last executing test programs: 2m32.687319391s ago: executing program 1 (id=137): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xffff, 0x1, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2m32.538920065s ago: executing program 1 (id=139): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x0, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0xfffffffe, 0x4, 0x0, 0xffff, 0x4, 0x549, 0xe910, 0x5, 0x9, 0x0, 0x6]}) 2m32.302743656s ago: executing program 1 (id=141): write$bt_hci(0xffffffffffffffff, 0x0, 0x8) unshare(0x8040480) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) 2m32.148370343s ago: executing program 1 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 2m31.965923787s ago: executing program 1 (id=147): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)={0x1b0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m31.041721914s ago: executing program 2 (id=157): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="930b76330600", 0x0, 0x0, 0xd8ceeaf369b01de9, 0x0, 0x0}) 2m30.828607437s ago: executing program 2 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2545fffd0008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4048841}, 0x4000804) 2m30.664227651s ago: executing program 2 (id=161): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006ef000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2m30.524114655s ago: executing program 1 (id=162): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020) 2m30.211345517s ago: executing program 32 (id=162): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020) 2m30.198995598s ago: executing program 2 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) 2m29.84580885s ago: executing program 2 (id=169): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m29.643650585s ago: executing program 2 (id=170): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f020}) 2m14.286793945s ago: executing program 33 (id=170): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0xa6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f020}) 1m58.997525233s ago: executing program 5 (id=361): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x260}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) 1m58.822810253s ago: executing program 5 (id=365): r0 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 1m58.611968744s ago: executing program 5 (id=369): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m58.513325694s ago: executing program 5 (id=371): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 1m58.388228035s ago: executing program 5 (id=374): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, 0x0, r0, 0x0, 0x800000000ff, 0x0) 1m57.380555487s ago: executing program 5 (id=388): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1eed2c00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x844) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="402305"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m56.867474963s ago: executing program 34 (id=388): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1eed2c00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x844) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="402305"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m9.250131235s ago: executing program 0 (id=823): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x16, 0x0, 0x0, 0x1, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.85924064s ago: executing program 0 (id=827): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0}, 0x0) 1m8.526325692s ago: executing program 0 (id=833): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 1m8.381693832s ago: executing program 0 (id=836): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 1m8.207867104s ago: executing program 0 (id=839): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xb5\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7X>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) splice(r1, 0x0, r0, &(0x7f0000000140)=0x2, 0x9, 0x1) 1m3.523757802s ago: executing program 0 (id=880): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 1m3.012282937s ago: executing program 35 (id=880): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 26.436891229s ago: executing program 4 (id=1178): setgroups(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0xfffffffffffffffc, {0x7, 0x29, 0x7, 0x12510421, 0xfffd, 0x4, 0x1, 0x1, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 25.068710598s ago: executing program 4 (id=1183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0201000209000000000000000000000003200500008000000200000000000028c8c3caf68ec360000200100000710002ffffffff0000000002000a"], 0x48}}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 24.665084724s ago: executing program 4 (id=1185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) 24.347495242s ago: executing program 4 (id=1187): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$pid(0x3, 0x0) 24.244641023s ago: executing program 4 (id=1189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14004895}}], 0x1, 0xc000) 24.10368901s ago: executing program 4 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sync() 8.672273079s ago: executing program 36 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sync() 3.920783202s ago: executing program 7 (id=1411): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x3}, 0x1c) 3.677042058s ago: executing program 7 (id=1423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, &(0x7f00000000c0)=0x8) 3.57922799s ago: executing program 7 (id=1415): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) 3.503678309s ago: executing program 7 (id=1416): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 3.421653725s ago: executing program 3 (id=1420): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 3.372784082s ago: executing program 7 (id=1430): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.549854319s ago: executing program 7 (id=1425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) 2.549740756s ago: executing program 3 (id=1426): r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {0x6, @link_local}, 0x38, {0x2, 0xfffe, @local}, 'syz_tun\x00'}) 2.404868995s ago: executing program 37 (id=1425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) 2.191749176s ago: executing program 3 (id=1431): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x3}) readv(r0, &(0x7f0000000040), 0x2000000000000213) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 1.964513171s ago: executing program 3 (id=1432): mkdir(&(0x7f0000000940)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 1.961929036s ago: executing program 6 (id=1433): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 1.765397875s ago: executing program 6 (id=1434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x185a, 0xfffffef2, 0xfffffffffffffffe, 0x0) 1.53086922s ago: executing program 6 (id=1435): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.53077191s ago: executing program 3 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251200004008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000080014"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) 1.437711245s ago: executing program 6 (id=1437): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 992.342116ms ago: executing program 3 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x60048840}, 0x4810) 890.676772ms ago: executing program 38 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x60048840}, 0x4810) 878.718116ms ago: executing program 6 (id=1444): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x13, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550a, 0x0) 0s ago: executing program 6 (id=1440): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80020, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0}, 0x40440c0) kernel console output (not intermixed with test programs): ng preconfigured BSSID 50:50:50:50:50:50 [ 86.938970][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.943566][ T5823] veth0_macvtap: entered promiscuous mode [ 87.032187][ T5823] veth1_macvtap: entered promiscuous mode [ 87.191968][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.234716][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.235481][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.235618][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.282913][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.323302][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.323393][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.323406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.332536][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.348542][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.366897][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.386786][ T162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.485568][ T162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.489601][ T3623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.492146][ T3623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.518857][ T3623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.519592][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.519605][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.390631][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.390645][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.395007][ T5828] Bluetooth: hci2: command tx timeout [ 88.485173][ T5828] Bluetooth: hci1: command tx timeout [ 88.485209][ T5828] Bluetooth: hci0: command tx timeout [ 88.555034][ T5828] Bluetooth: hci3: command tx timeout [ 88.579936][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.580029][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.887247][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.887266][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.946120][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.043827][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.043847][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.191023][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 89.232124][ T5813] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 89.232150][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.232169][ T5813] usb 1-1: Product: syz [ 89.232182][ T5813] usb 1-1: Manufacturer: syz [ 89.232195][ T5813] usb 1-1: SerialNumber: syz [ 89.265032][ T929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.492226][ T929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.492264][ T929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.498597][ T929] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.498625][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.498643][ T929] usb 2-1: SerialNumber: syz [ 90.393776][ T929] usb 2-1: 0:2 : does not exist [ 90.529544][ T5813] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 90.760664][ T5813] usb 1-1: USB disconnect, device number 2 [ 91.229771][ T5935] tipc: Started in network mode [ 91.229803][ T5935] tipc: Node identity ac14140f, cluster identity 4711 [ 91.353206][ T5935] tipc: New replicast peer: 255.255.255.255 [ 91.384239][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.427330][ T5935] tipc: Enabled bearer , priority 10 [ 91.778378][ T929] usb 2-1: USB disconnect, device number 2 [ 91.821390][ T5946] Bluetooth: MGMT ver 1.23 [ 91.946821][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.115016][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 92.163140][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 92.163170][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.163189][ T9] usb 4-1: Product: syz [ 92.163203][ T9] usb 4-1: Manufacturer: syz [ 92.163217][ T9] usb 4-1: SerialNumber: syz [ 92.170567][ T5954] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12'. [ 92.353306][ T9] usb 4-1: config 0 descriptor?? [ 92.421655][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 92.440258][ T5835] tipc: Node number set to 2886997007 [ 92.811210][ T9] gspca_se401: ExtraFeatures: 48 [ 92.811227][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811240][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811252][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811263][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811275][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811287][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811299][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811311][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811323][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 92.811335][ T9] gspca_se401: Frame size: 0x0 1/16th janggu [ 93.024040][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.273435][ T9] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 93.421280][ T9] usb 4-1: USB disconnect, device number 2 [ 93.703966][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 95.385293][ T6011] ======================================================= [ 95.385293][ T6011] WARNING: The mand mount option has been deprecated and [ 95.385293][ T6011] and is ignored by this kernel. Remove the mand [ 95.385293][ T6011] option from the mount to silence this warning. [ 95.385293][ T6011] ======================================================= [ 96.226063][ T6036] capability: warning: `syz.0.47' uses deprecated v2 capabilities in a way that may be insecure [ 96.939231][ T6056] warning: `syz.3.