last executing test programs: 2m53.43418755s ago: executing program 0 (id=1232): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x55) 2m53.226022563s ago: executing program 0 (id=1236): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x450101, 0x0) 2m52.659637365s ago: executing program 0 (id=1240): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x15, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2m52.540819141s ago: executing program 0 (id=1242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) 2m52.461460678s ago: executing program 0 (id=1243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m52.245143815s ago: executing program 0 (id=1245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0xb75}, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m37.041797764s ago: executing program 32 (id=1245): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0xb75}, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m30.942745989s ago: executing program 4 (id=1444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x0) 2m30.640772725s ago: executing program 4 (id=1448): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x50, r1, 0x1, 0xf0bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffa}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}]}, 0x50}}, 0x0) 2m30.314598892s ago: executing program 4 (id=1451): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00', 0x1f) 2m30.021927758s ago: executing program 4 (id=1454): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x80085610, &(0x7f0000004100)=""/42) 2m29.772629532s ago: executing program 4 (id=1456): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m29.566110137s ago: executing program 4 (id=1458): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000440)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000003c0)=0x200000000) 2m14.218826028s ago: executing program 33 (id=1458): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000440)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000003c0)=0x200000000) 27.656121457s ago: executing program 3 (id=2224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@private}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 27.328617808s ago: executing program 3 (id=2227): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000008c0)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.179815674s ago: executing program 5 (id=2239): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 26.112037182s ago: executing program 6 (id=2240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00028006"], 0x24}}, 0x0) 25.786817973s ago: executing program 5 (id=2243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) 25.786608251s ago: executing program 6 (id=2244): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 25.58998346s ago: executing program 5 (id=2246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) unshare(0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 25.583404347s ago: executing program 6 (id=2247): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x6e22, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r1, &(0x7f0000000180)=""/109, 0x6d, 0x1000) 25.394878111s ago: executing program 5 (id=2248): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000121) 25.352403824s ago: executing program 6 (id=2249): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r1) 25.226326568s ago: executing program 3 (id=2251): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r2, 0x3, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 24.99271723s ago: executing program 6 (id=2253): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 24.969339023s ago: executing program 3 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 24.769280833s ago: executing program 6 (id=2256): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x235, 0x0, 0x0, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 24.326235968s ago: executing program 5 (id=2258): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 23.195746806s ago: executing program 5 (id=2263): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x4000007ff, 0x0, 0x0, r2}) 23.034891585s ago: executing program 3 (id=2264): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r1}}, 0x20) 22.662211402s ago: executing program 3 (id=2266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff01, 0x0) 22.018175077s ago: executing program 2 (id=2268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 21.77080705s ago: executing program 2 (id=2269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 21.501504743s ago: executing program 2 (id=2270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) sync() 19.792209275s ago: executing program 1 (id=2271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6949c70e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440)={r1}, &(0x7f0000000080)=0x8) 18.013663062s ago: executing program 1 (id=2272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 17.957395673s ago: executing program 1 (id=2273): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfac48219fef1aedf5bc9cb6f6b993cb35bab8014fb3597624155d71ffd4e87d3d3e9e49cd80def51a141e5834032b60ea06c76137c9a2f2e20244b5f", 0xa0}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 17.85795139s ago: executing program 2 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 17.822666182s ago: executing program 1 (id=2275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) 17.527313146s ago: executing program 1 (id=2276): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) 17.235129139s ago: executing program 2 (id=2277): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x8}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) 16.137671767s ago: executing program 2 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0x94, 0x0, 0x1}) 15.161741641s ago: executing program 1 (id=2279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\a']) 9.008737247s ago: executing program 34 (id=2256): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x235, 0x0, 0x0, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 8.009843066s ago: executing program 35 (id=2263): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x4000007ff, 0x0, 0x0, r2}) 6.312753358s ago: executing program 36 (id=2266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff01, 0x0) 970.743477ms ago: executing program 37 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0x94, 0x0, 0x1}) 0s ago: executing program 38 (id=2279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\a']) kernel console output (not intermixed with test programs): utor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 192.929746][ T38] audit: type=1326 audit(1757193931.608:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7883 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 192.929799][ T38] audit: type=1326 audit(1757193931.608:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7883 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 192.929852][ T38] audit: type=1326 audit(1757193931.608:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7883 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 192.929905][ T38] audit: type=1326 audit(1757193931.608:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7883 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 193.094112][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 193.104928][ T5957] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 193.104958][ T5957] usb 1-1: config 0 has no interface number 0 [ 193.120122][ T5957] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 193.120156][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.120178][ T5957] usb 1-1: Product: syz [ 193.120194][ T5957] usb 1-1: Manufacturer: syz [ 193.120210][ T5957] usb 1-1: SerialNumber: syz [ 193.169481][ T5957] usb 1-1: config 0 descriptor?? [ 193.207515][ T5957] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 193.388004][ T7891] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 193.468775][ T5957] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 193.512717][ T5957] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 193.578216][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 193.751370][ T45] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 193.751465][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.751489][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.751512][ T45] usb 3-1: config 1 has no interface number 1 [ 193.751562][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.756503][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.756532][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.756554][ T45] usb 3-1: Product: syz [ 193.756571][ T45] usb 3-1: Manufacturer: syz [ 193.756586][ T45] usb 3-1: SerialNumber: syz [ 193.891466][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 193.893046][ T5837] usb 1-1: USB disconnect, device number 12 [ 194.111081][ T5837] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 194.187405][ T5837] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 194.188383][ T5837] quatech2 1-1:0.51: device disconnected [ 194.199044][ T45] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 194.199125][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 194.509496][ T45] usb 3-1: USB disconnect, device number 13 [ 195.141783][ T5929] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.142054][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.301780][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 195.306670][ T5929] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 195.306698][ T5929] usb 5-1: config 0 has no interface number 0 [ 195.321418][ T5929] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 195.321455][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.321479][ T5929] usb 5-1: Product: syz [ 195.321497][ T5929] usb 5-1: Manufacturer: syz [ 195.321515][ T5929] usb 5-1: SerialNumber: syz [ 195.374358][ T5929] usb 5-1: config 0 descriptor?? [ 195.463364][ T5929] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 195.463395][ T5929] usb 5-1: selecting invalid altsetting 1 [ 195.463413][ T5929] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 195.520406][ T5929] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.520931][ T5929] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 195.520986][ T5929] usb 5-1: media controller created [ 195.628181][ T7935] bond0: option all_slaves_active: invalid value (7) [ 195.666299][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.810050][ T5929] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 195.810117][ T5929] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.811601][ T5929] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 196.081583][ T5929] usb 5-1: USB disconnect, device number 7 [ 198.769567][ T38] audit: type=1326 audit(1757193937.448:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8001 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7fc00000 [ 198.937396][ T5929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.955509][ T8031] sch_fq: defrate 4294967295 ignored. [ 199.108791][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 199.115675][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.115730][ T5929] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 199.115756][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.142266][ T5929] usb 5-1: config 0 descriptor?? [ 199.629417][ T5929] dragonrise 0003:0079:0006.000F: item fetching failed at offset 4/5 [ 199.632735][ T5929] dragonrise 0003:0079:0006.000F: parse failed [ 199.632820][ T5929] dragonrise 0003:0079:0006.000F: probe with driver dragonrise failed with error -22 [ 199.664349][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.664436][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.802693][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.927'. [ 199.802722][ T8051] netlink: 43 bytes leftover after parsing attributes in process `syz.3.927'. [ 199.802741][ T8051] netlink: 'syz.3.927': attribute type 6 has an invalid length. [ 199.802756][ T8051] netlink: 'syz.3.927': attribute type 5 has an invalid length. [ 199.802769][ T8051] netlink: 43 bytes leftover after parsing attributes in process `syz.3.927'. [ 199.874326][ T45] usb 5-1: USB disconnect, device number 8 [ 200.139671][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.929'. [ 200.420538][ T8073] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 200.420579][ T8073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.789426][ T8086] netlink: 1 bytes leftover after parsing attributes in process `syz.2.940'. [ 200.791184][ T8086] xt_policy: neither incoming nor outgoing policy selected [ 200.993049][ T8092] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.943'. [ 200.993181][ T8092] openvswitch: netlink: Message has 5 unknown bytes. [ 202.656959][ T8147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.809563][ T8157] Bluetooth: MGMT ver 1.23 [ 203.297319][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.399584][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 203.455330][ T45] usb 2-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 203.455363][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.455383][ T45] usb 2-1: Product: syz [ 203.455408][ T45] usb 2-1: Manufacturer: syz [ 203.455424][ T45] usb 2-1: SerialNumber: syz [ 203.489858][ T45] usb 2-1: config 0 descriptor?? [ 203.496423][ T45] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 203.547227][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 203.569750][ T9] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 203.569780][ T9] usb 5-1: config 4 has no interface number 0 [ 203.573133][ T9] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 203.573164][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.573187][ T9] usb 5-1: Product: syz [ 203.573203][ T9] usb 5-1: Manufacturer: syz [ 203.573219][ T9] usb 5-1: SerialNumber: syz [ 203.641119][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 203.720441][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.720546][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 203.720577][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 203.720624][ T10] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 203.720718][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.823004][ T10] usb 3-1: config 0 descriptor?? [ 203.825713][ T8173] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 204.060301][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.060415][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 204.215544][ T45] gspca_sn9c20x: Write register 1002 failed -71 [ 204.215580][ T45] gspca_sn9c20x: Device initialization failed [ 204.215694][ T45] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 204.244306][ T45] usb 2-1: USB disconnect, device number 10 [ 204.265621][ T31] usb 5-1: USB disconnect, device number 9 [ 204.270824][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 204.372186][ T10] aureal 0003:0755:2626.0010: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 204.373318][ T10] hid_parser_main: 846 callbacks suppressed [ 204.373339][ T10] aureal 0003:0755:2626.0010: unknown main item tag 0x6 [ 204.373372][ T10] aureal 0003:0755:2626.0010: report_id 29495 is invalid [ 204.373390][ T10] aureal 0003:0755:2626.0010: item 0 2 1 8 parsing failed [ 204.374285][ T10] aureal 0003:0755:2626.0010: probe with driver aureal failed with error -22 [ 204.525937][ T10] usb 3-1: USB disconnect, device number 14 [ 205.038509][ T8200] netlink: 180 bytes leftover after parsing attributes in process `syz.0.987'. [ 205.038916][ T8200] xt_time: unknown flags 0xf4 [ 205.269177][ T38] audit: type=1326 audit(1757193943.948:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8203 comm="syz.4.989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62aa9debe9 code=0x0 [ 205.914427][ T8223] netlink: 'syz.1.998': attribute type 3 has an invalid length. [ 206.527162][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 206.531907][ T8243] rdma_op ffff888023a95270 conn xmit_rdma 0000000000000000 [ 206.680024][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 206.680077][ T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 206.680109][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.686728][ T10] usb 5-1: config 0 descriptor?? [ 207.144658][ T10] aquacomputer_d5next 0003:0C70:F0BD.0011: unknown main item tag 0x0 [ 207.186748][ T10] aquacomputer_d5next 0003:0C70:F0BD.0011: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 207.364652][ T10] usb 5-1: USB disconnect, device number 10 [ 207.380461][ T3121] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.482358][ T8266] fido_id[8266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 