last executing test programs: 4m41.348475932s ago: executing program 1 (id=1047): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x800, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8c9cb07dcc141802c4dae4162e42ac61a7ad330000000000000400", [0xfffffffffffffce8, 0xa]}}) 4m41.003025629s ago: executing program 1 (id=1051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) fstat(r1, &(0x7f0000007300)) 4m40.887240481s ago: executing program 1 (id=1055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x3c, r1, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0x3c}}, 0x0) 4m40.635695285s ago: executing program 1 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4m40.576534957s ago: executing program 1 (id=1063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) 4m39.647918427s ago: executing program 1 (id=1081): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x0, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x2f, 0x400, 0x2000195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) 4m39.437685138s ago: executing program 32 (id=1081): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x9, 0xfff, 0x0, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x2f, 0x400, 0x2000195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) 4m20.832370779s ago: executing program 2 (id=1259): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents64(r0, &(0x7f00000041c0)=""/4111, 0x100f) 4m20.527840293s ago: executing program 2 (id=1263): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x800) keyctl$get_security(0x11, r0, 0x0, 0x0) 4m20.172352373s ago: executing program 2 (id=1266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) 4m19.850939704s ago: executing program 2 (id=1269): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) 4m19.540208362s ago: executing program 2 (id=1275): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 4m19.36598527s ago: executing program 2 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000002408000240000000030c00038005000100430000000c000480050001003f0000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 4m4.881564466s ago: executing program 33 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000002408000240000000030c00038005000100430000000c000480050001003f0000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 2m33.781466366s ago: executing program 6 (id=2674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x9683a, &(0x7f0000000400)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39]}}]}) 2m33.598720747s ago: executing program 6 (id=2677): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x10) 2m33.345001422s ago: executing program 6 (id=2681): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xa, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}}], 0x2, 0x40408d1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 2m33.058630478s ago: executing program 6 (id=2685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 2m32.887627071s ago: executing program 6 (id=2688): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2cd, 0x190, 0x1, 0x3, 0xdd9f87, 0x1, 0x9, 0x1, 0x7ff, 0x5, 0x0, 0x13, 0x7, 0xfffffffe, 0x3f, 0xb763599953cb092e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 2m31.66821222s ago: executing program 6 (id=2702): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 2m31.232071164s ago: executing program 34 (id=2702): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 1m43.5239171s ago: executing program 4 (id=3333): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000002c0)=0xfffffffb) 1m43.405094746s ago: executing program 4 (id=3336): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000050029ffffff000000", 0x20000238}]) 1m42.526026074s ago: executing program 4 (id=3345): unshare(0x4020400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x0, 0x1, 0x3, 0x4}}, 0x2e) 1m41.673398685s ago: executing program 4 (id=3348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 1m37.957412859s ago: executing program 0 (id=3366): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000180), &(0x7f0000000080)=""/24}, 0x20) 1m36.812470118s ago: executing program 0 (id=3367): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121c83, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) 1m36.498642849s ago: executing program 4 (id=3370): r0 = syz_io_uring_setup(0x2ff5, &(0x7f0000000080)={0x0, 0x188f, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1m35.796621838s ago: executing program 0 (id=3373): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) close(r0) 1m35.647448309s ago: executing program 4 (id=3374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 1m34.247644468s ago: executing program 0 (id=3376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) 1m31.087631872s ago: executing program 0 (id=3378): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487", 0x2f}], 0x1}, 0x0) 1m29.21338483s ago: executing program 0 (id=3383): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000400)="a96617", 0x3, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000000), 0x0, 0x3}]) 1m19.788389051s ago: executing program 35 (id=3374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 1m12.935417861s ago: executing program 36 (id=3383): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000400)="a96617", 0x3, 0x6ed}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000000), 0x0, 0x3}]) 1m12.859552645s ago: executing program 5 (id=3394): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x60, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m6.469503435s ago: executing program 5 (id=3399): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x500) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)="390000fa461a668300111200cc0800000000000000001700000000e0da8879d21cd95c7a6ee4ca508ca9e48270faf047145bc79e0b9971bcbed2db88d73bc68c5055290baaa349c00017a792f4577c3074acbabb16712bb052f891702430fe2736cf174c478584851d7a62a5ed1a3ba4f2d114cd17761d7735a586c6b5545df6ab795d86d6967e0202cba51139066fb883218ca242a183c4381edf7eaf3cd1e6a0c31315305e", 0xa6}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1m5.685140764s ago: executing program 5 (id=3400): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x118, 0x6}], 0x10}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m3.807753064s ago: executing program 5 (id=3403): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) 1m2.512480197s ago: executing program 5 (id=3406): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 58.779030384s ago: executing program 5 (id=3408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0000101, 0x0, 0x2000000000000300}]}) 49.637994255s ago: executing program 7 (id=3414): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xcabd8245) 47.187223434s ago: executing program 7 (id=3415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000440)="935ec84075b508", 0x7, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 45.177736705s ago: executing program 7 (id=3417): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf255c00000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x14) 42.528493376s ago: executing program 37 (id=3408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0000101, 0x0, 0x2000000000000300}]}) 41.269967262s ago: executing program 7 (id=3419): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x19a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60eaff0201642c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e"], 0x0) 36.920192352s ago: executing program 7 (id=3420): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x301003, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 36.805010231s ago: executing program 3 (id=3421): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 35.285343288s ago: executing program 7 (id=3422): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x401) 31.680238034s ago: executing program 3 (id=3423): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaf28faaaa88a8180081003e0008004510001c00660015"], 0x0) 27.217175337s ago: executing program 3 (id=3424): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000600)={0x7fff, 0x9, 0x0, 0x0, 0x0, "a02ef557089670958a8de375c5c88700008000"}) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 23.742565654s ago: executing program 3 (id=3425): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000880)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='-'], 0x27) 22.379409165s ago: executing program 3 (id=3426): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4000000) syz_clone(0x2caa5180, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.280910422s ago: executing program 38 (id=3422): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r0, 0x407, 0x401) 16.629674763s ago: executing program 3 (id=3428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 0s ago: executing program 39 (id=3428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) kernel console output (not intermixed with test programs): _1) entered forwarding state [ 228.456410][ T5815] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 228.599982][ T5815] usb 6-1: Using ep0 maxpacket: 16 [ 228.603351][ T5815] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 228.603398][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 228.603419][ T5815] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 228.603442][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.603462][ T5815] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 228.603484][ T5815] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 228.605057][ T5815] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.605084][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.605103][ T5815] usb 6-1: SerialNumber: syz [ 228.653707][ T5815] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 228.654924][ T5815] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 228.892092][ T5815] usb 6-1: USB disconnect, device number 5 [ 228.980994][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.952584][ T9182] veth0_vlan: entered promiscuous mode [ 229.993133][ T9182] veth1_vlan: entered promiscuous mode [ 230.059041][ T9182] veth0_macvtap: entered promiscuous mode [ 230.065336][ T9182] veth1_macvtap: entered promiscuous mode [ 230.100940][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.180331][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.213751][ T8522] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.214006][ T8522] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.214045][ T8522] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.214077][ T8522] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.830558][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.830580][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.127931][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.127960][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.600771][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 231.751877][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 231.754167][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.754191][ T31] usb 4-1: config 0 has no interface number 0 [ 231.754241][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.754265][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.754302][ T31] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 231.754324][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.787772][ T31] usb 4-1: config 0 descriptor?? [ 232.223623][ T31] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 232.223660][ T31] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 232.380814][ T5815] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.417404][ T31] ft260 0003:0403:6030.0026: failed to retrieve chip version [ 232.440629][ T31] ft260 0003:0403:6030.0026: probe with driver ft260 failed with error -71 [ 232.467884][ T31] usb 4-1: USB disconnect, device number 14 [ 232.543043][ T5815] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 232.543091][ T5815] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 232.543131][ T5815] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 232.543152][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.605216][ T5815] usb 5-1: config 0 descriptor?? [ 233.037139][ T5815] kye 0003:0458:0138.0027: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 233.128571][ T9785] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1677'. [ 233.170955][ T9786] vivid-002: disconnect [ 233.179712][ T9783] vivid-002: reconnect [ 233.281632][ T9791] [U]  [ 233.281648][ T9791] [U] K{ [ 233.281658][ T9791] [U] t 1ŠFfˊ`GJgo/mC [ 233.281678][ T9791] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 233.281697][ T9791] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 233.281725][ T9791] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 233.281770][ T9791] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 233.281792][ T9791] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 233.281807][ T9791] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 233.281829][ T9791] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 233.281954][ T9791] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 233.281970][ T9791] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 233.281985][ T9791] [U] 22Ʃx?0;3u [ 233.282013][ T9791] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 233.282036][ T9791] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 233.282051][ T9791] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 233.282062][ T9791] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 233.282075][ T9791] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 233.282087][ T9791] [U] ec [ 233.282097][ T9791] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 233.283459][ T9790] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 233.297568][ T993] usb 5-1: USB disconnect, device number 18 [ 233.607953][ T9787] fido_id[9787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 233.991555][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1687'. [ 233.996557][ T9811] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 234.325905][ T5815] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 234.397196][ T9827] syz.5.1695 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 234.479537][ T5815] usb 7-1: Using ep0 maxpacket: 16 [ 234.484202][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.484247][ T5815] usb 7-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 234.484270][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.535952][ T5815] usb 7-1: config 0 descriptor?? [ 234.980833][ T5815] cypress 0003:04B4:07B1.0028: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.6-1/input0 [ 235.160025][ T44] usb 7-1: USB disconnect, device number 2 [ 235.352326][ T9855] trusted_key: encrypted_key: master key parameter '' is invalid [ 236.057646][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 236.204058][ T44] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.204089][ T44] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.204109][ T44] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.204132][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.204159][ T44] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 236.204177][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.237631][ T44] usb 7-1: config 0 descriptor?? [ 236.694864][ T44] uclogic 0003:28BD:0042.0029: interface