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.465210][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.616858][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.616884][ T9] usb 1-1: config 0 has no interface number 0 [ 97.619885][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 97.619915][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.619935][ T9] usb 1-1: Product: syz [ 97.619949][ T9] usb 1-1: Manufacturer: syz [ 97.619963][ T9] usb 1-1: SerialNumber: syz [ 97.692375][ T9] usb 1-1: config 0 descriptor?? [ 97.937306][ T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 98.120386][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 98.223767][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 98.224085][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 98.224131][ T9] usb 1-1: media controller created [ 98.442628][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.684688][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 98.850414][ T6107] tipc: Started in network mode [ 98.850444][ T6107] tipc: Node identity ac14140f, cluster identity 4711 [ 98.850734][ T6107] tipc: New replicast peer: 255.255.255.255 [ 98.852667][ T6107] tipc: Enabled bearer , priority 10 [ 98.853625][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 98.853644][ T6107] tipc: Disabling bearer [ 99.115282][ T9] usb 1-1: USB disconnect, device number 3 [ 99.432245][ T37] audit: type=1326 audit(1776211972.323:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.2.85" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1d7dfc819 code=0x0 [ 99.912521][ T6144] process 'syz.0.94' launched './file0' with NULL argv: empty string added [ 99.994861][ T5142] Bluetooth: hci0: command tx timeout [ 100.135866][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.284926][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 100.296386][ T5812] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 100.296412][ T5812] usb 2-1: config 0 has no interface number 0 [ 100.296457][ T5812] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 100.296481][ T5812] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 100.311929][ T5812] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 100.311957][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.311976][ T5812] usb 2-1: Product: syz [ 100.311989][ T5812] usb 2-1: Manufacturer: syz [ 100.312003][ T5812] usb 2-1: SerialNumber: syz [ 100.375845][ T5812] usb 2-1: config 0 descriptor?? [ 100.377032][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.379293][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.603846][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.604395][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.232171][ T5812] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 101.232206][ T5812] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 101.232770][ T5812] asix 2-1:0.251: probe with driver asix failed with error -71 [ 101.339850][ T5812] usb 2-1: USB disconnect, device number 3 [ 102.061925][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 102.396571][ T6154] infiniband syz1: set active [ 102.396592][ T6154] infiniband syz1: added syz_tun [ 102.477806][ T6154] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 102.491479][ T6154] infiniband syz1: Couldn't open port 1 [ 102.491829][ T6154] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 102.491863][ T6154] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 102.491904][ T6154] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 102.664175][ T6154] RDS/IB: syz1: added [ 102.667555][ T6154] smc: adding ib device syz1 with port count 1 [ 102.667747][ T6154] smc: ib device syz1 port 1 has no pnetid [ 102.809738][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 103.541076][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.124'. [ 103.821385][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.037047][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 104.114888][ T821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.299383][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 104.307433][ T821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.307478][ T821] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.307501][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.425831][ T821] usb 4-1: config 0 descriptor?? [ 104.787197][ T821] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.096470][ T821] usb 4-1: USB disconnect, device number 3 [ 105.382074][ T6233] syz.2.133 (6233) used greatest stack depth: 18968 bytes left [ 107.004888][ T6280] capability: warning: `syz.2.157' uses 32-bit capabilities (legacy support in use) [ 107.193017][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 108.053929][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.102761][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.113740][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.118892][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.119579][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.360554][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.400588][ T6297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.167'. [ 108.420564][ T6298] netlink: 52 bytes leftover after parsing attributes in process `syz.3.167'. [ 108.497033][ T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.655729][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 108.670505][ T63] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.670532][ T63] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.703034][ T63] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.703053][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.703063][ T63] usb 1-1: Product: syz [ 108.703071][ T63] usb 1-1: Manufacturer: syz [ 108.703078][ T63] usb 1-1: SerialNumber: syz [ 108.894337][ T63] usb 1-1: 0:2 : does not exist [ 109.066231][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.082128][ T63] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 109.287841][ T63] usb 1-1: USB disconnect, device number 4 [ 109.540148][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.545967][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.997800][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.182012][ T6334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.237183][ T5142] Bluetooth: hci3: command tx timeout [ 110.454185][ T5967] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.626162][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 110.628856][ T5967] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 110.628883][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.678474][ T5967] usb 4-1: config 0 descriptor?? [ 110.921831][ T5967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 110.938418][ T5967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.944609][ T5967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 110.944657][ T5967] usb 4-1: media controller created [ 111.008508][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.144907][ T5967] az6027: usb out operation failed. (-71) [ 111.151826][ T5967] az6027: usb out operation failed. (-71) [ 111.151843][ T5967] stb0899_attach: Driver disabled by Kconfig [ 111.151861][ T5967] az6027: no front-end attached [ 111.151861][ T5967] [ 111.152261][ T5967] az6027: usb out operation failed. (-71) [ 111.152287][ T5967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 111.234332][ T5967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 111.304286][ T5967] dvb-usb: schedule remote query interval to 400 msecs. [ 111.304308][ T5967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 111.349886][ T5967] usb 4-1: USB disconnect, device number 4 [ 111.627936][ T5967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 111.663845][ T6299] chnl_net:caif_netlink_parms(): no params data found [ 112.061559][ T6368] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 112.108122][ T13] bridge_slave_1: left allmulticast mode [ 112.108227][ T13] bridge_slave_1: left promiscuous mode [ 112.140573][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.315375][ T5142] Bluetooth: hci3: command tx timeout [ 112.319596][ T13] bridge_slave_0: left allmulticast mode [ 112.319637][ T13] bridge_slave_0: left promiscuous mode [ 112.319863][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.152614][ T37] audit: type=1326 audit(1776211986.013:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.3.206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac599c819 code=0x0 [ 113.690896][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.767210][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.789951][ T13] bond0 (unregistering): Released all slaves [ 113.843091][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 114.140798][ T13] tipc: Disabling bearer [ 114.149778][ T13] tipc: Left network mode [ 114.206093][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.206203][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.206414][ T6299] bridge_slave_0: entered allmulticast mode [ 114.208934][ T6299] bridge_slave_0: entered promiscuous mode [ 114.221631][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.221746][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.221943][ T6299] bridge_slave_1: entered allmulticast mode [ 114.224458][ T6299] bridge_slave_1: entered promiscuous mode [ 114.395957][ T5142] Bluetooth: hci3: command tx timeout [ 114.867883][ T6299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.909074][ T6299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.461053][ T6299] team0: Port device team_slave_0 added [ 115.483641][ T6299] team0: Port device team_slave_1 added [ 115.959863][ T6465] netlink: 'syz.3.226': attribute type 10 has an invalid length. [ 115.959885][ T6465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.226'. [ 116.180366][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.181333][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.181347][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.181369][ T6299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.343219][ T6299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.343258][ T6299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.343297][ T6299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.388536][ T5812] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.477448][ T5142] Bluetooth: hci3: command tx timeout [ 116.557207][ T5812] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.557233][ T5812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.557251][ T5812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.557327][ T5812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.559163][ T5812] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.559185][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.559203][ T5812] usb 1-1: Product: syz [ 116.559216][ T5812] usb 1-1: Manufacturer: syz [ 116.701774][ T5812] cdc_wdm 1-1:1.0: skipping garbage [ 116.701794][ T5812] cdc_wdm 1-1:1.0: skipping garbage [ 116.732051][ T5812] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 116.732080][ T5812] cdc_wdm 1-1:1.0: Unknown control protocol [ 116.740391][ T6299] hsr_slave_0: entered promiscuous mode [ 116.756866][ T6299] hsr_slave_1: entered promiscuous mode [ 116.762316][ T6299] debugfs: 'hsr0' already exists in 'hsr' [ 116.762341][ T6299] Cannot create hsr debugfs directory [ 116.939839][ T5812] usb 1-1: USB disconnect, device number 5 [ 117.481656][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 117.634897][ T13] hsr_slave_0: left promiscuous mode [ 117.655091][ T13] hsr_slave_1: left promiscuous mode [ 117.656466][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.664422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.697813][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.697835][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.758483][ T13] veth1_macvtap: left promiscuous mode [ 117.758624][ T13] veth0_macvtap: left promiscuous mode [ 117.758774][ T13] veth1_vlan: left promiscuous mode [ 117.758944][ T13] veth0_vlan: left promiscuous mode [ 118.456904][ T13] team0 (unregistering): Port device team_slave_1 removed [ 118.495553][ T13] team0 (unregistering): Port device team_slave_0 removed [ 120.214070][ T5832] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.319338][ T6299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.370598][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.372945][ T6299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.404864][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 120.410995][ T5832] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 120.411025][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 120.411044][ T5832] usb 4-1: Product: syz [ 120.411058][ T5832] usb 4-1: Manufacturer: syz [ 120.411072][ T5832] usb 4-1: SerialNumber: syz [ 120.445461][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.446697][ T6299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.473305][ T5832] usb 4-1: config 0 descriptor?? [ 120.511680][ T5832] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 120.514581][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.518215][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 120.529965][ T6299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.550834][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.596497][ T6299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.708194][ T5812] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.708260][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.708286][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.708322][ T5812] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 120.708344][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.743141][ T5832] gspca_sn9c2028: read1 error -32 [ 120.756773][ T5812] usb 1-1: config 0 descriptor?? [ 120.762221][ T5832] gspca_sn9c2028: read1 error -32 [ 121.004768][ T5832] usb 4-1: USB disconnect, device number 5 [ 121.251451][ T5812] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x2 [ 121.251501][ T5812] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 121.251551][ T5812] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 121.251577][ T5812] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 121.251601][ T5812] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 121.251624][ T5812] hid-rmi 0003:0461:4E72.0001: unknown main item tag 0x0 [ 121.294438][ T5812] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 121.386539][ T6299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.424527][ T5812] usb 1-1: USB disconnect, device number 6 [ 121.453747][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.477215][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.477337][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.534032][ T6542] fido_id[6542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 121.564340][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.564462][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.200116][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.624265][ T6299] veth0_vlan: entered promiscuous mode [ 122.639878][ T6299] veth1_vlan: entered promiscuous mode [ 122.758148][ T6299] veth0_macvtap: entered promiscuous mode [ 122.763662][ T6299] veth1_macvtap: entered promiscuous mode [ 122.780641][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.807011][ T6299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.829560][ T3550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.846155][ T3550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.846656][ T3550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.846694][ T3550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.983868][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.214140][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.214166][ T5812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.268116][ T5812] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 123.268141][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.268158][ T5812] usb 4-1: Product: syz [ 123.268172][ T5812] usb 4-1: Manufacturer: syz [ 123.268186][ T5812] usb 4-1: SerialNumber: syz [ 123.493537][ T5812] usb 4-1: 0:1 : does not exist [ 123.590739][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.590759][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.717450][ T5812] usb 4-1: 3:0: failed to get current value for ch 0 (-32) [ 123.727026][ T5812] usb 4-1: unit 0 not found! [ 124.009034][ T5812] usb 4-1: USB disconnect, device number 6 [ 124.014334][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.014353][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.096387][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.138744][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.139868][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.141019][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.142445][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.314199][ T6587] binder: 6586:6587 ioctl 400c620e 0 returned -14 [ 124.398909][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.662839][ T6618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.264'. [ 125.786574][ T929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.880384][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 125.915594][ T5899] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.954950][ T929] usb 5-1: Using ep0 maxpacket: 16 [ 125.973179][ T929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.974407][ T929] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 126.002885][ T929] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 126.002916][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.002935][ T929] usb 5-1: Product: syz [ 126.002949][ T929] usb 5-1: Manufacturer: syz [ 126.002963][ T929] usb 5-1: SerialNumber: syz [ 126.096586][ T5899] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 126.096615][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.139785][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.140762][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.146455][ T5899] usb 4-1: config 0 descriptor?? [ 126.157446][ T6584] bridge_slave_0: entered allmulticast mode [ 126.174292][ T6584] bridge_slave_0: entered promiscuous mode [ 126.193649][ T5899] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 126.195039][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.195155][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.195370][ T6584] bridge_slave_1: entered allmulticast mode [ 126.201886][ T6584] bridge_slave_1: entered promiscuous mode [ 126.235022][ T5142] Bluetooth: hci4: command tx timeout [ 126.296004][ T929] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 126.298594][ T929] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 126.399510][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.413417][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.519942][ T6584] team0: Port device team_slave_0 added [ 126.524259][ T6584] team0: Port device team_slave_1 added [ 126.597095][ T5899] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 126.603815][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.603830][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.603854][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.666464][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.666479][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.666548][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.723173][ T929] usb 5-1: 2:1 : can't get Cluster Descriptor [ 126.800238][ T5899] gspca_cpia1: usb_control_msg 01, error -32 [ 126.800538][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 126.800669][ T5899] gspca_cpia1: usb_control_msg 01, error -32 [ 126.802641][ T5899] gspca_cpia1: usb_control_msg 01, error -71 [ 126.802657][ T5899] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 126.881986][ T5899] usb 4-1: USB disconnect, device number 7 [ 126.980308][ T929] usb 5-1: USB disconnect, device number 2 [ 127.061606][ T6640] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.271'. [ 127.062119][ T6640] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 127.134295][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.237402][ T6584] hsr_slave_0: entered promiscuous mode [ 127.239118][ T6584] hsr_slave_1: entered promiscuous mode [ 127.239877][ T6584] debugfs: 'hsr0' already exists in 'hsr' [ 127.239898][ T6584] Cannot create hsr debugfs directory [ 128.274864][ T5967] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.279819][ T6665] loop8: detected capacity change from 0 to 1 [ 128.307452][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.317343][ T5142] Bluetooth: hci4: command tx timeout [ 128.344604][ T6584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.359081][ T6665] Dev loop8: unable to read RDB block 1 [ 128.359123][ T6665] loop8: unable to read partition table [ 128.359343][ T6665] loop8: partition table beyond EOD, truncated [ 128.385660][ T6665] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 128.456486][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 128.461661][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.461680][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.461701][ T5967] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 128.461713][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.483413][ T5967] usb 5-1: config 0 descriptor?? [ 128.504049][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.540637][ T6584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.588953][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.588980][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.589030][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.589054][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.589066][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.812360][ T9] usb 4-1: config 0 descriptor?? [ 128.826593][ T9] hub 4-1:0.0: USB hub found [ 128.846509][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.852186][ T6584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.943366][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.960813][ T6584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.144380][ T9] hub 4-1:0.0: 9 ports detected [ 129.148853][ T9] hub 4-1:0.0: insufficient power available to use all downstream ports [ 129.263695][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.268987][ T5967] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 129.273050][ T5967] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 129.273081][ T5967] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 129.273107][ T5967] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 129.273359][ T5967] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 129.359397][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 129.359423][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 129.564928][ T9] usb 4-1: USB disconnect, device number 8 [ 129.582479][ T5967] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 129.630720][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.749371][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.780815][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.808459][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.848508][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.848636][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.304953][ T5967] usb 5-1: USB disconnect, device number 3 [ 130.394961][ T5142] Bluetooth: hci4: command tx timeout [ 130.992217][ T6701] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 131.046613][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.544908][ T63] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.612365][ T6584] veth0_vlan: entered promiscuous mode [ 131.628404][ T6584] veth1_vlan: entered promiscuous mode [ 131.709714][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 131.709764][ T63] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 131.709787][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.763711][ T63] usb 5-1: config 0 descriptor?? [ 131.774700][ T6711] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 131.908486][ T6584] veth0_macvtap: entered promiscuous mode [ 131.961647][ T6728] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 131.992929][ T6584] veth1_macvtap: entered promiscuous mode [ 132.231888][ T63] hid (null): global environment stack underflow [ 132.301632][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.304459][ T63] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 132.304493][ T63] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 132.304518][ T63] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 132.304542][ T63] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 132.304567][ T63] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 132.355573][ T63] asus 0003:0B05:1ABE.0003: global environment stack underflow [ 132.355594][ T63] asus 0003:0B05:1ABE.0003: item 0 1 1 11 parsing failed [ 132.356344][ T63] asus 0003:0B05:1ABE.0003: Asus hid parse failed: -22 [ 132.356441][ T63] asus 0003:0B05:1ABE.0003: probe with driver asus failed with error -22 [ 132.403212][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.476006][ T5142] Bluetooth: hci4: command tx timeout [ 132.507940][ T10] usb 5-1: USB disconnect, device number 4 [ 132.608374][ T3623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.644020][ T3623] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.644105][ T3623] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.644159][ T3623] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.899289][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.899389][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.633553][ T37] audit: type=1326 audit(1776212007.523:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.3.