207.537192][ T3121] usb 2-1: Using ep0 maxpacket: 32 [ 207.541399][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.541624][ T3121] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.541655][ T3121] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.541678][ T3121] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.541705][ T3121] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.541740][ T3121] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 207.541764][ T3121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.617217][ T3121] usb 2-1: config 0 descriptor?? [ 207.697784][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 207.701322][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.701352][ T9] usb 4-1: config 0 has no interface number 0 [ 207.721410][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 207.721446][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.721472][ T9] usb 4-1: Product: syz [ 207.721489][ T9] usb 4-1: Manufacturer: syz [ 207.721574][ T9] usb 4-1: SerialNumber: syz [ 207.802876][ T9] usb 4-1: config 0 descriptor?? [ 207.841411][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.106547][ T3121] hid-retrode 0003:0403:97C1.0012: global environment stack underflow [ 208.106573][ T3121] hid-retrode 0003:0403:97C1.0012: item 0 4 1 11 parsing failed [ 208.112342][ T3121] hid-retrode 0003:0403:97C1.0012: probe with driver hid-retrode failed with error -22 [ 208.298359][ T31] usb 2-1: USB disconnect, device number 11 [ 208.455763][ T8287] netlink: 'syz.0.1027': attribute type 2 has an invalid length. [ 208.475709][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 208.526504][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 208.643449][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 208.657808][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 208.682279][ T9] usb 4-1: USB disconnect, device number 8 [ 208.710707][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 208.751960][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 208.752947][ T9] quatech2 4-1:0.51: device disconnected [ 208.838605][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 209.316480][ T8311] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1040'. [ 209.748008][ T8325] netlink: 'syz.1.1047': attribute type 2 has an invalid length. [ 209.770463][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 210.137672][ T3121] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.324607][ T3121] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 210.324639][ T3121] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.324660][ T3121] usb 3-1: config 0 has no interface number 0 [ 210.324716][ T3121] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 210.324742][ T3121] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.331441][ T3121] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 210.331479][ T3121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.331513][ T3121] usb 3-1: Product: syz [ 210.331532][ T3121] usb 3-1: Manufacturer: syz [ 210.331550][ T3121] usb 3-1: SerialNumber: syz [ 210.349612][ T3121] usb 3-1: config 0 descriptor?? [ 211.013591][ T45] usb 3-1: USB disconnect, device number 15 [ 212.400236][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 212.400315][ T8399] tipc: Started in network mode [ 212.400355][ T8399] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 212.400411][ T8399] tipc: Enabling of bearer rejected, failed to enable media [ 212.409744][ T8398] netlink: 'syz.3.1083': attribute type 5 has an invalid length. [ 213.012838][ T8417] netlink: 'syz.1.1091': attribute type 322 has an invalid length. [ 213.342439][ T8427] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1097'. [ 213.342486][ T8427] NCSI netlink: No device for ifindex 29216 [ 213.841788][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1106'. [ 213.927318][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 214.010903][ T8448] gretap0: entered promiscuous mode [ 214.011266][ T8448] vlan2: entered promiscuous mode [ 214.077244][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 214.084881][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 214.084917][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 214.084945][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 214.084971][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 214.085001][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 214.154137][ T45] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 214.154171][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.154193][ T45] usb 3-1: Product: syz [ 214.154208][ T45] usb 3-1: Manufacturer: syz [ 214.154224][ T45] usb 3-1: SerialNumber: syz [ 214.234713][ T45] usb 3-1: config 0 descriptor?? [ 214.510439][ T45] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 214.619014][ T3121] IPVS: starting estimator thread 0... [ 214.717869][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.719406][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.720864][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.722559][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.723161][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.724085][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.724579][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.725559][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.726041][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.781336][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.781877][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.782357][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.783285][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.784744][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.785279][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.785796][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.786257][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.788948][ T8462] IPVS: using max 6 ests per chain, 14400 per kthread [ 214.844530][ T45] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 214.844582][ T45] input input16: Timeout waiting for response from device. [ 214.869325][ T45] usb 3-1: USB disconnect, device number 16 [ 215.561295][ T8483] loop6: detected capacity change from 0 to 524288000 [ 216.010647][ T8493] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 216.010715][ T8493] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 216.010769][ T8493] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 216.010903][ T8493] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 216.010954][ T8493] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 216.337080][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 218.106939][ T8533] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 218.166917][ T8537] xt_socket: unknown flags 0xd0 [ 218.272997][ T8544] netlink: 'syz.4.1148': attribute type 83 has an invalid length. [ 218.441600][ T8539] sp0: Synchronizing with TNC [ 218.504847][ T8545] sp0: Found TNC [ 219.237199][ T5929] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 219.407161][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 219.411039][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.412652][ T5929] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 219.412679][ T5929] usb 3-1: config 4 has no interface number 0 [ 219.412717][ T5929] usb 3-1: config 4 interface 30 has no altsetting 0 [ 219.427195][ T5929] usb 3-1: string descriptor 0 read error: -22 [ 219.427356][ T5929] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 219.427382][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.504841][ T5929] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 219.504922][ T5929] dw2102: su3000_power_ctrl: 1, initialized 0 [ 219.504944][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 219.544542][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.545538][ T5929] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 219.545606][ T5929] usb 3-1: media controller created [ 219.545634][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 219.545649][ T5929] dw2102: i2c transfer failed. [ 219.545667][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 219.545681][ T5929] dw2102: i2c transfer failed. [ 219.545708][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 219.545723][ T5929] dw2102: i2c transfer failed. [ 219.545741][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 219.545756][ T5929] dw2102: i2c transfer failed. [ 219.545774][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 219.545789][ T5929] dw2102: i2c transfer failed. [ 219.545807][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 219.545822][ T5929] dw2102: i2c transfer failed. [ 219.545833][ T5929] dvb-usb: MAC address: 02:02:02:02:02:02 [ 219.677418][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.719403][ T8562] dw2102: i2c wr: len=66 is too big! [ 219.719403][ T8562] [ 219.722506][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 219.722527][ T5929] dw2102: command 0x0e transfer failed. [ 219.722537][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 219.722552][ T5929] dw2102: command 0x0e transfer failed. [ 219.947251][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 220.027261][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 220.027286][ T5929] dw2102: command 0x0e transfer failed. [ 220.027296][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 220.027310][ T5929] dw2102: command 0x0e transfer failed. [ 220.027320][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 220.027334][ T5929] dw2102: command 0x51 transfer failed. [ 220.027344][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 220.027358][ T5929] dw2102: i2c probe for address 0x68 failed. [ 220.027371][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 220.027385][ T5929] dw2102: i2c probe for address 0x69 failed. [ 220.027397][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 220.027411][ T5929] dw2102: i2c probe for address 0x6a failed. [ 220.027422][ T5929] dw2102: probing for demodulator failed. Is the external power switched on? [ 220.027433][ T5929] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 220.156223][ T10] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 220.156257][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.180624][ T10] usb 2-1: config 0 descriptor?? [ 220.296373][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.297264][ T5929] rc_core: IR keymap rc-tt-1500 not found [ 220.297279][ T5929] Registered IR keymap rc-empty [ 220.298726][ T5929] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 220.329464][ T10] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 220.365760][ T5929] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 220.390766][ T5929] dvb-usb: schedule remote query interval to 250 msecs. [ 220.390790][ T5929] dw2102: su3000_power_ctrl: 0, initialized 1 [ 220.390804][ T5929] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 220.425145][ T5929] usb 3-1: USB disconnect, device number 17 [ 220.439554][ T45] usb 2-1: USB disconnect, device number 12 [ 220.516508][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1172'. [ 220.588200][ T8596] IPVS: Error connecting to the multicast addr [ 220.733667][ T5929] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 221.224575][ T8621] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.260392][ T8621] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.727706][ T5929] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 221.887699][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.887729][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.894541][ T5929] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.894575][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.894596][ T5929] usb 1-1: SerialNumber: syz [ 222.196361][ T5929] usb 1-1: 0:2 : does not exist [ 222.196494][ T5929] usb 1-1: unit 255 not found! [ 222.217203][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 222.219645][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 222.219726][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 222.440496][ T5929] usb 1-1: USB disconnect, device number 13 [ 222.535658][ T7928] udevd[7928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.557233][ T5837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 222.707204][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 222.709630][ T5837] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 222.709659][ T5837] usb 3-1: config 0 has no interface number 0 [ 222.709710][ T5837] usb 3-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.709739][ T5837] usb 3-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.709765][ T5837] usb 3-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.709796][ T5837] usb 3-1: config 0 interface 63 has no altsetting 0 [ 222.709833][ T5837] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 222.709859][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.757219][ T31] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 222.821351][ T5837] usb 3-1: config 0 descriptor?? [ 222.911282][ T31] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 222.911315][ T31] usb 5-1: config 162 has an invalid interface number: 183 but max is 1 [ 222.911339][ T31] usb 5-1: config 162 has no interface number 0 [ 222.911415][ T31] usb 5-1: config 162 has no interface number 1 [ 222.911482][ T31] usb 5-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.911600][ T31] usb 5-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 222.911627][ T31] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 222.911665][ T31] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 222.911753][ T31] usb 5-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 222.911782][ T31] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 222.911813][ T31] usb 5-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 222.911843][ T31] usb 5-1: config 162 interface 79 has no altsetting 0 [ 222.911920][ T31] usb 5-1: config 162 interface 183 has no altsetting 0 [ 223.036522][ T31] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 223.036558][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.036587][ T31] usb 5-1: Product: syz [ 223.036603][ T31] usb 5-1: Manufacturer: syz [ 223.047174][ T31] usb 5-1: SerialNumber: syz [ 223.287369][ T5837] uclogic 0003:28BD:0909.0013: interface is invalid, ignoring [ 223.403991][ T31] pl2303 5-1:162.79: required endpoints missing [ 223.438543][ T31] pl2303 5-1:162.183: pl2303 converter detected [ 223.447346][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 223.447927][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 223.448373][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 223.457309][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 223.469136][ T10] usb 3-1: USB disconnect, device number 18 [ 223.477201][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 223.497341][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 223.511598][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 223.512091][ T31] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 223.512480][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 223.513012][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 223.513459][ T31] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 223.594929][ T31] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 223.659080][ T31] usb 5-1: USB disconnect, device number 11 [ 223.689116][ T31] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 223.690141][ T31] pl2303 5-1:162.183: device disconnected [ 223.977244][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.140352][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 224.142779][ T5901] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 224.142812][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.153115][ T5901] usb 2-1: config 0 descriptor?? [ 224.183250][ T5901] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 224.310928][ T8696] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 224.865824][ T31] usb 2-1: USB disconnect, device number 13 [ 225.189954][ T8716] netlink: 'syz.3.1227': attribute type 27 has an invalid length. [ 225.479569][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 225.610333][ T3121] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 225.627215][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 225.630661][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.630721][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 225.630752][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.630777][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.630803][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.630850][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 