 0 descriptor?? [ 292.821551][ T5284] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 292.880781][ T25] usb 3-1: USB disconnect, device number 33 [ 293.488073][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.742'. [ 293.519674][ T8824] loop4: detected capacity change from 0 to 7 [ 293.540730][ T8824] ldm_validate_partition_table(): Disk read failed. [ 293.558439][ T8824] Dev loop4: unable to read RDB block 0 [ 293.569854][ T8824] loop4: unable to read partition table [ 293.576224][ T8824] loop4: partition table beyond EOD, truncated [ 293.586425][ T8824] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 293.586425][ T8824] ) failed (rc=-5) [ 294.315780][ T5284] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 294.488832][ T52] usb 4-1: USB disconnect, device number 29 [ 294.516445][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.545746][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.579751][ T5284] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 294.617801][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.639931][ T5284] usb 3-1: config 0 descriptor?? [ 294.778504][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 294.796095][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 295.060711][ T5284] zydacron 0003:13EC:0006.0011: unknown main item tag 0x0 [ 295.093188][ T5284] zydacron 0003:13EC:0006.0011: unknown main item tag 0x0 [ 295.105998][ T5284] zydacron 0003:13EC:0006.0011: unknown main item tag 0x0 [ 295.113223][ T5284] zydacron 0003:13EC:0006.0011: unknown main item tag 0x0 [ 295.135823][ T5284] zydacron 0003:13EC:0006.0011: item fetching failed at offset 4/5 [ 295.144335][ T5284] zydacron 0003:13EC:0006.0011: parse failed [ 295.155882][ T5284] zydacron 0003:13EC:0006.0011: probe with driver zydacron failed with error -22 [ 295.169898][ T5283] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 295.280236][ T25] usb 3-1: USB disconnect, device number 34 [ 295.327302][ T5283] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.365352][ T5283] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 295.404544][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.427793][ T5283] usb 4-1: Product: syz [ 295.439448][ T5283] usb 4-1: Manufacturer: syz [ 295.451016][ T5283] usb 4-1: SerialNumber: syz [ 295.470531][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input48 [ 295.755687][ T25] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 295.928141][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.954059][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.968551][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.982914][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 295.992178][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.006722][ T25] usb 5-1: config 0 descriptor?? [ 296.027987][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 296.048281][ T8883] loop4: detected capacity change from 0 to 7 [ 296.066235][ T8883] buffer_io_error: 18 callbacks suppressed [ 296.066251][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.082412][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.095746][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.106203][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.117925][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.126466][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.134582][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.149258][ T8883] ldm_validate_partition_table(): Disk read failed. [ 296.156272][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.164220][ T5284] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 296.170774][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.201961][ T8883] Buffer I/O error on dev loop4, logical block 0, async page read [ 296.220460][ T8883] Dev loop4: unable to read RDB block 0 [ 296.226805][ T8883] loop4: unable to read partition table [ 296.233187][ T8883] loop4: partition table beyond EOD, truncated [ 296.240932][ T8883] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 296.240932][ T8883] ) failed (rc=-5) [ 296.271205][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 296.300988][ T4668] bcm5974 4-1:1.0: could not read from device [ 296.329796][ T4668] bcm5974 4-1:1.0: could not read from device [ 296.337503][ T5284] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 296.347488][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.383782][ T5284] usb 3-1: config 0 descriptor?? [ 296.407649][ T5283] usb 4-1: USB disconnect, device number 30 [ 296.434713][ T4668] bcm5974 4-1:1.0: could not read from device [ 296.732821][ T8892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.746132][ T8892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.755724][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 296.763342][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.799481][ T25] usb 5-1: USB disconnect, device number 36 [ 296.905944][ T5283] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 297.016363][ T8881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.035410][ T8881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.050406][ T2577] bridge_slave_1: left allmulticast mode [ 297.062633][ T2577] bridge_slave_1: left promiscuous mode [ 297.071458][ T2577] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.082070][ T5283] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.099903][ T2577] bridge_slave_0: left allmulticast mode [ 297.108411][ T2577] bridge_slave_0: left promiscuous mode [ 297.114240][ T2577] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.125236][ T5283] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 297.134740][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.143545][ T5283] usb 4-1: Product: syz [ 297.148874][ T5283] usb 4-1: Manufacturer: syz [ 297.154311][ T5283] usb 4-1: SerialNumber: syz [ 297.185654][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input50 [ 297.905633][ T4668] bcm5974 4-1:1.0: could not read from device [ 297.954282][ T4668] bcm5974 4-1:1.0: could not read from device [ 297.985693][ T5283] usb 4-1: USB disconnect, device number 