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac599c819 code=0x7fc00000 [ 133.672554][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.672578][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.008694][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.008715][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.159053][ T6789] netlink: 1 bytes leftover after parsing attributes in process `syz.5.318'. [ 136.102995][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 136.357092][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 136.991857][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'. [ 136.991889][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.332'. [ 136.991904][ T6839] netlink: 2 bytes leftover after parsing attributes in process `syz.5.332'. [ 136.992675][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.332'. [ 136.992692][ T6839] netlink: 2 bytes leftover after parsing attributes in process `syz.5.332'. [ 139.299495][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 139.826972][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.4.377'. [ 140.375036][ T6960] __nla_validate_parse: 1 callbacks suppressed [ 140.375054][ T6960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.385'. [ 140.385143][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 140.538610][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.538642][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.541440][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.541470][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.541490][ T10] usb 5-1: Product: syz [ 140.541504][ T10] usb 5-1: Manufacturer: syz [ 140.541518][ T10] usb 5-1: SerialNumber: syz [ 140.631720][ T10] usb 5-1: config 0 descriptor?? [ 140.663251][ T10] usb 5-1: selecting invalid altsetting 0 [ 140.961037][ T5812] usb 5-1: USB disconnect, device number 5 [ 141.583695][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.639462][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.652244][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.653316][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.665083][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.694927][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.747771][ T150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.875789][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 141.878488][ T5916] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.878514][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.878539][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.918104][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.918132][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.918150][ T5916] usb 4-1: Product: syz [ 141.918162][ T5916] usb 4-1: Manufacturer: syz [ 141.918174][ T5916] usb 4-1: SerialNumber: syz [ 142.051261][ T5916] usb 4-1: 0:2 : does not exist [ 142.503150][ T150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.869718][ T5916] usb 4-1: USB disconnect, device number 9 [ 143.112624][ T150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.765899][ T5142] Bluetooth: hci4: command tx timeout [ 143.816255][ T150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.934923][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.095294][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 144.098529][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.098566][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.098599][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.098612][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.187183][ T5916] usb 5-1: config 0 descriptor?? [ 144.206374][ T5916] hub 5-1:0.0: USB hub found [ 144.412759][ T5916] hub 5-1:0.0: 1 port detected [ 144.578229][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 144.578257][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 144.614696][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 144.626840][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 144.627505][ T5916] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 144.627529][ T5916] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 144.664111][ T5916] usbhid 5-1:0.0: can't add hid device: -71 [ 144.664245][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.740937][ T5916] usb 5-1: USB disconnect, device number 6 [ 144.891051][ T7031] netlink: 220 bytes leftover after parsing attributes in process `syz.3.416'. [ 144.891070][ T7031] netlink: 'syz.3.416': attribute type 2 has an invalid length. [ 145.767775][ T7039] netlink: 72 bytes leftover after parsing attributes in process `syz.3.418'. [ 145.835937][ T5142] Bluetooth: hci4: command tx timeout [ 146.103370][ T6979] chnl_net:caif_netlink_parms(): no params data found [ 146.439406][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.567417][ T150] bridge_slave_1: left allmulticast mode [ 146.567444][ T150] bridge_slave_1: left promiscuous mode [ 146.589538][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 146.604573][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.604600][ T10] usb 4-1: config 0 has no interface number 0 [ 146.653673][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 146.653704][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.653723][ T10] usb 4-1: Product: syz [ 146.653736][ T10] usb 4-1: Manufacturer: syz [ 146.653750][ T10] usb 4-1: SerialNumber: syz [ 146.689758][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.750554][ T10] usb 4-1: config 0 descriptor?? [ 146.793895][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 146.895796][ T150] bridge_slave_0: left promiscuous mode [ 146.896919][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.969636][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.975451][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.163484][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 147.208781][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 147.408470][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.426058][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 147.463275][ T10] usb 4-1: USB disconnect, device number 10 [ 147.491096][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.513114][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.514072][ T10] quatech2 4-1:0.51: device disconnected [ 147.917256][ T5142] Bluetooth: hci4: command tx timeout [ 148.349479][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.427'. [ 148.636172][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.715755][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.739631][ T150] bond0 (unregistering): Released all slaves [ 148.872972][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5 [ 149.271792][ T7088] loop5: detected capacity change from 0 to 7 [ 149.995082][ T5142] Bluetooth: hci4: command tx timeout [ 150.230772][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.230894][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.231141][ T6979] bridge_slave_0: entered allmulticast mode [ 150.294659][ T6979] bridge_slave_0: entered promiscuous mode [ 150.321718][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.321818][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.322020][ T6979] bridge_slave_1: entered allmulticast mode [ 150.331304][ T6979] bridge_slave_1: entered promiscuous mode [ 150.510792][ T7088] Dev loop5: unable to read RDB block 7 [ 150.510833][ T7088] loop5: unable to read partition table [ 150.511038][ T7088] loop5: partition table beyond EOD, truncated [ 150.511068][ T7088] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 151.123028][ T6979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.670795][ T6979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.728064][ T7113] pim6reg: entered allmulticast mode [ 151.767802][ T7117] pim6reg: left allmulticast mode [ 152.398307][ T6979] team0: Port device team_slave_0 added [ 152.451232][ T6979] team0: Port device team_slave_1 added [ 152.894977][ T150] hsr_slave_0: left promiscuous mode [ 152.935071][ T150] hsr_slave_1: left promiscuous mode [ 152.935826][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.935842][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.977484][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.977511][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.184257][ T150] veth1_macvtap: left promiscuous mode [ 153.184353][ T150] veth0_macvtap: left promiscuous mode [ 153.230121][ T150] veth1_vlan: left promiscuous mode [ 153.230317][ T150] veth0_vlan: left promiscuous mode [ 154.116254][ T150] team0 (unregistering): Port device team_slave_1 removed [ 154.159688][ T150] team0 (unregistering): Port device team_slave_0 removed [ 154.367263][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.367280][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.367304][ T6979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.423726][ T5488] 8021q: adding VLAN 0 to HW filter on device eth6 [ 154.435804][ T6979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.435818][ T6979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.435840][ T6979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.707519][ T5812] hid (null): global environment stack underflow [ 154.781601][ T6979] hsr_slave_0: entered promiscuous mode [ 154.784544][ T6979] hsr_slave_1: entered promiscuous mode [ 154.785781][ T6979] debugfs: 'hsr0' already exists in 'hsr' [ 154.785802][ T6979] Cannot create hsr debugfs directory [ 154.997355][ T5812] hid-generic 0005:0458:0004.0004: global environment stack underflow [ 154.997375][ T5812] hid-generic 0005:0458:0004.0004: item 0 0 1 11 parsing failed [ 155.018102][ T5812] hid-generic 0005:0458:0004.0004: probe with driver hid-generic failed with error -22 [ 155.493418][ T7196] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.468'. [ 156.356689][ T7221] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.505713][ T7223] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 156.798939][ T6979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.849176][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 156.862856][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.864407][ T6979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.923584][ T7236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.968863][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.986475][ T5488] 8021q: adding VLAN 0 to HW filter on device eth7 [ 156.990744][ T6979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.006583][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 157.011809][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.011840][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.011875][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 157.011896][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.068865][ T10] usb 4-1: config 0 descriptor?? [ 157.282715][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.298504][ T6979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.432578][ T6979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.616182][ T10] hid_parser_main: 307 callbacks suppressed [ 157.616205][ T10] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 157.616234][ T10] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 157.616256][ T10] konepure 0003:1E7D:2DB4.0005: unknown main item tag 0x0 [ 157.616277][ T10] konepure 0003:1E7D:2DB4.0005: item fetching failed at offset 3/4 [ 157.616860][ T10] konepure 0003:1E7D:2DB4.0005: parse failed [ 157.616920][ T10] konepure 0003:1E7D:2DB4.0005: probe with driver konepure failed with error -22 [ 157.798720][ T5899] usb 4-1: USB disconnect, device number 11 [ 158.011077][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.146594][ T5832] IPVS: starting estimator thread 0... [ 158.150527][ T6979] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.224086][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.224297][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.237457][ T7266] IPVS: using max 16 ests per chain, 38400 per kthread [ 158.263022][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.263244][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.133629][ T5488] 8021q: adding VLAN 0 to HW filter on device eth8 [ 159.208095][ T7297] program syz.3.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.241702][ T6979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.624973][ T5832] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.729685][ T7314] netlink: 128 bytes leftover after parsing attributes in process `syz.3.501'. [ 159.778666][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 159.780929][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.780956][ T5832] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 159.780979][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.783312][ T5832] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 159.783338][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.783356][ T5832] usb 5-1: Product: syz [ 159.783369][ T5832] usb 5-1: Manufacturer: syz [ 159.783382][ T5832] usb 5-1: SerialNumber: syz [ 159.865740][ T5832] usb 5-1: config 0 descriptor?? [ 160.250022][ T6979] veth0_vlan: entered promiscuous mode [ 160.329932][ T5832] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 160.370864][ T6979] veth1_vlan: entered promiscuous mode [ 160.386761][ T7326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.505'. [ 160.547222][ T7328] trusted_key: encrypted_key: keyword 'uew' not recognized [ 160.549785][ T6979] veth0_macvtap: entered promiscuous mode [ 160.583183][ T6979] veth1_macvtap: entered promiscuous mode [ 160.646972][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.689678][ T6979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.738142][ T5832] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 160.744191][ T5832] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 160.779748][ T150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.782531][ T150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.787152][ T150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.791481][ T150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.805526][ T5832] usb 5-1: USB disconnect, device number 7 [ 161.953221][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.953240][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.137251][ T7360] misc userio: Begin command sent, but we're already running [ 162.213733][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.213753][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.501226][ T7391] sp0: Synchronizing with TNC [ 163.689133][ T7404] binder: 7403:7404 ioctl c0306201 0 returned -14 [ 164.614904][ T5812] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.767785][ T5812] usb 7-1: Using ep0 maxpacket: 16 [ 164.770277][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 164.770306][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.773879][ T5812] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.773904][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.773922][ T5812] usb 7-1: Product: syz [ 164.773935][ T5812] usb 7-1: Manufacturer: syz [ 164.773950][ T5812] usb 7-1: SerialNumber: syz [ 164.792000][ T5812] usb 7-1: config 0 descriptor?? [ 164.810181][ T5812] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.810216][ T5812] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 165.427083][ T5812] em28xx 7-1:0.0: chip ID is em28178 [ 165.683172][ T32] usb 7-1: USB disconnect, device number 2 [ 165.739847][ T32] em28xx 7-1:0.0: Disconnecting em28xx [ 165.867512][ T32] em28xx 7-1:0.0: Freeing device [ 166.185731][ T929] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.346620][ T929] usb 5-1: Using ep0 maxpacket: 8 [ 166.349499][ T929] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 166.349525][ T929] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 166.349545][ T929] usb 5-1: config 0 has no interface number 0 [ 166.349586][ T929] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.349618][ T929] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 166.349642][ T929] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.350782][ T929] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 166.350807][ T929] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 166.350825][ T929] usb 5-1: Product: syz [ 166.451287][ T929] usb 5-1: config 0 descriptor?? [ 166.454133][ T7465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.455128][ T821] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.626648][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.626679][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.626716][ T821] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 166.626738][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.654208][ T821] usb 1-1: config 0 descriptor?? [ 167.133068][ T929] usb 5-1: USB disconnect, device number 8 [ 167.227991][ T821] hid-steam 0003:28DE:1142.0006: item fetching failed at offset 4/5 [ 167.237229][ T821] hid-steam 0003:28DE:1142.0006: steam_probe:parse of hid interface failed [ 167.237320][ T821] hid-steam 0003:28DE:1142.0006: probe with driver hid-steam failed with error -22 [ 167.412904][ T7500] input: syz1 as /devices/virtual/input/input11 [ 168.358618][ T7530] program syz.4.