is invalid, ignoring [ 236.875344][ T9913] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1731'. [ 236.875421][ T44] usb 7-1: USB disconnect, device number 3 [ 237.579591][ T9941] netlink: 'syz.5.1742': attribute type 2 has an invalid length. [ 238.044998][ T37] audit: type=1326 audit(1759757525.108:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9952 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 238.045050][ T37] audit: type=1326 audit(1759757525.108:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9952 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 238.045088][ T37] audit: type=1326 audit(1759757525.119:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9952 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 238.045128][ T37] audit: type=1326 audit(1759757525.119:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9952 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 238.045176][ T37] audit: type=1326 audit(1759757525.119:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9952 comm="syz.5.1751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 238.337261][ T9965] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 238.844273][ T9985] xt_socket: unknown flags 0x50 [ 239.740276][T10023] sp0: Synchronizing with TNC [ 239.756467][T10022] [U] [ 239.891926][T10033] netlink: 'syz.5.1788': attribute type 6 has an invalid length. [ 239.960325][T10027] vlan2: entered promiscuous mode [ 239.960347][T10027] syz_tun: entered promiscuous mode [ 241.468132][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 241.611167][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 241.614825][ T31] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.614854][ T31] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.614880][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.614912][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 241.614934][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.675753][ T31] usb 4-1: config 0 descriptor?? [ 242.100826][ T31] magicmouse 0003:05AC:0324.002A: unknown main item tag 0x0 [ 242.100868][ T31] magicmouse 0003:05AC:0324.002A: unknown main item tag 0x0 [ 242.100892][ T31] magicmouse 0003:05AC:0324.002A: unknown main item tag 0x0 [ 242.100925][ T31] magicmouse 0003:05AC:0324.002A: unknown main item tag 0x0 [ 242.100948][ T31] magicmouse 0003:05AC:0324.002A: unknown main item tag 0x0 [ 242.105750][ T31] magicmouse 0003:05AC:0324.002A: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 242.105804][ T31] magicmouse 0003:05AC:0324.002A: magicmouse input not registered [ 242.156173][ T31] magicmouse 0003:05AC:0324.002A: probe with driver magicmouse failed with error -12 [ 242.288457][ T5886] usb 4-1: USB disconnect, device number 15 [ 242.386396][T10107] fido_id[10107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 242.458628][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 242.605707][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.605740][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.605826][ T31] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 242.605849][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.610943][ T31] usb 1-1: config 0 descriptor?? [ 243.152439][ T31] stadia 0003:18D1:9400.002B: unexpected long global item [ 243.153165][ T31] stadia 0003:18D1:9400.002B: parse failed [ 243.153230][ T31] stadia 0003:18D1:9400.002B: probe with driver stadia failed with error -22 [ 243.245201][T10128] sp0: Synchronizing with TNC [ 243.279690][T10127] [U] ` [ 243.336860][ T31] usb 1-1: USB disconnect, device number 21 [ 243.792557][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 243.829232][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1844'. [ 243.939123][ T31] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 243.939184][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 243.967840][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.967869][ T31] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.967888][ T31] usb 6-1: Product: syz [ 243.967901][ T31] usb 6-1: Manufacturer: syz [ 243.967914][ T31] usb 6-1: SerialNumber: syz [ 244.010720][ T31] usb 6-1: config 0 descriptor?? [ 244.022958][ T31] hub 6-1:0.0: bad descriptor, ignoring hub [ 244.022998][ T31] hub 6-1:0.0: probe with driver hub failed with error -5 [ 244.030256][ T31] usb 6-1: selecting invalid altsetting 0 [ 244.309968][T10166] binder: 10165:10166 ioctl c0306201 0 returned -14 [ 244.380124][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 244.380147][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 244.544862][ T990] usb 6-1: USB disconnect, device number 6 [ 244.631092][T10176] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 244.631111][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 245.600327][ T990] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 245.756864][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.756914][ T990] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 245.756935][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.776651][ T990] usb 6-1: config 0 descriptor?? [ 246.190300][ T990] macally 0003:060B:0001.002C: item fetching failed at offset 0/2 [ 246.191138][ T990] macally 0003:060B:0001.002C: probe with driver macally failed with error -22 [ 246.384193][ T993] usb 6-1: USB disconnect, device number 7 [ 246.840889][T10263] program syz.4.1885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.137126][T10332] tipc: Started in network mode [ 248.137145][T10332] tipc: Node identity 4, cluster identity 4711 [ 248.137156][T10332] tipc: Node number set to 4 [ 248.650543][ T990] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 248.757624][ T5815] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 248.808006][ T990] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.808036][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.829068][ T990] usb 4-1: config 0 descriptor?? [ 248.849582][ T990] cp210x 4-1:0.0: cp210x converter detected [ 248.898024][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 248.950730][ T5815] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 248.960747][ T5815] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 248.961134][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.961155][ T5815] usb 5-1: Product: syz [ 248.961168][ T5815] usb 5-1: Manufacturer: syz [ 248.961181][ T5815] usb 5-1: SerialNumber: syz [ 249.045958][ T5815] usb 5-1: config 0 descriptor?? [ 249.098579][ T5815] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 249.099155][ T5815] usb 5-1: setting power ON [ 249.099177][ T5815] dvb-usb: bulk message failed: -22 (2/0) [ 249.190816][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.198454][ T5815] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 249.199029][ T5815] usb 5-1: media controller created [ 249.340829][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.341789][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.380796][T10378] sp0: Synchronizing with TNC [ 249.472961][ T990] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 249.473020][ T990] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 249.485672][ T990] usb 4-1: cp210x converter now attached to ttyUSB0 [ 249.490349][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.501411][ T990] usb 4-1: USB disconnect, device number 16 [ 249.551540][ T990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.553572][ T990] cp210x 4-1:0.0: device disconnected [ 249.557789][ T5815] usb 5-1: selecting invalid altsetting 6 [ 249.557809][ T5815] usb 5-1: digital interface selection failed (-22) [ 249.557824][ T5815] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 249.562060][ T5815] usb 5-1: setting power OFF [ 249.562082][ T5815] dvb-usb: bulk message failed: -22 (2/0) [ 249.562098][ T5815] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 249.562109][ T5815] (NULL device *): no alternate interface [ 249.750151][ T5815] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 249.789441][ T5815] usb 5-1: USB disconnect, device number 19 [ 250.517654][ T5886] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.601635][T10425] support for the xor transformation has been removed. [ 250.660508][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 250.662770][ T5886] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.662801][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 250.662834][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 250.662856][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.723297][ T5886] usb 6-1: config 0 descriptor?? [ 250.754852][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 250.822336][T10431] netlink: 'syz.0.1950': attribute type 2 has an invalid length. [ 250.822358][T10431] netlink: 'syz.0.1950': attribute type 8 has an invalid length. [ 250.822423][T10431] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1950'. [ 250.951862][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1951'. [ 250.992956][T10434] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 251.231792][ T44] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 251.348254][T10449] vivid-002: disconnect [ 251.353283][T10448] vivid-002: reconnect [ 251.363317][ T5166] bcm5974 6-1:0.0: could not read from device [ 251.374851][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 251.389335][ T44] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 251.389363][ T44] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 251.389382][ T44] usb 1-1: Product: syz [ 251.389395][ T44] usb 1-1: SerialNumber: syz [ 251.392235][ T5886] usb 6-1: USB disconnect, device number 8 [ 251.463249][ T44] usb 1-1: config 0 descriptor?? [ 251.464232][ T8618] bcm5974 6-1:0.0: could not read from device [ 251.488890][ T44] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 251.500612][ T44] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 251.501261][ T44] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 251.501351][ T44] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 251.616636][ T8618] udevd[8618]: Error opening device "/dev/input/event4": No such file or directory [ 251.616797][ T8618] udevd[8618]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.616909][ T8618] udevd[8618]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.617032][ T8618] udevd[8618]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.617141][ T8618] udevd[8618]: Unable to EVIOCGABS device "/dev/input/event4" [ 251.683400][ T44] usb 1-1: USB disconnect, device number 22 [ 251.824267][T10461] tipc: Invalid UDP bearer configuration [ 251.824317][T10461] tipc: Enabling of bearer rejected, failed to enable media [ 252.459194][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1975'. [ 252.555965][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 252.704150][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.704184][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.704206][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 252.704244][ T5886] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 252.704267][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.768584][ T5886] usb 7-1: config 0 descriptor?? [ 253.195981][ T5886] pantherlord 0003:0810:0002.002D: unknown main item tag 0x1 [ 253.211668][ T5886] pantherlord 0003:0810:0002.002D: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.6-1/input0 [ 253.211700][ T5886] pantherlord 0003:0810:0002.002D: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 253.406403][ T44] usb 7-1: USB disconnect, device number 4 [ 253.850989][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1998'. [ 253.856639][T10545] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1999'. [ 253.885960][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 254.451886][T10572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 254.452625][T10571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2012'. [ 254.804965][T10592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2019'. [ 254.914449][T10597] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2025'. [ 255.014105][ T5815] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 255.178207][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.178248][ T5815] usb 5-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 255.178269][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.226229][ T5815] usb 5-1: config 0 descriptor?? [ 255.646410][ T5815] hid-generic 0003:18D1:503C.002E: unbalanced collection at end of report description [ 255.647285][ T5815] hid-generic 0003:18D1:503C.002E: probe with driver hid-generic failed with error -22 [ 255.755747][T10629] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 255.833519][ T5886] usb 5-1: USB disconnect, device number 20 [ 256.001923][T10639] Bluetooth: MGMT ver 1.23 [ 256.432851][ T5886] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 256.579303][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.579337][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.579372][ T5886] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 256.579394][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.584856][ T5886] usb 6-1: config 0 descriptor?? [ 256.683213][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 256.842403][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 256.847461][ T44] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.847487][ T44] usb 4-1: config 0 has no interface number 0 [ 256.847538][ T44] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.847621][ T44] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.847659][ T44] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 256.847681][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.928677][ T44] usb 4-1: config 0 descriptor?? [ 257.037542][ T5886] bigben 0003:146B:0902.002F: unexpected rdesc, please submit for review [ 257.040222][ T5886] bigben 0003:146B:0902.002F: item fetching failed at offset 1/5 [ 257.041413][ T5886] bigben 0003:146B:0902.002F: parse failed [ 257.041574][ T5886] bigben 0003:146B:0902.002F: probe with driver bigben failed with error -22 [ 257.129262][T10677] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 257.129286][T10677] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2064'. [ 257.233930][ T5886] usb 6-1: USB disconnect, device number 9 [ 257.543606][ T44] uclogic 0003:28BD:0071.0030: failed retrieving string descriptor #100: -71 [ 257.543666][ T44] uclogic 0003:28BD:0071.0030: failed retrieving pen parameters: -71 [ 257.543681][ T44] uclogic 0003:28BD:0071.0030: pen probing failed: -71 [ 257.543697][ T44] uclogic 0003:28BD:0071.0030: failed probing parameters: -71 [ 257.543791][ T44] uclogic 0003:28BD:0071.0030: probe with driver uclogic failed with error -71 [ 257.591352][T10691] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 257.610042][ T44] usb 4-1: USB disconnect, device number 17 [ 257.871076][ T5886] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 258.033980][ T5886] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.034009][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.034026][ T5886] usb 7-1: Product: syz [ 258.034038][ T5886] usb 7-1: Manufacturer: syz [ 258.034050][ T5886] usb 7-1: SerialNumber: syz [ 258.081046][ T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 258.121854][ T5886] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.223575][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 