31 [ 298.254547][ T2577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.281636][ T2577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.305330][ T2577] bond0 (unregistering): Released all slaves [ 298.327039][ T8881] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 298.363482][ T8881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.374039][ T8881] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 298.375762][ T5246] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 298.393204][ T5246] Bluetooth: hci3: Injecting HCI hardware error event [ 298.407594][ T55] Bluetooth: hci3: hardware error 0x00 [ 298.408524][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 298.487264][ T5284] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 298.525894][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 298.552149][ T5284] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 298.600231][ T5284] [drm:udl_init] *ERROR* Selecting channel failed [ 298.655028][ T5284] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 298.683521][ T5284] [drm] Initialized udl on minor 2 [ 298.714656][ T5284] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 298.741749][ T5284] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 298.769841][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 298.796277][ T5284] usb 3-1: USB disconnect, device number 35 [ 298.802582][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 299.312781][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 299.341967][ T2577] hsr_slave_0: left promiscuous mode [ 299.349675][ T2577] hsr_slave_1: left promiscuous mode [ 299.389852][ T8923] loop4: detected capacity change from 0 to 7 [ 299.400878][ T2577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.409577][ T8923] ldm_validate_partition_table(): Disk read failed. [ 299.426196][ T2577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.429347][ T8923] Dev loop4: unable to read RDB block 0 [ 299.475992][ T8923] loop4: unable to read partition table [ 299.491174][ T2577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.541433][ T2577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.560186][ T8923] loop4: partition table beyond EOD, truncated [ 299.584036][ T8923] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 299.584036][ T8923] ) failed (rc=-5) [ 299.611942][ T4683] ldm_validate_partition_table(): Disk read failed. [ 299.636395][ T4683] Dev loop4: unable to read RDB block 0 [ 299.648194][ T4683] loop4: unable to read partition table [ 299.650265][ T2577] veth1_macvtap: left promiscuous mode [ 299.664704][ T4683] loop4: partition table beyond EOD, truncated [ 299.689500][ T2577] veth0_macvtap: left promiscuous mode [ 299.711018][ T2577] veth1_vlan: left promiscuous mode [ 299.741791][ T2577] veth0_vlan: left promiscuous mode [ 299.811642][ T5283] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 300.625866][ T55] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 300.995950][ T5282] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 301.169608][ T5282] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 301.212456][ T5282] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 301.232199][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.299415][ T5282] usb 5-1: Product: syz [ 301.317625][ T5282] usb 5-1: Manufacturer: syz [ 301.343984][ T5282] usb 5-1: SerialNumber: syz [ 301.394484][ T5282] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input52 [ 301.593716][ T4668] bcm5974 5-1:1.0: could not read from device [ 301.794784][ T5282] usb 5-1: USB disconnect, device number 37 [ 301.821168][ T4668] bcm5974 5-1:1.0: could not read from device [ 301.947430][ T5241] udevd[5241]: Error opening device "/dev/input/event4": No such file or directory [ 301.984663][ T5241] udevd[5241]: Unable to EVIOCGABS device "/dev/input/event4" [ 302.016493][ T5241] udevd[5241]: Unable to EVIOCGABS device "/dev/input/event4" [ 302.044080][ T5241] udevd[5241]: Unable to EVIOCGABS device "/dev/input/event4" [ 302.077919][ T5241] udevd[5241]: Unable to EVIOCGABS device "/dev/input/event4" [ 305.267951][ T8966] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.795'. [ 305.387428][ T5282] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 305.560511][ T5282] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.585744][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.751083][ T5282] usb 5-1: Product: syz [ 305.757597][ T5282] usb 5-1: Manufacturer: syz [ 305.767982][ T5282] usb 5-1: SerialNumber: syz [ 305.781302][ T5282] usb 5-1: config 0 descriptor?? [ 306.019098][ T5282] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.095489][ T5282] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 308.192514][ T8] usb 5-1: USB disconnect, device number 38 [ 308.695791][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 309.106160][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.148633][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.180852][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.213863][ T8] usb 5-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 309.231269][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.258500][ T8] usb 5-1: Product: syz [ 309.262870][ T8] usb 5-1: Manufacturer: syz [ 309.273554][ T8] usb 5-1: SerialNumber: syz [ 309.289451][ T8] usb 5-1: config 0 descriptor?? [ 309.611482][ T8] usb 5-1: USB disconnect, device number 39 [ 310.114121][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.129710][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.139105][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.157390][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.165121][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.175726][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.035747][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.047305][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.057944][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.067399][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.079265][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 