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.267273][ T821] usb 1-1: USB disconnect, device number 7 [ 170.427006][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 170.837927][ T7599] loop3: detected capacity change from 0 to 7 [ 170.918172][ T7599] Dev loop3: unable to read RDB block 7 [ 170.918211][ T7599] loop3: unable to read partition table [ 170.918382][ T7599] loop3: partition table beyond EOD, truncated [ 170.919844][ T7599] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 171.044933][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.213795][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 171.218129][ T5916] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.218156][ T5916] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 171.218178][ T5916] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.225694][ T5916] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 171.225728][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.225746][ T5916] usb 1-1: Product: syz [ 171.225760][ T5916] usb 1-1: Manufacturer: syz [ 171.225773][ T5916] usb 1-1: SerialNumber: syz [ 171.338936][ T5916] usb 1-1: config 0 descriptor?? [ 171.784914][ T5916] gs_usb 1-1:0.0: Configuring for 256 interfaces [ 171.784940][ T5916] gs_usb 1-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 171.784975][ T5916] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 172.000053][ T63] usb 1-1: USB disconnect, device number 8 [ 172.264088][ T7643] netlink: 56537 bytes leftover after parsing attributes in process `syz.6.635'. [ 176.014860][ T5916] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 176.167056][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 176.264165][ T5916] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 176.292245][ T5916] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 176.292275][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.292293][ T5916] usb 1-1: Product: syz [ 176.292308][ T5916] usb 1-1: Manufacturer: syz [ 176.292322][ T5916] usb 1-1: SerialNumber: syz [ 176.347123][ T5916] r8152-cfgselector 1-1: Unknown version 0x0000 [ 176.347140][ T5916] r8152-cfgselector 1-1: config 0 descriptor?? [ 176.569082][ T5916] r8152-cfgselector 1-1: Needed 2 retries to read version [ 176.777494][ T63] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 177.284128][ T7792] netlink: 56 bytes leftover after parsing attributes in process `syz.4.684'. [ 177.710203][ T7806] netlink: 'syz.3.691': attribute type 10 has an invalid length. [ 177.710225][ T7806] netlink: 'syz.3.691': attribute type 29 has an invalid length. [ 177.766755][ T821] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.810778][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 177.869340][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 177.924218][ T821] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 177.924248][ T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.924267][ T821] usb 1-1: Product: syz [ 177.924280][ T821] usb 1-1: Manufacturer: syz [ 177.924294][ T821] usb 1-1: SerialNumber: syz [ 177.948251][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.6.694'. [ 177.949158][ T821] usb 1-1: config 0 descriptor?? [ 177.961342][ T821] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 010 [ 178.449889][ T821] (null): failure reading functionality [ 178.491038][ T7826] program syz.3.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.658291][ T821] i2c i2c-1: connected i2c-tiny-usb device [ 178.683289][ T821] usb 1-1: USB disconnect, device number 10 [ 178.839286][ T169] Bluetooth: (null): Invalid header checksum [ 179.303497][ T7852] program syz.4.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.834893][ T821] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 180.001044][ T821] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.001074][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.019903][ T821] usb 5-1: config 0 descriptor?? [ 180.036771][ T821] cp210x 5-1:0.0: cp210x converter detected [ 180.134926][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 180.368493][ T5916] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 180.368741][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.368763][ T5916] usb 7-1: Product: syz [ 180.368777][ T5916] usb 7-1: Manufacturer: syz [ 180.368790][ T5916] usb 7-1: SerialNumber: syz [ 180.387318][ T5916] usb 7-1: config 0 descriptor?? [ 180.504371][ T5916] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 003 [ 180.643489][ T821] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 180.643538][ T821] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 180.684963][ T32] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.793900][ T821] usb 5-1: cp210x converter now attached to ttyUSB0 [ 180.845343][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 180.870151][ T821] usb 5-1: USB disconnect, device number 9 [ 180.870688][ T32] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.870713][ T32] usb 1-1: config 0 has no interface number 0 [ 180.870757][ T32] usb 1-1: config 0 interface 184 has no altsetting 0 [ 180.904698][ T32] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.905302][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.905324][ T32] usb 1-1: Product: syz [ 180.905338][ T32] usb 1-1: Manufacturer: syz [ 180.905352][ T32] usb 1-1: SerialNumber: syz [ 180.946121][ T5916] (null): failure reading functionality [ 181.081658][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 181.081684][ T32] usb 1-1: config 0 descriptor?? [ 181.097281][ T821] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.161043][ T821] cp210x 5-1:0.0: device disconnected [ 181.239390][ T929] usb 7-1: USB disconnect, device number 3 [ 181.567345][ T5916] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.725327][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 181.729723][ T5916] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 181.729752][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.729771][ T5916] usb 4-1: Product: syz [ 181.729784][ T5916] usb 4-1: Manufacturer: syz [ 181.729798][ T5916] usb 4-1: SerialNumber: syz [ 181.737699][ T5916] usb 4-1: config 0 descriptor?? [ 181.790421][ T5916] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 181.872283][ T7909] netlink: 'syz.6.736': attribute type 2 has an invalid length. [ 181.872304][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.736'. [ 182.005702][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 182.005732][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 182.006283][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 182.006306][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 182.006321][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 182.006335][ T32] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 182.006558][ T32] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 182.075921][ T32] usb 1-1: USB disconnect, device number 11 [ 182.391956][ T5916] gspca_ov534_9: reg_w failed -71 [ 182.675210][ T5916] gspca_ov534_9: Unknown sensor 0000 [ 182.675299][ T5916] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 182.701381][ T5916] usb 4-1: USB disconnect, device number 12 [ 183.168072][ T7938] block nbd4: Device being setup by another task [ 183.169795][ T7931] block nbd4: shutting down sockets [ 183.257999][ T7941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.258269][ T7941] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 183.345040][ T5916] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.353875][ T7941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.354041][ T7941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.412691][ T7941] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 183.494899][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 183.509871][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.509902][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.509938][ T5916] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 183.509960][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.523224][ T5916] usb 4-1: config 0 descriptor?? [ 183.726760][ T7941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.726964][ T7941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.792387][ T7941] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.873234][ T7941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.889423][ T7941] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.960414][ T7941] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 184.050416][ T7941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 184.050570][ T7941] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.148245][ T7941] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 184.187148][ T5916] usb 4-1: string descriptor 0 read error: -71 [ 184.259485][ T5142] Bluetooth: hci4: connection err: -111 [ 184.266737][ T5916] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 184.266817][ T5916] letsketch 0003:6161:4D15.0007: probe with driver letsketch failed with error -32 [ 184.317623][ T5916] usb 4-1: USB disconnect, device number 13 [ 184.595119][ T7956] netlink: 'syz.4.756': attribute type 2 has an invalid length. [ 184.595138][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 185.144985][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 185.284886][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.304920][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 185.309739][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.309770][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.309791][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.309828][ T32] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 185.309849][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.355629][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.389500][ T32] usb 4-1: config 0 descriptor?? [ 185.755503][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.822418][ T32] dragonrise 0003:0079:0006.0008: unbalanced collection at end of report description [ 185.823352][ T32] dragonrise 0003:0079:0006.0008: parse failed [ 185.823416][ T32] dragonrise 0003:0079:0006.0008: probe with driver dragonrise failed with error -22 [ 185.915279][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.021046][ T5916] usb 4-1: USB disconnect, device number 14 [ 186.077582][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.144185][ T8000] netlink: 'syz.6.776': attribute type 27 has an invalid length. [ 186.144209][ T8000] netlink: 'syz.6.776': attribute type 1 has an invalid length. [ 186.236952][ T7999] block nbd0: Device being setup by another task [ 186.237318][ T7994] block nbd0: shutting down sockets [ 186.357444][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 186.856522][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.786'. [ 187.358951][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.382192][ T8041] overlay: filesystem on ./file0 is read-only [ 187.434906][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.835828][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.999407][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.146108][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'. [ 188.154916][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.378544][ T8070] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.378736][ T8070] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.378913][ T8070] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.400663][ T8070] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.400922][ T8070] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.413549][ T5828] Bluetooth: hci3: connection err: -111 [ 188.479089][ T8087] netlink: 'syz.3.816': attribute type 83 has an invalid length. [ 189.267096][ T8114] syz.6.829 uses obsolete (PF_INET,SOCK_PACKET) [ 189.706366][ T5916] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 189.862448][ T5916] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 