258.227214][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.227246][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.227280][ T44] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 258.227303][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.279097][ T44] usb 6-1: config 0 descriptor?? [ 258.279514][ T993] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.699983][ C1] usb 7-1: ath9k_htc: over RX MAX_PKT_NUM [ 258.782054][ T44] betop 0003:20BC:5500.0031: hidraw0: USB HID v0.07 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 258.782088][ T44] betop 0003:20BC:5500.0031: no inputs found [ 258.916239][ T9] usb 7-1: USB disconnect, device number 5 [ 258.934254][ T5815] usb 6-1: USB disconnect, device number 10 [ 259.008347][T10732] fido_id[10732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 259.386615][ T993] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 259.395696][ T993] ath9k_htc: Failed to initialize the device [ 259.444220][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 260.043487][ T5887] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 260.105966][T10768] netlink: 'syz.6.2108': attribute type 7 has an invalid length. [ 260.105987][T10768] netlink: 'syz.6.2108': attribute type 8 has an invalid length. [ 260.189772][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.189803][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.189827][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.189848][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.189888][ T5887] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.189911][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.262971][ T5887] usb 5-1: config 0 descriptor?? [ 260.331422][ T990] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.395462][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 260.482800][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 260.485814][ T990] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 260.485840][ T990] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 260.485860][ T990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 260.485880][ T990] usb 4-1: config 1 has no interface number 0 [ 260.485926][ T990] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.485951][ T990] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 260.485990][ T990] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 260.486010][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.583664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.583695][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.583777][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 260.583800][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.619873][ T9] usb 1-1: config 0 descriptor?? [ 260.679872][ T990] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 260.691265][ T5887] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 260.691301][ T5887] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 260.691328][ T5887] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 260.691355][ T5887] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 260.691380][ T5887] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 260.746561][ T5887] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 260.867537][ T5887] usb 5-1: USB disconnect, device number 21 [ 260.895906][ T990] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 261.228077][T10786] sp0: Synchronizing with TNC [ 261.253524][ T993] usb 4-1: USB disconnect, device number 18 [ 261.256097][ T993] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 261.268408][ T9] usb 1-1: string descriptor 0 read error: -71 [ 261.272361][ T9] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 261.272420][ T9] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 261.272435][ T9] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 261.272486][ T9] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 261.272589][ T9] uclogic 0003:256C:006D.0033: probe with driver uclogic failed with error -71 [ 261.286825][T10785] [U] [ 261.456233][ T9] usb 1-1: USB disconnect, device number 23 [ 261.694386][T10798] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 262.101429][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 262.104234][T10822] usb usb8: usbfs: process 10822 (syz.6.2134) did not claim interface 0 before use [ 262.243739][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 262.246046][ T9] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 262.246072][ T9] usb 6-1: config 0 has no interface number 0 [ 262.246118][ T9] usb 6-1: config 0 interface 255 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.246143][ T9] usb 6-1: config 0 interface 255 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.246164][ T9] usb 6-1: config 0 interface 255 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 262.246188][ T9] usb 6-1: config 0 interface 255 has no altsetting 0 [ 262.246217][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 262.246238][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.252778][ T9] usb 6-1: config 0 descriptor?? [ 262.367139][ T993] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.531945][ T993] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.531993][ T993] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 262.532016][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.536797][ T993] usb 5-1: config 0 descriptor?? [ 262.688872][ T9] uclogic 0003:28BD:1903.0034: interface is invalid, ignoring [ 262.701953][ T5887] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 262.856714][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.856747][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.856823][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.856862][ T5887] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.856882][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.897433][ T9] usb 6-1: USB disconnect, device number 11 [ 262.942318][ T5887] usb 4-1: config 0 descriptor?? [ 262.955031][ T993] elecom 0003:056E:00FC.0035: unknown main item tag 0x0 [ 262.955068][ T993] elecom 0003:056E:00FC.0035: unknown main item tag 0x0 [ 262.955095][ T993] elecom 0003:056E:00FC.0035: unknown main item tag 0x0 [ 262.955120][ T993] elecom 0003:056E:00FC.0035: unknown main item tag 0x0 [ 262.955146][ T993] elecom 0003:056E:00FC.0035: unknown main item tag 0x0 [ 263.000367][ T993] elecom 0003:056E:00FC.0035: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 263.166606][ T9] usb 5-1: USB disconnect, device number 22 [ 263.277363][T10845] fido_id[10845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 263.368692][ T5887] plantronics 0003:047F:FFFF.0036: unbalanced delimiter at end of report description [ 263.369463][ T5887] plantronics 0003:047F:FFFF.0036: parse failed [ 263.369567][ T5887] plantronics 0003:047F:FFFF.0036: probe with driver plantronics failed with error -22 [ 263.541540][ T9] usb 4-1: USB disconnect, device number 19 [ 264.377113][ T993] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 264.542757][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 264.542791][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.542829][ T993] usb 7-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 264.542851][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.595736][ T993] usb 7-1: config 0 descriptor?? [ 265.046913][ T993] elecom 0003:056E:010C.0037: item fetching failed at offset 5/7 [ 265.047904][ T993] elecom 0003:056E:010C.0037: probe with driver elecom failed with error -22 [ 265.228376][ T993] usb 7-1: USB disconnect, device number 6 [ 265.264025][ T37] audit: type=1326 audit(1759757553.705:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10918 comm="syz.4.2172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66a4e3eec9 code=0x0 [ 265.303779][ T37] audit: type=1326 audit(1759757553.747:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.305543][ T37] audit: type=1326 audit(1759757553.747:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.313742][ T37] audit: type=1326 audit(1759757553.757:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.313790][ T37] audit: type=1326 audit(1759757553.757:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.313830][ T37] audit: type=1326 audit(1759757553.757:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.314459][ T37] audit: type=1326 audit(1759757553.757:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.315738][ T37] audit: type=1326 audit(1759757553.757:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 265.315781][ T37] audit: type=1326 audit(1759757553.757:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10919 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 266.225996][T10952] random: crng reseeded on system resumption [ 266.868461][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2193'. [ 267.397498][T10998] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 267.397534][T10998] netlink: 'syz.3.2204': attribute type 2 has an invalid length. [ 267.425686][ T993] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 267.577816][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 267.580220][ T993] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.580244][ T993] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.583302][ T993] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.583328][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.583347][ T993] usb 5-1: Product: syz [ 267.583360][ T993] usb 5-1: Manufacturer: syz [ 267.583373][ T993] usb 5-1: SerialNumber: syz [ 268.092522][ T993] usb 5-1: cannot find UAC_HEADER [ 268.176175][ T993] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 268.303908][ T993] usb 5-1: USB disconnect, device number 23 [ 268.332961][ T8594] udevd[8594]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.352318][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 268.375570][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 268.619465][T11029] /dev/nbd5: Can't open blockdev [ 268.912076][T11044] syz.0.2223 uses obsolete (PF_INET,SOCK_PACKET) [ 269.046279][ T993] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 269.193956][ T993] usb 4-1: Using ep0 maxpacket: 8 [ 269.199097][ T993] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 269.199123][ T993] usb 4-1: config 0 has no interface number 0 [ 269.202280][ T993] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 269.202307][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.202326][ T993] usb 4-1: Product: syz [ 269.202339][ T993] usb 4-1: Manufacturer: syz [ 269.202353][ T993] usb 4-1: SerialNumber: syz [ 269.258698][ T993] usb 4-1: config 0 descriptor?? [ 269.273723][ T993] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 269.273775][ T993] pctv452e: pctv452e_power_ctrl: 1 [ 269.273775][ T993] [ 269.273815][ T993] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 269.273815][ T993] [ 269.273830][ T993] dvb-usb: bulk message failed: -22 (5/0) [ 269.325514][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.326474][ T993] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 269.326529][ T993] usb 4-1: media controller created [ 269.327330][ T993] dvb-usb: bulk message failed: -22 (8/0) [ 269.327346][ T993] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 269.327478][ T993] dvb-usb: MAC address reading failed. [ 269.394175][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.506687][ T993] DVB: Unable to find symbol stb0899_attach() [ 269.506704][ T993] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 269.597470][ T993] rc_core: IR keymap rc-tt-1500 not found [ 269.597489][ T993] Registered IR keymap rc-empty [ 269.599954][ T993] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 269.603173][ T993] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 269.645686][ T993] dvb-usb: schedule remote query interval to 100 msecs. [ 269.645708][ T993] pctv452e: pctv452e_power_ctrl: 0 [ 269.645708][ T993] [ 269.645718][ T993] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 269.678746][ T993] usb 4-1: USB disconnect, device number 20 [ 269.783757][T11063] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2232'. [ 269.940250][T11070] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2233'. [ 269.940276][T11070] block nbd0: Unsupported socket: should be TCP or UNIX. [ 269.987438][ T993] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 270.468385][T11091] ptrace attach of "./syz-executor exec"[5827] was attempted by ""[11091] [ 271.316784][T11131] tipc: Started in network mode [ 271.316814][T11131] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 271.316861][T11131] tipc: Enabling of bearer rejected, failed to enable media [ 271.645256][ T5887] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 271.668983][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2270'. [ 271.669053][T11149] tipc: Enabling of bearer rejected, failed to enable media [ 271.812379][ T5887] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.812407][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.855652][ T5887] usb 4-1: config 0 descriptor?? [ 271.881922][ T5887] cp210x 4-1:0.0: cp210x converter detected [ 272.462558][ T5887] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 272.462587][ T5887] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 272.508056][ T5887] usb 4-1: cp210x converter now attached to ttyUSB0 [ 272.535580][ T5887] usb 4-1: USB disconnect, device number 21 [ 272.539764][T11184] netlink: 504 bytes leftover after parsing attributes in process `syz.5.2286'. [ 272.557716][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 272.558442][ T5887] cp210x 4-1:0.0: device disconnected [ 272.660431][T11186] IPVS: Scheduler module ip_vs_sip not found [ 273.244676][T11220] program syz.6.2298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.786326][T11243] [U]  [ 274.060364][T11246] netlink: 'syz.6.2308': attribute type 9 has an invalid length. [ 274.285639][T11263] NILFS (nullb0): couldn't find nilfs on the device [ 274.522305][ T990] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 274.667949][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.667981][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.668026][ T990] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 274.668048][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.686989][ T990] usb 4-1: config 0 descriptor?? [ 275.127105][ T990] samsung 0003:0419:0600.0038: unknown main item tag 0x0 [ 275.127141][ T990] samsung 0003:0419:0600.0038: unknown main item tag 0x0 [ 275.163769][ T990] samsung 0003:0419:0600.0038: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 275.199202][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 275.341640][ T990] usb 4-1: USB disconnect, device number 22 [ 276.227267][ T5887] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 276.341683][ T990] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 276.379765][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 276.382502][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.382531][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.382628][ T5887] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 276.382650][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.433698][ T5887] usb 4-1: config 0 descriptor?? [ 276.496475][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.496507][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.496544][ T990] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 276.496564][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.516434][ T990] usb 7-1: config 0 descriptor?? [ 276.645629][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 276.645753][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 276.672751][ T5887] usb 4-1: USB disconnect, device number 23 [ 276.704434][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704471][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704496][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704520][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704545][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704570][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704594][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.704619][ T993] hid-generic 0003:0004:0000.0039: unknown main item tag 0x0 [ 276.712468][ T993] hid-generic 0003:0004:0000.0039: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 276.976324][ T990] playstation 0003:054C:0DF2.003A: unbalanced delimiter at end of report description [ 276.977087][ T990] playstation 0003:054C:0DF2.003A: Parse failed [ 276.977160][ T990] playstation 0003:054C:0DF2.003A: probe with driver playstation failed with error -22 [ 277.093928][T11354] fido_id[11354]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.191226][ T9] usb 7-1: USB disconnect, device number 7 [ 277.198723][ T5887] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 277.351041][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 277.353551][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 277.353591][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 277.353617][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.353642][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.355237][ T5887] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 277.355265][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.355284][ T5887] usb 4-1: SerialNumber: syz [ 277.377894][ T5887] usb 4-1: config 0 descriptor?? [ 277.395148][ T5887] hso 4-1:0.0: Can't find BULK OUT endpoint [ 277.582687][ T44] usb 4-1: USB disconnect, device number 24 [ 277.689571][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2349'. [ 277.689630][T11373] netlink: 'syz.0.2349': attribute type 3 has an invalid length. [ 278.113146][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 278.230578][ T37] audit: type=1326 audit(1759757567.310:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.235720][ T37] audit: type=1326 audit(1759757567.310:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.251087][ T37] audit: type=1326 audit(1759757567.331:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.254901][ T37] audit: type=1326 audit(1759757567.331:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.254953][ T37] audit: type=1326 audit(1759757567.331:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.255501][ T37] audit: type=1326 audit(1759757567.331:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.259900][ T37] audit: type=1326 audit(1759757567.342:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11401 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811ed2eec9 code=0x7ffc0000 [ 278.305000][ T5887] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 278.314304][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 278.314332][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.314349][ T9] usb 1-1: Product: syz [ 278.314364][ T9] usb 1-1: Manufacturer: syz [ 278.314377][ T9] usb 1-1: SerialNumber: syz [ 278.453068][ T9] usb 1-1: config 0 descriptor?? [ 278.477401][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 024 [ 278.498568][ T5887] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.498606][ T5887] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.498628][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.498661][ T5887] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 278.498683][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.517771][ T5887] usb 5-1: config 0 descriptor?? [ 278.971985][ T5887] lenovo 0003:17EF:60A4.003B: hidraw0: USB HID v0.00 Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0 [ 278.996013][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2365'. [ 279.083016][ T9] i2c i2c-2: failure reading functionality [ 279.108948][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 279.111838][ T9] usb 1-1: USB disconnect, device number 24 [ 279.207243][ T5887] usb 5-1: USB disconnect, device number 24 [ 279.242421][T11428] netlink: 'syz.5.2368': attribute type 1 has an invalid length. [ 279.242443][T11428] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2368'. [ 279.242467][T11428] netlink: 'syz.5.2368': attribute type 1 has an invalid length. [ 279.704685][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2373'. [ 279.704708][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2373'. [ 279.704732][T11446] netlink: 'syz.5.2373': attribute type 5 has an invalid length. [ 279.704745][T11446] netlink: 'syz.5.2373': attribute type 6 has an invalid length. [ 279.777636][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 280.044176][T11461] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2380'. [ 280.044199][T11461] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2380'. [ 280.044251][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2380'. [ 280.094844][ T1229] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 280.238823][ T1229] usb 4-1: Using ep0 maxpacket: 16 [ 280.241482][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.241515][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.241552][ T1229] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 280.241573][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.300782][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 280.300806][T11475] netlink: 'syz.0.2386': attribute type 1 has an invalid length. [ 280.330273][ T1229] usb 4-1: config 0 descriptor?? [ 280.609965][T11482] overlayfs: regular lower layers cannot follow data lower layers [ 280.785470][ T1229] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.003C/input/input15 [ 280.894283][ T1229] input: HID 0458:5012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5012.003C/input/input16 [ 280.973794][ T1229] kye 0003:0458:5012.003C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.3-1/input0 [ 281.106031][ T1229] usb 4-1: USB disconnect, device number 25 [ 281.237368][T11498] fido_id[11498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 281.323651][ T44] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 281.485597][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 281.489895][ T44] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.489927][ T44] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.489948][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.489980][ T44] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 281.490002][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.506639][ T44] usb 5-1: config 0 descriptor?? [ 281.675680][ T993] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 281.862847][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.863422][ T993] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 281.863448][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.884100][ T993] usb 6-1: config 0 descriptor?? [ 282.002633][ T44] nzxt-smart2 0003:1E71:2009.003D: item fetching failed at offset 2/5 [ 282.011606][ T44] nzxt-smart2 0003:1E71:2009.003D: probe with driver nzxt-smart2 failed with error -22 [ 282.095943][ T1229] usb 5-1: USB disconnect, device number 25 [ 282.293831][ T993] hid_parser_main: 10 callbacks suppressed [ 282.293855][ T993] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 282.293885][ T993] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 282.293911][ T993] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 282.293943][ T993] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 282.293969][ T993] zydacron 0003:13EC:0006.003E: unknown main item tag 0x0 [ 282.339457][ T993] zydacron 0003:13EC:0006.003E: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 282.488643][ T44] usb 6-1: USB disconnect, device number 12 [ 282.934513][T11565] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 282.934541][T11565] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 282.950585][T11569] team_slave_0: entered promiscuous mode [ 282.950639][T11569] team_slave_1: entered promiscuous mode [ 282.955748][T11569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.256586][T11576] block nbd3: shutting down sockets [ 283.368428][T11586] __nla_validate_parse: 1 callbacks suppressed [ 283.368447][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2437'. [ 283.392028][ T9] IPVS: starting estimator thread 0... [ 283.478563][T11588] IPVS: using max 7 ests per chain, 16800 per kthread [ 284.144174][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 284.295492][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 284.299473][ T31] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 284.299501][ T31] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 284.299520][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 284.299539][ T31] usb 1-1: config 1 has no interface number 0 [ 284.299592][ T31] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.299617][ T31] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 284.299657][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 284.299679][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.328782][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 284.755301][ T31] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 284.941745][ T993] usb 1-1: USB disconnect, device number 25 [ 284.944455][ T993] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 285.914495][ T44] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 286.069400][ T44] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 286.069428][ T44] usb 4-1: config 0 has no interface number 0 [ 286.069559][ T44] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.069585][ T44] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.069606][ T44] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 286.069654][ T44] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 286.069676][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.092861][ T44] usb 4-1: config 0 descriptor?? [ 286.497176][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 286.537957][ T44] uclogic 0003:28BD:0934.003F: Interface probing failed: -22 [ 286.538012][ T44] uclogic 0003:28BD:0934.003F: interface is invalid, ignoring [ 286.646209][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 286.646240][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 286.646264][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 286.653407][T11719] bad cache= option: no%e [ 286.653407][T11719] [ 286.653681][T11719] CIFS: VFS: bad cache= option: no%e [ 286.695442][ T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 286.695472][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.695491][ T9] usb 6-1: Product: syz [ 286.695505][ T9] usb 6-1: Manufacturer: syz [ 286.695519][ T9] usb 6-1: SerialNumber: syz [ 286.721269][ T44] usb 4-1: USB disconnect, device number 26 [ 286.732548][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2501'. [ 286.779090][ T9] usb 6-1: config 0 descriptor?? [ 286.779893][T11708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 286.780018][T11708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 286.813880][ T9] usb 6-1: ucan: probing device on interface #0 [ 287.207279][ T9] usb 6-1: ucan: device reported invalid device info [ 287.207302][ T9] usb 6-1: ucan: probe failed; try to update the device firmware [ 287.426634][ T5887] usb 6-1: USB disconnect, device number 13 [ 287.613317][T11755] tipc: Started in network mode [ 287.613346][T11755] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 287.651481][T11755] tipc: Enabled bearer , priority 5 [ 287.702579][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 288.086571][ T5887] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 288.086881][ T1229] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 288.173893][T11779] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 288.233896][ T1229] usb 7-1: too many endpoints for config 0 interface 0 altsetting 10: 34, using maximum allowed: 30 [ 288.233946][ T1229] usb 7-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 288.233973][ T1229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 288.234004][ T1229] usb 7-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 288.234025][ T1229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.239729][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 288.242228][ T5887] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.242252][ T5887] usb 5-1: config 0 has no interface number 0 [ 288.280538][ T5887] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 288.280567][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.280586][ T5887] usb 5-1: Product: syz [ 288.280600][ T5887] usb 5-1: Manufacturer: syz [ 288.280613][ T5887] usb 5-1: SerialNumber: syz [ 288.309264][ T5887] usb 5-1: config 0 descriptor?? [ 288.351713][ T1229] usb 7-1: config 0 descriptor?? [ 288.376062][ T5887] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 288.376088][ T5887] usb 5-1: selecting invalid altsetting 1 [ 288.376103][ T5887] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 288.380147][ T5887] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 288.380562][ T5887] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 288.380616][ T5887] usb 5-1: media controller created [ 288.477509][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.574381][ T5887] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 288.574434][ T5887] zl10353_read_register: readreg error (reg=127, ret==-71) [ 288.581914][ T5887] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 288.658075][T11789] bridge_slave_0: invalid flags given to default FDB implementation [ 288.705664][ T31] tipc: Node number set to 4269801488 [ 288.712163][ T5887] usb 5-1: USB disconnect, device number 26 [ 288.786290][ T1229] holtek_mouse 0003:04D9:A04A.0040: hidraw0: USB HID v0.03 Device [HID 04d9:a04a] on usb-dummy_hcd.6-1/input0 [ 288.866058][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2535'. [ 288.969664][ T5815] usb 7-1: USB disconnect, device number 8 [ 289.013835][T11798] fido_id[11798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 289.651908][T11822] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.827215][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 290.913007][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2574'. [ 291.001259][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 291.001307][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.001332][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.001352][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 291.001393][ T31] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 291.001415][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.015667][ T31] usb 6-1: config 0 descriptor?? [ 291.457754][ T31] holtek_kbd 0003:04D9:A055.0041: bogus close delimiter [ 291.457775][ T31] holtek_kbd 0003:04D9:A055.0041: item 0 4 2 10 