last executing test programs: 1m23.273628056s ago: executing program 2 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x88, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "0e3bf6a8a12339ec2ca8af040c2e78f034e9e67f15f1fe7439f005722fd465b9dd9f6fbcb3abcffe176658adba99e4aaf5da58f1e7488b495b2dfb40e03820c483"}]}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m22.938820393s ago: executing program 2 (id=593): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = msgget$private(0x0, 0x3a9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x2, 0xee00, r4, r3, 0xee01, 0x0, 0x80}, 0x0, 0x0, 0x80, 0x0, 0x10, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, r2}) 1m22.761348259s ago: executing program 2 (id=597): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000008002700020000090800b70099"], 0x34}}, 0x0) 1m22.368885288s ago: executing program 2 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x4) 1m22.148201592s ago: executing program 2 (id=604): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000ef10f00"}}}]}, 0x48}}, 0x0) 1m20.833897588s ago: executing program 2 (id=616): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="a96a42", 0x3}], 0x1}}], 0x1, 0x4044805) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 1m20.485244283s ago: executing program 32 (id=616): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="a96a42", 0x3}], 0x1}}], 0x1, 0x4044805) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 22.103346445s ago: executing program 3 (id=1047): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28, 0x7ffffff7}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f23d50f07f283f9c7410f06769cc9759971716266baf80cb89c1bdd82ef66bafc0cb0f1ee9a110f01380f20e035200000000f01c48f7178d1812e4b80001740ab46be46bec7f08a", 0x73}], 0x1, 0x6c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 21.815595093s ago: executing program 4 (id=1050): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f0000000140)='`', 0x1, 0x2401d011, 0x0, 0x0) 21.385732258s ago: executing program 4 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 20.775577614s ago: executing program 4 (id=1056): iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 20.266599449s ago: executing program 3 (id=1060): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 20.26603747s ago: executing program 0 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000b6000040"]) 20.19793833s ago: executing program 1 (id=1063): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x5, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.042226827s ago: executing program 5 (id=1064): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) 19.94360373s ago: executing program 0 (id=1065): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000080)='%pi6 \x00'}, 0x29) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.758103529s ago: executing program 0 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 19.728068185s ago: executing program 5 (id=1067): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1}, 0x10040) 19.538967794s ago: executing program 0 (id=1068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_io_uring_setup(0x2a3d, &(0x7f0000000100)={0x0, 0x2005325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 19.519865188s ago: executing program 4 (id=1069): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x4003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4400c051}, 0xc0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 19.431479788s ago: executing program 5 (id=1070): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x8, 0x28, 0xe4d, 0x80, 0x7ff, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x3, 0x4, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 19.378534381s ago: executing program 3 (id=1071): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x2117, 0x0, 0x2, 0x2a, "737b27e90e2947801cf3a246ada40a9fd86000"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xa) 19.368106079s ago: executing program 0 (id=1072): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYBLOB="fc"], 0x120}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 19.238312684s ago: executing program 3 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.203969884s ago: executing program 1 (id=1074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) 19.106037425s ago: executing program 0 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 18.125551427s ago: executing program 1 (id=1076): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20) 17.701619642s ago: executing program 1 (id=1077): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @empty, 0x8}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f00000004c0)="580000001400add427323b472545b456021174d71347fe3c018b0e220d000000925aa80020007b00190012827f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 17.673875452s ago: executing program 4 (id=1078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x4, 0xffffffff, 0x3}) 17.349873873s ago: executing program 1 (id=1079): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 17.207111333s ago: executing program 3 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 16.889161538s ago: executing program 1 (id=1081): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() syz_clone(0x4800080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 16.439585119s ago: executing program 5 (id=1082): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x1}, 0x8) 16.186689798s ago: executing program 3 (id=1083): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x24}], 0x1}, 0x0) 16.044113607s ago: executing program 5 (id=1084): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[], 0xbf) 15.785275393s ago: executing program 5 (id=1085): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000340)='.\x00', 0x0, 0x131) lseek(r2, 0x0, 0x2) 15.532192521s ago: executing program 4 (id=1086): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.661514202s ago: executing program 33 (id=1075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.72148099s ago: executing program 34 (id=1081): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() syz_clone(0x4800080, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 645.120119ms ago: executing program 35 (id=1083): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x24}], 0x1}, 0x0) 181.826001ms ago: executing program 36 (id=1085): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000340)='.\x00', 0x0, 0x131) lseek(r2, 0x0, 0x2) 0s ago: executing program 37 (id=1086): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[], 0x168}, 0x0, 0x20000000, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ce with an up link [ 105.675531][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.698003][ T59] Bluetooth: hci1: command tx timeout [ 105.763047][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.767468][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.786738][ T59] Bluetooth: hci2: command tx timeout [ 105.786753][ T5854] Bluetooth: hci0: command tx timeout [ 105.792390][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.802990][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.858007][ T59] Bluetooth: hci4: command tx timeout [ 105.858045][ T59] Bluetooth: hci3: command tx timeout [ 106.420018][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.420032][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.420052][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.754976][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.754994][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.755023][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.757182][ T5846] team0: Port device team_slave_0 added [ 106.761140][ T5844] team0: Port device team_slave_0 added [ 106.764596][ T5860] team0: Port device team_slave_0 added [ 106.780104][ T5847] team0: Port device team_slave_0 added [ 106.822679][ T5844] team0: Port device team_slave_1 added [ 106.826459][ T5860] team0: Port device team_slave_1 added [ 106.838266][ T5847] team0: Port device team_slave_1 added [ 106.992484][ T5846] team0: Port device team_slave_1 added [ 107.402896][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.402913][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.402940][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.404815][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.404830][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.404858][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.641518][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.641536][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.641564][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.741199][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.741218][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.741247][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.743019][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.743033][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.743061][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.744306][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.744317][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.744335][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.745667][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.745681][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.745709][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.771482][ T5845] hsr_slave_0: entered promiscuous mode [ 107.779414][ T5854] Bluetooth: hci1: command tx timeout [ 107.780256][ T5845] hsr_slave_1: entered promiscuous mode [ 107.846187][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.846208][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.846242][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.858042][ T5854] Bluetooth: hci2: command tx timeout [ 107.858074][ T5854] Bluetooth: hci0: command tx timeout [ 107.939431][ T59] Bluetooth: hci4: command tx timeout [ 107.939470][ T59] Bluetooth: hci3: command tx timeout [ 108.619274][ T5844] hsr_slave_0: entered promiscuous mode [ 108.620656][ T5844] hsr_slave_1: entered promiscuous mode [ 108.621726][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 108.621853][ T5844] Cannot create hsr debugfs directory [ 108.816024][ T5860] hsr_slave_0: entered promiscuous mode [ 108.817015][ T5860] hsr_slave_1: entered promiscuous mode [ 108.821211][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 108.821249][ T5860] Cannot create hsr debugfs directory [ 108.848839][ T5847] hsr_slave_0: entered promiscuous mode [ 108.850286][ T5847] hsr_slave_1: entered promiscuous mode [ 108.851245][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 108.851270][ T5847] Cannot create hsr debugfs directory [ 108.862874][ T5846] hsr_slave_0: entered promiscuous mode [ 108.864370][ T5846] hsr_slave_1: entered promiscuous mode [ 108.865375][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 108.865404][ T5846] Cannot create hsr debugfs directory [ 109.859403][ T5854] Bluetooth: hci1: command tx timeout [ 109.938550][ T5854] Bluetooth: hci0: command tx timeout [ 109.938585][ T5854] Bluetooth: hci2: command tx timeout [ 110.018003][ T59] Bluetooth: hci3: command tx timeout [ 110.018040][ T59] Bluetooth: hci4: command tx timeout [ 110.580262][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.649335][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.673242][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.726698][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.853883][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.895675][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.945039][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.004400][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.173243][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.229536][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.264448][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.330500][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.523934][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.562378][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.616291][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.685134][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.880644][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.935980][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.981753][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.006753][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.017314][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.191520][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.203941][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.251780][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.252432][ T3878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.307223][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.307353][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.383132][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.448854][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.449014][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.485360][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.516671][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.516798][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.630486][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.654270][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.703316][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.703516][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.757150][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.757980][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.863554][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.943702][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.956280][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.956444][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.021268][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.021654][ T3201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.173942][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.260405][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.261258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.321864][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.322652][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.506931][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.669697][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.912789][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.915180][ T5845] veth0_vlan: entered promiscuous mode [ 114.011258][ T5845] veth1_vlan: entered promiscuous mode [ 114.264073][ T5845] veth0_macvtap: entered promiscuous mode [ 114.325077][ T5845] veth1_macvtap: entered promiscuous mode [ 114.327274][ T5860] veth0_vlan: entered promiscuous mode [ 114.416582][ T5860] veth1_vlan: entered promiscuous mode [ 114.447141][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.474168][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.535262][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.570024][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.603659][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.632881][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.653345][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.680791][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.714140][ T5844] veth0_vlan: entered promiscuous mode [ 114.789620][ T5860] veth0_macvtap: entered promiscuous mode [ 114.882739][ T5844] veth1_vlan: entered promiscuous mode [ 114.903968][ T5860] veth1_macvtap: entered promiscuous mode [ 115.045225][ T5846] veth0_vlan: entered promiscuous mode [ 115.155134][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.208615][ T5846] veth1_vlan: entered promiscuous mode [ 115.228928][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.228956][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.251460][ T5847] veth0_vlan: entered promiscuous mode [ 115.265634][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.375026][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.379048][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.379070][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.400258][ T5847] veth1_vlan: entered promiscuous mode [ 115.409045][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.412282][ T5844] veth0_macvtap: entered promiscuous mode [ 115.437649][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.469254][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.507591][ T5844] veth1_macvtap: entered promiscuous mode [ 115.801164][ T5846] veth0_macvtap: entered promiscuous mode [ 115.886526][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.912870][ T5846] veth1_macvtap: entered promiscuous mode [ 116.005075][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.024440][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.024463][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.059885][ T5847] veth0_macvtap: entered promiscuous mode [ 116.146050][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.162019][ T5847] veth1_macvtap: entered promiscuous mode [ 116.186282][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.197593][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 116.217324][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.244538][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.247312][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.251460][ T3878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.251484][ T3878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.389229][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.510802][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.560435][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.634782][ T3878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.685673][ T3878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.734243][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.734340][ T3878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.894641][ T3201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.897143][ T3201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.897162][ T3201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.913272][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.926358][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.038989][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.204526][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 117.379041][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.379064][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.539116][ T5977] sp0: Synchronizing with TNC [ 117.565826][ T5978] sp0: Found TNC [ 117.588522][ T5973] syz.1.11 (5973) used greatest stack depth: 18568 bytes left [ 117.739168][ T3201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.739193][ T3201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.157319][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.157342][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.082888][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.082910][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.272697][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.272721][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.082866][ T6009] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 120.412105][ T6019] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.755237][ T6041] ipvlan2: entered promiscuous mode [ 121.757026][ T6041] ipvlan2: entered allmulticast mode [ 121.771803][ T6041] macvlan1: entered allmulticast mode [ 121.771826][ T6041] veth1_vlan: entered allmulticast mode [ 122.109212][ T6047] Zero length message leads to an empty skb [ 122.218119][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 122.218782][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 122.219007][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 122.553249][ T6054] libceph: resolve '400' (ret=-3): failed [ 123.362189][ T6072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.068572][ T6093] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.57'. [ 124.068806][ T6093] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.278135][ T5915] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 124.462913][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.462949][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.462993][ T5915] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 124.463026][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.605033][ T5915] usb 3-1: config 0 descriptor?? [ 124.702557][ T6103] process 'syz.0.62' launched './file1' with NULL argv: empty string added [ 125.063234][ T5923] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.101080][ T5915] uclogic 0003:2179:0053.0001: interface is invalid, ignoring [ 125.221751][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.221796][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.225169][ T5923] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 125.225199][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.225220][ T5923] usb 2-1: Product: syz [ 125.225235][ T5923] usb 2-1: Manufacturer: syz [ 125.225252][ T5923] usb 2-1: SerialNumber: syz [ 125.312369][ T5923] usb 2-1: config 0 descriptor?? [ 125.329048][ T5928] usb 3-1: USB disconnect, device number 2 [ 125.367083][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 125.367113][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.367446][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 125.531710][ T5923] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 125.690781][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.701980][ T5923] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 125.702087][ T5923] usb 2-1: media controller created [ 125.877858][ T44] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 125.882582][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.151001][ T5923] DVB: Unable to find symbol tda10046_attach() [ 126.151035][ T5923] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 126.151058][ T5923] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 126.159184][ T991] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.254052][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 126.308628][ T991] usb 5-1: Using ep0 maxpacket: 16 [ 126.349143][ T991] usb 5-1: config 0 has no interfaces? [ 126.350451][ T991] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 126.351112][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.365918][ T5923] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 126.426532][ T991] usb 5-1: config 0 descriptor?? [ 126.482658][ T5923] usb 2-1: USB disconnect, device number 2 [ 126.592191][ T6129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.658606][ T991] usb 5-1: USB disconnect, device number 2 [ 126.674074][ T6117] vhci_hcd: connection closed [ 126.683946][ T3878] vhci_hcd: stop threads [ 126.684969][ T3878] vhci_hcd: release socket [ 126.741573][ T3878] vhci_hcd: disconnect device [ 127.043209][ T6140] capability: warning: `syz.3.74' uses 32-bit capabilities (legacy support in use) [ 127.707176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.957917][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.110827][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.125256][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.125296][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.125365][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 128.125392][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.190981][ T5915] usb 3-1: config 0 descriptor?? [ 128.258200][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 128.261202][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 128.261237][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 128.261266][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.261325][ T44] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 128.261349][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.267313][ T44] usb 5-1: config 0 descriptor?? [ 128.279720][ T6159] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.364235][ T44] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 128.560797][ T44] usb 5-1: USB disconnect, device number 3 [ 128.812688][ T5915] lg-g15 0003:046D:C22E.0002: item fetching failed at offset 4/5 [ 128.813623][ T5915] lg-g15 0003:046D:C22E.0002: probe with driver lg-g15 failed with error -22 [ 128.993308][ T5923] usb 3-1: USB disconnect, device number 3 [ 130.990459][ T6218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.783695][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.003846][ T38] audit: type=1326 audit(1758446893.514:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6233 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02eb6ec29 code=0x7ffc0000 [ 132.003916][ T38] audit: type=1326 audit(1758446893.514:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6233 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fc02eb6ec29 code=0x7ffc0000 [ 132.003963][ T38] audit: type=1326 audit(1758446893.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6233 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02eb6ec29 code=0x7ffc0000 [ 132.004009][ T38] audit: type=1326 audit(1758446893.524:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6233 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fc02eb6ec29 code=0x7ffc0000 [ 132.004056][ T38] audit: type=1326 audit(1758446893.524:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6233 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02eb6ec29 code=0x7ffc0000 [ 132.708040][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.860935][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.860972][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 132.861001][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.883106][ T44] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 132.883143][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.883167][ T44] usb 1-1: Product: syz [ 132.883184][ T44] usb 1-1: Manufacturer: syz [ 132.883199][ T44] usb 1-1: SerialNumber: syz [ 132.928727][ T44] usb 1-1: config 0 descriptor?? [ 132.935037][ T6247] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.178304][ T44] powermate: unknown product id 0240 [ 133.178323][ T44] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 133.215104][ T44] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 133.650031][ C1] powermate: config urb returned -71 [ 133.650931][ C1] powermate: config urb returned -71 [ 133.651149][ C1] powermate: config urb returned -71 [ 133.681717][ T44] usb 1-1: USB disconnect, device number 2 [ 133.681807][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 134.552644][ T6282] netlink: 'syz.0.132': attribute type 10 has an invalid length. [ 134.650704][ T6282] bond0: (slave bond_slave_0): Releasing backup interface [ 135.395085][ T6296] sp0: Synchronizing with TNC [ 135.429243][ T6296] sp0: Found TNC [ 136.359515][ T6316] warning: `syz.4.148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.815423][ T38] audit: type=1326 audit(1758446898.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 136.815486][ T38] audit: type=1326 audit(1758446898.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 136.842558][ T38] audit: type=1326 audit(1758446898.354:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 136.842626][ T38] audit: type=1326 audit(1758446898.354:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 136.842678][ T38] audit: type=1326 audit(1758446898.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 137.107960][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 137.261405][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 137.261436][ T5915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 137.261461][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 137.261484][ T5915] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 137.261527][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 137.261550][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.283310][ T5915] usb 4-1: config 0 descriptor?? [ 137.529454][ T5915] hdpvr 4-1:0.0: firmware version 0x0 dated [ 137.529476][ T5915] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 138.012508][ T5915] hdpvr 4-1:0.0: Could not setup controls [ 138.013294][ T5915] hdpvr 4-1:0.0: registering videodev failed [ 138.108946][ T5915] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 138.128386][ T5915] usb 4-1: USB disconnect, device number 2 [ 138.431713][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.431826][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.596546][ T6362] Bluetooth: MGMT ver 1.23 [ 139.771179][ T6372] openvswitch: netlink: Multiple metadata blocks provided [ 140.046373][ T991] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.217925][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 140.239840][ T991] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 140.258515][ T991] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 140.258548][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.258569][ T991] usb 3-1: Product: syz [ 140.258584][ T991] usb 3-1: Manufacturer: syz [ 140.258609][ T991] usb 3-1: SerialNumber: syz [ 140.311242][ T991] usb 3-1: config 0 descriptor?? [ 140.344459][ T991] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 140.344526][ T991] usb 3-1: setting power ON [ 140.345090][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 140.375811][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.395700][ T991] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 140.395768][ T991] usb 3-1: media controller created [ 140.445326][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.486580][ T991] usb 3-1: selecting invalid altsetting 6 [ 140.486606][ T991] usb 3-1: digital interface selection failed (-22) [ 140.486636][ T991] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 140.510412][ T991] usb 3-1: setting power OFF [ 140.510686][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 140.510706][ T991] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 140.510720][ T991] (NULL device *): no alternate interface [ 140.702924][ T991] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 140.746677][ T991] usb 3-1: USB disconnect, device number 4 [ 142.706586][ T6424] netlink: 'syz.0.198': attribute type 4 has an invalid length. [ 144.954616][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 145.218372][ T6466] macvtap1: entered allmulticast mode [ 145.218395][ T6466] veth0_macvtap: entered allmulticast mode [ 149.077887][ T6529] mmap: syz.2.246 (6529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.934286][ T5854] Bluetooth: hci4: link tx timeout [ 150.934578][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.505819][ T6567] nbd0: detected capacity change from 0 to 127 [ 151.521771][ T5895] block nbd0: Send control failed (result -32) [ 151.521877][ T5895] block nbd0: Request send failed, requeueing [ 151.545328][ T59] block nbd0: Receive control failed (result -32) [ 151.581324][ T63] block nbd0: Dead connection, failed to find a fallback [ 151.581355][ T63] block nbd0: shutting down sockets [ 151.581446][ T63] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.581541][ T63] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.583158][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.583191][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.583527][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.583553][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.583732][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.583758][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.583927][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.583953][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.584148][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.584173][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.584364][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.584390][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.584563][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.584588][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.584694][ T5895] ldm_validate_partition_table(): Disk read failed. [ 151.584783][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.584808][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.585334][ T5895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.585362][ T5895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.586190][ T5895] Dev nbd0: unable to read RDB block 0 [ 151.587002][ T5895] nbd0: unable to read partition table [ 151.822552][ T5895] ldm_validate_partition_table(): Disk read failed. [ 151.824941][ T5895] Dev nbd0: unable to read RDB block 0 [ 151.841807][ T5895] nbd0: unable to read partition table [ 151.863811][ T5895] ldm_validate_partition_table(): Disk read failed. [ 151.866092][ T5895] Dev nbd0: unable to read RDB block 0 [ 151.881258][ T5895] nbd0: unable to read partition table [ 151.964070][ T6579] dummy0: entered allmulticast mode [ 152.320397][ T6586] sctp: Trying to GSO but underlying device doesn't support it. [ 152.977946][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 153.361238][ T6608] bond0: entered promiscuous mode [ 153.361261][ T6608] bond_slave_0: entered promiscuous mode [ 153.361532][ T6608] bond_slave_1: entered promiscuous mode [ 153.397470][ T6608] batadv0: entered promiscuous mode [ 153.413997][ T6608] hsr1: entered promiscuous mode [ 153.414793][ T6608] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.727958][ T991] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.877863][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 155.883573][ T991] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 155.883603][ T991] usb 5-1: config 0 has no interface number 0 [ 155.883662][ T991] usb 5-1: config 0 interface 12 has no altsetting 0 [ 155.886902][ T991] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.886931][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.886952][ T991] usb 5-1: Product: syz [ 155.886967][ T991] usb 5-1: Manufacturer: syz [ 155.886983][ T991] usb 5-1: SerialNumber: syz [ 155.962094][ T991] usb 5-1: config 0 descriptor?? [ 156.590607][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.741924][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.741955][ T44] usb 1-1: config 0 has no interface number 0 [ 156.769445][ T44] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 156.769540][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.769562][ T44] usb 1-1: Product: syz [ 156.769577][ T44] usb 1-1: Manufacturer: syz [ 156.769593][ T44] usb 1-1: SerialNumber: syz [ 156.830630][ T991] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 156.830706][ T991] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 156.830726][ T991] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 156.830858][ T991] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 156.897243][ T44] usb 1-1: config 0 descriptor?? [ 156.908049][ T991] usb 5-1: USB disconnect, device number 4 [ 157.178801][ T44] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 157.235594][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.236061][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 157.236116][ T44] usb 1-1: media controller created [ 157.290705][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.380577][ T44] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 157.506528][ T44] usb 1-1: USB disconnect, device number 3 [ 157.759960][ T6686] af_packet: tpacket_rcv: packet too big, clamped from 114 to 4294967272. macoff=96 [ 158.427865][ T5928] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.489026][ T10] Process accounting resumed [ 158.578217][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 158.581004][ T5928] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.581032][ T5928] usb 1-1: config 0 has no interface number 0 [ 158.581087][ T5928] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.581115][ T5928] usb 1-1: config 0 interface 85 has no altsetting 0 [ 158.587234][ T5928] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.587268][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.587289][ T5928] usb 1-1: Product: syz [ 158.587305][ T5928] usb 1-1: Manufacturer: syz [ 158.587320][ T5928] usb 1-1: SerialNumber: syz [ 158.665031][ T5928] usb 1-1: config 0 descriptor?? [ 158.667894][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.837956][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 158.843502][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.843548][ T5916] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 158.843573][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.865653][ T5916] usb 2-1: config 0 descriptor?? [ 158.947846][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.108056][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 159.141881][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.141910][ T10] usb 5-1: config 0 has no interface number 0 [ 159.142364][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.142393][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.172638][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 159.172676][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 159.172701][ T10] usb 5-1: Product: syz [ 159.172718][ T10] usb 5-1: SerialNumber: syz [ 159.242067][ T10] usb 5-1: config 0 descriptor?? [ 159.303776][ T10] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 159.324450][ T5928] appletouch 1-1:0.85: Geyser mode initialized. [ 159.334633][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10 [ 159.348795][ T5928] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9 [ 159.359925][ T5916] hid (null): nested delimiters [ 159.654189][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.658213][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.658453][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.658730][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.658988][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.659225][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.659460][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.660035][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.660277][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.660512][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.774823][ T5928] usb 1-1: USB disconnect, device number 4 [ 159.774850][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 159.916357][ T10] usb 5-1: USB disconnect, device number 5 [ 159.916454][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 159.956602][ T5916] usb 2-1: USB disconnect, device number 3 [ 160.044794][ T5928] appletouch 1-1:0.85: input: appletouch disconnected [ 160.145326][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 160.568018][ T5928] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.747632][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 160.756376][ T5928] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 160.756404][ T5928] usb 3-1: config 0 has no interface number 0 [ 160.756455][ T5928] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.756484][ T5928] usb 3-1: config 0 interface 85 has no altsetting 0 [ 160.794994][ T5928] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 160.795025][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.795047][ T5928] usb 3-1: Product: syz [ 160.795061][ T5928] usb 3-1: Manufacturer: syz [ 160.795076][ T5928] usb 3-1: SerialNumber: syz [ 160.845256][ T5928] usb 3-1: config 0 descriptor?? [ 161.459190][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 161.459215][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 161.633799][ T5928] appletouch 3-1:0.85: Geyser mode initialized. [ 161.658323][ T5928] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11 [ 161.661076][ C1] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 161.900533][ T5928] usb 3-1: USB disconnect, device number 5 [ 162.101799][ T5928] appletouch 3-1:0.85: input: appletouch disconnected [ 162.734110][ T6774] program syz.1.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.739895][ T6775] netlink: 'syz.0.353': attribute type 2 has an invalid length. [ 163.291631][ T6784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.362213][ T6787] sctp: [Deprecated]: syz.3.360 (pid 6787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.362213][ T6787] Use struct sctp_sack_info instead [ 164.558278][ T6825] macvlan0: entered promiscuous mode [ 164.601552][ T6825] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 164.601579][ T6825] netlink: 'syz.2.377': attribute type 2 has an invalid length. [ 166.258690][ T5923] kernel read not supported for file /dsp (pid: 5923 comm: kworker/1:4) [ 168.044125][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 168.410946][ T3878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.469888][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 168.469909][ T38] audit: type=1326 audit(1758446929.984:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.473345][ T38] audit: type=1326 audit(1758446929.994:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.480369][ T38] audit: type=1326 audit(1758446930.004:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.485816][ T38] audit: type=1326 audit(1758446930.004:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.521983][ T38] audit: type=1326 audit(1758446930.044:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.522049][ T38] audit: type=1326 audit(1758446930.044:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.522099][ T38] audit: type=1326 audit(1758446930.044:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.531849][ T38] audit: type=1326 audit(1758446930.054:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 168.531929][ T38] audit: type=1326 audit(1758446930.054:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.2.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdb98ec29 code=0x7ffc0000 [ 169.026695][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 169.076423][ T3878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.380458][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.390401][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.395256][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.397014][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.400237][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.515636][ T3878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.568771][ T6943] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 169.807988][ T3878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.890539][ T991] kernel read not supported for file /dsp1 (pid: 991 comm: kworker/1:2) [ 169.930243][ T6949] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 170.044031][ T6953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.251462][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.680275][ T6969] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.062878][ T3878] bridge_slave_1: left allmulticast mode [ 171.063082][ T3878] bridge_slave_1: left promiscuous mode [ 171.066619][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.173412][ T3878] bridge_slave_0: left allmulticast mode [ 171.173451][ T3878] bridge_slave_0: left promiscuous mode [ 171.173760][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.458685][ T5854] Bluetooth: hci0: command tx timeout [ 171.475131][ T6992] program syz.3.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.391025][ T57] wlan1: Trigger new scan to find an IBSS to join [ 173.547924][ T5854] Bluetooth: hci0: command tx timeout [ 173.717962][ T3878] bond0 (unregistering): left promiscuous mode [ 173.717988][ T3878] bond_slave_0: left promiscuous mode [ 173.718454][ T3878] bond_slave_1: left promiscuous mode [ 173.779524][ T3878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.838818][ T3878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.886232][ T3878] bond0 (unregistering): Released all slaves [ 173.940077][ T6986] netlink: 'syz.0.441': attribute type 18 has an invalid length. [ 174.677940][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 174.678075][ T991] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.837884][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 174.839744][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 174.842200][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 174.842230][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.842642][ T991] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 174.842671][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.858422][ T991] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.858456][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.858481][ T991] usb 1-1: Product: syz [ 174.858498][ T991] usb 1-1: Manufacturer: syz [ 174.858513][ T991] usb 1-1: SerialNumber: syz [ 174.881991][ T991] usb 1-1: config 0 descriptor?? [ 174.924100][ T991] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.924137][ T991] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 174.991667][ T5916] pvrusb2: Hardware description: Terratec Grabster AV400 [ 174.991694][ T5916] pvrusb2: ********** [ 174.991701][ T5916] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 174.991713][ T5916] pvrusb2: Important functionality might not be entirely working. [ 174.991721][ T5916] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 174.991733][ T5916] pvrusb2: ********** [ 175.171729][ T6937] chnl_net:caif_netlink_parms(): no params data found [ 175.227483][ T2368] pvrusb2: Invalid write control endpoint [ 175.327643][ T2368] pvrusb2: Invalid write control endpoint [ 175.327658][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.327666][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.353922][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.353942][ T2368] pvrusb2: Device being rendered inoperable [ 175.375277][ T2368] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 175.375356][ T2368] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 175.401641][ T2368] pvrusb2: Attached sub-driver cx25840 [ 175.401671][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.401682][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.443519][ T5916] usb 3-1: USB disconnect, device number 6 [ 175.579828][ T991] em28xx 1-1:0.0: chip ID is em2882/3 [ 175.617907][ T5854] Bluetooth: hci0: command tx timeout [ 175.793234][ T991] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 175.794606][ T991] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 175.794626][ T991] em28xx 1-1:0.0: No AC97 audio processor [ 175.833597][ T991] usb 1-1: USB disconnect, device number 5 [ 175.847047][ T991] em28xx 1-1:0.0: Disconnecting em28xx [ 175.879489][ T991] em28xx 1-1:0.0: Freeing device [ 176.148052][ T3878] batadv0: left promiscuous mode [ 176.338231][ T67] wlan1: Trigger new scan to find an IBSS to join [ 176.362657][ T7055] syz.1.472 uses obsolete (PF_INET,SOCK_PACKET) [ 176.420636][ T3878] hsr_slave_0: left promiscuous mode [ 176.489816][ T3878] hsr_slave_1: left promiscuous mode [ 176.491492][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.491659][ T3878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.573642][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.573677][ T3878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.752994][ T7065] program syz.1.475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.846113][ T3878] veth0_macvtap: left allmulticast mode [ 176.847213][ T3878] veth1_macvtap: left promiscuous mode [ 176.847390][ T3878] veth0_macvtap: left promiscuous mode [ 176.865677][ T3878] veth1_vlan: left promiscuous mode [ 176.866279][ T3878] veth0_vlan: left promiscuous mode [ 176.953703][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 177.149429][ T991] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 177.298358][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 177.308503][ T991] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 177.313030][ T991] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.313065][ T991] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.313091][ T991] usb 4-1: Product: syz [ 177.313109][ T991] usb 4-1: Manufacturer: syz [ 177.313126][ T991] usb 4-1: SerialNumber: syz [ 177.330863][ T991] usb 4-1: config 0 descriptor?? [ 177.335572][ T7067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.344184][ T991] hub 4-1:0.0: bad descriptor, ignoring hub [ 177.344233][ T991] hub 4-1:0.0: probe with driver hub failed with error -5 [ 177.668423][ T991] usb 4-1: USB disconnect, device number 3 [ 177.715165][ T5854] Bluetooth: hci0: command tx timeout [ 178.027842][ T991] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 178.187935][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 178.190737][ T991] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 178.195350][ T991] usb 4-1: string descriptor 0 read error: -22 [ 178.195509][ T991] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.195534][ T991] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.232821][ T991] usb 4-1: config 0 descriptor?? [ 178.234459][ T7067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 178.242453][ T991] hub 4-1:0.0: bad descriptor, ignoring hub [ 178.242499][ T991] hub 4-1:0.0: probe with driver hub failed with error -5 [ 178.551721][ T991] usb 4-1: USB disconnect, device number 4 [ 179.380202][ T1523] wlan1: Trigger new scan to find an IBSS to join [ 179.541337][ T7107] kvm: kvm [7106]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 180.157985][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.308385][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 180.313418][ T31] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 180.313511][ T31] usb 4-1: config 0 has no interface number 0 [ 180.316581][ T31] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 180.316612][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.316626][ T31] usb 4-1: Product: syz [ 180.316636][ T31] usb 4-1: Manufacturer: syz [ 180.316646][ T31] usb 4-1: SerialNumber: syz [ 180.334269][ T31] usb 4-1: config 0 descriptor?? [ 180.383173][ T31] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 180.401562][ T2979] wlan1: Creating new IBSS network, BSSID 9e:63:ef:10:1a:9a [ 180.413352][ T3878] team0 (unregistering): Port device team_slave_1 removed [ 180.632437][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 180.654255][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 180.715652][ T3878] team0 (unregistering): Port device team_slave_0 removed [ 181.024640][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 181.028694][ T5923] usb 4-1: USB disconnect, device number 5 [ 181.045157][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 181.051543][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 181.052352][ T5923] quatech2 4-1:0.51: device disconnected [ 182.429340][ T3878] dummy0 (unregistering): left allmulticast mode [ 183.735279][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.735590][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.752842][ T6937] bridge_slave_0: entered allmulticast mode [ 183.755873][ T6937] bridge_slave_0: entered promiscuous mode [ 183.792225][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.792470][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.792680][ T6937] bridge_slave_1: entered allmulticast mode [ 183.795796][ T6937] bridge_slave_1: entered promiscuous mode [ 184.094172][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.130657][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.561771][ T7143] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 184.601060][ T7143] batman_adv: batadv0: Adding interface: ip6gretap1 [ 184.601081][ T7143] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.601118][ T7143] batman_adv: batadv0: Interface activated: ip6gretap1 [ 184.652047][ T6937] team0: Port device team_slave_0 added [ 184.703155][ T6937] team0: Port device team_slave_1 added [ 185.081771][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.081788][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.081810][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.084191][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.084208][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.084236][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.610887][ T7176] program syz.2.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.643678][ T6937] hsr_slave_0: entered promiscuous mode [ 185.645090][ T6937] hsr_slave_1: entered promiscuous mode [ 185.645997][ T6937] debugfs: 'hsr0' already exists in 'hsr' [ 185.646022][ T6937] Cannot create hsr debugfs directory [ 186.673085][ T7201] program syz.2.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.130568][ T7210] ip6gretap1: entered allmulticast mode [ 188.392884][ T7242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 188.395811][ T7242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'. [ 188.684161][ T6937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.787989][ T6937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.872927][ T6937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.910755][ T6937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.357164][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.500727][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.572191][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.579721][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.675504][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.675663][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.497929][ T991] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.567364][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.674274][ T991] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 190.674307][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.710464][ T991] usb 1-1: config 0 descriptor?? [ 190.745525][ T991] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 190.775260][ T7290] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 190.786763][ T7290] macsec1: entered promiscuous mode [ 190.791976][ T7290] macsec1: entered allmulticast mode [ 190.792271][ T7290] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 191.122171][ T991] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 191.323481][ T991] gspca_cpia1: usb_control_msg 01, error -32 [ 191.323919][ T991] gspca_cpia1: usb_control_msg 01, error -71 [ 191.323936][ T991] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 191.332468][ T991] usb 1-1: USB disconnect, device number 6 [ 191.968394][ T6937] veth0_vlan: entered promiscuous mode [ 192.003436][ T6937] veth1_vlan: entered promiscuous mode [ 192.185729][ T6937] veth0_macvtap: entered promiscuous mode [ 192.216072][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 192.217595][ T6937] veth1_macvtap: entered promiscuous mode [ 192.307624][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.345947][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.368583][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.385165][ T3878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.390275][ T3878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.390549][ T3878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.561247][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 192.561606][ T7331] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 192.561644][ T7331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.620523][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.621335][ T7332] batadv_slave_0: entered promiscuous mode [ 192.991793][ T1523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.991816][ T1523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.114581][ T3878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.114615][ T3878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.944713][ T7373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.305122][ T3878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.398492][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 195.447819][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 195.468171][ T991] IPVS: starting estimator thread 0... [ 195.510726][ T7389] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 195.571308][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.588075][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.590518][ T7390] IPVS: using max 7 ests per chain, 16800 per kthread [ 195.592250][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.601821][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 195.601878][ T10] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.601904][ T10] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 195.601932][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.601969][ T10] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 195.601994][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.629428][ T7397] openvswitch: netlink: IPv4 tunnel dst address is zero [ 195.661493][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.662426][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.706553][ T7395] vxcan0: tx address claim with dest, not broadcast [ 195.717424][ T10] usb 1-1: config 0 descriptor?? [ 195.970337][ T3878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.166648][ T10] hid-alps 0003:044E:120C.0004: ignoring exceeding usage max [ 196.188568][ T10] hid-alps 0003:044E:120C.0004: unbalanced collection at end of report description [ 196.189461][ T10] hid-alps 0003:044E:120C.0004: parse failed [ 196.189573][ T10] hid-alps 0003:044E:120C.0004: probe with driver hid-alps failed with error -22 [ 196.379814][ T10] usb 1-1: USB disconnect, device number 7 [ 196.437256][ T3878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.708197][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 196.779176][ T3878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.868007][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 196.872625][ T31] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 196.872654][ T31] usb 2-1: config 0 has no interface number 0 [ 196.876241][ T31] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 196.876270][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.876291][ T31] usb 2-1: Product: syz [ 196.876306][ T31] usb 2-1: Manufacturer: syz [ 196.876321][ T31] usb 2-1: SerialNumber: syz [ 196.901465][ T31] usb 2-1: config 0 descriptor?? [ 196.970139][ T31] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 197.192368][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 197.249798][ T31] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 197.631969][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.632692][ T31] usb 2-1: USB disconnect, device number 4 [ 197.677901][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 197.697976][ T5854] Bluetooth: hci4: command tx timeout [ 197.743040][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.828050][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.828843][ T31] quatech2 2-1:0.51: device disconnected [ 197.837884][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 197.867203][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 197.867232][ T10] usb 1-1: config 0 has no interface number 0 [ 197.867284][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.867311][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.896727][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 197.896759][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 197.896781][ T10] usb 1-1: Product: syz [ 197.896794][ T10] usb 1-1: SerialNumber: syz [ 197.932945][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 197.944230][ T10] usb 1-1: config 0 descriptor?? [ 197.962096][ T10] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 197.980700][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input12 [ 198.025796][ T3878] bridge_slave_1: left allmulticast mode [ 198.029436][ T3878] bridge_slave_1: left promiscuous mode [ 198.035345][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.109198][ T3878] bridge_slave_0: left allmulticast mode [ 198.109229][ T3878] bridge_slave_0: left promiscuous mode [ 198.109482][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.174503][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 198.317000][ T991] IPVS: starting estimator thread 0... [ 198.391427][ C0] cm109_urb_ctl_callback: 961 callbacks suppressed [ 198.391457][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.391716][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.391966][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.392214][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.392462][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.392713][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.393202][ T991] usb 1-1: USB disconnect, device number 8 [ 198.393501][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.393526][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 198.398074][ T7451] IPVS: using max 8 ests per chain, 19200 per kthread [ 198.500295][ T991] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 198.712024][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 198.887902][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 198.895199][ T5928] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 198.895229][ T5928] usb 2-1: config 0 has no interface number 0 [ 198.943132][ T5928] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 198.943164][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.943184][ T5928] usb 2-1: Product: syz [ 198.943199][ T5928] usb 2-1: Manufacturer: syz [ 198.943215][ T5928] usb 2-1: SerialNumber: syz [ 198.982388][ T5928] usb 2-1: config 0 descriptor?? [ 199.178890][ T7462] netlink: 'syz.0.655': attribute type 11 has an invalid length. [ 199.189521][ T7464] trusted_key: syz.3.656 sent an empty control message without MSG_MORE. [ 199.221856][ T5928] radio-si470x 2-1:0.35: this is not a si470x device. [ 199.252461][ T5928] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 199.342328][ T7466] Bluetooth: MGMT ver 1.23 [ 199.342380][ T7466] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 199.525246][ T5928] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 199.674736][ T10] usb 2-1: USB disconnect, device number 5 [ 199.677222][ T10] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 199.777966][ T5854] Bluetooth: hci4: command tx timeout [ 199.864348][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.864430][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.758832][ T7492] input: syz0 as /devices/virtual/input/input13 [ 200.970446][ T3878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.053992][ T3878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.057208][ T7495] sctp: [Deprecated]: syz.1.670 (pid 7495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.057208][ T7495] Use struct sctp_sack_info instead [ 201.106773][ T3878] bond0 (unregistering): Released all slaves [ 201.387286][ T7500] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 201.387337][ T7500] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.797979][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.857867][ T5854] Bluetooth: hci4: command tx timeout [ 201.963459][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.963522][ T5915] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.963548][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.982663][ T5915] usb 4-1: config 0 descriptor?? [ 202.045789][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 202.647995][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 202.650520][ T5915] pwc: recv_control_msg error -71 req 02 val 2c00 [ 202.653998][ T5915] pwc: recv_control_msg error -71 req 04 val 1000 [ 202.654651][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 202.655169][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 202.655655][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 202.657096][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 202.667893][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 202.677853][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 202.678441][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 202.679151][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 202.679691][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 202.680303][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 202.688458][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 202.688979][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 202.771297][ T5915] pwc: Registered as video103. [ 202.775105][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 202.847959][ T5915] usb 4-1: USB disconnect, device number 6 [ 203.010133][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.010369][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.010595][ T7393] bridge_slave_0: entered allmulticast mode [ 203.043794][ T7393] bridge_slave_0: entered promiscuous mode [ 203.056488][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.066676][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.066941][ T7393] bridge_slave_1: entered allmulticast mode [ 203.110306][ T7393] bridge_slave_1: entered promiscuous mode [ 203.494815][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.494868][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 203.543099][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.810599][ T7393] team0: Port device team_slave_0 added [ 203.817282][ T7393] team0: Port device team_slave_1 added [ 203.941981][ T5854] Bluetooth: hci4: command tx timeout [ 204.093584][ T7548] capability: warning: `syz.3.694' uses deprecated v2 capabilities in a way that may be insecure [ 204.104161][ T38] audit: type=1400 audit(1758446965.624:25): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=7547 comm="syz.3.694" opid=7547 ocomm="syz.3.694" [ 204.133966][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.133984][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.134010][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.136584][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.136598][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.136626][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.248037][ T5915] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.400622][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.400658][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.400685][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 204.400708][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.400754][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.400779][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.430582][ T5915] usb 2-1: config 0 descriptor?? [ 204.508005][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.511767][ T10] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 204.511795][ T10] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 204.620065][ T7556] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.697'. [ 204.791037][ T7393] hsr_slave_0: entered promiscuous mode [ 204.797571][ T7393] hsr_slave_1: entered promiscuous mode [ 204.810770][ T7393] debugfs: 'hsr0' already exists in 'hsr' [ 204.810802][ T7393] Cannot create hsr debugfs directory [ 204.899609][ T5915] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 205.001662][ T5915] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 205.181478][ T6011] usb 2-1: USB disconnect, device number 6 [ 205.278346][ T5915] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.451305][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.451334][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.454948][ T5915] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.454980][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.455000][ T5915] usb 1-1: SerialNumber: syz [ 205.685440][ T7393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.723939][ T7393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.770614][ T5915] usb 1-1: 0:2 : does not exist [ 205.802528][ T7393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.861101][ T7393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.928378][ T5915] usb 1-1: USB disconnect, device number 9 [ 206.093107][ T7582] could not open pipe file descriptor [ 206.143264][ T7583] input: syz1 as /devices/virtual/input/input16 [ 206.251413][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.321556][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.360668][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.367976][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.402210][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.402379][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.827860][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.843605][ T10] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 206.843633][ T10] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 207.299072][ T7621] autofs: Bad value for 'fd' [ 207.397959][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.406377][ T7622] block nbd1: server does not support multiple connections per device. [ 207.436562][ T7622] block nbd1: shutting down sockets [ 207.961616][ T7638] bridge0: entered promiscuous mode [ 207.961931][ T7638] macvtap1: entered allmulticast mode [ 207.961947][ T7638] bridge0: entered allmulticast mode [ 208.014383][ T7638] batman_adv: batadv0: Adding interface: macvtap1 [ 208.014403][ T7638] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.014437][ T7638] batman_adv: batadv0: Interface activated: macvtap1 [ 208.201317][ T7393] veth0_vlan: entered promiscuous mode [ 208.260997][ T7393] veth1_vlan: entered promiscuous mode [ 208.503758][ T7393] veth0_macvtap: entered promiscuous mode [ 208.533006][ T7393] veth1_macvtap: entered promiscuous mode [ 208.614245][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.641359][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.677050][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.701041][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.705268][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.708609][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.218099][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.220837][ T10] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 209.220864][ T10] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 212.978261][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.980775][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 212.980803][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 215.458135][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 215.458539][ T10] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 215.458559][ T10] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 216.238937][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.238959][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.362620][ T7708] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 216.458942][ T7708] syz_tun: entered promiscuous mode [ 216.541399][ T7708] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 216.781497][ T3878] hsr_slave_0: left promiscuous mode [ 216.852748][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 216.866842][ T3878] hsr_slave_1: left promiscuous mode [ 216.873586][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.873620][ T3878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.929045][ T3878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.929080][ T3878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.125110][ T3878] veth1_macvtap: left promiscuous mode [ 217.125260][ T3878] veth0_macvtap: left promiscuous mode [ 217.125465][ T3878] veth1_vlan: left promiscuous mode [ 217.125716][ T3878] veth0_vlan: left promiscuous mode [ 217.447899][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.603762][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.603795][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.603816][ T31] usb 5-1: Product: syz [ 217.603831][ T31] usb 5-1: Manufacturer: syz [ 217.603847][ T31] usb 5-1: SerialNumber: syz [ 217.866144][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.703783][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 218.704019][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 218.706022][ T31] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.791239][ T31] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 218.841089][ T31] usb 5-1: USB disconnect, device number 6 [ 219.520598][ T38] audit: type=1326 audit(1758446981.044:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.520915][ T38] audit: type=1326 audit(1758446981.044:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.568452][ T38] audit: type=1326 audit(1758446981.094:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580254][ T38] audit: type=1326 audit(1758446981.094:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580322][ T38] audit: type=1326 audit(1758446981.094:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580373][ T38] audit: type=1326 audit(1758446981.094:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580422][ T38] audit: type=1326 audit(1758446981.094:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580472][ T38] audit: type=1326 audit(1758446981.094:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580524][ T38] audit: type=1326 audit(1758446981.094:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.580574][ T38] audit: type=1326 audit(1758446981.094:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7757 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef2d2ec29 code=0x7ffc0000 [ 219.836448][ T7763] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 219.886777][ T7766] netlink: 'syz.4.782': attribute type 83 has an invalid length. [ 220.498769][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.969785][ T3878] team0 (unregistering): Port device team_slave_1 removed [ 221.211093][ T3878] team0 (unregistering): Port device team_slave_0 removed [ 221.566880][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.007928][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 223.175787][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 223.182743][ T44] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 223.182781][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.196053][ T44] usb 4-1: config 0 descriptor?? [ 223.214812][ T44] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 224.161361][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'. [ 224.222687][ T44] usb 4-1: USB disconnect, device number 7 [ 224.861401][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.861423][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.235422][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 225.237914][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 225.265916][ T7828] gretap0: entered promiscuous mode [ 225.266107][ T7828] macsec2: entered promiscuous mode [ 225.266302][ T7828] macsec2: entered allmulticast mode [ 225.284477][ T7828] gretap0: entered allmulticast mode [ 225.384479][ T7828] gretap0: left allmulticast mode [ 225.384813][ T7828] gretap0: left promiscuous mode [ 225.409600][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 225.416980][ T44] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 225.417011][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.463150][ T44] usb 2-1: config 0 descriptor?? [ 225.505079][ T44] gspca_main: sq930x-2.14.0 probing 041e:403c [ 226.508030][ T44] gspca_sq930x: ucbus_write failed -71 [ 226.508129][ T44] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 226.524143][ T44] usb 2-1: USB disconnect, device number 7 [ 227.417913][ T5923] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.571377][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 227.573939][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.573971][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.574011][ T5923] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 227.574035][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.620852][ T5923] usb 1-1: config 0 descriptor?? [ 228.079960][ T5923] smartjoyplus 0003:0925:8866.0006: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 228.079998][ T5923] smartjoyplus 0003:0925:8866.0006: Force feedback for SmartJoy PLUS PS2/USB adapter [ 228.251847][ T5916] usb 1-1: USB disconnect, device number 10 [ 229.307816][ T5916] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 229.497967][ T7913] ALSA: mixer_oss: invalid OSS volume '' [ 229.528125][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 229.536740][ T5916] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 229.536810][ T5916] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 229.536840][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.536876][ T5916] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 229.536899][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.595291][ T5916] usb 5-1: config 0 descriptor?? [ 230.064782][ T5916] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x6 [ 230.092914][ T5916] gt683r_led 0003:1770:FF00.0007: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 230.316555][ T5916] usb 5-1: USB disconnect, device number 7 [ 230.349286][ T6025] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 230.349849][ T6025] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 230.352782][ T5850] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 230.404968][ T7925] syz.0.849 (7925) used greatest stack depth: 16760 bytes left [ 230.667852][ T5923] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 230.822605][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.822669][ T5923] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.822695][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.840554][ T5923] usb 4-1: config 0 descriptor?? [ 230.860515][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 231.285666][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.287383][ T5923] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.493523][ T5923] pwc: recv_control_msg error -71 req 04 val 1000 [ 231.494153][ T5923] pwc: recv_control_msg error -71 req 04 val 1300 [ 231.494740][ T5923] pwc: recv_control_msg error -71 req 04 val 1400 [ 231.496024][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.496518][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.497184][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.497835][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.498362][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.498997][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.504837][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.505475][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.507387][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.514772][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.538705][ T5923] pwc: Registered as video103. [ 231.559926][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 231.614205][ T5923] usb 4-1: USB disconnect, device number 8 [ 231.704828][ T7950] netlink: 3 bytes leftover after parsing attributes in process `syz.1.857'. [ 231.705624][ T7950] 0X: renamed from caif0 [ 231.780356][ T7950] 0X: entered allmulticast mode [ 231.780384][ T7950] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 234.501623][ T8046] netlink: 71 bytes leftover after parsing attributes in process `syz.3.884'. [ 234.607996][ T5850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.779289][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 234.785247][ T5850] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.785284][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 234.790860][ T5850] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 234.790897][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 234.790918][ T5850] usb 6-1: Product: syz [ 234.843750][ T5850] usb 6-1: config 0 descriptor?? [ 234.862392][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 235.005983][ T8056] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 235.323885][ T5850] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 235.323927][ T5850] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 235.323955][ T5850] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 235.323981][ T5850] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 235.324009][ T5850] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 235.376067][ T5850] waterforce 0003:1044:7A4D.0008: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0 [ 235.471585][ T5850] waterforce 0003:1044:7A4D.0008: fw version request failed with -38 [ 235.581350][ T5850] usb 6-1: USB disconnect, device number 2 [ 236.047897][ T5923] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.077754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 236.170064][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 236.200781][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.200818][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.200846][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.200869][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.200916][ T5923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.200940][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.256963][ T5923] usb 4-1: config 0 descriptor?? [ 236.322339][ T991] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.322416][ T991] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 236.322512][ T991] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 236.386497][ T991] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.386602][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.386624][ T991] usb 2-1: Product: syz [ 236.386639][ T991] usb 2-1: Manufacturer: syz [ 236.386654][ T991] usb 2-1: SerialNumber: syz [ 236.587865][ T8086] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.740056][ T8086] usb 6-1: Using ep0 maxpacket: 16 [ 236.758714][ T5923] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 236.763810][ T8086] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 236.764393][ T8086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.764416][ T8086] usb 6-1: Product: syz [ 236.764431][ T8086] usb 6-1: Manufacturer: syz [ 236.764446][ T8086] usb 6-1: SerialNumber: syz [ 236.855862][ T8086] usb 6-1: config 0 descriptor?? [ 236.895866][ T8086] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 236.933948][ T5923] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 236.963981][ T8086] usb 6-1: Detected FT232H [ 237.094995][ T8086] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 237.544036][ T991] cdc_ncm 2-1:1.0: bind() failure [ 237.648782][ T991] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 237.650571][ T8086] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.651976][ T991] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 237.669930][ T991] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 237.697001][ T991] usb 2-1: USB disconnect, device number 8 [ 237.772075][ T8086] usb 6-1: USB disconnect, device number 3 [ 238.023365][ T8086] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 238.025294][ T8086] ftdi_sio 6-1:0.0: device disconnected [ 238.956103][ T5923] usb 4-1: USB disconnect, device number 9 [ 239.126575][ T8129] input: syz1 as /devices/virtual/input/input18 [ 240.334617][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 240.334713][ T38] audit: type=1326 audit(1758447001.824:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 240.375036][ T38] audit: type=1326 audit(1758447001.824:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.375242][ T38] audit: type=1326 audit(1758447001.824:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.375432][ T38] audit: type=1326 audit(1758447001.824:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 240.375625][ T38] audit: type=1326 audit(1758447001.824:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.375819][ T38] audit: type=1326 audit(1758447001.824:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.376017][ T38] audit: type=1326 audit(1758447001.824:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 240.376223][ T38] audit: type=1326 audit(1758447001.824:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.376403][ T38] audit: type=1326 audit(1758447001.824:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.376837][ T38] audit: type=1326 audit(1758447001.824:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8145 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 240.746912][ T8163] loop8: detected capacity change from 0 to 8 [ 240.859203][ T8163] Dev loop8: unable to read RDB block 8 [ 240.859260][ T8163] loop8: unable to read partition table [ 240.859509][ T8163] loop8: partition table beyond EOD, truncated [ 240.859546][ T8163] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 242.097849][ T8086] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 242.188026][ T5823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 242.235266][ T8204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.247786][ T8086] usb 6-1: Using ep0 maxpacket: 16 [ 242.250459][ T8086] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.250492][ T8086] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.250515][ T8086] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.250545][ T8086] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 242.250565][ T8086] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.317607][ T8086] usb 6-1: config 0 descriptor?? [ 242.356361][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.356424][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 242.356533][ T5823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.356559][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.428857][ T5823] usb 2-1: config 0 descriptor?? [ 242.485362][ T5823] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 242.764927][ T8086] lenovo 0003:17EF:6009.000A: unknown main item tag 0x0 [ 242.764968][ T8086] lenovo 0003:17EF:6009.000A: unknown main item tag 0x0 [ 242.765089][ T8086] lenovo 0003:17EF:6009.000A: unknown main item tag 0x0 [ 242.765118][ T8086] lenovo 0003:17EF:6009.000A: unknown main item tag 0x0 [ 242.811397][ T8086] lenovo 0003:17EF:6009.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 242.964725][ T8086] usb 6-1: USB disconnect, device number 4 [ 243.037398][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.955'. [ 243.037434][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.955'. [ 243.557870][ T8086] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 243.672194][ T8232] sctp: [Deprecated]: syz.0.960 (pid 8232) Use of int in max_burst socket option deprecated. [ 243.672194][ T8232] Use struct sctp_assoc_value instead [ 243.707880][ T8086] usb 5-1: Using ep0 maxpacket: 16 [ 243.713733][ T8086] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 243.713763][ T8086] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 243.713784][ T8086] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 243.713817][ T8086] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 243.713837][ T8086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 243.713859][ T8086] usb 5-1: config 0 has no interface number 0 [ 243.713910][ T8086] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 243.714034][ T8086] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 243.714059][ T8086] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.714099][ T8086] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.714127][ T8086] usb 5-1: config 0 interface 125 has no altsetting 0 [ 243.714147][ T8086] usb 5-1: config 0 interface 125 has no altsetting 2 [ 243.717542][ T8086] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 243.717571][ T8086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.717592][ T8086] usb 5-1: Product: syz [ 243.717608][ T8086] usb 5-1: Manufacturer: syz [ 243.717623][ T8086] usb 5-1: SerialNumber: syz [ 243.871025][ T8086] usb 5-1: config 0 descriptor?? [ 243.887237][ T8086] usb 5-1: selecting invalid altsetting 2 [ 244.890311][ T8250] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004 [ 244.931304][ T991] usb 5-1: USB disconnect, device number 8 [ 245.043968][ T8243] binder: 8241:8243 ioctl c0306201 200000001a80 returned -14 [ 245.071783][ T5850] usb 2-1: USB disconnect, device number 9 [ 245.527918][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 245.695313][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.695348][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.695394][ T5850] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 245.695418][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.706871][ T5850] usb 2-1: config 0 descriptor?? [ 246.176325][ T5850] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 246.176369][ T5850] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 246.176399][ T5850] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 246.176425][ T5850] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 246.176452][ T5850] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0 [ 246.228983][ T5850] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 246.755600][ T5850] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 246.755771][ T5850] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 246.759236][ T5850] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -71 [ 246.790427][ T5850] usb 2-1: USB disconnect, device number 10 [ 246.924851][ T8285] batadv_slave_1: entered promiscuous mode [ 246.964271][ T8282] batadv_slave_1: left promiscuous mode [ 248.552811][ T8341] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 248.605099][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'. [ 248.814364][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.816636][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.864819][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.865012][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.872504][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.872702][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.911830][ T8341] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 248.936535][ T8345] bridge_slave_1: left allmulticast mode [ 248.936571][ T8345] bridge_slave_1: left promiscuous mode [ 248.936835][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.030413][ T8345] bridge_slave_0: left allmulticast mode [ 249.030448][ T8345] bridge_slave_0: left promiscuous mode [ 249.030745][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.248104][ T8354] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.1013'. [ 249.428974][ T8345] bond0: (slave bridge0): Releasing backup interface [ 249.734630][ T8346] syz_tun: entered allmulticast mode [ 249.736364][ T8346] syz_tun: left allmulticast mode [ 249.771854][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.476204][ T38] kauditd_printk_skb: 86 callbacks suppressed [ 250.476224][ T38] audit: type=1326 audit(1758447011.994:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 250.476793][ T38] audit: type=1326 audit(1758447011.994:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 250.477345][ T38] audit: type=1326 audit(1758447011.994:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 250.478183][ T38] audit: type=1326 audit(1758447012.004:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 250.478739][ T38] audit: type=1326 audit(1758447012.004:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 250.518795][ T38] audit: type=1326 audit(1758447012.014:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 250.519551][ T38] audit: type=1326 audit(1758447012.044:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 250.520048][ T38] audit: type=1326 audit(1758447012.044:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 250.520762][ T38] audit: type=1326 audit(1758447012.044:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d09eec29 code=0x7ffc0000 [ 250.530548][ T38] audit: type=1326 audit(1758447012.044:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8391 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1d098ae09 code=0x7ffc0000 [ 251.104913][ T5850] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 251.133554][ T8399] syzkaller1: entered promiscuous mode [ 251.136910][ T8399] syzkaller1: entered allmulticast mode [ 251.247854][ T5850] usb 1-1: Using ep0 maxpacket: 32 [ 251.251493][ T5850] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 251.251523][ T5850] usb 1-1: config 0 has no interface number 0 [ 251.251574][ T5850] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.255073][ T5850] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 251.255116][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.255137][ T5850] usb 1-1: Product: syz [ 251.255152][ T5850] usb 1-1: Manufacturer: syz [ 251.255167][ T5850] usb 1-1: SerialNumber: syz [ 251.263490][ T5850] usb 1-1: config 0 descriptor?? [ 251.303381][ T5850] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 251.303428][ T5850] em28xx 1-1:0.132: Video interface 132 found: [ 251.679643][ T5850] em28xx 1-1:0.132: chip ID is em2884 [ 252.284876][ T5850] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 252.284913][ T5850] em28xx 1-1:0.132: board has no eeprom [ 252.345804][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.351227][ T5850] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 252.351270][ T5850] em28xx 1-1:0.132: analog set to bulk mode. [ 252.355664][ T5916] em28xx 1-1:0.132: Registering V4L2 extension [ 252.495251][ T5850] usb 1-1: USB disconnect, device number 11 [ 252.524875][ T5850] em28xx 1-1:0.132: Disconnecting em28xx [ 252.845388][ T5916] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 252.845415][ T5916] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 252.845429][ T5916] em28xx 1-1:0.132: No AC97 audio processor [ 252.891218][ T5916] usb 1-1: Decoder not found [ 252.891241][ T5916] em28xx 1-1:0.132: failed to create media graph [ 252.891303][ T5916] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 252.970964][ T5916] em28xx 1-1:0.132: Remote control support is not available for this card. [ 252.971652][ T5850] em28xx 1-1:0.132: Closing input extension [ 253.106269][ T5850] em28xx 1-1:0.132: Freeing device [ 253.567819][ T5916] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 253.717910][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 253.720502][ T5916] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 253.720565][ T5916] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.720593][ T5916] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.720616][ T5916] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 253.720644][ T5916] usb 4-1: config 7 interface 0 has no altsetting 0 [ 253.720681][ T5916] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 253.720705][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.241209][ T5916] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.000C/input/input19 [ 254.488757][ T5916] kye 0003:0458:5010.000C: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 254.531450][ T5916] usb 4-1: USB disconnect, device number 10 [ 254.671031][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 254.671061][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 254.796150][ T8474] loop7: detected capacity change from 0 to 7 [ 254.860904][ T8474] Dev loop7: unable to read RDB block 7 [ 254.860951][ T8474] loop7: unable to read partition table [ 254.864284][ T8474] loop7: partition table beyond EOD, truncated [ 254.864311][ T8474] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 256.128584][ T991] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 256.167887][ T5823] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.288069][ T991] usb 5-1: Using ep0 maxpacket: 8 [ 256.326935][ T991] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.327037][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 256.327066][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.330397][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.330512][ T5823] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 256.408092][ T5823] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.408125][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.408147][ T5823] usb 6-1: Product: syz [ 256.408162][ T5823] usb 6-1: Manufacturer: syz [ 256.408177][ T5823] usb 6-1: SerialNumber: syz [ 256.412398][ T991] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 256.412428][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.412449][ T991] usb 5-1: Product: syz [ 256.412464][ T991] usb 5-1: Manufacturer: syz [ 256.412479][ T991] usb 5-1: SerialNumber: syz [ 256.493272][ T991] usb 5-1: config 0 descriptor?? [ 256.531168][ T991] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 256.607604][ T5823] cdc_mbim 6-1:1.0: skipping garbage [ 256.804966][ T991] usb 5-1: USB disconnect, device number 9 [ 256.867367][ T8532] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 257.507307][ T8532] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 257.540084][ T5823] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 257.555411][ T5823] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 257.638097][ T5823] wwan wwan0: port wwan0mbim0 attached [ 257.827359][ T5823] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 9a:73:16:72:ef:fd [ 257.876439][ T5823] usb 6-1: USB disconnect, device number 5 [ 257.916251][ T5823] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 258.027889][ T5928] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 258.194073][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.194110][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 258.194137][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 258.194160][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.194208][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.194232][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.315221][ T5928] usb 5-1: config 0 descriptor?? [ 258.935740][ T5928] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 259.122457][ T5928] usb 5-1: USB disconnect, device number 10 [ 261.306114][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.306197][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.097694][ C0] sched: DL replenish lagged too much [ 272.953953][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.966888][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.978806][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.980100][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.982774][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.470119][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.498617][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.504539][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.505955][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.506851][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.057940][ T59] Bluetooth: hci5: command tx timeout [ 276.095734][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.128470][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.131795][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.133616][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.134529][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.582269][ T5854] Bluetooth: hci6: command tx timeout [ 276.834195][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.858144][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.860965][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.862203][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.863036][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 277.038923][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 277.070623][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 277.072122][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 277.073562][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 277.074523][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 277.138488][ T5854] Bluetooth: hci5: command tx timeout [ 278.258220][ T5854] Bluetooth: hci7: command tx timeout [ 278.658159][ T5854] Bluetooth: hci6: command tx timeout [ 278.978091][ T5854] Bluetooth: hci8: command tx timeout [ 279.218939][ T5854] Bluetooth: hci9: command tx timeout [ 279.219613][ T5854] Bluetooth: hci5: command tx timeout [ 280.348457][ T59] Bluetooth: hci7: command tx timeout [ 280.737967][ T59] Bluetooth: hci6: command tx timeout [ 281.058094][ T59] Bluetooth: hci8: command tx timeout [ 281.299731][ T59] Bluetooth: hci5: command tx timeout [ 281.299770][ T59] Bluetooth: hci9: command tx timeout [ 282.418301][ T5854] Bluetooth: hci7: command tx timeout [ 282.817973][ T5854] Bluetooth: hci6: command tx timeout [ 283.137967][ T5854] Bluetooth: hci8: command tx timeout [ 283.385763][ T5854] Bluetooth: hci9: command tx timeout [ 284.498094][ T5854] Bluetooth: hci7: command tx timeout [ 285.218048][ T5854] Bluetooth: hci8: command tx timeout [ 285.457965][ T5854] Bluetooth: hci9: command tx timeout [ 322.753351][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.753453][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.969647][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.020836][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.028277][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.051123][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.051962][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.940860][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.945279][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.946670][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.969807][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.970761][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.140219][ T5854] Bluetooth: hci0: command tx timeout [ 336.270981][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.300413][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.302468][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.304204][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.305209][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.057980][ T5854] Bluetooth: hci1: command tx timeout [ 337.125712][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.157390][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.166571][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.181628][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.182886][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.218806][ T5854] Bluetooth: hci0: command tx timeout [ 337.450883][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.485640][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.487177][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.503354][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.504196][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.418011][ T5854] Bluetooth: hci2: command tx timeout [ 339.138022][ T5854] Bluetooth: hci1: command tx timeout [ 339.298103][ T5854] Bluetooth: hci3: command tx timeout [ 339.298707][ T5854] Bluetooth: hci0: command tx timeout [ 339.618167][ T59] Bluetooth: hci4: command tx timeout [ 340.497929][ T59] Bluetooth: hci2: command tx timeout [ 341.218688][ T59] Bluetooth: hci1: command tx timeout [ 341.377968][ T5854] Bluetooth: hci3: command tx timeout [ 341.380247][ T59] Bluetooth: hci0: command tx timeout [ 341.697968][ T59] Bluetooth: hci4: command tx timeout [ 342.580918][ T59] Bluetooth: hci2: command tx timeout [ 343.558267][ T59] Bluetooth: hci1: command tx timeout [ 343.558306][ T59] Bluetooth: hci3: command tx timeout [ 343.778360][ T59] Bluetooth: hci4: command tx timeout [ 344.714804][ T59] Bluetooth: hci2: command tx timeout [ 345.698161][ T59] Bluetooth: hci3: command tx timeout [ 345.865796][ T59] Bluetooth: hci4: command tx timeout [ 384.212737][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.212821][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.551800][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.583041][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.586090][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.587483][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.611275][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 395.489873][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 395.499827][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 395.502761][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 395.508030][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 395.521692][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 395.703335][ T5854] Bluetooth: hci6: command tx timeout [ 396.464606][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 396.483480][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 396.509782][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 396.511525][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 396.512391][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.639784][ T5854] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 396.662546][ T5854] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 396.664061][ T5854] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 396.665314][ T5854] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 396.666143][ T5854] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 397.040105][ T5854] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 397.062255][ T5854] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 397.064322][ T5854] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 397.065891][ T5854] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 397.098238][ T5854] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 397.618000][ T5854] Bluetooth: hci7: command tx timeout [ 397.777859][ T5854] Bluetooth: hci6: command tx timeout [ 398.577939][ T5854] Bluetooth: hci8: command tx timeout [ 398.737959][ T5854] Bluetooth: hci9: command tx timeout [ 399.138083][ T5854] Bluetooth: hci10: command tx timeout [ 399.697910][ T5854] Bluetooth: hci7: command tx timeout [ 399.858035][ T5854] Bluetooth: hci6: command tx timeout [ 400.658005][ T5854] Bluetooth: hci8: command tx timeout [ 400.817970][ T5854] Bluetooth: hci9: command tx timeout [ 401.218079][ T5854] Bluetooth: hci10: command tx timeout [ 401.777918][ T5854] Bluetooth: hci7: command tx timeout [ 401.947879][ T5854] Bluetooth: hci6: command tx timeout [ 402.738254][ T5854] Bluetooth: hci8: command tx timeout [ 402.897988][ T5854] Bluetooth: hci9: command tx timeout [ 403.298228][ T5854] Bluetooth: hci10: command tx timeout [ 403.857893][ T5854] Bluetooth: hci7: command tx timeout [ 404.818139][ T5854] Bluetooth: hci8: command tx timeout [ 404.977985][ T5854] Bluetooth: hci9: command tx timeout [ 405.378042][ T5854] Bluetooth: hci10: command tx timeout [ 424.748511][ T8560] bond0: (slave syz_tun): Releasing backup interface [ 444.338338][ T39] INFO: task kworker/1:3:5823 blocked for more than 143 seconds. [ 444.338371][ T39] Not tainted syzkaller #0 [ 444.338383][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.338397][ T39] task:kworker/1:3 state:D stack:20584 pid:5823 tgid:5823 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 444.338460][ T39] Workqueue: usb_hub_wq hub_event [ 444.338500][ T39] Call Trace: [ 444.338508][ T39] [ 444.338524][ T39] __schedule+0x16f3/0x4c20 [ 444.338570][ T39] ? sched_clock+0x3f/0x60 [ 444.338598][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 444.338635][ T39] ? __pfx___schedule+0x10/0x10 [ 444.338695][ T39] rt_mutex_schedule+0x77/0xf0 [ 444.338718][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 444.338762][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 444.338795][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 444.338826][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 444.338855][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 444.338881][ T39] ? __lock_acquire+0xab9/0xd20 [ 444.338933][ T39] ? rcu_barrier+0x4c/0x570 [ 444.338972][ T39] ? rcu_barrier+0x4c/0x570 [ 444.338993][ T39] mutex_lock_nested+0x16a/0x1d0 [ 444.339018][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 444.339052][ T39] rcu_barrier+0x4c/0x570 [ 444.339088][ T39] netdev_run_todo+0x327/0xea0 [ 444.339113][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 444.339154][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 444.339174][ T39] ? unregister_netdevice_queue+0x33c/0x380 [ 444.339203][ T39] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 