312.086875][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.211058][ T55] Bluetooth: hci5: command tx timeout [ 314.125768][ T55] Bluetooth: hci6: command tx timeout [ 314.285953][ T55] Bluetooth: hci5: command tx timeout [ 315.896238][ T5246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.917855][ T5246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.927645][ T5246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.936834][ T5246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.944777][ T5246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 315.954288][ T5246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.206645][ T55] Bluetooth: hci6: command tx timeout [ 316.365800][ T55] Bluetooth: hci5: command tx timeout [ 317.511014][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.521151][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.045866][ T55] Bluetooth: hci7: command tx timeout [ 318.293915][ T55] Bluetooth: hci6: command tx timeout [ 318.449241][ T55] Bluetooth: hci5: command tx timeout [ 318.455527][ C1] sched: DL replenish lagged too much [ 320.005827][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 320.016706][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 320.029107][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 320.049457][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 320.057434][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 320.081833][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 320.125771][ T5246] Bluetooth: hci7: command tx timeout [ 320.365902][ T5246] Bluetooth: hci6: command tx timeout [ 320.904873][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 320.915726][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 320.935818][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 320.947418][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 320.956619][ T55] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 320.963999][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 322.126120][ T5246] Bluetooth: hci8: command tx timeout [ 322.207426][ T5246] Bluetooth: hci7: command tx timeout [ 323.005758][ T5246] Bluetooth: hci9: command tx timeout [ 324.206241][ T5246] Bluetooth: hci8: command tx timeout [ 324.285765][ T5246] Bluetooth: hci7: command tx timeout [ 325.085810][ T5246] Bluetooth: hci9: command tx timeout [ 326.286066][ T5246] Bluetooth: hci8: command tx timeout [ 327.165694][ T5246] Bluetooth: hci9: command tx timeout [ 328.366562][ T5246] Bluetooth: hci8: command tx timeout [ 329.245966][ T5246] Bluetooth: hci9: command tx timeout [ 341.941762][ T2577] team0 (unregistering): Port device team_slave_1 removed [ 342.091991][ T2577] team0 (unregistering): Port device team_slave_0 removed [ 343.670261][ T8932] bridge0: entered promiscuous mode [ 343.684682][ T8932] bridge0: left promiscuous mode [ 356.335236][ T8980] chnl_net:caif_netlink_parms(): no params data found [ 356.518717][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.535949][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.543602][ T8980] bridge_slave_0: entered allmulticast mode [ 356.563211][ T8980] bridge_slave_0: entered promiscuous mode [ 356.575270][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.591728][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.602999][ T8980] bridge_slave_1: entered allmulticast mode [ 356.616612][ T8980] bridge_slave_1: entered promiscuous mode [ 356.762724][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.789849][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.901336][ T8980] team0: Port device team_slave_0 added [ 356.923125][ T8980] team0: Port device team_slave_1 added [ 357.050603][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.067591][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.111321][ T8980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.139524][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.151346][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.192850][ T8980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.348689][ T8980] hsr_slave_0: entered promiscuous mode [ 357.375191][ T8980] hsr_slave_1: entered promiscuous mode [ 357.883631][ T8980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.195980][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.202379][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.445070][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.479132][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.490450][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.499685][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.508464][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 382.519627][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.610093][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.620135][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.636135][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.656090][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.663983][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.675758][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.843527][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.854601][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.863214][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.872404][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.880232][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.890760][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.901851][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.911713][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.920091][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.931759][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.947700][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 382.955076][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.124626][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.137766][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.148425][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.157609][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.168459][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 