189.862477][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 189.889537][ T5916] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 189.889555][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.889566][ T5916] usb 7-1: Product: syz [ 189.889574][ T5916] usb 7-1: Manufacturer: syz [ 189.889581][ T5916] usb 7-1: SerialNumber: syz [ 189.911246][ T5916] usb 7-1: config 0 descriptor?? [ 189.932263][ T5916] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 190.409801][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.409841][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.476532][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.476571][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.499613][ T67] smc: removing ib device syz1 [ 190.549785][ T8145] overlayfs: workdir and upperdir must be separate subtrees [ 190.635077][ T5832] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 190.712804][ T32] syz1: Port: 1 Link DOWN [ 190.770828][ T5916] gspca_sunplus: reg_r err -71 [ 190.770905][ T5916] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 190.828636][ T5832] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 190.828666][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.828685][ T5832] usb 4-1: Product: syz [ 190.828699][ T5832] usb 4-1: Manufacturer: syz [ 190.828722][ T5832] usb 4-1: SerialNumber: syz [ 190.877167][ T5832] usb 4-1: config 0 descriptor?? [ 190.880301][ T5916] usb 7-1: USB disconnect, device number 4 [ 190.960795][ T5832] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 191.001649][ T67] smbdirect: ib_dev[syz1] removed [ 191.700933][ T5832] gspca_stk1135: reg_w 0x5 err -71 [ 191.701995][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702008][ T5832] gspca_stk1135: Sensor write failed [ 191.702031][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702039][ T5832] gspca_stk1135: Sensor write failed [ 191.702064][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702073][ T5832] gspca_stk1135: Sensor read failed [ 191.702098][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702107][ T5832] gspca_stk1135: Sensor read failed [ 191.702113][ T5832] gspca_stk1135: Detected sensor type unknown (0x0) [ 191.702146][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702155][ T5832] gspca_stk1135: Sensor read failed [ 191.702180][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702189][ T5832] gspca_stk1135: Sensor read failed [ 191.702213][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702222][ T5832] gspca_stk1135: Sensor write failed [ 191.702252][ T5832] gspca_stk1135: serial bus timeout: status=0x00 [ 191.702260][ T5832] gspca_stk1135: Sensor write failed [ 191.702359][ T5832] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 191.876354][ T5832] usb 4-1: USB disconnect, device number 15 [ 192.206083][ T8165] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.853'. [ 192.402583][ T8174] mmap: syz.3.857 (8174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.347599][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347657][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.861061][ T8223] sp0: Synchronizing with TNC [ 195.321728][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.409899][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.412682][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.414069][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.426811][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.483416][ T3048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.195530][ T3048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.783454][ T3048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.317526][ T37] audit: type=1400 audit(1776212071.193:5): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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luetooth: hci1: command tx timeout [ 197.662246][ T3048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.600109][ T8238] chnl_net:caif_netlink_parms(): no params data found [ 198.786177][ T821] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.881017][ T8323] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.881017][ T8323] The task syz.4.922 (8323) triggered the difference, watch for misbehavior. [ 198.937415][ T821] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.937445][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.969905][ T821] usb 4-1: config 0 descriptor?? [ 199.014556][ T821] cp210x 4-1:0.0: cp210x converter detected [ 199.248403][ T821] usb 4-1: cp210x converter now attached to ttyUSB0 [ 199.340650][ T8333] netlink: 128 bytes leftover after parsing attributes in process `syz.6.924'. [ 199.340671][ T8333] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 199.403980][ T3048] bridge_slave_1: left allmulticast mode [ 199.403998][ T3048] bridge_slave_1: left promiscuous mode [ 199.404148][ T3048] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.518558][ T3048] bridge_slave_0: left allmulticast mode [ 199.518586][ T3048] bridge_slave_0: left promiscuous mode [ 199.518799][ T3048] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.597986][ T5828] Bluetooth: hci1: command tx timeout [ 200.184976][ T5832] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 200.368578][ T5832] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 200.370950][ T5832] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 200.370977][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.370997][ T5832] usb 7-1: Product: syz [ 200.371010][ T5832] usb 7-1: Manufacturer: syz [ 200.371021][ T5832] usb 7-1: SerialNumber: syz [ 200.402958][ T5832] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 200.661315][ T3048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.720921][ T3048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.759896][ T3048] bond0 (unregistering): Released all slaves [ 201.129384][ T5832] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 201.161826][ T5832] usb 7-1: USB disconnect, device number 5 [ 201.228309][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.228439][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.228662][ T8238] bridge_slave_0: entered allmulticast mode [ 201.243478][ T8238] bridge_slave_0: entered promiscuous mode [ 201.297036][ T3048] tipc: Left network mode [ 201.307369][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.307478][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.307695][ T8238] bridge_slave_1: entered allmulticast mode [ 201.318183][ T8238] bridge_slave_1: entered promiscuous mode [ 201.430219][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.444394][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.489393][ T8238] team0: Port device team_slave_0 added [ 201.492105][ T8238] team0: Port device team_slave_1 added [ 201.536179][ T10] usb 4-1: USB disconnect, device number 16 [ 201.575537][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.575962][ T10] cp210x 4-1:0.0: device disconnected [ 201.681564][ T5828] Bluetooth: hci1: command tx timeout [ 201.706386][ T8357] serio: Serial port ttyS3 [ 201.892503][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.936'. [ 202.038504][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.038520][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.038543][ T8238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.217807][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.217823][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.217845][ T8238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.229626][ T8238] hsr_slave_0: entered promiscuous mode [ 203.232962][ T8238] hsr_slave_1: entered promiscuous mode [ 203.233685][ T8238] debugfs: 'hsr0' already exists in 'hsr' [ 203.233706][ T8238] Cannot create hsr debugfs directory [ 203.762235][ T5828] Bluetooth: hci1: command tx timeout [ 204.056370][ T3048] hsr_slave_0: left promiscuous mode [ 204.096004][ T3048] hsr_slave_1: left promiscuous mode [ 204.130047][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.130075][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.167667][ T3048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.167693][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.338107][ T929] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.448845][ T3048] veth1_macvtap: left promiscuous mode [ 204.448948][ T3048] veth0_macvtap: left promiscuous mode [ 204.449172][ T3048] veth1_vlan: left promiscuous mode [ 204.449329][ T3048] veth0_vlan: left promiscuous mode [ 204.498180][ T929] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.498225][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.525872][ T929] usb 5-1: config 0 descriptor?? [ 204.551337][ T929] cp210x 5-1:0.0: cp210x converter detected [ 204.604873][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 204.831884][ T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 204.831915][ T10] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 204.831934][ T10] usb 7-1: Product: syz [ 204.847540][ T10] usb 7-1: config 0 descriptor?? [ 204.851143][ T5967] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 204.901002][ T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 204.903326][ T10] usb 7-1: Detected FT232H [ 204.999686][ T929] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 205.051262][ T929] usb 5-1: cp210x converter now attached to ttyUSB1 [ 205.054888][ T5967] usb 4-1: Using ep0 maxpacket: 32 [ 205.085411][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 205.151833][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.151854][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.151875][ T5967] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.151925][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.177867][ T5967] usb 4-1: config 0 descriptor?? [ 205.214453][ T929] usb 5-1: USB disconnect, device number 10 [ 205.256741][ T929] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 205.290953][ T5967] hub 4-1:0.0: USB hub found [ 205.403431][ T5967] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 205.421307][ T929] cp210x 5-1:0.0: device disconnected [ 205.495901][ T10] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 205.600203][ T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 205.610852][ T5967] usbhid 4-1:0.0: can't add hid device: -71 [ 205.610969][ T5967] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.707578][ T5967] usb 4-1: USB disconnect, device number 17 [ 205.734469][ T10] usb 7-1: USB disconnect, device number 6 [ 205.772435][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.773146][ T10] ftdi_sio 7-1:0.0: device disconnected [ 205.889767][ T8436] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.962'. [ 206.665560][ T3048] team0 (unregistering): Port device team_slave_1 removed [ 206.684974][ T929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.705460][ T3048] team0 (unregistering): Port device team_slave_0 removed [ 206.845029][ T929] usb 5-1: Using ep0 maxpacket: 8 [ 206.850955][ T929] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.850987][ T929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.851008][ T929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.851020][ T929] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.851044][ T929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.851055][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.092484][ T929] usb 5-1: GET_CAPABILITIES returned 0 [ 207.092513][ T929] usbtmc 5-1:16.0: can't read capabilities [ 207.149517][ T5488] 8021q: adding VLAN 0 to HW filter on device eth9 [ 207.308090][ T5967] usb 5-1: USB disconnect, device number 11 [ 208.837938][ T8238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.890151][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.928468][ T8238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.986124][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.013925][ T8238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 209.059341][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.073470][ T3048] IPVS: stop unused estimator thread 0... [ 209.085379][ T8238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 209.113625][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.259122][ T5488] 8021q: adding VLAN 0 to HW filter on device eth10 [ 209.265897][ T8503] netlink: 164 bytes leftover after parsing attributes in process `syz.4.985'. [ 209.450631][ T8512] netlink: 104 bytes leftover after parsing attributes in process `syz.4.987'. [ 209.816002][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.910906][ T8529] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.992'. [ 210.043978][ T8238] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.158399][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.159248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.218181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.218322][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.328013][ T8544] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.997'. [ 210.937133][ T5828] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 210.937167][ T5828] Bluetooth: hci2: Dropping invalid advertising data [ 210.937187][ T5828] Bluetooth: hci2: Malformed LE Event: 0x02 [ 210.942185][ T5488] 8021q: adding VLAN 0 to HW filter on device eth11 [ 211.388396][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1007'. [ 211.594680][ T8238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.681395][ T8586] kvm: kvm [8585]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x80000000000 [ 212.476724][ T5488] 8021q: adding VLAN 0 to HW filter on device eth12 [ 212.478152][ T8238] veth0_vlan: entered promiscuous mode [ 212.519888][ T8238] veth1_vlan: entered