225.630876][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.686177][ T31] usb 3-1: config 0 descriptor?? [ 225.782000][ T3121] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 225.782035][ T3121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.782058][ T3121] usb 5-1: Product: syz [ 225.782074][ T3121] usb 5-1: Manufacturer: syz [ 225.782089][ T3121] usb 5-1: SerialNumber: syz [ 225.794444][ T3121] usb 5-1: config 0 descriptor?? [ 225.862200][ T151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.862681][ T174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.862729][ T174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.862772][ T174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.006672][ T5901] usb 3-1: USB disconnect, device number 19 [ 226.119964][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 226.119992][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 226.252945][ T3121] mos7840 5-1:0.0: required endpoints missing [ 226.288433][ T3121] usb 5-1: USB disconnect, device number 12 [ 227.417372][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.567176][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 227.572231][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.576154][ T31] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 227.576189][ T31] usb 4-1: config 8 interface 0 has no altsetting 0 [ 227.618889][ T31] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 227.618922][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.618945][ T31] usb 4-1: Product: syz [ 227.618961][ T31] usb 4-1: Manufacturer: syz [ 227.618977][ T31] usb 4-1: SerialNumber: syz [ 227.667429][ T8766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 227.922251][ T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.922329][ T31] usb 4-1: selecting invalid altsetting 0 [ 228.124752][ T31] usb 4-1: USB disconnect, device number 9 [ 228.253100][ T6197] udevd[6197]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.408523][ T8814] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 229.408547][ T8814] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1275'. [ 229.408580][ T8814] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 229.408595][ T8814] netlink: 'syz.1.1275': attribute type 2 has an invalid length. [ 229.987994][ T5929] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 230.140072][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.140130][ T5929] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 230.140157][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.194176][ T5929] usb 3-1: config 0 descriptor?? [ 230.321378][ T8830] tmpfs: Bad value for 'mpol' [ 230.411131][ T38] audit: type=1326 audit(1757193969.088:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8817 comm="syz.3.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b0aeebe9 code=0x7fc00000 [ 230.641365][ T5929] playstation 0003:054C:0BA0.0014: unknown main item tag 0x0 [ 230.658092][ T5929] playstation 0003:054C:0BA0.0014: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 230.830086][ T5929] playstation 0003:054C:0BA0.0014: Failed to retrieve feature with reportID 18: -71 [ 230.830118][ T5929] playstation 0003:054C:0BA0.0014: Failed to retrieve DualShock4 pairing info: -71 [ 230.830174][ T5929] playstation 0003:054C:0BA0.0014: Failed to get MAC address from DualShock4 [ 230.830197][ T5929] playstation 0003:054C:0BA0.0014: Failed to create dualshock4. [ 230.834536][ T5929] playstation 0003:054C:0BA0.0014: probe with driver playstation failed with error -71 [ 230.897777][ T5929] usb 3-1: USB disconnect, device number 20 [ 230.922882][ T8835] fido_id[8835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 231.754669][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 231.754697][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 231.754727][ T8859] netlink: 'syz.4.1295': attribute type 15 has an invalid length. [ 232.109260][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 232.109371][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1297'. [ 232.151095][ T8867] ptrace attach of "./syz-executor exec"[5847] was attempted by ""[8867] [ 234.697202][ T8924] program syz.2.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.767191][ T5929] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 234.873391][ T8926] vxcan1: entered allmulticast mode [ 234.921209][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 234.921260][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 234.921291][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.921340][ T5929] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 234.921366][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.926927][ T5929] usb 4-1: config 0 descriptor?? [ 234.986899][ T8920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 235.516531][ T5929] sigmamicro 0003:1C4F:0059.0015: unknown main item tag 0x0 [ 235.533277][ T5929] sigmamicro 0003:1C4F:0059.0015: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 235.681840][ T31] usb 4-1: USB disconnect, device number 10 [ 236.517686][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.667116][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 236.669922][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.669965][ T31] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 236.669993][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.675867][ T31] usb 2-1: config 0 descriptor?? [ 237.184906][ T31] hid-u2fzero 0003:20A0:4287.0016: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.1-1/input0 [ 237.261736][ T31] hid-u2fzero 0003:20A0:4287.0016: NitroKey U2F LED initialised [ 237.261921][ T31] hid-u2fzero 0003:20A0:4287.0016: NitroKey U2F RNG initialised [ 237.301435][ T8971] netlink: 'syz.3.1348': attribute type 3 has an invalid length. [ 237.372669][ T5901] usb 2-1: USB disconnect, device number 14 [ 237.481172][ T8973] fido_id[8973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.921624][ T8980] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 238.059017][ T38] audit: type=1326 audit(1757193976.738:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.059306][ T38] audit: type=1326 audit(1757193976.738:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.078827][ T38] audit: type=1326 audit(1757193976.758:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.078900][ T38] audit: type=1326 audit(1757193976.758:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.078967][ T38] audit: type=1326 audit(1757193976.758:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.091581][ T38] audit: type=1326 audit(1757193976.768:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.091646][ T38] audit: type=1326 audit(1757193976.768:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8983 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.841565][ T9004] netlink: 'syz.4.1363': attribute type 2 has an invalid length. [ 238.931800][ T38] audit: type=1326 audit(1757193977.608:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.931962][ T38] audit: type=1326 audit(1757193977.608:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 238.932531][ T38] audit: type=1326 audit(1757193977.608:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.1.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 239.310904][ T9014] random: crng reseeded on system resumption [ 239.669869][ T9022] syz.3.1372 uses obsolete (PF_INET,SOCK_PACKET) [ 240.117252][ T3121] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 240.288820][ T3121] usb 5-1: Using ep0 maxpacket: 8 [ 240.291540][ T3121] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 240.310434][ T3121] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 240.310474][ T3121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.310497][ T3121] usb 5-1: Product: syz [ 240.310513][ T3121] usb 5-1: Manufacturer: syz [ 240.310529][ T3121] usb 5-1: SerialNumber: syz [ 240.372835][ T3121] usb 5-1: config 0 descriptor?? [ 240.430289][ T3121] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 240.430365][ T3121] usb 5-1: setting power ON [ 240.430387][ T3121] dvb-usb: bulk message failed: -22 (2/0) [ 240.465453][ T3121] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.468423][ T3121] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 240.468491][ T3121] usb 5-1: media controller created [ 240.631087][ T9029] dvb-usb: bulk message failed: -22 (3/0) [ 240.631114][ T9029] cxusb: i2c wr: len=80 is too big! [ 240.631114][ T9029] [ 240.665020][ T3121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.788469][ T3121] usb 5-1: selecting invalid altsetting 6 [ 240.788495][ T3121] usb 5-1: digital interface selection failed (-22) [ 240.788513][ T3121] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 240.792226][ T3121] usb 5-1: setting power OFF [ 240.792378][ T3121] dvb-usb: bulk message failed: -22 (2/0) [ 240.792399][ T3121] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 240.792413][ T3121] (NULL device *): no alternate interface [ 240.985301][ T3121] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 241.010146][ T3121] usb 5-1: USB disconnect, device number 13 [ 241.180716][ T9052] comedi: No check for data length of config insn id 3 is implemented [ 241.180736][ T9052] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 241.180751][ T9052] comedi: Assuming n=15 is correct [ 241.246940][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1387'. [ 241.927509][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 243.240790][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.244922][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.267361][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.273793][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.276064][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.802762][ T5835] team0: Port device syz_tun removed [ 244.338734][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 244.338755][ T38] audit: type=1326 audit(1757193983.018:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.338810][ T38] audit: type=1326 audit(1757193983.018:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.342601][ T38] audit: type=1326 audit(1757193983.018:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.344606][ T38] audit: type=1326 audit(1757193983.018:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.344904][ T38] audit: type=1326 audit(1757193983.018:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.346258][ T38] audit: type=1326 audit(1757193983.018:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.417773][ T38] audit: type=1326 audit(1757193983.098:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.417831][ T38] audit: type=1326 audit(1757193983.098:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9127 comm="syz.4.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa9debe9 code=0x7ffc0000 [ 244.757226][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 244.757432][ T9138] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 244.757466][ T9138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.192091][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.337351][ T5839] Bluetooth: hci1: command tx timeout [ 245.883878][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.014981][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 246.015013][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 246.592501][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.607861][ T5839] Bluetooth: hci0: Malformed Event: 0x13 [ 246.662666][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 246.666890][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'. [ 246.768892][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 246.829565][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.829616][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 246.829641][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.836557][ T10] usb 3-1: config 0 descriptor?? [ 247.012424][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.271371][ T10] elecom 0003:056E:00FC.0017: unknown main item tag 0x0 [ 247.271411][ T10] elecom 0003:056E:00FC.0017: unknown main item tag 0x0 [ 247.271440][ T10] elecom 0003:056E:00FC.0017: unknown main item tag 0x0 [ 247.271467][ T10] elecom 0003:056E:00FC.0017: unknown main item tag 0x0 [ 247.271495][ T10] elecom 0003:056E:00FC.0017: unknown main item tag 0x0 [ 247.287168][ T10] elecom 0003:056E:00FC.0017: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.2-1/input0 [ 247.423479][ T5839] Bluetooth: hci1: command tx timeout [ 247.505534][ T9] usb 3-1: USB disconnect, device number 21 [ 248.610741][ T9101] chnl_net:caif_netlink_parms(): no params data found [ 248.612465][ T9224] syz.3.1450 (9224) used greatest stack depth: 18376 bytes left [ 249.027186][ T12] bridge_slave_1: left allmulticast mode [ 249.027430][ T12] bridge_slave_1: left promiscuous mode [ 249.032790][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.140367][ T9238] netlink: 'syz.1.1455': attribute type 3 has an invalid length. [ 249.311369][ T12] bridge_slave_0: left allmulticast mode [ 249.311407][ T12] bridge_slave_0: left promiscuous mode [ 249.312163][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.497169][ T5839] Bluetooth: hci1: command tx timeout [ 250.550954][ T9270] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.1466'. [ 250.550979][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 250.551000][ T9270] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.1466'. [ 251.087338][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 251.277251][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 251.279886][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 251.279915][ T10] usb 3-1: config 0 has no interface number 0 [ 251.279976][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 251.284918][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 251.284948][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.284971][ T10] usb 3-1: Product: syz [ 251.284987][ T10] usb 3-1: Manufacturer: syz [ 251.285003][ T10] usb 3-1: SerialNumber: syz [ 251.293353][ T10] usb 3-1: config 0 descriptor?? [ 251.587195][ T5839] Bluetooth: hci1: command tx timeout [ 251.970421][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 251.970495][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 251.970515][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 251.970616][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 252.017104][ T10] usb 3-1: USB disconnect, device number 22 [ 253.048433][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.117927][ T5901] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 253.148092][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.211939][ T12] bond0 (unregistering): Released all slaves [ 253.280043][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.280081][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 253.280127][ T5901] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 253.280152][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.320477][ T5901] usb 3-1: config 0 descriptor?? [ 253.337057][ T9287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.757313][ T5837] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 253.841509][ T5901] lenovo 0003:17EF:60FE.0018: unknown main item tag 0x0 [ 253.880683][ T5901] lenovo 0003:17EF:60FE.0018: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0 [ 253.957349][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 253.959625][ T5837] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.959653][ T5837] usb 2-1: config 0 has no interface number 0 [ 253.962228][ T5837] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 253.962258][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.962281][ T5837] usb 2-1: Product: syz [ 253.962297][ T5837] usb 2-1: Manufacturer: syz [ 253.962312][ T5837] usb 2-1: SerialNumber: syz [ 254.028900][ T5837] usb 2-1: config 0 descriptor?? [ 254.057578][ T5901] usb 3-1: USB disconnect, device number 23 [ 254.120799][ T5837] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 254.120844][ T5837] usb 2-1: selecting invalid altsetting 1 [ 254.120864][ T5837] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 254.178904][ T5837] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 254.179326][ T5837] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 254.179378][ T5837] usb 2-1: media controller created [ 254.257298][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.285468][ T9297] fido_id[9297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 254.857161][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.858555][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.859603][ T9101] bridge_slave_0: entered allmulticast mode [ 254.874943][ T9101] bridge_slave_0: entered promiscuous mode [ 254.901426][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.901937][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.902193][ T9101] bridge_slave_1: entered allmulticast mode [ 254.942407][ T9101] bridge_slave_1: entered promiscuous mode [ 255.167316][ T5901] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 255.343419][ T5901] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 255.343450][ T5901] usb 3-1: config 0 has no interface number 0 [ 255.343485][ T5901] usb 3-1: config 0 interface 29 has no altsetting 0 [ 255.380377][ T5901] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 255.380411][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.380435][ T5901] usb 3-1: Product: syz [ 255.380451][ T5901] usb 3-1: Manufacturer: syz [ 255.380467][ T5901] usb 3-1: SerialNumber: syz [ 255.419872][ T5837] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 255.419953][ T5837] zl10353_read_register: readreg error (reg=127, ret==-110) [ 255.512103][ T5901] usb 3-1: config 0 descriptor?? [ 255.699151][ T5837] usb 2-1: USB disconnect, device number 15 [ 256.042946][ T5901] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 256.100287][ T5901] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 256.100318][ T5901] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 256.100357][ T5901] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 256.639643][ T9101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.880045][ T9101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.952747][ T5901] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22 [ 256.993789][ T5901] usb 3-1: USB disconnect, device number 24 [ 257.366678][ T45] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 257.444813][ T45] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 257.669210][ T9101] team0: Port device team_slave_0 added [ 257.718345][ T9345] fido_id[9345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 257.812898][ T9349] Bluetooth: MGMT ver 1.23 [ 258.067486][ T12] hsr_slave_0: left promiscuous mode [ 258.177300][ T12] hsr_slave_1: left promiscuous mode [ 258.178571][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.178671][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.325251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.325286][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.553704][ T12] veth1_macvtap: left promiscuous mode [ 258.554006][ T12] veth0_macvtap: left promiscuous mode [ 258.554366][ T12] veth1_vlan: left promiscuous mode [ 258.554752][ T12] veth0_vlan: left promiscuous mode [ 258.579642][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.736642][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.736679][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.736722][ T45] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 258.736748][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.785351][ T45] usb 2-1: config 0 descriptor?? [ 259.252736][ T45] samsung 0003:0419:0600.001A: item fetching failed at offset 5/7 [ 259.256017][ T45] samsung 0003:0419:0600.001A: parse failed [ 259.256098][ T45] samsung 0003:0419:0600.001A: probe with driver samsung failed with error -22 [ 259.458487][ T10] usb 2-1: USB disconnect, device number 16 [ 260.367498][ T9387] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1513'. [ 261.115963][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.116055][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.989199][ T9406] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 261.989255][ T9406] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 261.989303][ T9406] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 261.989351][ T9406] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 261.989398][ T9406] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 261.989515][ T9406] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 261.989563][ T9406] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 261.989610][ T9406] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 262.531790][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 262.988111][ T12] team0 (unregistering): Port device team_slave_1 removed [ 263.267881][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.387307][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 263.547339][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 263.550085][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 263.553285][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.553317][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.553340][ T9] usb 2-1: Product: syz [ 263.553357][ T9] usb 2-1: Manufacturer: syz [ 263.553374][ T9] usb 2-1: SerialNumber: syz [ 263.561571][ T9] usb 2-1: config 0 descriptor?? [ 263.565014][ T9418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 263.592107][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 263.592157][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 263.911135][ T9] usb 2-1: USB disconnect, device number 17 [ 264.267323][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 264.437274][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 264.439732][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 264.455322][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 264.455353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 264.455375][ T9] usb 2-1: Product: syz [ 264.499528][ T9] usb 2-1: config 0 descriptor?? [ 264.502443][ T9418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 264.506690][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 264.506730][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 264.857976][ T5901] usb 2-1: USB disconnect, device number 18 [ 265.199877][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 265.204947][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 265.206972][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.212223][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.213122][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.653585][ T9101] team0: Port device team_slave_1 added [ 267.097372][ T45] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 267.253049][ T45] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.253080][ T45] usb 3-1: config 0 has no interface number 0 [ 267.253132][ T45] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 267.253159][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.267305][ T5855] Bluetooth: hci5: command tx timeout [ 267.308609][ T45] usb 3-1: config 0 descriptor?? [ 267.330975][ T45] usb 3-1: selecting invalid altsetting 1 [ 267.349214][ T45] dvb_ttusb_budget: ttusb_init_controller: error [ 267.349237][ T45] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 267.486039][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.486058][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.486087][ T9101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.625238][ T9101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.625268][ T9101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.625302][ T9101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.696321][ T45] DVB: Unable to find symbol cx22700_attach() [ 268.004737][ T45] DVB: Unable to find symbol tda10046_attach() [ 268.004755][ T45] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 268.028477][ T45] usb 3-1: USB disconnect, device number 25 [ 268.547594][ T9101] hsr_slave_0: entered promiscuous mode [ 268.549031][ T9101] hsr_slave_1: entered promiscuous mode [ 269.104282][ T45] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 269.129293][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 269.181921][ T45] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 269.337317][ T5855] Bluetooth: hci5: command tx timeout [ 269.556178][ T9483] fido_id[9483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.718320][ T12] IPVS: stop unused estimator thread 0... [ 270.910523][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 271.017404][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 271.167204][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 271.171080][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.171111][ T45] usb 2-1: config 179 has no interface number 0 [ 271.171162][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.171192][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.171223][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.171252][ T45] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.171282][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.171328][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.171355][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.278993][ T9530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.418325][ T5855] Bluetooth: hci5: command tx timeout [ 271.497598][ T1517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.740324][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1574'. [ 271.740456][ T9540] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1574'. [ 271.843412][ T5901] usb 2-1: USB disconnect, device number 19 [ 271.843412][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 271.843486][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 271.977685][ T9420] chnl_net:caif_netlink_parms(): no params data found [ 272.263316][ T1517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.627134][ T5837] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 272.660057][ T1517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.780294][ T5837] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.780335][ T5837] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.780380][ T5837] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.780407][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.838198][ T9555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.855356][ T5837] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.366121][ T9571] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 273.451083][ T5901] usb 3-1: USB disconnect, device number 26 [ 273.504519][ T1517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.509107][ T5855] Bluetooth: hci5: command tx timeout [ 273.731133][ T9571] þ: entered promiscuous mode [ 274.360152][ T9588] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 274.434659][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.434813][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.435067][ T9420] bridge_slave_0: entered allmulticast mode [ 274.446662][ T9420] bridge_slave_0: entered promiscuous mode [ 274.720324][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.720473][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.720710][ T9420] bridge_slave_1: entered allmulticast mode [ 274.723729][ T9420] bridge_slave_1: entered promiscuous mode [ 274.920760][ T9101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.937393][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 275.100046][ T10] usb 2-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.100085][ T10] usb 2-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.100111][ T10] usb 2-1: config 2 interface 0 has no altsetting 0 [ 275.100148][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 275.100174][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.230435][ T9101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 275.306087][ T9420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.329444][ T9101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 275.490455][ T9420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.491090][ T9101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.600404][ T10] apple 0003:05AC:027A.001C: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 275.799637][ T10] usb 2-1: USB disconnect, device number 20 [ 275.884012][ T9628] [U]  [ 275.884066][ T9628] [U] K{‘ [ 275.884587][ T9628] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 275.908756][ T9628] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 275.909724][ T9628] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 275.913965][ T9628] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 275.969267][ T9628] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 275.987230][ T9628] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 275.988586][ T9628] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 276.009292][ T9628] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 276.087671][ T9628] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 276.091161][ T9628] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 276.091394][ T9628] [U] 22½“Æ©ÐÛ©X?0;3U± [ 276.103527][ T9628] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 276.113349][ T9628] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 276.124930][ T9628] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 276.125422][ T9628] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 276.128330][ T9628] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 276.128405][ T9628] [U] ¹ EC [ 276.148458][ T9628] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 276.162568][ T9627] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 276.344310][ T9420] team0: Port device team_slave_0 added [ 276.378630][ T9420] team0: Port device team_slave_1 added [ 276.393732][ T1517] bridge_slave_1: left allmulticast mode [ 276.393768][ T1517] bridge_slave_1: left promiscuous mode [ 276.394105][ T1517] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.518820][ T1517] bridge_slave_0: left allmulticast mode [ 276.518859][ T1517] bridge_slave_0: left promiscuous mode [ 276.519158][ T1517] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.547572][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 278.943723][ T1517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.957756][ T1517] bond_slave_0: left allmulticast mode [ 278.998157][ T1517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.018029][ T1517] bond_slave_1: left allmulticast mode [ 279.022184][ T1517] bond0 (unregistering): Released all slaves [ 279.199789][ T9642] vlan2: entered promiscuous mode [ 279.199813][ T9642] bridge0: entered promiscuous mode [ 279.238645][ T1517] IPVS: stopping backup sync thread 7554 ... [ 279.419792][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 279.560888][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.560908][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.560938][ T9420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.584077][ T9420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.584100][ T9420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.584138][ T9420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.647156][ T5837] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 280.660154][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 280.807560][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 280.829652][ T5837] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.831949][ T5837] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 280.831976][ T5837] usb 4-1: config 4 has no interface number 0 [ 280.832010][ T5837] usb 4-1: config 4 interface 30 has no altsetting 0 [ 280.858494][ T5837] usb 4-1: string descriptor 0 read error: -22 [ 280.858809][ T5837] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 280.858841][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.868313][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.868355][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.868403][ T31] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 280.868434][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.903914][ T31] usb 3-1: config 0 descriptor?? [ 280.985711][ T5837] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 280.985902][ T5837] dw2102: su3000_power_ctrl: 1, initialized 0 [ 280.985989][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 281.012573][ T9420] hsr_slave_0: entered promiscuous mode [ 281.030342][ T9420] hsr_slave_1: entered promiscuous mode [ 281.040836][ T9420] debugfs: 'hsr0' already exists in 'hsr' [ 281.040873][ T9420] Cannot create hsr debugfs directory [ 281.092768][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.117167][ T5837] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 281.117230][ T5837] usb 4-1: media controller created [ 281.124448][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 281.124474][ T5837] dw2102: i2c transfer failed. [ 281.124495][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 281.124511][ T5837] dw2102: i2c transfer failed. [ 281.125563][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 281.125584][ T5837] dw2102: i2c transfer failed. [ 