444.339225][ T39] ? rtnl_net_dev_lock+0x257/0x2f0 [ 444.339261][ T39] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 444.339296][ T39] unregister_netdev+0x52/0x60 [ 444.339321][ T39] usbnet_disconnect+0xcd/0x380 [ 444.339353][ T39] usb_unbind_interface+0x26b/0x910 [ 444.339394][ T39] ? __pfx_usb_unbind_interface+0x10/0x10 [ 444.339426][ T39] device_release_driver_internal+0x4d6/0x800 [ 444.339461][ T39] bus_remove_device+0x355/0x420 [ 444.339500][ T39] device_del+0x515/0x8e0 [ 444.339527][ T39] ? kfree+0x195/0x550 [ 444.339560][ T39] ? __pfx_device_del+0x10/0x10 [ 444.339581][ T39] ? kobject_put+0x446/0x480 [ 444.339616][ T39] usb_disable_device+0x3e9/0x8a0 [ 444.339655][ T39] usb_disconnect+0x316/0x940 [ 444.339690][ T39] hub_event+0x1cf5/0x4a20 [ 444.339748][ T39] ? do_raw_spin_lock+0x121/0x290 [ 444.339779][ T39] ? register_lock_class+0x51/0x320 [ 444.339828][ T39] ? __pfx_hub_event+0x10/0x10 [ 444.339856][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 444.339893][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.339934][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 444.339961][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 444.339993][ T39] process_scheduled_works+0xade/0x17b0 [ 444.340055][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.340104][ T39] worker_thread+0x8a0/0xda0 [ 444.340164][ T39] kthread+0x70e/0x8a0 [ 444.340201][ T39] ? __pfx_worker_thread+0x10/0x10 [ 444.340230][ T39] ? __pfx_kthread+0x10/0x10 [ 444.340270][ T39] ? __pfx_kthread+0x10/0x10 [ 444.340305][ T39] ret_from_fork+0x436/0x7d0 [ 444.340338][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 444.340375][ T39] ? __switch_to_asm+0x39/0x70 [ 444.340397][ T39] ? __switch_to_asm+0x33/0x70 [ 444.340417][ T39] ? __pfx_kthread+0x10/0x10 [ 444.340453][ T39] ret_from_fork_asm+0x1a/0x30 [ 444.340493][ T39] [ 444.340540][ T39] INFO: task kworker/u8:38:8494 blocked for more than 143 seconds. [ 444.340557][ T39] Not tainted syzkaller #0 [ 444.340568][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.340578][ T39] task:kworker/u8:38 state:D stack:26344 pid:8494 tgid:8494 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 444.340644][ T39] Workqueue: events_unbound bpf_map_free_deferred [ 444.340671][ T39] Call Trace: [ 444.340679][ T39] [ 444.340692][ T39] __schedule+0x16f3/0x4c20 [ 444.340751][ T39] ? __lock_acquire+0xab9/0xd20 [ 444.340781][ T39] ? __pfx___schedule+0x10/0x10 [ 444.340832][ T39] ? schedule+0x91/0x360 [ 444.340868][ T39] schedule+0x165/0x360 [ 444.340902][ T39] schedule_timeout+0x9a/0x270 [ 444.340940][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 444.340986][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.341021][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.341053][ T39] ? wait_for_completion+0x267/0x5d0 [ 444.341089][ T39] wait_for_completion+0x2bf/0x5d0 [ 444.341138][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 444.341180][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 444.341212][ T39] rcu_barrier+0x463/0x570 [ 444.341248][ T39] dev_map_free+0x11f/0x6a0 [ 444.341293][ T39] bpf_map_free_deferred+0x113/0x140 [ 444.341318][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 444.341348][ T39] process_scheduled_works+0xade/0x17b0 [ 444.341410][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.341459][ T39] worker_thread+0x8a0/0xda0 [ 444.341519][ T39] kthread+0x70e/0x8a0 [ 444.341558][ T39] ? __pfx_worker_thread+0x10/0x10 [ 444.341587][ T39] ? __pfx_kthread+0x10/0x10 [ 444.341627][ T39] ? __pfx_kthread+0x10/0x10 [ 444.341662][ T39] ret_from_fork+0x436/0x7d0 [ 444.341695][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 444.341733][ T39] ? __switch_to_asm+0x39/0x70 [ 444.341754][ T39] ? __switch_to_asm+0x33/0x70 [ 444.341774][ T39] ? __pfx_kthread+0x10/0x10 [ 444.341810][ T39] ret_from_fork_asm+0x1a/0x30 [ 444.341851][ T39] [ 444.341893][ T39] [ 444.341893][ T39] Showing all locks held in the system: [ 444.341905][ T39] 4 locks held by kworker/0:1/10: [ 444.341925][ T39] 7 locks held by ktimers/0/16: [ 444.341940][ T39] 1 lock held by khungtaskd/39: [ 444.341953][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 444.342021][ T39] 3 locks held by kworker/u8:8/1523: [ 444.342033][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.342091][ T39] #1: ffffc90005767bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.342149][ T39] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 444.342216][ T39] 2 locks held by getty/5599: [ 444.342228][ T39] #0: ffff88823bf780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.342293][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 444.342351][ T39] 6 locks held by kworker/1:3/5823: [ 444.342370][ T39] #0: ffff88801a780938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.342428][ T39] #1: ffffc90004c77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.342486][ T39] #2: ffff888027d71188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 444.342542][ T39] #3: ffff888039880188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 444.342592][ T39] #4: ffff88801ab95150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 444.342647][ T39] #5: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 444.342700][ T39] 1 lock held by syz-executor/5846: [ 444.342713][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 444.342768][ T39] 3 locks held by kworker/1:5/5928: [ 444.342781][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.342838][ T39] #1: ffffc90005317bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.342894][ T39] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 444.342959][ T39] 3 locks held by kworker/u8:38/8494: [ 444.342972][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.343026][ T39] #1: ffffc90005567bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.343082][ T39] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 444.343136][ T39] 3 locks held by kworker/u8:49/8516: [ 444.343149][ T39] #0: ffff88814d27d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 444.343207][ T39] #1: ffffc90004c1fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 444.343265][ T39] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 444.343319][ T39] 1 lock held by syz.0.1075/8550: [ 444.343332][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 444.343395][ T39] 1 lock held by syz.1.1081/8560: [ 444.343407][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 444.343458][ T39] 1 lock held by syz.5.1085/8564: [ 444.343470][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 444.343522][ T39] 1 lock held by syz.4.1086/8567: [ 444.343534][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 444.343584][ T39] 2 locks held by kworker/0:9/8570: [ 444.343597][ T39] 1 lock held by syz-executor/8574: [ 444.343610][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 444.343672][ T39] 1 lock held by syz-executor/8577: [ 444.343684][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 444.343746][ T39] 1 lock held by syz-executor/8582: [ 444.343784][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 444.343846][ T39] 1 lock held by syz-executor/8584: [ 444.343859][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 444.343935][ T39] 1 lock held by syz-executor/8586: [ 444.343948][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 444.344012][ T39] 1 lock held by syz-executor/8598: [ 444.344025][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344078][ T39] 1 lock held by syz-executor/8601: [ 444.344090][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344144][ T39] 1 lock held by syz-executor/8606: [ 444.344157][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344210][ T39] 1 lock held by syz-executor/8608: [ 444.344222][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344274][ T39] 1 lock held by syz-executor/8610: [ 444.344287][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344340][ T39] 1 lock held by syz-executor/8614: [ 444.344353][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344406][ T39] 1 lock held by syz-executor/8618: [ 444.344419][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344473][ T39] 1 lock held by syz-executor/8622: [ 444.344486][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344539][ T39] 1 lock held by syz-executor/8624: [ 444.344552][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344605][ T39] 1 lock held by syz-executor/8626: [ 444.344617][ T39] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 444.344670][ T39] [ 444.344675][ T39] ============================================= [ 444.344675][ T39] [ 444.344697][ T39] NMI backtrace for cpu 1 [ 444.344725][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.344750][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.344763][ T39] Call Trace: [ 444.344771][ T39] [ 444.344780][ T39] dump_stack_lvl+0x189/0x250 [ 444.344818][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.344851][ T39] ? __pfx__printk+0x10/0x10 [ 444.344888][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 444.344931][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 444.344963][ T39] ? __pfx__printk+0x10/0x10 [ 444.344992][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.345024][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 444.345056][ T39] watchdog+0xf93/0xfe0 [ 444.345091][ T39] ? watchdog+0x1de/0xfe0 [ 444.345126][ T39] kthread+0x70e/0x8a0 [ 444.345164][ T39] ? __pfx_watchdog+0x10/0x10 [ 444.345192][ T39] ? __pfx_kthread+0x10/0x10 [ 444.345231][ T39] ? __pfx_kthread+0x10/0x10 [ 444.345265][ T39] ret_from_fork+0x436/0x7d0 [ 444.345298][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 444.345342][ T39] ? __switch_to_asm+0x39/0x70 [ 444.345363][ T39] ? __switch_to_asm+0x33/0x70 [ 444.345382][ T39] ? __pfx_kthread+0x10/0x10 [ 444.345418][ T39] ret_from_fork_asm+0x1a/0x30 [ 444.345457][ T39] [ 444.345465][ T39] Sending NMI from CPU 1 to CPUs 0: [ 444.345495][ C0] NMI backtrace for cpu 0 [ 444.345510][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.345532][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.345550][ C0] RIP: 0010:lock_acquire+0xe/0x360 [ 444.345577][ C0] Code: b0 01 c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89 fd [ 444.345593][ C0] RSP: 0018:ffffc90000156f30 EFLAGS: 00000246 [ 444.345609][ C0] RAX: 0000000000000005 RBX: ffffffff89430615 RCX: 0000000000000002 [ 444.345621][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d9a8d80 [ 444.345633][ C0] RBP: ffffc90000157070 R08: 0000000000000000 R09: 0000000000000000 [ 444.345645][ C0] R10: 0000000000000100 R11: 000000000000dd86 R12: 0000000000000031 [ 444.345657][ C0] R13: dffffc0000000000 R14: ffff888035498000 R15: dffffc0000000000 [ 444.345672][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 444.345687][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.345700][ C0] CR2: 00007fc1d5705000 CR3: 0000000021f84000 CR4: 00000000003526f0 [ 444.345717][ C0] Call Trace: [ 444.345723][ C0] [ 444.345729][ C0] ? synproxy_pernet+0x45/0x270 [ 444.345752][ C0] synproxy_pernet+0x61/0x270 [ 444.345771][ C0] ? synproxy_pernet+0x45/0x270 [ 444.345791][ C0] nft_synproxy_eval_v4+0x108/0x560 [ 444.345814][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 444.345836][ C0] ? nf_ip_checksum+0x13c/0x510 [ 444.345857][ C0] nft_synproxy_do_eval+0x345/0x570 [ 444.345877][ C0] ? unwind_next_frame+0xa5/0x2390 [ 444.345905][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 444.345936][ C0] nft_do_chain+0x409/0x1920 [ 444.345963][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 444.345998][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 444.346027][ C0] nft_do_chain_inet+0x25d/0x340 [ 444.346046][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 444.346065][ C0] ? __lock_acquire+0xab9/0xd20 [ 444.346094][ C0] ? NF_HOOK+0x9a/0x3a0 [ 444.346120][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 444.346139][ C0] nf_hook_slow+0xc2/0x220 [ 444.346175][ C0] NF_HOOK+0x206/0x3a0 [ 444.346200][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 444.346224][ C0] ? NF_HOOK+0x9a/0x3a0 [ 444.346248][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 444.346272][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 444.346300][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 444.346326][ C0] ? skb_dst+0x4f/0xd0 [ 444.346352][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 444.346378][ C0] NF_HOOK+0x30c/0x3a0 [ 444.346405][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 444.346429][ C0] ? NF_HOOK+0x9a/0x3a0 [ 444.346453][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 444.346479][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 444.346510][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 444.346534][ C0] __netif_receive_skb+0x143/0x380 [ 444.346557][ C0] ? rt_spin_unlock+0x65/0x80 [ 444.346581][ C0] ? process_backlog+0x27b/0x900 [ 444.346605][ C0] process_backlog+0x31e/0x900 [ 444.346636][ C0] __napi_poll+0xb6/0x540 [ 444.346661][ C0] net_rx_action+0x707/0xe00 [ 444.346685][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.346722][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 444.346766][ C0] handle_softirqs+0x22f/0x710 [ 444.346795][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 444.346824][ C0] run_ktimerd+0xcf/0x190 [ 444.346849][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 444.346873][ C0] ? schedule+0x91/0x360 [ 444.346902][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 444.346926][ C0] smpboot_thread_fn+0x53f/0xa60 [ 444.346949][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 444.346977][ C0] kthread+0x70e/0x8a0 [ 444.347006][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 444.347028][ C0] ? __pfx_kthread+0x10/0x10 [ 444.347058][ C0] ? __pfx_kthread+0x10/0x10 [ 444.347086][ C0] ret_from_fork+0x436/0x7d0 [ 444.347110][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 444.347137][ C0] ? __switch_to_asm+0x39/0x70 [ 444.347153][ C0] ? __switch_to_asm+0x33/0x70 [ 444.347174][ C0] ? __pfx_kthread+0x10/0x10 [ 444.347202][ C0] ret_from_fork_asm+0x1a/0x30 [ 444.347228][ C0] [ 444.347496][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 444.347512][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.347538][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.347552][ T39] Call Trace: [ 444.347565][ T39] [ 444.347573][ T39] dump_stack_lvl+0x99/0x250 [ 444.347604][ T39] ? __asan_memcpy+0x40/0x70 [ 444.347626][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.347658][ T39] ? __pfx__printk+0x10/0x10 [ 444.347696][ T39] vpanic+0x281/0x750 [ 444.347732][ T39] ? __pfx_vpanic+0x10/0x10 [ 444.347762][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 444.347786][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.347832][ T39] panic+0xb9/0xc0 [ 444.347863][ T39] ? __pfx_panic+0x10/0x10 [ 444.347899][ T39] ? irq_work_queue+0xc3/0x140 [ 444.347940][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 444.347974][ T39] watchdog+0xfd2/0xfe0 [ 444.348008][ T39] ? watchdog+0x1de/0xfe0 [ 444.348044][ T39] kthread+0x70e/0x8a0 [ 444.348081][ T39] ? __pfx_watchdog+0x10/0x10 [ 444.348109][ T39] ? __pfx_kthread+0x10/0x10 [ 444.348148][ T39] ? __pfx_kthread+0x10/0x10 [ 444.348183][ T39] ret_from_fork+0x436/0x7d0 [ 444.348216][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 444.348252][ T39] ? __switch_to_asm+0x39/0x70 [ 444.348272][ T39] ? __switch_to_asm+0x33/0x70 [ 444.348292][ T39] ? __pfx_kthread+0x10/0x10 [ 444.348328][ T39] ret_from_fork_asm+0x1a/0x30 [ 444.348367][ T39] [ 444.348681][ T39] Kernel Offset: disabled