parsing failed [ 291.471641][ T31] holtek_kbd 0003:04D9:A055.0041: probe with driver holtek_kbd failed with error -22 [ 291.496610][ T5815] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 291.643061][ T31] usb 6-1: USB disconnect, device number 14 [ 291.645061][ T5815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.645087][ T5815] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.645109][ T5815] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.648070][ T5815] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 291.648097][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.648115][ T5815] usb 7-1: Product: syz [ 291.648128][ T5815] usb 7-1: Manufacturer: syz [ 291.648140][ T5815] usb 7-1: SerialNumber: syz [ 291.747547][ T5815] hub 7-1:1.0: bad descriptor, ignoring hub [ 291.747586][ T5815] hub 7-1:1.0: probe with driver hub failed with error -5 [ 291.781977][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 291.782000][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 291.782025][T11897] netlink: 'syz.3.2585': attribute type 7 has an invalid length. [ 291.948939][ T5815] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 292.309546][ T9] usb 7-1: USB disconnect, device number 9 [ 292.329077][ T9] usblp0: removed [ 293.165834][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165866][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165886][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165906][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165925][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165946][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165966][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.165985][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.166005][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.166024][ T5887] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 293.171340][ T5887] hid-generic 00A0:0006:0003.0042: hidraw0: HID v0.05 Device [syz1] on syz0 [ 293.571618][T11920] fido_id[11920]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 293.961209][T11909] syz.5.2591 (11909): drop_caches: 2 [ 294.011874][ T5887] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 294.180309][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 294.180342][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 294.180368][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 294.180408][ T5887] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 294.180428][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.194825][ T5887] usb 1-1: config 0 descriptor?? [ 294.201510][T11930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.435724][T11952] netlink: 'syz.3.2611': attribute type 4 has an invalid length. [ 294.435743][T11952] netlink: 'syz.3.2611': attribute type 2 has an invalid length. [ 294.629420][ T5887] sigmamicro 0003:1C4F:0059.0043: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 294.682439][T11960] usb usb8: usbfs: process 11960 (syz.3.2614) did not claim interface 0 before use [ 294.785326][T11967] netlink: 'syz.6.2617': attribute type 4 has an invalid length. [ 294.789513][ T9] usb 1-1: USB disconnect, device number 26 [ 294.884256][T11965] fido_id[11965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 295.049100][T11978] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 295.049324][T11978] macsec1: entered allmulticast mode [ 295.049343][T11978] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 296.345327][ T1229] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 296.396470][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 296.492024][ T1229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.492057][ T1229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.492089][ T1229] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 296.492110][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.545487][ T1229] usb 1-1: config 0 descriptor?? [ 296.567027][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.567058][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.567143][ T9] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 296.567165][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.648844][ T9] usb 5-1: config 0 descriptor?? [ 296.968080][ T1229] lenovo 0003:17EF:6067.0044: item fetching failed at offset 0/2 [ 296.970569][ T1229] lenovo 0003:17EF:6067.0044: hid_parse failed [ 296.970644][ T1229] lenovo 0003:17EF:6067.0044: probe with driver lenovo failed with error -22 [ 297.061166][ T9] petalynx 0003:18B1:0037.0045: item fetching failed at offset 2/5 [ 297.061968][ T9] petalynx 0003:18B1:0037.0045: parse failed [ 297.062036][ T9] petalynx 0003:18B1:0037.0045: probe with driver petalynx failed with error -22 [ 297.159106][ T5887] usb 1-1: USB disconnect, device number 27 [ 297.251379][ T9] usb 5-1: USB disconnect, device number 27 [ 297.961129][ T44] IPVS: starting estimator thread 0... [ 298.050861][T12075] IPVS: using max 7 ests per chain, 16800 per kthread [ 298.411427][T12097] tmpfs: Cannot change global quota limit on remount [ 299.122957][T12126] ======================================================= [ 299.122957][T12126] WARNING: The mand mount option has been deprecated and [ 299.122957][T12126] and is ignored by this kernel. Remove the mand [ 299.122957][T12126] option from the mount to silence this warning. [ 299.122957][T12126] ======================================================= [ 299.250046][T12132] tipc: Enabling of bearer rejected, failed to enable media [ 299.414036][ T37] audit: type=1326 audit(1759757589.545:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.414089][ T37] audit: type=1326 audit(1759757589.545:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.414130][ T37] audit: type=1326 audit(1759757589.556:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.414170][ T37] audit: type=1326 audit(1759757589.556:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.414211][ T37] audit: type=1326 audit(1759757589.556:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.418156][ T37] audit: type=1326 audit(1759757589.556:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.418207][ T37] audit: type=1326 audit(1759757589.556:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 299.418250][ T37] audit: type=1326 audit(1759757589.556:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12136 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 301.018538][T12189] binder_alloc: binder_alloc_mmap_handler: 12184 200000ffc000-200001000000 already mapped failed -16 [ 301.446628][T12200] netlink: zone id is out of range [ 301.449642][T12200] netlink: del zone limit has 4 unknown bytes [ 301.472876][ T3609] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.593110][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.612321][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.632740][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.664461][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.667493][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.835766][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2718'. [ 301.893107][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'. [ 302.160338][ T3609] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.642112][T12252] ntfs3: Bad value for 'gid' [ 302.642130][T12252] ntfs3: Bad value for 'gid' [ 302.647571][ T3609] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.717713][T12208] lo speed is unknown, defaulting to 1000 [ 303.107130][ T3609] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.651964][ T5824] Bluetooth: hci0: command tx timeout [ 304.476801][ T3609] bridge_slave_1: left allmulticast mode [ 304.476828][ T3609] bridge_slave_1: left promiscuous mode [ 304.478725][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.586612][ T3609] bridge_slave_0: left allmulticast mode [ 304.586639][ T3609] bridge_slave_0: left promiscuous mode [ 304.586912][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.623491][ T1229] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 304.768812][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.768845][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.768881][ T1229] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 304.768904][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.817730][ T1229] usb 6-1: config 0 descriptor?? [ 305.102921][ T37] audit: type=1326 audit(1759757595.518:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 305.109588][ T37] audit: type=1326 audit(1759757595.529:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 305.110805][ T37] audit: type=1326 audit(1759757595.529:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 305.113215][ T37] audit: type=1326 audit(1759757595.529:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 305.113747][ T37] audit: type=1326 audit(1759757595.529:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 305.122973][ T37] audit: type=1326 audit(1759757595.529:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12353 comm="syz.0.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 305.268113][ T1229] hid_mf 0003:0079:1846.0046: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 305.268145][ T1229] hid_mf 0003:0079:1846.0046: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 305.443219][ T1229] usb 6-1: USB disconnect, device number 15 [ 305.557673][T12360] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 305.598945][T12358] fido_id[12358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 305.632728][ T5824] Bluetooth: hci0: command tx timeout [ 305.868480][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2769'. [ 307.614483][ T5824] Bluetooth: hci0: command tx timeout [ 307.633717][ T3609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.710530][ T3609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.736602][ T3609] bond0 (unregistering): Released all slaves [ 307.785409][T12390] IPVS: Unknown mcast interface: pimreg1 [ 307.859049][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.859119][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.888870][T12208] chnl_net:caif_netlink_parms(): no params data found [ 307.917751][ T3609] tipc: Left network mode [ 308.268496][ T37] audit: type=1326 audit(1759757598.846:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12407 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 308.268555][ T37] audit: type=1326 audit(1759757598.846:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12407 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 308.284906][ T37] audit: type=1326 audit(1759757598.867:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12407 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 308.284957][ T37] audit: type=1326 audit(1759757598.867:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12407 comm="syz.0.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e6deec9 code=0x7ffc0000 [ 308.497025][T12418] ptrace attach of "./syz-executor exec"[8297] was attempted by " [ 308.826314][T12432] program syz.4.2793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.056235][T12443] hugetlbfs: Bad value '%' for mount option 'size' [ 309.056235][T12443] [ 309.061949][ T5815] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 309.162801][ T990] hid_parser_main: 6 callbacks suppressed [ 309.162823][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162853][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162877][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162902][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162925][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162950][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162974][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.162999][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.163023][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.163048][ T990] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 309.209997][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.210030][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.210065][ T5815] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 309.210087][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.252796][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 309.270383][ T5815] usb 4-1: config 0 descriptor?? [ 309.275657][ T990] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.43 Device [syz1] on syz1 [ 309.408100][T12450] fido_id[12450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 309.427504][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.427531][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 309.433421][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 309.433451][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.433469][ T31] usb 6-1: Product: syz [ 309.433480][ T31] usb 6-1: Manufacturer: syz [ 309.433491][ T31] usb 6-1: SerialNumber: syz [ 309.502975][ T31] usb 6-1: config 0 descriptor?? [ 309.595450][ T5824] Bluetooth: hci0: command tx timeout [ 309.737167][ T31] usb 6-1: USB disconnect, device number 16 [ 309.822613][T12458] Bluetooth: MGMT ver 1.23 [ 309.929439][ T5815] hid-led 0003:0FC5:B080.0048: probe with driver hid-led failed with error -71 [ 310.011439][ T5815] usb 4-1: USB disconnect, device number 27 [ 310.202063][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.202199][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.202428][T12208] bridge_slave_0: entered allmulticast mode [ 310.233842][T12208] bridge_slave_0: entered promiscuous mode [ 310.386447][ T3609] hsr_slave_0: left promiscuous mode [ 310.427550][ T3609] hsr_slave_1: left promiscuous mode [ 310.428554][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.429803][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.480438][ T3609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.480466][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.689149][ T3609] veth1_macvtap: left promiscuous mode [ 310.689248][ T3609] veth0_macvtap: left promiscuous mode [ 310.689504][ T3609] veth1_vlan: left promiscuous mode [ 310.689691][ T3609] veth0_vlan: left promiscuous mode [ 311.794436][T12516] netlink: del zone limit has 4 unknown bytes [ 312.472155][ T990] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 312.626555][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.626598][ T990] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 312.626617][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.630756][ T990] usb 4-1: config 0 descriptor?? [ 313.238848][ T31] usb 4-1: USB disconnect, device number 28 [ 313.485133][ T3609] team0 (unregistering): Port device team_slave_1 removed [ 313.701704][ T3609] team0 (unregistering): Port device team_slave_0 removed [ 313.857153][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 316.094439][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.094572][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.094733][T12208] bridge_slave_1: entered allmulticast mode [ 316.096249][T12208] bridge_slave_1: entered promiscuous mode [ 316.542864][T12208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.563158][T12208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.841042][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 316.841059][ T37] audit: type=1326 audit(1759757607.843:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 316.848110][ T37] audit: type=1326 audit(1759757607.843:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 316.850763][ T37] audit: type=1326 audit(1759757607.854:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 316.852083][ T37] audit: type=1326 audit(1759757607.854:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 316.852358][ T37] audit: type=1326 audit(1759757607.854:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 316.852678][ T37] audit: type=1326 audit(1759757607.854:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 316.853517][ T37] audit: type=1326 audit(1759757607.854:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12558 comm="syz.5.