281.125604][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 281.125621][ T5837] dw2102: i2c transfer failed. [ 281.125652][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 281.125667][ T5837] dw2102: i2c transfer failed. [ 281.125750][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 281.125766][ T5837] dw2102: i2c transfer failed. [ 281.125777][ T5837] dvb-usb: MAC address: 02:02:02:02:02:02 [ 281.250472][ T9700] dvb-usb: bulk message failed: -22 (3/0) [ 281.250496][ T9700] dw2102: i2c transfer failed. [ 281.250506][ T9700] dvb-usb: bulk message failed: -22 (4/0) [ 281.252485][ T9700] dw2102: i2c transfer failed. [ 281.477473][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.498730][ T31] semitek 0003:1EA7:0907.001D: unknown main item tag 0x0 [ 281.537728][ T31] semitek 0003:1EA7:0907.001D: hidraw0: USB HID vf5.a3 Device [HID 1ea7:0907] on usb-dummy_hcd.2-1/input0 [ 281.622038][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 281.622061][ T5837] dw2102: command 0x0e transfer failed. [ 281.622072][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 281.622088][ T5837] dw2102: command 0x0e transfer failed. [ 281.718206][ T31] usb 3-1: USB disconnect, device number 27 [ 281.735671][ T9713] fido_id[9713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 281.927220][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 281.927244][ T5837] dw2102: command 0x0e transfer failed. [ 281.927254][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 281.927268][ T5837] dw2102: command 0x0e transfer failed. [ 281.927278][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 281.927292][ T5837] dw2102: command 0x51 transfer failed. [ 281.927302][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 281.927317][ T5837] dw2102: i2c probe for address 0x68 failed. [ 281.927328][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 281.927343][ T5837] dw2102: i2c probe for address 0x69 failed. [ 281.927354][ T5837] dvb-usb: bulk message failed: -22 (5/0) [ 281.927368][ T5837] dw2102: i2c probe for address 0x6a failed. [ 281.927379][ T5837] dw2102: probing for demodulator failed. Is the external power switched on? [ 281.927390][ T5837] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 282.182718][ T5837] rc_core: IR keymap rc-tt-1500 not found [ 282.182736][ T5837] Registered IR keymap rc-empty [ 282.184138][ T5837] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 282.198436][ T5837] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input19 [ 282.224193][ T5837] dvb-usb: schedule remote query interval to 250 msecs. [ 282.224219][ T5837] dw2102: su3000_power_ctrl: 0, initialized 1 [ 282.224234][ T5837] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 282.236168][ T5837] usb 4-1: USB disconnect, device number 11 [ 282.289738][ T1517] hsr_slave_0: left promiscuous mode [ 282.336406][ T1517] hsr_slave_1: left promiscuous mode [ 282.337645][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.337680][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.388641][ T1517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.388677][ T1517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.471703][ T5837] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 282.564064][ T1517] veth1_macvtap: left promiscuous mode [ 282.564196][ T1517] veth0_macvtap: left promiscuous mode [ 282.565832][ T1517] veth1_vlan: left promiscuous mode [ 282.566062][ T1517] veth0_vlan: left promiscuous mode [ 284.998032][ T1517] team0 (unregistering): Port device team_slave_1 removed [ 285.198262][ T1517] team0 (unregistering): Port device team_slave_0 removed [ 286.569909][ T1517] vxcan1 (unregistering): left allmulticast mode [ 288.783155][ T9101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.824937][ T9741] "syz.3.1656" (9741) uses obsolete ecb(arc4) skcipher [ 288.915910][ T9101] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.962274][ T9420] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.035114][ T9420] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.234041][ T9420] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.242772][ T9762] syz.1.1659 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 289.508806][ T9420] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.559245][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.564522][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.687237][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 289.765527][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.767267][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.849708][ T31] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 289.849744][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.849765][ T31] usb 2-1: Product: syz [ 289.849781][ T31] usb 2-1: Manufacturer: syz [ 289.849797][ T31] usb 2-1: SerialNumber: syz [ 289.899475][ T31] usb 2-1: config 0 descriptor?? [ 290.205330][ T5837] usb 2-1: USB disconnect, device number 21 [ 290.307202][ T5956] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 290.478341][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 290.490036][ T5956] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.490080][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0 [ 290.490122][ T5956] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 290.490151][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.514429][ T5956] usb 4-1: config 0 descriptor?? [ 290.921433][ T9420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.027717][ T5956] thrustmaster 0003:044F:B300.001E: hidraw0: USB HID v0.03 Device [HID 044f:b300] on usb-dummy_hcd.3-1/input0 [ 291.027757][ T5956] thrustmaster 0003:044F:B300.001E: no inputs found [ 291.169821][ T9420] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.209672][ T9101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.240144][ T3121] usb 4-1: USB disconnect, device number 12 [ 291.303495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.303657][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.341939][ T1517] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.342724][ T1517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.419971][ T9805] fido_id[9805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 292.568920][ T38] audit: type=1326 audit(1757194031.248:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9837 comm="syz.3.1677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02b0aeebe9 code=0x0 [ 292.768295][ T9101] veth0_vlan: entered promiscuous mode [ 292.824180][ T9420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.893360][ T9101] veth1_vlan: entered promiscuous mode [ 293.115522][ T9101] veth0_macvtap: entered promiscuous mode [ 293.149039][ T9101] veth1_macvtap: entered promiscuous mode [ 293.290408][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.365616][ T9101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.464948][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.479304][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.497305][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.497619][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.332895][ T1517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.332921][ T1517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.683167][ T1517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.683190][ T1517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.947491][ T9420] veth0_vlan: entered promiscuous mode [ 295.054468][ T9420] veth1_vlan: entered promiscuous mode [ 295.256286][ T9420] veth0_macvtap: entered promiscuous mode [ 295.299846][ T9420] veth1_macvtap: entered promiscuous mode [ 295.442290][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.474747][ T9420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.557393][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.557678][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.557723][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.557777][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.637196][ T45] IPVS: starting estimator thread 0... [ 295.747270][ T9896] IPVS: using max 7 ests per chain, 16800 per kthread [ 296.181367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.181390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.428812][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.428835][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.445763][ T9916] netlink: 'syz.3.1696': attribute type 13 has an invalid length. [ 297.032118][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.035603][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.850150][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.869212][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.957540][ T9936] netlink: 'syz.1.1704': attribute type 2 has an invalid length. [ 298.979468][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.031345][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.054283][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.091483][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.133739][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1707'. [ 301.277234][ T3121] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 301.432793][ T3121] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 301.432826][ T3121] usb 4-1: config 7 has no interface number 0 [ 301.436213][ T3121] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 301.436247][ T3121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.436271][ T3121] usb 4-1: Product: syz [ 301.436288][ T3121] usb 4-1: Manufacturer: syz [ 301.436312][ T3121] usb 4-1: SerialNumber: syz [ 302.376783][T10018] syz.5.1734 (10018) used greatest stack depth: 16760 bytes left [ 302.386555][ T3121] as10x_usb: device has been detected [ 302.417982][ T3121] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 302.570879][ T3121] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 302.981547][ T3121] as10x_usb: error during firmware upload part1 [ 302.982295][ T3121] Registered device Elgato EyeTV DTT Deluxe [ 303.031189][ T3121] usb 4-1: USB disconnect, device number 13 [ 303.239311][ T3121] Unregistered device Elgato EyeTV DTT Deluxe [ 303.248276][ T3121] as10x_usb: device has been disconnected [ 304.371584][T10058] block nbd1: server does not support multiple connections per device. [ 304.372712][T10058] block nbd1: shutting down sockets [ 304.763818][ T38] audit: type=1400 audit(1757194043.418:58): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=10069 comm="syz.6.1750" opid=10069 ocomm="syz.6.1750" [ 305.346426][T10088] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 305.353562][T10088] pim6reg0: linktype set to 768 [ 305.378642][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 305.378682][T10091] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1758'. [ 305.629288][T10091] vlan2: entered allmulticast mode [ 306.847449][T10128] sg_write: process 895 (syz.3.1770) changed security contexts after opening file descriptor, this is not allowed. [ 307.647167][ T5929] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.799969][ T5929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.799999][ T5929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.801582][ T5929] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.801612][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.801643][ T5929] usb 6-1: SerialNumber: syz [ 308.112085][ T5929] usb 6-1: 0:2 : does not exist [ 308.173178][ T5929] usb 6-1: USB disconnect, device number 2 [ 308.293533][ T9729] udevd[9729]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.503777][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 312.155741][T10247] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 312.212959][T10249] netlink: 'syz.1.1812': attribute type 2 has an invalid length. [ 312.212985][T10249] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1812'. [ 312.214953][T10249] netlink: 'syz.1.1812': attribute type 2 has an invalid length. [ 312.214974][T10249] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1812'. [ 312.574472][T10260] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 312.823777][T10267] input: syz0 as /devices/virtual/input/input20 [ 313.337347][ T5901] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 313.487177][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 313.502818][ T5901] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.502856][ T5901] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 313.502886][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.530580][ T5901] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 313.530619][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.530645][ T5901] usb 3-1: Product: syz [ 313.530663][ T5901] usb 3-1: Manufacturer: syz [ 313.530682][ T5901] usb 3-1: SerialNumber: syz [ 313.590795][ T5901] usb 3-1: config 0 descriptor?? [ 313.961494][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 314.052719][ T5901] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 314.475045][ T5901] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 314.475823][ T5901] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 314.476584][ T5901] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 314.564209][ T5901] usb 3-1: USB disconnect, device number 28 [ 314.580440][T10302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1835'. [ 315.657244][ T5855] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 316.268785][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1844'. [ 316.268813][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1844'. [ 319.300973][T10423] bpf: Bad value for 'gid' [ 319.330589][T10424] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1879'. [ 320.053806][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1885'. [ 320.086749][T10443] netlink: 'syz.3.1886': attribute type 4 has an invalid length. [ 321.527320][T10468] binder: 10464:10468 ioctl c0306201 2000000003c0 returned -22 [ 322.555333][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.555418][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.631901][T10482] block nbd1: server does not support multiple connections per device. [ 322.632313][T10482] block nbd1: shutting down sockets [ 323.967080][ T5929] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 324.132512][ T5929] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.132543][ T5929] usb 4-1: config 0 has no interface number 0 [ 324.137904][ T5929] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 324.137937][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.137960][ T5929] usb 4-1: Product: syz [ 324.137975][ T5929] usb 4-1: Manufacturer: syz [ 324.137988][ T5929] usb 4-1: SerialNumber: syz [ 324.175922][ T5929] usb 4-1: config 0 descriptor?? [ 324.425187][ T5929] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 324.446139][ T5929] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 324.446554][ T5929] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 324.446604][ T5929] usb 4-1: media controller created [ 324.524034][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.711890][ T5929] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 324.839933][T10532] tap0: tun_chr_ioctl cmd 2147767507 [ 324.859204][T10529] block nbd1: server does not support multiple connections per device. [ 324.860118][T10529] block nbd1: shutting down sockets [ 324.957564][ T5929] usb 4-1: USB disconnect, device number 14 [ 325.247799][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1916'. [ 325.747166][ T5929] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.854454][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 325.854492][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'. [ 325.897206][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 325.909469][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.909514][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.909562][ T5929] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 325.909591][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.959705][ T5929] usb 6-1: config 0 descriptor?? [ 326.387355][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 326.459906][ T5929] corsair 0003:1B1C:1B02.