383.175976][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.605814][ T55] Bluetooth: hci0: command tx timeout [ 384.766009][ T55] Bluetooth: hci1: command tx timeout [ 385.096031][ T5242] Bluetooth: hci2: command tx timeout [ 385.104177][ T55] Bluetooth: hci3: command tx timeout [ 385.246378][ T55] Bluetooth: hci4: command tx timeout [ 385.528294][ T8980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.687126][ T55] Bluetooth: hci0: command tx timeout [ 386.845793][ T55] Bluetooth: hci1: command tx timeout [ 387.165762][ T55] Bluetooth: hci3: command tx timeout [ 387.171259][ T55] Bluetooth: hci2: command tx timeout [ 387.326110][ T55] Bluetooth: hci4: command tx timeout [ 388.766077][ T55] Bluetooth: hci0: command tx timeout [ 388.925939][ T55] Bluetooth: hci1: command tx timeout [ 389.258155][ T55] Bluetooth: hci2: command tx timeout [ 389.263718][ T55] Bluetooth: hci3: command tx timeout [ 389.406130][ T55] Bluetooth: hci4: command tx timeout [ 390.846054][ T55] Bluetooth: hci0: command tx timeout [ 391.005834][ T55] Bluetooth: hci1: command tx timeout [ 391.325849][ T5242] Bluetooth: hci2: command tx timeout [ 391.332352][ T55] Bluetooth: hci3: command tx timeout [ 391.489624][ T55] Bluetooth: hci4: command tx timeout [ 392.085064][ T8980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.274388][ T8980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.355562][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 437.361677][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 440.405780][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.412154][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.457297][ T9036] Bluetooth: hci7: command 0x0406 tx timeout [ 442.463403][ T9036] Bluetooth: hci8: command 0x0406 tx timeout [ 443.080029][ T5246] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 443.106310][ T5246] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 443.118980][ T5246] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 443.127655][ T5246] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 443.155951][ T5246] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 443.166043][ T5246] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 443.227179][ T5240] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 443.240215][ T5240] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 443.264018][ T5240] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 443.277836][ T5240] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 443.286072][ T5240] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 443.326093][ T5240] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 443.457748][ T5240] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 443.468545][ T5240] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 443.477895][ T5240] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 443.489972][ T5240] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 443.505999][ T5240] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 443.517707][ T5240] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 443.589083][ T5246] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 443.601148][ T5246] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 443.610774][ T5246] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 443.635178][ T5246] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 443.643461][ T5246] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 443.651576][ T5246] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 443.838745][ T5240] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 443.849568][ T5240] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 443.859010][ T5240] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 443.869070][ T5240] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 443.877327][ T5240] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 443.885186][ T5240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 445.246136][ T5240] Bluetooth: hci10: command tx timeout [ 445.406088][ T5240] Bluetooth: hci11: command tx timeout [ 445.656040][ T5240] Bluetooth: hci12: command tx timeout [ 445.725996][ T5240] Bluetooth: hci13: command tx timeout [ 445.965723][ T5240] Bluetooth: hci14: command tx timeout [ 447.325967][ T5240] Bluetooth: hci10: command tx timeout [ 447.485998][ T5240] Bluetooth: hci11: command tx timeout [ 447.573264][ T5240] Bluetooth: hci9: command 0x0406 tx timeout [ 447.725881][ T5246] Bluetooth: hci12: command tx timeout [ 447.806012][ T5246] Bluetooth: hci13: command tx timeout [ 448.045889][ T5246] Bluetooth: hci14: command tx timeout [ 449.406816][ T5246] Bluetooth: hci10: command tx timeout [ 449.565929][ T5246] Bluetooth: hci11: command tx timeout [ 449.805779][ T5246] Bluetooth: hci12: command tx timeout [ 449.886056][ T5246] Bluetooth: hci13: command tx timeout [ 450.125798][ T5246] Bluetooth: hci14: command tx timeout [ 451.485820][ T5246] Bluetooth: hci10: command tx timeout [ 451.658795][ T5246] Bluetooth: hci11: command tx timeout [ 451.886060][ T5246] Bluetooth: hci12: command tx timeout [ 451.965991][ T5246] Bluetooth: hci13: command tx timeout [ 452.206128][ T5246] Bluetooth: hci14: command tx timeout [ 501.816370][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.823576][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.983093][ T5240] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 504.993805][ T5240] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 505.003432][ T5240] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 505.016509][ T5240] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 505.029135][ T5240] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 505.038026][ T5240] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 505.206344][ T5246] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 505.220361][ T5246] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 505.229262][ T5246] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 505.238062][ T5246] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 505.247607][ T5246] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 505.255996][ T5246] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 505.342305][ T5240] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 505.353045][ T5240] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 505.382277][ T5240] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 505.392899][ T5240] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 505.401889][ T5240] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 505.411522][ T5240] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 505.622148][ T5246] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 505.633066][ T5246] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 505.641717][ T5246] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 505.656303][ T5246] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 505.694913][ T5246] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 505.705315][ T5246] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 506.036259][ T5240] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 506.047210][ T5240] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 506.055844][ T5240] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 506.064800][ T5240] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 506.072962][ T5240] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 506.081787][ T5240] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 507.086978][ T9079] Bluetooth: hci15: command tx timeout [ 507.325868][ T9079] Bluetooth: hci16: command tx timeout [ 507.491611][ T9079] Bluetooth: hci17: command tx timeout [ 508.126110][ T9079] Bluetooth: hci19: command tx timeout [ 508.285783][ T9079] Bluetooth: hci18: command tx timeout [ 509.019045][ T9079] Bluetooth: hci4: command 0x0406 tx timeout [ 509.032862][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 509.042662][ T9079] Bluetooth: hci1: command 0x0406 tx timeout [ 509.049396][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 509.055778][ T9079] Bluetooth: hci3: command 0x0406 tx timeout [ 509.166424][ T5246] Bluetooth: hci15: command tx timeout [ 509.405948][ T5240] Bluetooth: hci16: command tx timeout [ 509.565622][ T5240] Bluetooth: hci17: command tx timeout [ 510.206235][ T5240] Bluetooth: hci19: command tx timeout [ 510.365743][ T5240] Bluetooth: hci18: command tx timeout [ 511.246429][ T5240] Bluetooth: hci15: command tx timeout [ 511.485779][ T5240] Bluetooth: hci16: command tx timeout [ 511.645711][ T5240] Bluetooth: hci17: command tx timeout [ 512.312676][ T5240] Bluetooth: hci19: command tx timeout [ 512.445768][ T5240] Bluetooth: hci18: command tx timeout [ 513.326129][ T5240] Bluetooth: hci15: command tx timeout [ 513.565793][ T5240] Bluetooth: hci16: command tx timeout [ 513.725712][ T5240] Bluetooth: hci17: command tx timeout [ 514.365631][ T5240] Bluetooth: hci19: command tx timeout [ 514.525902][ T5240] Bluetooth: hci18: command tx timeout [ 558.129011][ T30] INFO: task kworker/u8:7:2577 blocked for more than 143 seconds. [ 558.145538][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 558.152916][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 558.210721][ T30] task:kworker/u8:7 state:D stack:20272 pid:2577 tgid:2577 ppid:2 flags:0x00004000 [ 558.266778][ T30] Workqueue: netns cleanup_net [ 558.271668][ T30] Call Trace: [ 558.274986][ T30] [ 558.395503][ T30] __schedule+0x1895/0x4b30 [ 558.400161][ T30] ? __pfx___schedule+0x10/0x10 [ 558.405069][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.495799][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 558.501359][ T30] ? kthread_data+0x52/0xd0 [ 558.540141][ T30] ? schedule+0x90/0x320 [ 558.544487][ T30] ? wq_worker_sleeping+0x66/0x240 [ 558.614422][ T30] ? schedule+0x90/0x320 [ 558.627690][ T30] schedule+0x14b/0x320 [ 558.631947][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.672904][ T30] __mutex_lock+0x6a7/0xd70 [ 558.713495][ T30] ? __mutex_lock+0x52a/0xd70 [ 558.745707][ T30] ? gate_exit_net+0x30/0x100 [ 558.750490][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.793032][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 558.835805][ T30] gate_exit_net+0x30/0x100 [ 558.840415][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 558.884034][ T30] cleanup_net+0x89d/0xcc0 [ 558.905655][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 558.910705][ T30] ? process_scheduled_works+0x976/0x1850 [ 558.956017][ T30] process_scheduled_works+0xa63/0x1850 [ 558.962752][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.003581][ T30] ? assign_work+0x364/0x3d0 [ 559.013366][ T30] worker_thread+0x870/0xd30 [ 559.045708][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 559.051712][ T30] ? __kthread_parkme+0x169/0x1d0 [ 559.083420][ T30] ? __pfx_worker_thread+0x10/0x10 [ 559.113961][ T30] kthread+0x2f0/0x390 [ 559.133645][ T30] ? __pfx_worker_thread+0x10/0x10 [ 559.155485][ T30] ? __pfx_kthread+0x10/0x10 [ 559.160166][ T30] ret_from_fork+0x4b/0x80 [ 559.195466][ T30] ? __pfx_kthread+0x10/0x10 [ 559.200149][ T30] ret_from_fork_asm+0x1a/0x30 [ 559.205013][ T30] [ 559.248871][ T30] INFO: task syz-executor:9025 blocked for more than 144 seconds. [ 559.283599][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 559.315503][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.324266][ T30] task:syz-executor state:D stack:25648 pid:9025 tgid:9025 ppid:1 flags:0x20000004 [ 559.379313][ T30] Call Trace: [ 559.382675][ T30] [ 559.395614][ T30] __schedule+0x1895/0x4b30 [ 559.400499][ T30] ? __pfx___schedule+0x10/0x10 [ 559.425668][ T30] ? __pfx_lock_release+0x10/0x10 [ 559.430796][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 559.455645][ T30] ? schedule+0x90/0x320 [ 559.460033][ T30] schedule+0x14b/0x320 [ 559.464247][ T30] schedule_preempt_disabled+0x13/0x30 [ 559.504511][ T30] __mutex_lock+0x6a7/0xd70 [ 559.523755][ T30] ? __mutex_lock+0x52a/0xd70 [ 559.534503][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 559.539817][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 559.544893][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.585462][ T30] ? __might_fault+0xc6/0x120 [ 559.590268][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 559.613306][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 559.632793][ T30] ? locks_remove_posix+0x3c3/0x750 [ 559.643384][ T30] ? __pfx_locks_remove_posix+0x10/0x10 [ 559.669127][ T30] __se_compat_sys_ioctl+0x510/0xc90 [ 559.674607][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 559.700845][ T30] ? file_close_fd+0x67/0x80 [ 559.716052][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.722131][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.754363][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 559.770952][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 559.796348][ T30] __do_fast_syscall_32+0xb4/0x110 [ 559.801561][ T30] ? exc_page_fault+0x590/0x8c0 [ 559.834502][ T30] do_fast_syscall_32+0x34/0x80 [ 559.863714][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.873243][ T30] RIP: 0023:0xf7fb0579 [ 559.895642][ T30] RSP: 002b:00000000f759fec4 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 559.918865][ T30] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000400454ca [ 559.941589][ T30] RDX: 00000000f759ff20 RSI: 00000000f743bff4 RDI: 00000000f7311305 [ 559.963304][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.992742][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 560.023128][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.045940][ T30] [ 560.054356][ T30] [ 560.054356][ T30] Showing all locks held in the system: [ 560.081123][ T30] 3 locks held by kworker/0:0/8: [ 560.101417][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 560.142136][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 560.171395][ T30] #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 560.201151][ T30] 1 lock held by khungtaskd/30: [ 560.224894][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 560.246483][ T30] 3 locks held by kworker/u8:5/1106: [ 560.272793][ T30] #0: ffff88814b8d7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 560.291575][ T30] #1: ffffc90004727d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 560.345471][ T30] #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 560.373833][ T30] 4 locks held by kworker/u8:7/2577: [ 560.379339][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 560.414388][ T30] #1: ffffc90009b77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 560.443755][ T30] #2: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 560.474170][ T30] #3: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: gate_exit_net+0x30/0x100 [ 560.497010][ T30] 1 lock held by klogd/4672: [ 560.501851][ T30] 2 locks held by getty/4993: [ 560.519760][ T30] #0: ffff888032c020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 560.555660][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 560.585313][ T30] 7 locks held by kworker/1:3/5283: [ 560.599236][ T30] 3 locks held by kworker/0:5/5284: [ 560.604596][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 560.652267][ T30] #1: ffffc90004157d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 560.681312][ T30] #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 560.719222][ T30] 4 locks held by kworker/1:6/5289: [ 560.724513][ T30] 7 locks held by syz-executor/8980: [ 560.749329][ T30] #0: ffff8880245ee420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 560.781422][ T30] #1: ffff888032edbc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 560.844128][ T30] #2: ffff888026d53b48 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 560.876943][ T30] #3: ffffffff8f56f368 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 560.914076][ T30] #4: ffff88807d2fb0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 560.945635][ T30] #5: ffff88807f0cc250 (&devlink->lock_key#9){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 560.972803][ T30] #6: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40 [ 561.005914][ T30] 2 locks held by syz-executor/8987: [ 561.025587][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.035126][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 561.075561][ T30] 2 locks held by syz-executor/8992: [ 561.080927][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.124843][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 561.152304][ T30] 3 locks held by syz-executor/8998: [ 561.173964][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.202779][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 561.229876][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 561.262869][ T30] 2 locks held by syz-executor/9001: [ 561.284192][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.312358][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_pernet_exit+0x1b/0x140 [ 561.345603][ T30] 2 locks held by syz-executor/9024: [ 561.350969][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.380772][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 561.409962][ T30] 1 lock held by syz-executor/9025: [ 561.415235][ T30] #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 561.451332][ T30] 2 locks held by syz-executor/9028: [ 561.473461][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.493774][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 561.520652][ T30] 2 locks held by syz-executor/9029: [ 561.539570][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.570175][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 561.602262][ T30] 2 locks held by syz-executor/9032: [ 561.623420][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.651792][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 561.683155][ T30] 2 locks held by syz-executor/9047: [ 561.703733][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.726027][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 561.754695][ T30] 2 locks held by syz-executor/9049: [ 561.776076][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.795194][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 561.862823][ T30] 2 locks held by syz-executor/9051: [ 561.872223][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.900102][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 