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 317.135401][T12208] team0: Port device team_slave_0 added [ 317.252427][T12208] team0: Port device team_slave_1 added [ 317.435185][ T990] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 317.591782][ T990] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 317.591811][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.605354][ T990] usb 4-1: config 0 descriptor?? [ 317.619399][ T990] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 318.042908][ T990] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 318.042950][ T990] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 318.164957][T12208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.164975][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.164999][T12208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.167311][T12208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.167325][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.167349][T12208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.254552][ T31] usb 4-1: USB disconnect, device number 29 [ 318.562894][T12617] trusted_key: encrypted_key: key trusted:syz not found [ 318.719837][T12208] hsr_slave_0: entered promiscuous mode [ 318.723428][T12208] hsr_slave_1: entered promiscuous mode [ 318.921242][ T990] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 319.080185][T12637] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 319.080239][T12637] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 319.080335][T12637] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffdd,4) [ 319.080428][T12637] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 319.080474][T12637] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 319.105695][ T990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.106458][ T990] usb 5-1: not running at top speed; connect to a high speed hub [ 319.151900][ T990] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 319.151927][ T990] usb 5-1: config 129 has no interface number 0 [ 319.151973][ T990] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 319.151998][ T990] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 319.152023][ T990] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 319.152050][ T990] usb 5-1: config 129 interface 28 has no altsetting 0 [ 319.155061][ T990] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 319.155088][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.155106][ T990] usb 5-1: Product: syz [ 319.155120][ T990] usb 5-1: Manufacturer: syz [ 319.155133][ T990] usb 5-1: SerialNumber: syz [ 319.199715][T12620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.392377][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'. [ 319.458344][ T990] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 319.461164][ T990] etas_es58x 5-1:129.28: could not retrieve the product info string [ 319.614718][ T990] usb 5-1: USB disconnect, device number 28 [ 319.629603][ T990] etas_es58x 5-1:129.28: Disconnecting syz syz [ 320.010919][T12663] pim6reg: entered allmulticast mode [ 320.014387][T12664] pim6reg: left allmulticast mode [ 320.378465][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 320.516671][T12208] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 320.565139][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 320.589922][T12208] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 320.664527][T12208] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 320.764400][T12208] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.055006][ T9] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 321.157077][T12208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.200473][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.200500][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.200552][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 321.200575][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.227976][ T9] usb 4-1: config 0 descriptor?? [ 321.241686][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 321.241740][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 321.252553][T12208] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.282932][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.283054][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.307878][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 321.317795][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 321.317853][ T9] usb 4-1: media controller created [ 321.332700][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.372010][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.380419][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.402983][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 321.403153][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 321.480019][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 321.503398][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 321.503420][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 321.518512][ T9] usb 4-1: USB disconnect, device number 30 [ 321.630055][T12208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.771421][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 321.885745][T12732] rtc_cmos 00:00: Alarms can be up to one day in the future [ 322.129257][T12739] vlan2: entered allmulticast mode [ 322.165167][T12743] netlink: 'syz.4.2903': attribute type 1 has an invalid length. [ 322.249207][T12208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.153091][ T993] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 323.172787][T12208] veth0_vlan: entered promiscuous mode [ 323.194795][T12208] veth1_vlan: entered promiscuous mode [ 323.243950][T12208] veth0_macvtap: entered promiscuous mode [ 323.268120][T12208] veth1_macvtap: entered promiscuous mode [ 323.293545][ T993] usb 5-1: Using ep0 maxpacket: 16 [ 323.295884][ T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.295931][ T993] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 323.295953][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.339813][T12208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.349857][ T993] usb 5-1: config 0 descriptor?? [ 323.430708][T12208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.464362][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.468416][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.469037][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.469404][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.776637][ T993] hid_parser_main: 73 callbacks suppressed [ 323.776661][ T993] greenasia 0003:0E8F:0012.004A: unknown main item tag 0x0 [ 323.776691][ T993] greenasia 0003:0E8F:0012.004A: unknown main item tag 0x0 [ 323.776713][ T993] greenasia 0003:0E8F:0012.004A: unknown main item tag 0x0 [ 323.815115][ T993] greenasia 0003:0E8F:0012.004A: hidraw0: USB HID v0.05 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 323.815150][ T993] greenasia 0003:0E8F:0012.004A: no inputs found [ 323.967781][ T5907] usb 5-1: USB disconnect, device number 29 [ 324.148042][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.148064][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.310075][T12802] fido_id[12802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 324.324830][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.324850][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.828618][T12821] netlink: 'syz.5.2928': attribute type 15 has an invalid length. [ 325.833073][T12864] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.149661][T12880] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2954'. [ 326.149689][T12880] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2954'. [ 326.705651][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.705904][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.706140][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.706379][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.706394][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 326.933794][T12915] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 327.776937][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2989'. [ 327.799539][ T1229] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 327.977024][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.977075][ T1229] usb 4-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 327.977097][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.984183][ T1229] usb 4-1: config 0 descriptor?? [ 328.379907][ T44] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 328.426158][ T1229] magicmouse 0003:05AC:0323.004B: hidraw0: USB HID v0.0c Device [HID 05ac:0323] on usb-dummy_hcd.3-1/input0 [ 328.522673][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 328.525181][ T44] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 328.525205][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.525224][ T44] usb 6-1: config 0 has no interface number 0 [ 328.527689][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 328.527714][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.527731][ T44] usb 6-1: Product: syz [ 328.527743][ T44] usb 6-1: Manufacturer: syz [ 328.527755][ T44] usb 6-1: SerialNumber: syz [ 328.548228][T12984] vlan2: entered promiscuous mode [ 328.548253][T12984] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 328.624517][ T44] usb 6-1: config 0 descriptor?? [ 328.626537][ T1229] usb 4-1: USB disconnect, device number 31 [ 328.667013][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.710980][ T31] kernel write not supported for file /input/mouse0 (pid: 31 comm: kworker/1:0) [ 328.712779][ T44] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 328.712809][ T44] uvcvideo 6-1:0.105: No valid video chain found. [ 328.875660][ T5815] usb 6-1: USB disconnect, device number 17 [ 328.883118][T12990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3007'. [ 328.928437][T12992] overlayfs: missing 'lowerdir' [ 329.735453][ T1229] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 329.900130][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 329.902710][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.902742][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.902780][ T1229] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 329.902801][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.923193][ T1229] usb 4-1: config 0 descriptor?? [ 330.182572][T13040] netdevsim netdevsim4: Direct firmware load for . [ 330.182572][T13040] failed with error -2 [ 330.182598][T13040] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 330.182598][T13040] [ 330.374205][ T1229] uclogic 0003:5543:0004.004C: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 330.531217][ T993] usb 4-1: USB disconnect, device number 32 [ 330.658172][T13055] fido_id[13055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 331.209700][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3047'. [ 331.209723][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3047'. [ 331.209747][T13080] netlink: 'syz.7.3047': attribute type 14 has an invalid length. [ 331.209761][T13080] netlink: 'syz.7.3047': attribute type 13 has an invalid length. [ 332.151194][T13121] tmpfs: Cannot change global quota limit on remount [ 333.918717][T13181] overlayfs: workdir and upperdir must be separate subtrees [ 334.867339][T13222] usb usb8: usbfs: process 13222 (syz.4.3118) did not claim interface 0 before use [ 335.012738][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3120'. [ 335.012760][T13228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 335.610638][T13258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3130'. [ 335.610668][T13258] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 335.795998][ T5907] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 335.971777][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 335.974027][ T5907] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 335.974053][ T5907] usb 6-1: config 0 has no interface number 0 [ 335.974084][ T5907] usb 6-1: config 0 interface 125 has no altsetting 0 [ 335.978842][ T5907] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 335.978876][ T5907] usb 6-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 335.978895][ T5907] usb 6-1: Product: syz [ 335.978907][ T5907] usb 6-1: Manufacturer: syz [ 335.978919][ T5907] usb 6-1: SerialNumber: syz [ 335.995290][ T5907] usb 6-1: config 0 descriptor?? [ 336.091025][T13278] comedi comedi3: aio_iiro_16: a I/O base address must be specified [ 336.234380][ T5907] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 336.340394][T13287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3142'. [ 336.765748][ T5907] usb 6-1: reset high-speed USB device number 18 using dummy_hcd [ 337.194879][ T5907] usb 6-1: failed to restore interface 125 altsetting 246 (error=-71) [ 337.212330][ T5907] ueagle-atm 6-1:0.125: usbatm_usb_probe: bind failed: -19! [ 337.246260][ T5907] usb 6-1: USB disconnect, device number 18 [ 337.866003][T13349] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3159'. [ 338.351682][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3168'. [ 338.798498][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 338.960308][T13405] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 339.049622][T13409] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3178'. [ 339.090283][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 339.353733][ T5815] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 339.509401][ T5815] usb 4-1: config 9 has an invalid interface number: 88 but max is 1 [ 339.509429][ T5815] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 339.509461][ T5815] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 339.509480][ T5815] usb 4-1: config 9 has no interface number 1 [ 339.509539][ T5815] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 339.509560][ T5815] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 339.509581][ T5815] usb 4-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 339.509607][ T5815] usb 4-1: config 9 interface 88 has no altsetting 0 [ 339.512790][ T5815] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 339.512817][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.512836][ T5815] usb 4-1: Product: syz [ 339.512847][ T5815] usb 4-1: Manufacturer: syz [ 339.512859][ T5815] usb 4-1: SerialNumber: syz [ 339.692319][ T37] audit: type=1326 audit(1759757631.831:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.693246][ T37] audit: type=1326 audit(1759757631.831:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.749243][ T37] audit: type=1326 audit(1759757631.894:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.750460][ T37] audit: type=1326 audit(1759757631.894:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.751111][ T37] audit: type=1326 audit(1759757631.894:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.752232][ T37] audit: type=1326 audit(1759757631.894:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.752903][ T37] audit: type=1326 audit(1759757631.894:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.783206][ T37] audit: type=1326 audit(1759757631.936:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13428 comm="syz.5.