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 326.548041][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 326.553499][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 326.580296][ T31] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 326.580398][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.580423][ T31] usb 4-1: Product: syz [ 326.580439][ T31] usb 4-1: Manufacturer: syz [ 326.580456][ T31] usb 4-1: SerialNumber: syz [ 326.655518][ T31] usb 4-1: config 0 descriptor?? [ 326.743610][ T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.744191][ T31] usb 4-1: invalid MIDI out EP 0 [ 326.893558][T10576] binder: BC_ACQUIRE_RESULT not supported [ 326.893576][T10576] binder: 10575:10576 ioctl c0306201 200000000640 returned -22 [ 326.899518][ T45] usb 6-1: USB disconnect, device number 3 [ 327.133947][ T31] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 327.166905][ T31] usb 4-1: USB disconnect, device number 15 [ 327.313062][ T9796] udevd[9796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.837519][ T5956] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 328.006725][ T5956] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 328.006759][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.052720][ T5956] usb 2-1: config 0 descriptor?? [ 328.072306][ T5956] gspca_main: spca508-2.14.0 probing 8086:0110 [ 328.270924][ T5956] gspca_spca508: reg_read err -71 [ 328.271362][ T5956] gspca_spca508: reg_read err -71 [ 328.271778][ T5956] gspca_spca508: reg_read err -71 [ 328.272207][ T5956] gspca_spca508: reg_read err -71 [ 328.272625][ T5956] gspca_spca508: reg_read err -71 [ 328.273056][ T5956] gspca_spca508: reg write: error -71 [ 328.273150][ T5956] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 328.317527][ T5956] usb 2-1: USB disconnect, device number 22 [ 330.278320][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.291278][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.293821][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.298430][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.317757][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.517609][T10654] netlink: 'syz.1.1960': attribute type 25 has an invalid length. [ 331.517635][T10654] netlink: 'syz.1.1960': attribute type 8 has an invalid length. [ 332.105324][ T37] bridge_slave_1: left allmulticast mode [ 332.105359][ T37] bridge_slave_1: left promiscuous mode [ 332.109324][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.212497][ T37] bridge_slave_0: left allmulticast mode [ 332.212533][ T37] bridge_slave_0: left promiscuous mode [ 332.212824][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.457251][ T5855] Bluetooth: hci0: command tx timeout [ 334.557156][ T5855] Bluetooth: hci0: command tx timeout [ 335.530845][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.607918][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.645852][ T37] bond0 (unregistering): Released all slaves [ 335.714394][T10686] netlink: 'syz.6.1971': attribute type 6 has an invalid length. [ 335.717375][T10696] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 335.717401][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 335.717543][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.733905][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1978'. [ 335.909189][ T37] þ: left promiscuous mode [ 336.284133][T10730] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.324836][ T37] tipc: Left network mode [ 336.503104][T10636] chnl_net:caif_netlink_parms(): no params data found [ 336.647224][ T5855] Bluetooth: hci0: command tx timeout [ 338.014350][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.032377][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.032631][T10636] bridge_slave_0: entered allmulticast mode [ 338.071391][T10636] bridge_slave_0: entered promiscuous mode [ 338.133724][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.133882][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.134148][T10636] bridge_slave_1: entered allmulticast mode [ 338.186377][T10636] bridge_slave_1: entered promiscuous mode [ 338.697252][ T5855] Bluetooth: hci0: command tx timeout [ 338.732428][ T37] hsr_slave_0: left promiscuous mode [ 338.780440][ T37] hsr_slave_1: left promiscuous mode [ 338.782628][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.842682][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.863334][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2006'. [ 340.108566][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2016'. [ 340.333779][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 340.333980][T10827] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 340.334012][T10827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.464067][T10829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.740992][ T37] team0 (unregistering): Port device team_slave_1 removed [ 341.961067][ T37] team0 (unregistering): Port device team_slave_0 removed [ 345.287133][T10844] netlink: 'syz.6.2026': attribute type 2 has an invalid length. [ 345.287157][T10844] netlink: 'syz.6.2026': attribute type 1 has an invalid length. [ 345.321789][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.392841][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.669750][T10851] program syz.1.2030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.026104][T10636] team0: Port device team_slave_0 added [ 346.053120][T10636] team0: Port device team_slave_1 added [ 346.959861][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.959881][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.959912][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.962607][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.962620][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.962644][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.763821][T10636] hsr_slave_0: entered promiscuous mode [ 347.765267][T10636] hsr_slave_1: entered promiscuous mode [ 347.766165][T10636] debugfs: 'hsr0' already exists in 'hsr' [ 347.766192][T10636] Cannot create hsr debugfs directory [ 348.089669][T10905] openvswitch: netlink: IPv4 tunnel dst address is zero [ 351.119632][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2075'. [ 353.393920][T10636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.479211][T10636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.522452][T10636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.612167][T11031] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.2092'. [ 353.612564][T11031] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 353.658311][T10636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.053368][T11044] block nbd1: server does not support multiple connections per device. [ 354.055427][T11044] block nbd1: shutting down sockets [ 354.153092][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.319227][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.340845][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.341100][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.405494][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.405666][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.486674][ T38] audit: type=1326 audit(1757194093.158:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.486731][ T38] audit: type=1326 audit(1757194093.158:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.540982][ T38] audit: type=1326 audit(1757194093.218:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.541284][ T38] audit: type=1326 audit(1757194093.218:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.542138][ T38] audit: type=1326 audit(1757194093.218:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.542441][ T38] audit: type=1326 audit(1757194093.218:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.642591][ T38] audit: type=1326 audit(1757194093.318:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 354.642653][ T38] audit: type=1326 audit(1757194093.318:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11055 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05637eebe9 code=0x7ffc0000 [ 355.343271][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 355.969772][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.275183][T10636] veth0_vlan: entered promiscuous mode [ 356.320588][T10636] veth1_vlan: entered promiscuous mode [ 356.632637][T10636] veth0_macvtap: entered promiscuous mode [ 356.690361][T10636] veth1_macvtap: entered promiscuous mode [ 356.795286][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.823712][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.869183][ T6224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.904024][ T1504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.918823][ T1504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.921979][ T1504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.642825][ T6224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.642851][ T6224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.976086][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.976111][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.847479][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 360.006574][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.006613][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.006656][ T31] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 360.006682][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.053462][ T31] usb 6-1: config 0 descriptor?? [ 360.533880][ T31] elecom 0003:056E:010C.0020: hidraw0: USB HID v77.96 Device [HID 056e:010c] on usb-dummy_hcd.5-1/input0 [ 360.734792][ T9] usb 6-1: USB disconnect, device number 4 [ 360.783054][T11181] fido_id[11181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 361.996901][ T1504] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.997188][ T1504] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.997231][ T1504] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.999728][ T1504] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.314939][T11209] netlink: 'syz.2.2142': attribute type 83 has an invalid length. [ 362.488125][T11212] erspan0: entered promiscuous mode [ 363.177331][ T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.327102][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 363.330565][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 363.330602][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.334159][ T45] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.334191][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.334215][ T45] usb 3-1: Product: syz [ 363.334231][ T45] usb 3-1: Manufacturer: syz [ 363.334247][ T45] usb 3-1: SerialNumber: syz [ 363.342904][ T45] usb 3-1: config 0 descriptor?? [ 363.372677][ T45] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.372723][ T45] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 364.019121][ T45] em28xx 3-1:0.0: unknown em28xx chip ID (41) [ 364.226068][ T45] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 364.245652][ T45] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 364.245676][ T45] em28xx 3-1:0.0: No AC97 audio processor [ 364.323008][ T45] usb 3-1: USB disconnect, device number 29 [ 364.333788][ T45] em28xx 3-1:0.0: Disconnecting em28xx [ 364.519018][ T45] em28xx 3-1:0.0: Freeing device [ 364.951749][T11257] loop7: detected capacity change from 0 to 524255231 [ 365.031696][T11257] loop7: detected capacity change from 524255231 to 524287912 [ 365.342179][T11262] pimreg: tun_chr_ioctl cmd 1074025677 [ 365.342327][T11262] pimreg: linktype set to 270 [ 365.581370][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 365.877252][ T5837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 366.067198][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 366.071463][ T5837] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 366.071496][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.119500][ T5837] usb 6-1: config 0 descriptor?? [ 366.355396][ T5837] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 366.418643][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.421974][ T5837] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 366.422032][ T5837] usb 6-1: media controller created [ 366.640127][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.777250][ T5837] az6027: usb out operation failed. (-71) [ 366.777742][ T5837] az6027: usb out operation failed. (-71) [ 366.777759][ T5837] stb0899_attach: Driver disabled by Kconfig [ 366.777770][ T5837] az6027: no front-end attached [ 366.777770][ T5837] [ 366.778195][ T5837] az6027: usb out operation failed. (-71) [ 366.778211][ T5837] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 366.798133][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 366.823370][ T5837] dvb-usb: schedule remote query interval to 400 msecs. [ 366.823399][ T5837] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 366.851455][ T5837] usb 6-1: USB disconnect, device number 5 [ 367.363079][ T5837] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 367.661939][ T38] audit: type=1326 audit(1757194106.338:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.693795][ T38] audit: type=1326 audit(1757194106.368:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.697429][ T5956] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 367.722096][ T38] audit: type=1326 audit(1757194106.398:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.796180][ T38] audit: type=1326 audit(1757194106.468:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.796320][ T38] audit: type=1326 audit(1757194106.468:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.833156][ T38] audit: type=1326 audit(1757194106.498:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.871948][ T38] audit: type=1326 audit(1757194106.548:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.872007][ T38] audit: type=1326 audit(1757194106.548:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c5c6ebe9 code=0x7ffc0000 [ 367.941113][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 367.941153][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 367.941184][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 367.945994][ T5956] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 367.946027][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.946049][ T5956] usb 3-1: Product: syz [ 367.946066][ T5956] usb 3-1: Manufacturer: syz [ 367.946082][ T5956] usb 3-1: SerialNumber: syz [ 368.026793][ T5956] usb 3-1: config 0 descriptor?? [ 368.036854][T11315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.053298][T11315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 368.068959][ T5956] usb 3-1: ucan: probing device on interface #0 [ 368.477339][ T5956] usb 3-1: ucan: device reported invalid tx-fifo size [ 368.477364][ T5956] usb 3-1: ucan: probe failed; try to update the device firmware [ 368.707116][ T5956] usb 3-1: USB disconnect, device number 30 [ 369.283106][T11348] netlink: 564 bytes leftover after parsing attributes in process `syz.5.2202'. [ 369.283147][T11348] netlink: 564 bytes leftover after parsing attributes in process `syz.5.2202'. [ 369.730587][T11358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2207'. [ 370.738172][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2218'. [ 370.738285][T11381] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2218'. [ 370.887139][ T3121] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 371.056512][ T3121] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 371.056546][ T3121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.056569][ T3121] usb 2-1: Product: syz [ 371.056585][ T3121] usb 2-1: Manufacturer: syz [ 371.056601][ T3121] usb 2-1: SerialNumber: syz [ 371.094357][ T3121] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 371.248754][ T3121] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 371.857137][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 371.876427][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2232'. [ 372.013173][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 372.013208][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.013230][ T45] usb 4-1: Product: syz [ 372.013246][ T45] usb 4-1: Manufacturer: syz [ 372.013263][ T45] usb 4-1: SerialNumber: syz [ 372.114301][ T5837] usb 2-1: USB disconnect, device number 23 [ 372.472452][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2237'. [ 372.473889][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2237'. [ 372.761841][T11424] loop2: detected capacity change from 0 to 7 [ 372.781611][ T3121] usb 2-1: Service connection timeout for: 257 [ 372.781637][ T3121] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 372.807234][ T3121] ath9k_htc: Failed to initialize the device [ 372.807755][ T5837] usb 2-1: ath9k_htc: USB layer deinitialized [ 372.818088][T11424] Dev loop2: unable to read RDB block 7 [ 372.818151][T11424] loop2: AHDI p1 p2 p3 [ 372.818188][T11424] loop2: partition table partially beyond EOD, truncated [ 372.818348][T11424] loop2: p1 start 1601398130 is beyond EOD, truncated [ 372.818371][T11424] loop2: p2 start 1702059890 is beyond EOD, truncated [ 372.915749][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 