561.934499][ T30] 2 locks held by syz-executor/9052: [ 561.954530][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 561.985950][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.024119][ T30] 2 locks held by syz-executor/9054: [ 562.032300][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 562.065628][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.095663][ T30] 2 locks held by syz-executor/9062: [ 562.101021][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 562.124062][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.142758][ T30] 2 locks held by syz-executor/9064: [ 562.153053][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 562.167640][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.184640][ T30] 2 locks held by syz-executor/9066: [ 562.193202][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 562.210426][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.224106][ T30] 2 locks held by syz-executor/9076: [ 562.235600][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 562.267668][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.286127][ T30] 2 locks held by syz-executor/9077: [ 562.291481][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 562.309897][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 562.324136][ T30] [ 562.332118][ T30] ============================================= [ 562.332118][ T30] [ 562.350821][ T30] NMI backtrace for cpu 0 [ 562.355210][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 562.365410][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.375510][ T30] Call Trace: [ 562.378819][ T30] [ 562.381776][ T30] dump_stack_lvl+0x241/0x360 [ 562.386508][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.391757][ T30] ? __pfx__printk+0x10/0x10 [ 562.396405][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 562.401388][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 562.406884][ T30] ? _printk+0xd5/0x120 [ 562.411089][ T30] ? __pfx__printk+0x10/0x10 [ 562.415723][ T30] ? __wake_up_klogd+0xcc/0x110 [ 562.420616][ T30] ? __pfx__printk+0x10/0x10 [ 562.425256][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 562.430328][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 562.436367][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 562.442428][ T30] watchdog+0xff4/0x1040 [ 562.446720][ T30] ? watchdog+0x1ea/0x1040 [ 562.451183][ T30] ? __pfx_watchdog+0x10/0x10 [ 562.455950][ T30] kthread+0x2f0/0x390 [ 562.460053][ T30] ? __pfx_watchdog+0x10/0x10 [ 562.464773][ T30] ? __pfx_kthread+0x10/0x10 [ 562.469412][ T30] ret_from_fork+0x4b/0x80 [ 562.473868][ T30] ? __pfx_kthread+0x10/0x10 [ 562.478490][ T30] ret_from_fork_asm+0x1a/0x30 [ 562.483310][ T30] [ 562.487459][ T30] Sending NMI from CPU 0 to CPUs 1: [ 562.492730][ C1] NMI backtrace for cpu 1 [ 562.492750][ C1] CPU: 1 UID: 0 PID: 5289 Comm: kworker/1:6 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 562.492772][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.492785][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 562.492813][ C1] RIP: 0010:unwind_next_frame+0xb89/0x22d0 [ 562.492844][ C1] Code: 5c 24 40 49 8b 6d 08 49 8d 5d 10 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a0 34 bd 00 4c 8b 74 24 08 4d 8b 66 10 <48> b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f [ 562.492860][ C1] RSP: 0018:ffffc90000a176d0 EFLAGS: 00000246 [ 562.492875][ C1] RAX: 1ffff92000142ef5 RBX: ffffc90000a177b0 RCX: ffffffff9035aaf4 [ 562.492890][ C1] RDX: ffffffff90af2b92 RSI: 0000000000000002 RDI: 0000000000000001 [ 562.492903][ C1] RBP: ffffc90000a11000 R08: 000000000000000d R09: ffffc90000a17890 [ 562.492916][ C1] R10: ffffc90000a177f0 R11: ffffffff818067a0 R12: ffffc90000a19000 [ 562.492930][ C1] R13: ffffc90000a177a0 R14: ffffc90000a177a0 R15: 1ffff92000142ef6 [ 562.492945][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 562.492961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.492974][ C1] CR2: 000000002001aa80 CR3: 000000000e734000 CR4: 00000000003506f0 [ 562.492992][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 562.493003][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 562.493014][ C1] Call Trace: [ 562.493020][ C1] [ 562.493028][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 562.493050][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 562.493079][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 562.493099][ C1] ? nmi_handle+0x2a/0x5a0 [ 562.493124][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 562.493148][ C1] ? nmi_handle+0x14f/0x5a0 [ 562.493165][ C1] ? nmi_handle+0x2a/0x5a0 [ 562.493189][ C1] ? unwind_next_frame+0xb89/0x22d0 [ 562.493216][ C1] ? default_do_nmi+0x63/0x160 [ 562.493238][ C1] ? exc_nmi+0x123/0x1f0 [ 562.493259][ C1] ? end_repeat_nmi+0xf/0x53 [ 562.493277][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 562.493302][ C1] ? unwind_next_frame+0xb89/0x22d0 [ 562.493329][ C1] ? unwind_next_frame+0xb89/0x22d0 [ 562.493364][ C1] ? unwind_next_frame+0xb89/0x22d0 [ 562.493391][ C1] [ 562.493397][ C1] [ 562.493408][ C1] ? kasan_save_track+0x3f/0x80 [ 562.493428][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 562.493449][ C1] arch_stack_walk+0x11c/0x150 [ 562.493471][ C1] ? kasan_save_track+0x3f/0x80 [ 562.493490][ C1] stack_trace_save+0x118/0x1d0 [ 562.493509][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 562.493535][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 562.493554][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 562.493581][ C1] ? ktime_get_with_offset+0x83/0x150 [ 562.493607][ C1] kasan_save_track+0x3f/0x80 [ 562.493623][ C1] ? kasan_save_track+0x3f/0x80 [ 562.493664][ C1] __kasan_slab_alloc+0x66/0x80 [ 562.493683][ C1] ? dst_alloc+0x12b/0x190 [ 562.493709][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 562.493735][ C1] dst_alloc+0x12b/0x190 [ 562.493763][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 562.493797][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 562.493823][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 562.493848][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 562.493887][ C1] ? __pfx_lock_release+0x10/0x10 [ 562.493916][ C1] ? kthread+0x2f0/0x390 [ 562.493937][ C1] ip_route_output_flow+0x29/0x140 [ 562.493980][ C1] ip_route_me_harder+0x80d/0x1300 [ 562.494013][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 562.494038][ C1] ? trace_kmalloc+0x1f/0xd0 [ 562.494058][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 562.494094][ C1] synproxy_send_tcp+0x356/0x6c0 [ 562.494122][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 562.494153][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 562.494183][ C1] ? synproxy_pernet+0x45/0x270 [ 562.494211][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 562.494240][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 562.494268][ C1] ? nf_ip_checksum+0x13a/0x500 [ 562.494298][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 562.494326][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 562.494356][ C1] ? __pfx_validate_chain+0x10/0x10 [ 562.494380][ C1] nft_do_chain+0x4ad/0x1da0 [ 562.494413][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 562.494438][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 562.494475][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 562.494512][ C1] nft_do_chain_inet+0x418/0x6b0 [ 562.494539][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 562.494564][ C1] ? ipt_do_table+0x312/0x1860 [ 562.494598][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 562.494623][ C1] nf_hook_slow+0xc3/0x220 [ 562.494646][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 562.494666][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 562.494687][ C1] NF_HOOK+0x29e/0x450 [ 562.494707][ C1] ? NF_HOOK+0x9a/0x450 [ 562.494725][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 562.494745][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 562.494768][ C1] ? ip_rcv_finish+0x406/0x560 [ 562.494789][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 562.494808][ C1] NF_HOOK+0x3a4/0x450 [ 562.494828][ C1] ? NF_HOOK+0x9a/0x450 [ 562.494846][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 562.494864][ C1] ? ip_rcv_core+0x801/0xd10 [ 562.494884][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 562.494907][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 562.494926][ C1] __netif_receive_skb+0x2bf/0x650 [ 562.494950][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 562.494975][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 562.494996][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 562.495023][ C1] ? __pfx_lock_release+0x10/0x10 [ 562.495049][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 562.495079][ C1] process_backlog+0x662/0x15b0 [ 562.495104][ C1] ? process_backlog+0x33b/0x15b0 [ 562.495131][ C1] ? __pfx_process_backlog+0x10/0x10 [ 562.495153][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 562.495186][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 562.495215][ C1] __napi_poll+0xcb/0x490 [ 562.495237][ C1] net_rx_action+0x89b/0x1240 [ 562.495271][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 562.495296][ C1] ? sched_clock+0x4a/0x70 [ 562.495326][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 562.495357][ C1] handle_softirqs+0x2c5/0x980 [ 562.495393][ C1] ? do_softirq+0x11b/0x1e0 [ 562.495418][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 562.495453][ C1] do_softirq+0x11b/0x1e0 [ 562.495476][ C1] [ 562.495482][ C1] [ 562.495489][ C1] ? __pfx_do_softirq+0x10/0x10 [ 562.495514][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 562.495550][ C1] ? rcu_is_watching+0x15/0xb0 [ 562.495573][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 562.495601][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 562.495626][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 562.495653][ C1] ? neigh_destroy+0x423/0x580 [ 562.495680][ C1] neigh_periodic_work+0xb35/0xd50 [ 562.495709][ C1] ? process_scheduled_works+0x976/0x1850 [ 562.495737][ C1] process_scheduled_works+0xa63/0x1850 [ 562.495781][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 562.495814][ C1] ? assign_work+0x364/0x3d0 [ 562.495844][ C1] worker_thread+0x870/0xd30 [ 562.495877][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 562.495909][ C1] ? __kthread_parkme+0x169/0x1d0 [ 562.495940][ C1] ? __pfx_worker_thread+0x10/0x10 [ 562.495965][ C1] kthread+0x2f0/0x390 [ 562.495981][ C1] ? __pfx_worker_thread+0x10/0x10 [ 562.496005][ C1] ? __pfx_kthread+0x10/0x10 [ 562.496022][ C1] ret_from_fork+0x4b/0x80 [ 562.496047][ C1] ? __pfx_kthread+0x10/0x10 [ 562.496063][ C1] ret_from_fork_asm+0x1a/0x30 [ 562.496096][ C1] [ 563.355491][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 563.362412][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 563.372601][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 563.382687][ T30] Call Trace: [ 563.385994][ T30] [ 563.388953][ T30] dump_stack_lvl+0x241/0x360 [ 563.393679][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.398920][ T30] ? __pfx__printk+0x10/0x10 [ 563.403548][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 563.409588][ T30] ? vscnprintf+0x5d/0x90 [ 563.413960][ T30] panic+0x349/0x880 [ 563.417901][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 563.424094][ T30] ? __pfx_panic+0x10/0x10 [ 563.428551][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 563.433956][ T30] ? __irq_work_queue_local+0x137/0x410 [ 563.439547][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 563.444957][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 563.451148][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 563.457347][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 563.463542][ T30] watchdog+0x1033/0x1040 [ 563.467914][ T30] ? watchdog+0x1ea/0x1040 [ 563.472375][ T30] ? __pfx_watchdog+0x10/0x10 [ 563.477094][ T30] kthread+0x2f0/0x390 [ 563.481196][ T30] ? __pfx_watchdog+0x10/0x10 [ 563.485910][ T30] ? __pfx_kthread+0x10/0x10 [ 563.490536][ T30] ret_from_fork+0x4b/0x80 [ 563.494994][ T30] ? __pfx_kthread+0x10/0x10 [ 563.499614][ T30] ret_from_fork_asm+0x1a/0x30 [ 563.504435][ T30] [ 563.507781][ T30] Kernel Offset: disabled [ 563.512115][ T30] Rebooting in 86400 seconds..