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d7ff7eec9 code=0x7ffc0000 [ 339.888402][ T5815] qmi_wwan 4-1:9.88: skipping garbage [ 339.888662][ T5815] qmi_wwan 4-1:9.88: probe with driver qmi_wwan failed with error -22 [ 339.911159][T13431] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3189'. [ 339.911195][T13431] NCSI netlink: No device for ifindex 29216 [ 339.944190][ T5815] usb 4-1: Could not set interface, error -71 [ 339.960489][ T5815] usb 4-1: USB disconnect, device number 33 [ 340.114267][T13437] xt_socket: unknown flags 0x40 [ 340.909482][T13465] lo speed is unknown, defaulting to 1000 [ 341.859427][ T1229] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 342.001787][ T1229] usb 6-1: Using ep0 maxpacket: 16 [ 342.004083][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.004114][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.004150][ T1229] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 342.004172][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.008999][ T1229] usb 6-1: config 0 descriptor?? [ 342.316058][ T44] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 342.458611][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 342.461341][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.461368][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 342.461391][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.461412][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 342.461434][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 342.461555][ T44] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 342.461577][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.497248][ T1229] hid-multitouch 0003:1FD2:6007.004D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 342.532270][ T44] usb 5-1: config 0 descriptor?? [ 342.699335][ T1229] usb 6-1: USB disconnect, device number 19 [ 342.810024][ T44] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 342.875850][T13542] fido_id[13542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 344.208010][T13595] ipvlan2: entered promiscuous mode [ 344.214832][T13595] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 344.430549][ T1229] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 344.584928][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.584982][ T1229] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 344.585387][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.600166][ T1229] usb 6-1: config 0 descriptor?? [ 345.059931][ T1229] itetech 0003:258A:6A88.004E: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.5-1/input0 [ 345.069100][ T9] usb 5-1: USB disconnect, device number 30 [ 345.113030][ T9] usblp0: removed [ 345.255927][ T5815] usb 6-1: USB disconnect, device number 20 [ 345.375421][T13627] fido_id[13627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 345.516217][ T37] audit: type=1326 audit(1759757637.941:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.521289][ T37] audit: type=1326 audit(1759757637.951:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.522506][ T37] audit: type=1326 audit(1759757637.951:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.524886][ T37] audit: type=1326 audit(1759757637.951:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.525174][ T37] audit: type=1326 audit(1759757637.951:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.525779][ T37] audit: type=1326 audit(1759757637.951:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.531382][ T37] audit: type=1326 audit(1759757637.962:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f66a4e35d67 code=0x7ffc0000 [ 345.531707][ T37] audit: type=1326 audit(1759757637.962:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66a4ddaf79 code=0x7ffc0000 [ 345.531985][ T37] audit: type=1326 audit(1759757637.962:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 345.535752][ T37] audit: type=1326 audit(1759757637.962:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13638 comm="syz.4.3287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a4e3eec9 code=0x7ffc0000 [ 347.412457][T13736] lo speed is unknown, defaulting to 1000 [ 348.791890][T13793] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3338'. [ 349.450120][T13796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3337'. [ 349.450149][T13796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3337'. [ 349.470258][T13796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3337'. [ 349.470284][T13796] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3337'. [ 349.498450][ T993] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 349.654014][ T993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 349.654063][ T993] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 349.654085][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.699249][ T993] usb 6-1: config 0 descriptor?? [ 349.700296][T13803] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.119006][ T993] elan 0003:04F3:0755.004F: unknown main item tag 0x0 [ 350.119043][ T993] elan 0003:04F3:0755.004F: unknown global tag 0xe [ 350.119058][ T993] elan 0003:04F3:0755.004F: item 0 0 1 14 parsing failed [ 350.119838][ T993] elan 0003:04F3:0755.004F: Hid Parse failed [ 350.119940][ T993] elan 0003:04F3:0755.004F: probe with driver elan failed with error -22 [ 350.409588][ T1229] usb 6-1: USB disconnect, device number 21 [ 355.556751][T13860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.606879][T13887] netlink: 'syz.0.3378': attribute type 10 has an invalid length. [ 361.608449][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 361.608464][ T37] audit: type=1326 audit(1759757654.822:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13885 comm="syz.3.3379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f811ed2eec9 code=0x0 [ 362.153575][T13887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.221445][T13887] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 366.378621][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.378696][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.872445][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.894388][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.902951][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.904105][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.933025][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.990264][ T1229] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 381.724449][ T1229] usb 6-1: Using ep0 maxpacket: 8 [ 381.764074][ T1229] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 381.764104][ T1229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.764123][ T1229] usb 6-1: Product: syz [ 381.764137][ T1229] usb 6-1: Manufacturer: syz [ 381.764151][ T1229] usb 6-1: SerialNumber: syz [ 381.797752][ T1229] usb 6-1: config 0 descriptor?? [ 382.723823][ T1229] gspca_main: sq930x-2.14.0 probing 2770:930c [ 383.667475][ T5824] Bluetooth: hci5: command tx timeout [ 383.709133][T13923] lo speed is unknown, defaulting to 1000 [ 383.962024][ T1229] gspca_sq930x: ucbus_write failed -71 [ 383.962175][ T1229] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 384.028585][ T1229] usb 6-1: USB disconnect, device number 22 [ 385.668160][ T5824] Bluetooth: hci5: command tx timeout [ 386.011768][T13940] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 386.011768][T13940] The task syz.7.3398 (13940) triggered the difference, watch for misbehavior. [ 386.145141][T13941] program syz.5.3399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.629573][ T5824] Bluetooth: hci5: command tx timeout [ 388.301328][T13658] tipc: Subscription rejected, illegal request [ 388.923921][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.962129][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 389.525619][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 389.539127][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 389.539969][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.613686][ T5822] Bluetooth: hci5: command tx timeout [ 391.781170][ T5822] Bluetooth: hci6: command tx timeout [ 392.583169][T13964] mmap: syz.7.3407 (13964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 393.733869][ T5822] Bluetooth: hci6: command tx timeout [ 394.448040][T13952] lo speed is unknown, defaulting to 1000 [ 395.755057][ T5822] Bluetooth: hci6: command tx timeout [ 395.976810][T13923] chnl_net:caif_netlink_parms(): no params data found [ 397.949818][ T5822] Bluetooth: hci6: command tx timeout [ 409.496862][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.507726][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.508003][T13923] bridge_slave_0: entered allmulticast mode [ 409.579084][T13923] bridge_slave_0: entered promiscuous mode [ 410.146439][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.146791][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.147047][T13923] bridge_slave_1: entered allmulticast mode [ 410.610697][T13923] bridge_slave_1: entered promiscuous mode [ 413.609262][ T5887] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 420.454855][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.086375][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 423.190719][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.518224][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.545890][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.547301][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.566846][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.567651][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.902561][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.902635][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 425.579829][ T5822] Bluetooth: hci3: command tx timeout [ 427.815891][ T5822] Bluetooth: hci3: command tx timeout [ 429.772987][ T5822] Bluetooth: hci3: command tx timeout [ 431.752194][ T5822] Bluetooth: hci3: command tx timeout [ 440.878121][T14028] vlan3: entered promiscuous mode [ 440.878145][T14028] batadv0: entered promiscuous mode [ 444.764643][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 444.786177][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 444.790354][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 444.791989][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 444.817410][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 445.739695][ T5822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 445.759203][ T5822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 445.762750][ T5822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 445.764459][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 445.765697][ T5822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 446.764658][ T5822] Bluetooth: hci7: command tx timeout [ 447.908127][ T5822] Bluetooth: hci8: command tx timeout [ 448.746021][ T5822] Bluetooth: hci7: command tx timeout [ 449.213952][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 449.232035][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 449.241572][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 449.299946][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 449.300829][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 449.889189][ T61] Bluetooth: hci8: command tx timeout [ 450.727242][ T61] Bluetooth: hci7: command tx timeout [ 451.870563][ T5822] Bluetooth: hci8: command tx timeout [ 452.908628][ T5822] Bluetooth: hci7: command tx timeout [ 453.785046][ T5822] Bluetooth: hci9: command tx timeout [ 453.990846][ T5822] Bluetooth: hci8: command tx timeout [ 456.000065][ T5822] Bluetooth: hci9: command tx timeout [ 458.059666][ T5822] Bluetooth: hci9: command tx timeout [ 459.820262][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.833573][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.843133][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.849519][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.869841][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.024566][ T5822] Bluetooth: hci9: command tx timeout [ 461.852976][ T5822] Bluetooth: hci5: command tx timeout [ 463.834657][ T5822] Bluetooth: hci5: command tx timeout [ 464.597106][T14010] lo speed is unknown, defaulting to 1000 [ 465.092010][T14038] lo speed is unknown, defaulting to 1000 [ 465.888205][ T5822] Bluetooth: hci5: command tx timeout [ 466.704776][T14034] lo speed is unknown, defaulting to 1000 [ 467.168144][T14041] lo speed is unknown, defaulting to 1000 [ 467.798616][ T5822] Bluetooth: hci5: command tx timeout [ 468.354999][T14046] lo speed is unknown, defaulting to 1000 [ 477.617597][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.717818][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.720836][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.722186][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.763558][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 479.761436][ T61] Bluetooth: hci6: command tx timeout [ 481.742741][ T61] Bluetooth: hci6: command tx timeout [ 483.426330][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 483.426404][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.733724][ T61] Bluetooth: hci6: command tx timeout [ 485.810148][ T61] Bluetooth: hci6: command tx timeout [ 488.144116][T14052] lo speed is unknown, defaulting to 1000 [ 496.153323][T14041] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 499.156526][ T5822] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 499.174557][ T5822] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 499.193836][ T5822] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 499.231913][ T5822] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 499.239762][ T5822] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 499.423063][T14076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 499.436154][T14076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 499.437517][T14076] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 499.438717][T14076] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 499.439517][T14076] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 502.242176][ T61] Bluetooth: hci10: command tx timeout [ 502.242922][ T61] Bluetooth: hci7: command tx timeout [ 504.310657][ T61] Bluetooth: hci7: command tx timeout [ 504.622775][ T61] Bluetooth: hci10: command tx timeout [ 506.555593][ T61] Bluetooth: hci7: command tx timeout [ 506.738004][ T61] Bluetooth: hci10: command tx timeout [ 507.075694][ T5822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.111481][ T5822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.114623][ T5822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.143011][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.160051][ T5822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 508.492678][ T61] Bluetooth: hci7: command tx timeout [ 508.719255][ T61] Bluetooth: hci10: command tx timeout [ 