372.915813][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 372.956027][ T45] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 373.008088][ T45] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 373.026543][ T45] usb 4-1: USB disconnect, device number 16 [ 375.036552][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2262'. [ 379.420347][T11502] program syz.1.2273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.696667][ C1] sched: DL replenish lagged too much [ 386.118396][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.118480][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.177604][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 391.355752][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.375169][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.376570][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.417478][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.419856][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.672006][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 392.700320][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 392.701720][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 392.703916][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 392.717405][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 393.428510][T11520] chnl_net:caif_netlink_parms(): no params data found [ 393.965707][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 393.988782][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 393.991758][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 393.993240][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 393.994208][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.113397][ T5153] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 399.132571][ T5153] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 399.136047][ T5153] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 399.153742][ T5153] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 399.155949][ T5153] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 400.184115][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 400.223637][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 400.225971][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 400.227453][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 400.228313][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 413.141801][ T5842] Bluetooth: hci6: command tx timeout [ 415.177457][ T5153] Bluetooth: hci9: command tx timeout [ 415.178168][ T5153] Bluetooth: hci6: command tx timeout [ 415.178355][ T5153] Bluetooth: hci3: command tx timeout [ 415.178637][ T5153] Bluetooth: hci7: command tx timeout [ 415.178919][ T5153] Bluetooth: hci8: command tx timeout [ 417.258066][ T5153] Bluetooth: hci3: command tx timeout [ 417.258104][ T5153] Bluetooth: hci8: command tx timeout [ 417.258127][ T5153] Bluetooth: hci7: command tx timeout [ 417.258151][ T5153] Bluetooth: hci6: command tx timeout [ 417.258174][ T5153] Bluetooth: hci9: command tx timeout [ 419.338846][ T5839] Bluetooth: hci6: command tx timeout [ 419.338884][ T5839] Bluetooth: hci9: command tx timeout [ 419.338908][ T5839] Bluetooth: hci7: command tx timeout [ 419.338933][ T5839] Bluetooth: hci8: command tx timeout [ 419.338956][ T5839] Bluetooth: hci3: command tx timeout [ 421.417664][ T5153] Bluetooth: hci8: command tx timeout [ 421.417701][ T5153] Bluetooth: hci7: command tx timeout [ 421.417724][ T5153] Bluetooth: hci9: command tx timeout [ 421.417790][ T5839] Bluetooth: hci3: command tx timeout [ 450.573832][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.573913][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.200028][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.237463][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.244581][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.245957][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.280726][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.603032][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.636254][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.648590][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.675679][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.676707][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.535350][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 454.577658][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 454.581476][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 454.582869][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 454.624271][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 455.417375][ T5845] Bluetooth: hci0: command tx timeout [ 455.737294][ T5845] Bluetooth: hci5: command tx timeout [ 456.700634][ T5845] Bluetooth: hci10: command tx timeout [ 457.498035][ T5845] Bluetooth: hci0: command tx timeout [ 457.817494][ T5845] Bluetooth: hci5: command tx timeout [ 458.780272][ T5845] Bluetooth: hci10: command tx timeout [ 459.597266][ T5845] Bluetooth: hci0: command tx timeout [ 459.901469][ T5845] Bluetooth: hci5: command tx timeout [ 460.451092][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 460.488220][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 460.491023][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 460.492293][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 460.493146][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 460.759581][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 460.796597][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 460.820895][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 460.822217][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 460.823693][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 460.867395][ T5845] Bluetooth: hci10: command tx timeout [ 461.657355][ T5845] Bluetooth: hci0: command tx timeout [ 461.987441][ T5845] Bluetooth: hci5: command tx timeout [ 462.632462][ T5845] Bluetooth: hci11: command tx timeout [ 462.937385][ T5845] Bluetooth: hci12: command tx timeout [ 462.938168][ T5845] Bluetooth: hci10: command tx timeout [ 464.702940][ T5839] Bluetooth: hci11: command tx timeout [ 465.017331][ T5839] Bluetooth: hci12: command tx timeout [ 466.777319][ T5839] Bluetooth: hci11: command tx timeout [ 467.097589][ T5839] Bluetooth: hci12: command tx timeout [ 468.857263][ T5839] Bluetooth: hci11: command tx timeout [ 469.177632][ T5839] Bluetooth: hci12: command tx timeout [ 513.639637][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 513.672694][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 513.694969][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 513.711728][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 513.713737][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 513.802735][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.802846][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.159508][ T5153] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 515.194099][ T5153] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 515.211635][ T5153] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 515.214411][ T5153] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 515.215326][ T5153] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 515.604697][ T5846] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 515.640356][ T5846] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 515.643181][ T5846] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 515.674889][ T5846] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 515.675986][ T5846] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 520.490744][ T5854] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 520.529772][ T5854] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 520.535375][ T5854] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 520.561115][ T5854] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 520.561997][ T5854] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 520.691155][ T5842] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 520.740458][ T5842] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 520.745462][ T5842] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 520.766192][ T5842] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 520.778878][ T5842] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 539.498306][ T39] INFO: task kworker/u8:4:67 blocked for more than 143 seconds. [ 539.498341][ T39] Not tainted syzkaller #0 [ 539.498354][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.498369][ T39] task:kworker/u8:4 state:D stack:12184 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 539.498426][ T39] Workqueue: events_unbound free_mem_alloc_deferred [ 539.498490][ T39] Call Trace: [ 539.498498][ T39] [ 539.498515][ T39] __schedule+0x16f3/0x4c20 [ 539.498569][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 539.498597][ T39] ? arch_stack_walk+0x11c/0x150 [ 539.498641][ T39] ? __pfx___schedule+0x10/0x10 [ 539.498696][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.498735][ T39] rt_mutex_schedule+0x77/0xf0 [ 539.498758][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 539.498787][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 539.498835][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 539.498864][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 539.498935][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 539.498975][ T39] ? rcu_barrier+0x4c/0x570 [ 539.499007][ T39] ? __lock_acquire+0xab9/0xd20 [ 539.499044][ T39] ? rcu_barrier+0x4c/0x570 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 539.499066][ T39] mutex_lock_nested+0x16a/0x1d0 [ 539.499100][ T39] rcu_barrier+0x4c/0x570 [ 539.499129][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.499169][ T39] free_mem_alloc_deferred+0x16/0x30 [ 539.499196][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 539.499223][ T39] process_scheduled_works+0xade/0x17b0 [ 539.499286][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.499336][ T39] worker_thread+0x8a0/0xda0 [ 539.499397][ T39] kthread+0x70e/0x8a0 [ 539.499436][ T39] ? __pfx_worker_thread+0x10/0x10 [ 539.499466][ T39] ? __pfx_kthread+0x10/0x10 [ 539.499508][ T39] ? __pfx_kthread+0x10/0x10 [ 539.499545][ T39] ret_from_fork+0x3f9/0x770 [ 539.499545][ T39] ret_from_fork+0x3f9/0x770 [ 539.499580][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 539.499618][ T39] ? __switch_to_asm+0x39/0x70 [ 539.499640][ T39] ? __switch_to_asm+0x33/0x70 [ 539.499661][ T39] ? __pfx_kthread+0x10/0x10 [ 539.499698][ T39] ret_from_fork_asm+0x1a/0x30 [ 539.499740][ T39] [ 539.499889][ T39] INFO: task syz.2.2278:11513 blocked for more than 143 seconds. [ 539.499906][ T39] Not tainted syzkaller #0 [ 539.499917][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.499928][ T39] task:syz.2.2278 state:D stack:25128 pid:11513 tgid:11513 ppid:5848 task_flags:0x400040 flags:0x00004006 [ 539.499998][ T39] Call Trace: [ 539.500005][ T39] [ 539.500020][ T39] __schedule+0x16f3/0x4c20 [ 539.500082][ T39] ? __pfx___schedule+0x10/0x10 [ 539.500136][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.500173][ T39] rt_mutex_schedule+0x77/0xf0 [ 539.500196][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 539.500223][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 539.500272][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 539.500303][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 539.500332][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 539.500374][ T39] ? rcu_barrier+0x4c/0x570 [ 539.500405][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 539.500439][ T39] ? rcu_barrier+0x4c/0x570 [ 539.500460][ T39] mutex_lock_nested+0x16a/0x1d0 [ 539.500486][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 539.500520][ T39] rcu_barrier+0x4c/0x570 [ 539.500556][ T39] kvm_mmu_uninit_vm+0x53/0x90 [ 539.500582][ T39] kvm_arch_destroy_vm+0x23d/0x280 [ 539.500615][ T39] kvm_put_kvm+0xf8e/0x1670 [ 539.500655][ T39] ? __pfx_kvm_vm_release+0x10/0x10 [ 539.500687][ T39] kvm_vm_release+0x46/0x50 [ 539.500718][ T39] __fput+0x45b/0xa80 [ 539.500756][ T39] task_work_run+0x1d4/0x260 [ 539.500784][ T39] ? __pfx_task_work_run+0x10/0x10 [ 539.500831][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 539.500867][ T39] exit_to_user_mode_loop+0xec/0x110 [ 539.500907][ T39] do_syscall_64+0x2bd/0x3b0 [ 539.500929][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.500962][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.500986][ T39] ? clear_bhb_loop+0x60/0xb0 [ 539.501015][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.501049][ T39] RIP: 0033:0x7f04630bebe9 [ 539.501075][ T39] RSP: 002b:00007ffeafdb7168 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 539.501098][ T39] RAX: 0000000000000000 RBX: 000000000005d5e2 RCX: 00007f04630bebe9 [ 539.501115][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 539.501129][ T39] RBP: 00007f04632f7da0 R08: 0000000000000001 R09: 00000004afdb745f [ 539.501146][ T39] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f04632f5fac [ 539.501162][ T39] R13: 00007f04632f5fa0 R14: ffffffffffffffff R15: 00007ffeafdb7280 [ 539.501200][ T39] [ 539.501210][ T39] INFO: task syz.1.2279:11515 blocked for more than 143 seconds. [ 539.501226][ T39] Not tainted syzkaller #0 [ 539.501238][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.501249][ T39] task:syz.1.2279 state:D stack:25128 pid:11515 tgid:11515 ppid:5840 task_flags:0x400040 flags:0x00004004 [ 539.501316][ T39] Call Trace: [ 539.501324][ T39] [ 539.501338][ T39] __schedule+0x16f3/0x4c20 [ 539.501401][ T39] ? __pfx___schedule+0x10/0x10 [ 539.501456][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.501494][ T39] rt_mutex_schedule+0x77/0xf0 [ 539.501516][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 539.501544][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 539.501593][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 539.501624][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 539.501653][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 539.501694][ T39] ? rcu_barrier+0x4c/0x570 [ 539.501726][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 539.501759][ T39] ? rcu_barrier+0x4c/0x570 [ 539.501781][ T39] mutex_lock_nested+0x16a/0x1d0 [ 539.501807][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 539.501840][ T39] rcu_barrier+0x4c/0x570 [ 539.501876][ T39] kvm_mmu_uninit_vm+0x53/0x90 [ 539.501909][ T39] kvm_arch_destroy_vm+0x23d/0x280 [ 539.501941][ T39] kvm_put_kvm+0xf8e/0x1670 [ 539.501980][ T39] ? __pfx_kvm_vm_release+0x10/0x10 [ 539.502012][ T39] kvm_vm_release+0x46/0x50 [ 539.502041][ T39] __fput+0x45b/0xa80 [ 539.502077][ T39] task_work_run+0x1d4/0x260 [ 539.502104][ T39] ? __pfx_task_work_run+0x10/0x10 [ 539.502135][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 539.502171][ T39] exit_to_user_mode_loop+0xec/0x110 [ 539.502203][ T39] do_syscall_64+0x2bd/0x3b0 [ 539.502227][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.502249][ T39] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.502272][ T39] ? clear_bhb_loop+0x60/0xb0 [ 539.502301][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.502324][ T39] RIP: 0033:0x7f20c5c6ebe9 [ 539.502342][ T39] RSP: 002b:00007fff3eeb52c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 539.502365][ T39] RAX: 0000000000000000 RBX: 000000000005e23a RCX: 00007f20c5c6ebe9 [ 539.502380][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 539.502394][ T39] RBP: 00007f20c5ea7da0 R08: 0000000000000001 R09: 000000043eeb55bf [ 539.502410][ T39] R10: 0000001b30620000 R11: 0000000000000246 R12: 00007f20c5ea5fac [ 539.502426][ T39] R13: 00007f20c5ea5fa0 R14: ffffffffffffffff R15: 00007fff3eeb53e0 [ 539.502463][ T39] [ 539.502500][ T39] [ 539.502500][ T39] Showing all locks held in the system: [ 539.502513][ T39] 3 locks held by kworker/u8:0/12: [ 539.502529][ T39] 3 locks held by kworker/u8:1/13: [ 539.502541][ T39] #0: ffff88814d0cf938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.502604][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.502666][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 539.502729][ T39] 2 locks held by rcuc/1/28: [ 539.502741][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.502802][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.502866][ T39] 2 locks held by ksoftirqd/1/30: [ 539.502891][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.503205][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.503267][ T39] 12 locks held by kworker/1:0/31: [ 539.503282][ T39] 4 locks held by kworker/u8:2/37: [ 539.503295][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.503354][ T39] #1: ffffc90000ac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.503412][ T39] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 539.503475][ T39] #3: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x721/0xea0 [ 539.503532][ T39] 1 lock held by khungtaskd/39: [ 539.503545][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 539.503601][ T39] 4 locks held by kworker/1:1/45: [ 539.503614][ T39] #0: ffff8880242af538 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.503680][ T39] #1: ffffc90000b67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.503759][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.503826][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.503889][ T39] 3 locks held by kworker/u8:4/67: [ 539.503901][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.503999][ T39] #1: ffffc9000152fbc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.504061][ T39] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 539.504126][ T39] 4 locks held by kworker/1:2/993: [ 539.504139][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.504201][ T39] #1: ffffc900048cfbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.504263][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.504324][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.504400][ T39] 3 locks held by kworker/u8:10/3028: [ 539.504414][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.504473][ T39] #1: ffffc9000ce87bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.504535][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 539.504605][ T39] 4 locks held by kworker/u9:1/5153: [ 539.504619][ T39] #0: ffff88803e1bc938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.504685][ T39] #1: ffffc9000fb9fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.504747][ T39] #2: ffff88803b93c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 539.504806][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 539.504867][ T39] 2 locks held by getty/5597: [ 539.504881][ T39] #0: ffff88823bf780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 539.504956][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 539.505016][ T39] 4 locks held by kworker/1:3/5824: [ 539.505028][ T39] #0: ffff88805f171d38 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.505096][ T39] #1: ffffc90004c3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.505180][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.505240][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.505301][ T39] 4 locks held by kworker/u9:2/5839: [ 539.505315][ T39] #0: ffff888085e1f938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.505382][ T39] #1: ffffc90004d0fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.505443][ T39] #2: ffff88805c5140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 539.505500][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 539.505561][ T39] 4 locks held by kworker/u9:3/5842: [ 539.505574][ T39] #0: ffff888075602138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.505639][ T39] #1: ffffc90004d2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.505699][ T39] #2: ffff88808574c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 539.505756][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 539.505816][ T39] 4 locks held by kworker/u9:4/5845: [ 539.505829][ T39] #0: ffff888060e13938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.505893][ T39] #1: ffffc90004d8fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.505966][ T39] #2: ffff8880559200a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 539.506025][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 539.506084][ T39] 4 locks held by kworker/u9:8/5854: [ 539.506097][ T39] #0: ffff888085495938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.506163][ T39] #1: ffffc90004e0fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.506223][ T39] #2: ffff88806a2b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 539.506281][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 539.506343][ T39] 4 locks held by kworker/1:5/5928: [ 539.506356][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.768404][ T39] #1: ffffc9000530fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.768488][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.768549][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.768611][ T39] 4 locks held by kworker/1:6/5929: [ 539.768624][ T39] #0: ffff88805f177138 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.768691][ T39] #1: ffffc9000531fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.768753][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.768811][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.768874][ T39] 1 lock held by syz-executor/9420: [ 539.768887][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 539.768965][ T39] 1 lock held by syz-executor/10636: [ 539.768978][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 539.769035][ T39] 4 locks held by kworker/1:7/11480: [ 539.769050][ T39] 1 lock held by syz.5.2263/11481: [ 539.769062][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 539.769117][ T39] 1 lock held by syz.2.2278/11513: [ 539.769130][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 539.769184][ T39] 1 lock held by syz.1.2279/11515: [ 539.769197][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 539.769250][ T39] 4 locks held by syz-executor/11520: [ 539.769263][ T39] #0: ffff888066a94e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.769324][ T39] #1: ffff888066a940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.769387][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.769442][ T39] #3: ffff888071a88b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 539.769513][ T39] 3 locks held by syz-executor/11525: [ 539.769526][ T39] #0: ffff88804f7d4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.769584][ T39] #1: ffff88804f7d40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.769712][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.769802][ T39] 3 locks held by syz-executor/11528: [ 539.769815][ T39] #0: ffff888030dd8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.769873][ T39] #1: ffff888030dd80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.769942][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.769995][ T39] 2 locks held by kworker/1:9/11530: [ 539.770010][ T39] 4 locks held by kworker/1:10/11531: [ 539.770022][ T39] #0: ffff88805b1b5d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.770101][ T39] #1: ffffc900042afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.770188][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.770248][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.770309][ T39] 4 locks held by kworker/1:11/11532: [ 539.770323][ T39] #0: ffff8880301f7d38 ((wq_completion)wg-crypt-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.770388][ T39] #1: ffffc90004277bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.770449][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.770507][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.770574][ T39] 4 locks held by kworker/1:12/11533: [ 539.770588][ T39] #0: ffff88804ac0b538 ((wq_completion)wg-crypt-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.770653][ T39] #1: ffffc90004227bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.770736][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.770795][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.770855][ T39] 3 locks held by syz-executor/11536: [ 539.770868][ T39] #0: ffff888023f10e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.770937][ T39] #1: ffff888023f100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.770999][ T39] #2: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 539.771053][ T39] 2 locks held by syz-executor/11541: [ 539.771066][ T39] #0: ffff88804001ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 539.771125][ T39] #1: ffff88804001c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 539.771187][ T39] 2 locks held by kworker/1:13/11545: [ 539.771202][ T39] 4 locks held by kworker/1:14/11548: [ 539.771215][ T39] #0: ffff88801a3cad38 ((wq_completion)wg-crypt-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.771280][ T39] #1: ffffc90004c8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.771363][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.771420][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.771481][ T39] 1 lock held by syz-executor/11552: [ 539.771494][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.771549][ T39] 1 lock held by syz-executor/11554: [ 539.771563][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.771617][ T39] 1 lock held by syz-executor/11556: [ 539.771630][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.771684][ T39] 1 lock held by syz-executor/11560: [ 539.771697][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.771752][ T39] 1 lock held by syz-executor/11562: [ 539.771765][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.771828][ T39] 4 locks held by kworker/1:16/11571: [ 539.771841][ T39] #0: ffff88803625ed38 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 539.771920][ T39] #1: ffffc9000123fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 539.771982][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 539.772041][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 539.772103][ T39] 1 lock held by syz-executor/11574: [ 539.772116][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.772171][ T39] 1 lock held by syz-executor/11577: [ 539.772189][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.772243][ T39] 1 lock held by syz-executor/11579: [ 539.772257][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.772312][ T39] 1 lock held by syz-executor/11583: [ 539.772325][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.772380][ T39] 1 lock held by syz-executor/11585: [ 539.772393][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 539.772448][ T39] 1 lock held by dhcpcd/11587: [ 539.772461][ T39] #0: ffff888084684350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 539.772520][ T39] 1 lock held by dhcpcd/11588: [ 539.772533][ T39] #0: ffff888054030350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 539.772605][ T39] 1 lock held by dhcpcd/11589: [ 539.772618][ T39] #0: ffff88806fc9a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 539.772677][ T39] 1 lock held by dhcpcd/11590: [ 539.772690][ T39] #0: ffff888028b32350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 539.772753][ T39] 1 lock held by dhcpcd/11591: [ 539.772774][ T39] #0: ffff88807ab54350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 539.772842][ T39] [ 539.772848][ T39] ============================================= [ 539.772848][ T39] [ 539.772890][ T39] NMI backtrace for cpu 0 [ 539.773039][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 539.773075][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.773090][ T39] Call Trace: [ 539.773099][ T39] [ 539.773115][ T39] dump_stack_lvl+0x189/0x250 [ 539.773162][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.773219][ T39] ? __pfx__printk+0x10/0x10 [ 539.773257][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 539.773297][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 539.773343][ T39] ? __pfx__printk+0x10/0x10 [ 539.773381][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.773435][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 539.773480][ T39] watchdog+0xf93/0xfe0 [ 539.773526][ T39] ? watchdog+0x1de/0xfe0 [ 539.773571][ T39] kthread+0x70e/0x8a0 [ 539.773622][ T39] ? __pfx_watchdog+0x10/0x10 [ 539.773661][ T39] ? __pfx_kthread+0x10/0x10 [ 539.773713][ T39] ? __pfx_kthread+0x10/0x10 [ 539.773750][ T39] ret_from_fork+0x3f9/0x770 [ 539.773784][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 539.773824][ T39] ? __switch_to_asm+0x39/0x70 [ 539.773845][ T39] ? __switch_to_asm+0x33/0x70 [ 539.773872][ T39] ? __pfx_kthread+0x10/0x10 [ 539.773910][ T39] ret_from_fork_asm+0x1a/0x30 [ 539.774000][ T39] [ 539.774010][ T39] Sending NMI from CPU 0 to CPUs 1: [ 539.774043][ C1] NMI backtrace for cpu 1 [ 539.774059][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 539.774082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.774095][ C1] RIP: 0010:NF_HOOK+0x1df/0x3a0 [ 539.774125][ C1] Code: 44 24 60 00 02 00 00 88 5c 24 60 48 8b 44 24 30 48 89 44 24 68 49 8d 7d 10 ba 10 00 00 00 31 f6 e8 66 70 b5 f8 48 8b 44 24 18 <48> 89 84 24 80 00 00 00 48 8b 44 24 28 48 89 84 24 88 00 00 00 48 [ 539.774141][ C1] RSP: 0018:ffffc90000a3f560 EFLAGS: 00000246 [ 539.774159][ C1] RAX: ffff88805c1c8000 RBX: 0000000000000001 RCX: 0000000000000000 [ 539.774172][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a3f5e0 [ 539.774184][ C1] RBP: ffffc90000a3f670 R08: ffffc90000a3f5df R09: 0000000000000000 [ 539.774197][ C1] R10: ffffc90000a3f5d0 R11: fffff52000147ebc R12: 1ffff92000147eb4 [ 539.774213][ C1] R13: ffffc90000a3f5c0 R14: ffff88805baa0200 R15: dffffc0000000000 [ 539.774228][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 539.774245][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.774258][ C1] CR2: 000055860cc44660 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 539.774275][ C1] Call Trace: [ 539.774282][ C1] [ 539.774292][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 539.774319][ C1] ? NF_HOOK+0x9a/0x3a0 [ 539.774345][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 539.774369][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 539.774401][ C1] ? skb_dst+0x4f/0xd0 [ 539.774427][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 539.774456][ C1] NF_HOOK+0x30c/0x3a0 [ 539.774483][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 539.774509][ C1] ? NF_HOOK+0x9a/0x3a0 [ 539.774535][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 539.774562][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 539.774596][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 539.774620][ C1] __netif_receive_skb+0x143/0x380 [ 539.774645][ C1] ? rt_spin_unlock+0x65/0x80 [ 539.774678][ C1] ? process_backlog+0x27b/0x900 [ 539.774702][ C1] process_backlog+0x31e/0x900 [ 539.774735][ C1] __napi_poll+0xb3/0x540 [ 539.774761][ C1] net_rx_action+0x707/0xe00 [ 539.774796][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 539.774843][ C1] handle_softirqs+0x22f/0x710 [ 539.774874][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 539.774904][ C1] run_ktimerd+0xcf/0x190 [ 539.774931][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 539.774959][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 539.774984][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 539.775010][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 539.775033][ C1] smpboot_thread_fn+0x53f/0xa60 [ 539.775058][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 539.775087][ C1] kthread+0x70e/0x8a0 [ 539.775116][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 539.775141][ C1] ? __pfx_kthread+0x10/0x10 [ 539.775173][ C1] ? __pfx_kthread+0x10/0x10 [ 539.775202][ C1] ret_from_fork+0x3f9/0x770 [ 539.775228][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 539.775256][ C1] ? __switch_to_asm+0x39/0x70 [ 539.775273][ C1] ? __switch_to_asm+0x33/0x70 [ 539.775290][ C1] ? __pfx_kthread+0x10/0x10 [ 539.775319][ C1] ret_from_fork_asm+0x1a/0x30 [ 539.775346][ C1] [ 539.776053][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 539.776072][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 539.776099][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.776113][ T39] Call Trace: [ 539.776122][ T39] [ 539.776131][ T39] dump_stack_lvl+0x99/0x250 [ 539.776168][ T39] ? __asan_memcpy+0x40/0x70 [ 539.776194][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.776228][ T39] ? __pfx__printk+0x10/0x10 [ 539.776267][ T39] vpanic+0x281/0x750 [ 539.776306][ T39] ? __pfx_vpanic+0x10/0x10 [ 539.776338][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 539.776363][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.776408][ T39] panic+0xb9/0xc0 [ 539.776442][ T39] ? __pfx_panic+0x10/0x10 [ 539.776480][ T39] ? irq_work_queue+0xc3/0x140 [ 539.776514][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 539.776546][ T39] watchdog+0xfd2/0xfe0 [ 539.776582][ T39] ? watchdog+0x1de/0xfe0 [ 539.776619][ T39] kthread+0x70e/0x8a0 [ 539.776658][ T39] ? __pfx_watchdog+0x10/0x10 [ 539.776688][ T39] ? __pfx_kthread+0x10/0x10 [ 539.776728][ T39] ? __pfx_kthread+0x10/0x10 [ 539.776765][ T39] ret_from_fork+0x3f9/0x770 [ 539.776798][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 539.776835][ T39] ? __switch_to_asm+0x39/0x70 [ 539.776860][ T39] ? __switch_to_asm+0x33/0x70 [ 539.776878][ T39] ? __pfx_kthread+0x10/0x10 [ 539.776910][ T39] ret_from_fork_asm+0x1a/0x30 [ 539.776954][ T39] [ 539.777303][ T39] Kernel Offset: disabled