509.109876][ T61] Bluetooth: hci8: command tx timeout [ 511.088441][ T61] Bluetooth: hci8: command tx timeout [ 511.462900][ T38] INFO: task syz.0.3383:13898 blocked for more than 143 seconds. [ 511.462925][ T38] Not tainted syzkaller #0 [ 511.462935][ T38] Blocked by coredump. [ 511.462941][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.462950][ T38] task:syz.0.3383 state:D stack:24072 pid:13898 tgid:13897 ppid:5827 task_flags:0x40044c flags:0x00080000 [ 511.463006][ T38] Call Trace: [ 511.463013][ T38] [ 511.463031][ T38] __schedule+0x16f3/0x4c20 [ 511.463084][ T38] ? __lock_acquire+0xab9/0xd20 [ 511.463111][ T38] ? __pfx___schedule+0x10/0x10 [ 511.463150][ T38] ? schedule+0x91/0x360 [ 511.463175][ T38] schedule+0x165/0x360 [ 511.463199][ T38] schedule_timeout+0x9a/0x270 [ 511.463221][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 511.463256][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.463279][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.463300][ T38] ? wait_for_completion+0x267/0x5d0 [ 511.463325][ T38] wait_for_completion+0x2bf/0x5d0 [ 511.463362][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 511.463400][ T38] exit_aio+0x2f1/0x3b0 [ 511.463432][ T38] ? __pfx_exit_aio+0x10/0x10 [ 511.463470][ T38] ? uprobe_clear_state+0x288/0x2a0 [ 511.463496][ T38] ? mm_update_next_owner+0xa7/0x870 [ 511.463521][ T38] __mmput+0x68/0x3d0 [ 511.463548][ T38] exit_mm+0x1da/0x2c0 [ 511.463570][ T38] ? __pfx_exit_mm+0x10/0x10 [ 511.463592][ T38] ? rcu_is_watching+0x15/0xb0 [ 511.463617][ T38] do_exit+0x648/0x2300 [ 511.463636][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.463672][ T38] ? __pfx_do_exit+0x10/0x10 [ 511.463688][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 511.463706][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 511.463740][ T38] do_group_exit+0x21c/0x2d0 [ 511.463760][ T38] ? rt_spin_unlock+0x161/0x200 [ 511.463789][ T38] get_signal+0x125d/0x1310 [ 511.463837][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 511.463864][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.463888][ T38] ? __se_sys_futex+0x36f/0x400 [ 511.463928][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 511.463958][ T38] exit_to_user_mode_loop+0x72/0x130 [ 511.463985][ T38] do_syscall_64+0x2bd/0x3b0 [ 511.464008][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.464030][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.464050][ T38] ? clear_bhb_loop+0x60/0xb0 [ 511.464073][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.464092][ T38] RIP: 0033:0x7faf2e6deec9 [ 511.464114][ T38] RSP: 002b:00007faf2c93e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 511.464134][ T38] RAX: fffffffffffffe00 RBX: 00007faf2e935fa8 RCX: 00007faf2e6deec9 [ 511.464148][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf2e935fa8 [ 511.464160][ T38] RBP: 00007faf2e935fa0 R08: 0000000000000000 R09: 0000000000000000 [ 511.464173][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.464184][ T38] R13: 00007faf2e936038 R14: 00007ffd61be6d00 R15: 00007ffd61be6de8 [ 511.464217][ T38] [ 511.464245][ T38] [ 511.464245][ T38] Showing all locks held in the system: [ 511.464254][ T38] 5 locks held by rcuc/0/20: [ 511.464267][ T38] 1 lock held by khungtaskd/38: [ 511.464277][ T38] #0: ffffffff8d3aa400 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 511.464325][ T38] 2 locks held by kworker/1:1/44: [ 511.464336][ T38] #0: ffff88813ff19138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.464385][ T38] #1: ffffc90000b57bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.464435][ T38] 6 locks held by kworker/u8:3/58: [ 511.464446][ T38] 3 locks held by kworker/u8:4/78: [ 511.464456][ T38] #0: ffff88814d61c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.464504][ T38] #1: ffffc9000153fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.464553][ T38] #2: ffffffff8e667db8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 511.464619][ T38] 2 locks held by getty/5573: [ 511.464629][ T38] #0: ffff88823bf3a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.464679][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 511.464734][ T38] 2 locks held by kworker/u8:15/13648: [ 511.464745][ T38] #0: ffff8881452ce938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.464800][ T38] #1: ffffc90003d27bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.464853][ T38] 1 lock held by syz.4.3374/13874: [ 511.464864][ T38] #0: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.464910][ T38] 1 lock held by syz-executor/13923: [ 511.464921][ T38] #0: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.464967][ T38] 1 lock held by syz-executor/13952: [ 511.464978][ T38] #0: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.465024][ T38] 1 lock held by syz.5.3408/13968: [ 511.465035][ T38] #0: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.465081][ T38] 2 locks held by syz-executor/14010: [ 511.465091][ T38] #0: ffffffff8e65aea0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 511.465137][ T38] #1: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.465182][ T38] 2 locks held by syz.3.3428/14028: [ 511.465193][ T38] #0: ffffffff8eb7b6d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 511.465245][ T38] #1: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.465291][ T38] 1 lock held by syz-executor/14034: [ 511.465301][ T38] #0: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.465347][ T38] 1 lock held by syz-executor/14038: [ 511.465357][ T38] #0: ffffffff8d3afdb0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 511.465403][ T38] 1 lock held by syz-executor/14041: [ 511.465414][ T38] #0: ffffffff8e667db8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 511.465464][ T38] 2 locks held by syz-executor/14052: [ 511.465474][ T38] #0: ffffffff8eb60558 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 511.465526][ T38] #1: ffffffff8e667db8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 511.465604][ T38] 1 lock held by syz-executor/14070: [ 511.465614][ T38] #0: ffffffff8e667db8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 511.465659][ T38] 1 lock held by syz-executor/14074: [ 511.465670][ T38] #0: ffffffff8e667db8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 511.465713][ T38] 1 lock held by syz-executor/14082: [ 511.465724][ T38] #0: ffffffff8e667db8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 511.465776][ T38] [ 511.465781][ T38] ============================================= [ 511.465781][ T38] [ 511.465790][ T38] NMI backtrace for cpu 1 [ 511.465808][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 511.465829][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.465839][ T38] Call Trace: [ 511.465847][ T38] [ 511.465855][ T38] dump_stack_lvl+0x189/0x250 [ 511.465884][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.465911][ T38] ? __pfx__printk+0x10/0x10 [ 511.465944][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 511.465968][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 511.465990][ T38] ? __pfx__printk+0x10/0x10 [ 511.466015][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 511.466040][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 511.466063][ T38] watchdog+0xf60/0xfa0 [ 511.466095][ T38] ? watchdog+0x1e2/0xfa0 [ 511.466126][ T38] kthread+0x711/0x8a0 [ 511.466147][ T38] ? __pfx_watchdog+0x10/0x10 [ 511.466172][ T38] ? __pfx_kthread+0x10/0x10 [ 511.466187][ T38] ? rt_spin_unlock+0x150/0x200 [ 511.466210][ T38] ? rt_spin_unlock+0x161/0x200 [ 511.466227][ T38] ? __pfx_kthread+0x10/0x10 [ 511.466246][ T38] ret_from_fork+0x439/0x7d0 [ 511.466272][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 511.466302][ T38] ? __switch_to_asm+0x39/0x70 [ 511.466319][ T38] ? __switch_to_asm+0x33/0x70 [ 511.466335][ T38] ? __pfx_kthread+0x10/0x10 [ 511.466355][ T38] ret_from_fork_asm+0x1a/0x30 [ 511.466389][ T38] [ 511.466395][ T38] Sending NMI from CPU 1 to CPUs 0: [ 511.466421][ C0] NMI backtrace for cpu 0 [ 511.466435][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 511.466455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.466466][ C0] RIP: 0010:__kernel_text_address+0x1c/0x40 [ 511.466488][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 43 00 00 00 85 c0 0f 95 c0 48 81 fb 00 10 05 90 0f 93 c1 <48> 81 fb 70 37 1b 90 0f 92 c2 20 ca 08 c2 0f b6 c2 5b e9 3d 9f 2e [ 511.466504][ C0] RSP: 0018:ffffc900001966f8 EFLAGS: 00000283 [ 511.466520][ C0] RAX: 0000000000000001 RBX: ffffffff88f7d48c RCX: 40724bc4d9ebb000 [ 511.466533][ C0] RDX: 0000000000000003 RSI: ffffffff8cd6fc50 RDI: ffffffff88f7d48c [ 511.466546][ C0] RBP: ffffc900001967b0 R08: ffffc90000196b70 R09: 0000000000000000 [ 511.466559][ C0] R10: ffffc90000196778 R11: fffff52000032cf1 R12: ffff88801b2f5a00 [ 511.466572][ C0] R13: 00000000ffffffff R14: dffffc0000000000 R15: 1ffff92000032cee [ 511.466587][ C0] FS: 0000000000000000(0000) GS:ffff888127020000(0000) knlGS:0000000000000000 [ 511.466602][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.466615][ C0] CR2: 00007f0b0fb5171b CR3: 000000000d1a6000 CR4: 00000000003526f0 [ 511.466631][ C0] Call Trace: [ 511.466637][ C0] [ 511.466644][ C0] unwind_get_return_address+0x4d/0x90 [ 511.466669][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 511.466691][ C0] arch_stack_walk+0xfc/0x150 [ 511.466718][ C0] ? synproxy_send_client_synack+0x16c/0xe20 [ 511.466745][ C0] stack_trace_save+0x9c/0xe0 [ 511.466764][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 511.466785][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 511.466808][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.466831][ C0] kasan_save_track+0x3e/0x80 [ 511.466852][ C0] ? kasan_save_track+0x3e/0x80 [ 511.466871][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 511.466892][ C0] ? kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 511.466914][ C0] ? __alloc_skb+0x112/0x2d0 [ 511.466960][ C0] ? __slab_alloc+0xc6/0x1f0 [ 511.466977][ C0] __kasan_slab_alloc+0x6c/0x80 [ 511.467000][ C0] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 511.467027][ C0] ? __alloc_skb+0x112/0x2d0 [ 511.467050][ C0] __alloc_skb+0x112/0x2d0 [ 511.467073][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 511.467103][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 511.467126][ C0] ? nft_xfrm_state_get_key+0x20/0x570 [ 511.467143][ C0] ? synproxy_pernet+0x45/0x270 [ 511.467163][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 511.467183][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 511.467201][ C0] ? nf_ip_checksum+0x13c/0x510 [ 511.467220][ C0] nft_synproxy_do_eval+0x345/0x570 [ 511.467240][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 511.467257][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 511.467282][ C0] nft_do_chain+0x40c/0x1920 [ 511.467316][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 511.467357][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 511.467380][ C0] nft_do_chain_inet+0x25d/0x340 [ 511.467396][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 511.467419][ C0] ? NF_HOOK+0x9a/0x3a0 [ 511.467441][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 511.467458][ C0] nf_hook_slow+0xc5/0x220 [ 511.467482][ C0] NF_HOOK+0x206/0x3a0 [ 511.467503][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 511.467525][ C0] ? NF_HOOK+0x9a/0x3a0 [ 511.467545][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 511.467564][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 511.467587][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 511.467610][ C0] ? skb_dst+0x4f/0xd0 [ 511.467631][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 511.467654][ C0] NF_HOOK+0x309/0x3a0 [ 511.467675][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.467696][ C0] ? NF_HOOK+0x9a/0x3a0 [ 511.467716][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 511.467737][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 511.467764][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 511.467784][ C0] __netif_receive_skb+0x143/0x380 [ 511.467806][ C0] ? process_backlog+0x27b/0x900 [ 511.467825][ C0] process_backlog+0x31e/0x900 [ 511.467850][ C0] __napi_poll+0xb3/0x540 [ 511.467871][ C0] net_rx_action+0x5f7/0xda0 [ 511.467898][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 511.467920][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 511.467945][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 511.467962][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 511.467988][ C0] handle_softirqs+0x22f/0x710 [ 511.468020][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 511.468047][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 511.468071][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 511.468099][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 511.468115][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 511.468131][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 511.468151][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 511.468173][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 511.468200][ C0] ? __lock_acquire+0xab9/0xd20 [ 511.468224][ C0] ? __pfx___schedule+0x10/0x10 [ 511.468253][ C0] ? schedule+0x91/0x360 [ 511.468275][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 511.468297][ C0] smpboot_thread_fn+0x542/0xa60 [ 511.468321][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 511.468348][ C0] kthread+0x711/0x8a0 [ 511.468365][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 511.468388][ C0] ? __pfx_kthread+0x10/0x10 [ 511.468402][ C0] ? rt_spin_unlock+0x150/0x200 [ 511.468422][ C0] ? rt_spin_unlock+0x161/0x200 [ 511.468438][ C0] ? __pfx_kthread+0x10/0x10 [ 511.468455][ C0] ret_from_fork+0x439/0x7d0 [ 511.468477][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 511.468502][ C0] ? __switch_to_asm+0x39/0x70 [ 511.468517][ C0] ? __switch_to_asm+0x33/0x70 [ 511.468533][ C0] ? __pfx_kthread+0x10/0x10 [ 511.468550][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.468575][ C0] [ 511.469427][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 511.469442][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 511.469463][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.469475][ T38] Call Trace: [ 511.469482][ T38] [ 511.469490][ T38] dump_stack_lvl+0x99/0x250 [ 511.469517][ T38] ? __asan_memcpy+0x40/0x70 [ 511.469539][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.469565][ T38] ? __pfx__printk+0x10/0x10 [ 511.469599][ T38] vpanic+0x237/0x6d0 [ 511.469616][ T38] ? __pfx_vpanic+0x10/0x10 [ 511.469644][ T38] panic+0xb9/0xc0 [ 511.469661][ T38] ? __pfx_panic+0x10/0x10 [ 511.469681][ T38] ? irq_work_queue+0xc3/0x140 [ 511.469711][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 511.469733][ T38] watchdog+0xf9f/0xfa0 [ 511.469771][ T38] ? watchdog+0x1e2/0xfa0 [ 511.469801][ T38] kthread+0x711/0x8a0 [ 511.469824][ T38] ? __pfx_watchdog+0x10/0x10 [ 511.469847][ T38] ? __pfx_kthread+0x10/0x10 [ 511.469863][ T38] ? rt_spin_unlock+0x150/0x200 [ 511.469886][ T38] ? rt_spin_unlock+0x161/0x200 [ 511.469903][ T38] ? __pfx_kthread+0x10/0x10 [ 511.469923][ T38] ret_from_fork+0x439/0x7d0 [ 511.469949][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 511.469979][ T38] ? __switch_to_asm+0x39/0x70 [ 511.469995][ T38] ? __switch_to_asm+0x33/0x70 [ 511.470012][ T38] ? __pfx_kthread+0x10/0x10 [ 511.470030][ T38] ret_from_fork_asm+0x1a/0x30 [ 511.470065][ T38] [ 511.470363][ T38] Kernel Offset: disabled