promiscuous mode [ 212.661884][ T8238] veth0_macvtap: entered promiscuous mode [ 212.690034][ T8238] veth1_macvtap: entered promiscuous mode [ 212.835616][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.859405][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.873915][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.889893][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.892029][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.902318][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.188708][ T37] audit: type=1326 audit(1776212343.074:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.3.1023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ac599c819 code=0x0 [ 213.808847][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.808867][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.968708][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.968728][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.195639][ T5832] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 214.237562][ T8653] netlink: 'syz.7.883': attribute type 83 has an invalid length. [ 214.286982][ T929] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 214.355305][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 214.392255][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.392287][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.392324][ T5832] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 214.392347][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.414490][ T5832] usb 7-1: config 0 descriptor?? [ 214.540234][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.540255][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 214.540307][ T929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.540331][ T929] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 214.540343][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.648650][ T929] usb 5-1: config 0 descriptor?? [ 214.667297][ T8647] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.898453][ T5832] ft260 0003:0403:6030.0009: item fetching failed at offset 0/2 [ 214.899601][ T5832] ft260 0003:0403:6030.0009: failed to parse HID [ 214.899762][ T5832] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -22 [ 215.082133][ T5916] usb 7-1: USB disconnect, device number 7 [ 215.082696][ T929] gt683r_led 0003:1770:FF00.000A: unknown main item tag 0x3 [ 215.082726][ T929] gt683r_led 0003:1770:FF00.000A: unknown global tag 0xe [ 215.082741][ T929] gt683r_led 0003:1770:FF00.000A: item 0 1 1 14 parsing failed [ 215.083585][ T929] gt683r_led 0003:1770:FF00.000A: hid parsing failed [ 215.083689][ T929] gt683r_led 0003:1770:FF00.000A: probe with driver gt683r_led failed with error -22 [ 215.287328][ T32] usb 5-1: USB disconnect, device number 12 [ 215.808081][ T8684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 215.808108][ T8684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 215.888685][ T8684] vhci_hcd vhci_hcd.0: Device attached [ 216.074908][ T929] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.290798][ T5916] usb 40-1: SetAddress Request (2) to port 0 [ 216.294128][ T5916] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 216.304918][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 216.317039][ T929] usb 4-1: config 0 has no interfaces? [ 216.356225][ T929] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 216.356254][ T929] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 216.356275][ T929] usb 4-1: Product: syz [ 216.356289][ T929] usb 4-1: Manufacturer: syz [ 216.356302][ T929] usb 4-1: SerialNumber: syz [ 216.405996][ T929] usb 4-1: config 0 descriptor?? [ 216.514251][ T8711] lo: entered promiscuous mode [ 216.545588][ T8711] lo: left promiscuous mode [ 216.645421][ T8688] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 1 [ 216.721941][ T5899] usb 4-1: USB disconnect, device number 18 [ 216.822003][ T162] vhci_hcd vhci_hcd.3: stop threads [ 216.841080][ T162] vhci_hcd vhci_hcd.3: release socket [ 216.858965][ T162] vhci_hcd vhci_hcd.3: disconnect device [ 217.322892][ T5952] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 217.478124][ T5952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.478154][ T5952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.479460][ T5952] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.479485][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 217.479504][ T5952] usb 7-1: SerialNumber: syz [ 217.704955][ T5967] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.842268][ T5952] usb 7-1: 0:2 : does not exist [ 217.870589][ T5967] usb 4-1: Using ep0 maxpacket: 8 [ 217.889596][ T5967] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 217.889623][ T5967] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 217.889639][ T5967] usb 4-1: Product: syz [ 217.889651][ T5967] usb 4-1: Manufacturer: syz [ 217.889663][ T5967] usb 4-1: SerialNumber: syz [ 217.962819][ T5967] usb 4-1: config 0 descriptor?? [ 217.980892][ T5967] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 218.034212][ T5952] usb 7-1: USB disconnect, device number 8 [ 218.127655][ T7034] udevd[7034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.438252][ T8757] syz.4.1075 (8757) used greatest stack depth: 18880 bytes left [ 218.608205][ T5967] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 218.885256][ T5967] usb 4-1: USB disconnect, device number 19 [ 219.008472][ T8773] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1082'. [ 220.856841][ T8787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.915055][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 221.067093][ T10] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 221.067121][ T10] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 221.067139][ T10] usb 5-1: config 246 has no interface number 0 [ 221.067180][ T10] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 221.067204][ T10] usb 5-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.067230][ T10] usb 5-1: config 246 interface 166 has no altsetting 0 [ 221.127668][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 221.127698][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.127718][ T10] usb 5-1: Product: syz [ 221.127732][ T10] usb 5-1: Manufacturer: syz [ 221.127747][ T10] usb 5-1: SerialNumber: syz [ 221.452098][ T5916] usb 40-1: device descriptor read/8, error -110 [ 221.817529][ T10] usb 5-1: Limiting number of CPorts to U8_MAX [ 221.902653][ T5916] usb usb40-port1: attempt power cycle [ 221.971642][ T10] usb 5-1: Unknown endpoint type found, address 0x0b [ 221.971666][ T10] usb 5-1: Not enough endpoints found in device, aborting! [ 222.035293][ T10] usb 5-1: USB disconnect, device number 13 [ 222.384941][ T5812] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 222.544515][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.544549][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.544571][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.544623][ T5812] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.544647][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.635213][ T5812] usb 4-1: config 0 descriptor?? [ 222.640257][ T5916] usb usb40-port1: unable to enumerate USB device [ 223.100748][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100786][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100811][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100835][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100851][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100866][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100881][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100895][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100910][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.100924][ T5812] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 223.561001][ T5812] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 223.646509][ T5812] usb 4-1: USB disconnect, device number 20 [ 223.842259][ T8870] fido_id[8870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 224.003295][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.101472][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.102843][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.121116][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.122638][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.437399][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.215867][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.223469][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1137'. [ 225.689712][ T5812] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 225.784422][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.859964][ T5812] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 225.860997][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.861048][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.861067][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.901265][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.901316][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.901331][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.902364][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.902410][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.902424][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.904474][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.904520][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.904546][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.918432][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.918483][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.918508][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.928314][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.928375][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.928402][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.929597][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.929643][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.929667][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.935528][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.935579][ T5812] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.935604][ T5812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.940997][ T5812] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.941023][ T5812] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 225.941043][ T5812] usb 5-1: Product: syz [ 225.941057][ T5812] usb 5-1: Manufacturer: syz [ 225.941070][ T5812] usb 5-1: SerialNumber: syz [ 226.010727][ T5812] usb 5-1: config 0 descriptor?? [ 226.348295][ T5812] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 226.395288][ T5828] Bluetooth: hci1: command tx timeout [ 226.411258][ T5812] usb 5-1: USB disconnect, device number 14 [ 226.508879][ T5812] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 226.742263][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.671704][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 228.361890][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 228.375268][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.375402][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.375622][ T8875] bridge_slave_0: entered allmulticast mode [ 228.380088][ T8875] bridge_slave_0: entered promiscuous mode [ 228.480556][ T5828] Bluetooth: hci1: command tx timeout [ 228.482490][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.482601][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.482795][ T8875] bridge_slave_1: entered allmulticast mode [ 228.519299][ T8875] bridge_slave_1: entered promiscuous mode [ 228.531351][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1156'. [ 228.531380][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1156'. [ 228.531393][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1156'. [ 228.706257][ T12] bridge_slave_1: left allmulticast mode [ 228.706278][ T12] bridge_slave_1: left promiscuous mode [ 228.706422][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.775739][ T12] bridge_slave_0: left allmulticast mode [ 228.775757][ T12] bridge_slave_0: left promiscuous mode [ 228.775913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.606022][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.686121][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.708377][ T12] bond0 (unregistering): Released all slaves [ 230.100616][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.297950][ T9017] tmpfs: Invalid gid '0x00000000ffffffff' [ 230.509742][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.556639][ T5828] Bluetooth: hci1: command tx timeout [ 230.637441][ T8875] team0: Port device team_slave_0 added [ 230.683968][ T8875] team0: Port device team_slave_1 added [ 230.741560][ T9031] sctp: Trying to GSO but underlying device doesn't support it. [ 231.331090][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.331104][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.331123][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.333567][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.333579][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.333596][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.437576][ T8875] hsr_slave_0: entered promiscuous mode [ 231.446773][ T8875] hsr_slave_1: entered promiscuous mode [ 231.614969][ T12] hsr_slave_0: left promiscuous mode [ 231.654952][ T12] hsr_slave_1: left promiscuous mode [ 231.655670][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.655686][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.676252][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.676278][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.756679][ T12] veth1_macvtap: left promiscuous mode [ 231.767695][ T12] veth0_macvtap: left promiscuous mode [ 231.767929][ T12] veth1_vlan: left promiscuous mode [ 231.768092][ T12] veth0_vlan: left promiscuous mode [ 231.845218][ T929] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.993451][ T9060] block nbd6: NBD_DISCONNECT [ 232.018488][ T929] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 232.018517][ T929] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 232.018535][ T929] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 232.018553][ T929] usb 5-1: config 220 has no interface number 2 [ 232.018632][ T929] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.018659][ T929] usb 5-1: config 220 interface 0 has no altsetting 0 [ 232.018677][ T929] usb 5-1: config 220 interface 76 has no altsetting 0 [ 232.018696][ T929] usb 5-1: config 220 interface 1 has no altsetting 0 [ 232.021095][ T929] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.021123][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.021143][ T929] usb 5-1: Product: syz [ 232.021157][ T929] usb 5-1: Manufacturer: syz [ 232.021171][ T929] usb 5-1: SerialNumber: syz [ 232.379201][ T929] uvcvideo 5-1:220.1: Unknown video format 01000000-0000-0000-0000-000200000000 [ 232.379333][ T929] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 232.379369][ T929] uvcvideo 5-1:220.0: No valid video chain found. [ 232.379441][ T929] usb 5-1: selecting invalid altsetting 0 [ 232.421935][ T929] usb 5-1: selecting invalid altsetting 0 [ 232.421958][ T929] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 232.440712][ T929] usb 5-1: USB disconnect, device number 15 [ 232.635041][ T5828] Bluetooth: hci1: command tx timeout [ 232.795470][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.846667][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.140553][ T9064] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1183'. [ 234.437816][ T9100] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 234.437838][ T9100] overlayfs: workdir and upperdir must be separate subtrees [ 234.622341][ T9096] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.1191'. [ 234.622375][ T9096] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 234.649316][ T5488] 8021q: adding VLAN 0 to HW filter on device eth13 [ 236.990771][ T9170] can0: slcan on ttyS3. [ 236.991791][ T8875] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.030082][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.213542][ T8875] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.226478][ T9184] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1211'. [ 237.274558][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.275816][ T8875] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.337175][ T9175] can0 (unregistered): slcan off ttyS3. [ 237.400953][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.431710][ T8875] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.494143][ T8875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.738485][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1218'. [ 237.784440][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.819259][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.841427][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.841580][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.891747][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.891919][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.979190][ T9214] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1222'. [ 238.356905][ T9230] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 238.410626][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.674403][ T9243] program syz.6.1233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.928821][ T8875] veth0_vlan: entered promiscuous mode [ 238.957950][ T8875] veth1_vlan: entered promiscuous mode [ 238.985816][ T5952] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 239.008506][ T8875] veth0_macvtap: entered promiscuous mode [ 239.017245][ T8875] veth1_macvtap: entered promiscuous mode [ 239.048131][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.069479][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.086533][ T3048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.087251][ T3048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.087292][ T3048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.087324][ T3048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.175323][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 239.192125][ T5952] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 239.192155][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.228126][ T5952] usb 4-1: config 0 descriptor?? [ 239.268173][ T5952] as10x_usb: device has been detected [ 239.268917][ T5952] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 239.377075][ T5952] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 240.242062][ T5952] as10x_usb: error during firmware upload part1 [ 240.253358][ T5952] Registered device nBox DVB-T Dongle [ 240.296657][ T5952] usb 4-1: USB disconnect, device number 21 [ 240.428390][ T5952] Unregistered device nBox DVB-T Dongle [ 240.447385][ T5952] as10x_usb: device has been disconnected [ 240.498247][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.498267][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.811015][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.811035][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.510246][ T9275] Set syz1 is full, maxelem 768 reached [ 241.611367][ T9267] syz.6.1242 (9267) used greatest stack depth: 18592 bytes left [ 242.128733][ T9304] vxcan0: tx address claim with dlc 0 [ 242.315095][ T929] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 242.505127][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 242.519954][ T929] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 242.519983][ T929] usb 4-1: config 0 has no interface number 0 [ 242.520025][ T929] usb 4-1: config 0 interface 184 has no altsetting 0 [ 242.549276][ T929] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 242.549307][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.549326][ T929] usb 4-1: Product: syz [ 242.549340][ T929] usb 4-1: Manufacturer: syz [ 242.549354][ T929] usb 4-1: SerialNumber: syz [ 242.553087][ T929] usb 4-1: config 0 descriptor?? [ 243.077434][ T37] audit: type=1326 audit(1776212628.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84eb0c819 code=0x7fc00000 [ 243.174624][ T929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 243.174653][ T929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 243.174671][ T929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 243.185123][ T929] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 243.242580][ T929] usb 4-1: USB disconnect, device number 22 [ 243.547570][ T9339] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1272'. [ 244.800488][ T9394] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 244.800523][ T9394] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 244.800719][ T9394] overlayfs: failed to set uuid (27/file0, err=-13); falling back to uuid=null. [ 245.282681][ T9413] input: syz0 as /devices/virtual/input/input15 [ 245.426902][ T9419] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1306'. [ 245.887645][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1315'. [ 246.468341][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 246.649203][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 246.649222][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.652211][ T10] usb 4-1: config 0 descriptor?? [ 246.658493][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 246.714922][ T5828] Bluetooth: hci1: command tx timeout [ 246.814187][ T9474] veth1_virt_wifi: entered allmulticast mode [ 246.814524][ T9474] veth1_virt_wifi: left allmulticast mode [ 247.507839][ T10] usb 4-1: USB disconnect, device number 23 [ 247.570359][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 247.570391][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 248.636203][ T5916] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 248.684878][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 248.784838][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 248.789097][ T5916] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 248.789126][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.789145][ T5916] usb 7-1: Product: syz [ 248.789159][ T5916] usb 7-1: Manufacturer: syz [ 248.789173][ T5916] usb 7-1: SerialNumber: syz [ 248.794186][ T5916] usb 7-1: config 0 descriptor?? [ 248.804095][ T5916] usb 7-1: selecting invalid altsetting 1 [ 248.804114][ T5916] technisat-usb2: could not set alternate setting to 0 [ 248.847269][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.847304][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.871085][ T10] usb 4-1: config 0 descriptor?? [ 248.878639][ T10] cp210x 4-1:0.0: cp210x converter detected [ 249.025939][ T5916] technisat-usb2: firmware version: 0.0 [ 249.026047][ T5916] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 249.083111][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 249.459292][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.462751][ T5916] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 249.462810][ T5916] usb 7-1: media controller created [ 249.463192][ T5916] technisat-usb2: i2c-error: out failed 53 = -22 [ 249.463306][ T5916] dvb-usb: MAC address reading failed. [ 249.502954][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.624150][ T5916] DVB: Unable to find symbol stv090x_attach() [ 249.643185][ T5916] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 249.724875][ T5916] rc_core: IR keymap rc-technisat-usb2 not found [ 249.724892][ T5916] Registered IR keymap rc-empty [ 249.767682][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.858310][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.862382][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.881434][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.882248][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.993125][ T5916] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 250.039118][ T5916] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input16 [ 250.131852][ T5916] dvb-usb: schedule remote query interval to 100 msecs. [ 250.132681][ T5916] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 250.175985][ T5916] usb 7-1: USB disconnect, device number 9 [ 250.972715][ T5916] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 251.087046][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1375'. [ 251.212820][ T9551] chnl_net:caif_netlink_parms(): no params data found [ 251.493808][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.493974][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.494139][ T9551] bridge_slave_0: entered allmulticast mode [ 251.497577][ T9551] bridge_slave_0: entered promiscuous mode [ 251.500884][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.501076][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.501258][ T9551] bridge_slave_1: entered allmulticast mode [ 251.503541][ T9551] bridge_slave_1: entered promiscuous mode [ 251.542969][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.547173][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.616982][ T5952] usb 4-1: USB disconnect, device number 24 [ 251.631919][ T5952] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 251.646144][ T5952] cp210x 4-1:0.0: device disconnected [ 251.681864][ T9551] team0: Port device team_slave_0 added [ 251.701550][ T9596] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1382'. [ 251.722190][ T9551] team0: Port device team_slave_1 added [ 251.919731][ T5828] Bluetooth: hci5: command tx timeout [ 251.926135][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.926151][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.926176][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.930027][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.930041][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.930065][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.358525][ T9551] hsr_slave_0: entered promiscuous mode [ 252.360022][ T9551] hsr_slave_1: entered promiscuous mode [ 252.361042][ T9551] debugfs: 'hsr0' already exists in 'hsr' [ 252.361064][ T9551] Cannot create hsr debugfs directory [ 252.405488][ T9617] netlink: 'syz.7.1392': attribute type 83 has an invalid length. [ 252.706816][ T9622] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1394'. [ 253.094982][ T9551] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 253.148947][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.176425][ T9551] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 253.218251][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.219021][ T9551] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 253.264336][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.265661][ T9551] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 253.308254][ T9551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.683112][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.708120][ T9551] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.726593][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.726763][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.762700][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.764545][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.810027][ T9659] netlink: 'syz.6.1409': attribute type 83 has an invalid length. [ 254.005929][ T5828] Bluetooth: hci5: command tx timeout [ 254.452597][ T9551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.913369][ T9551] veth0_vlan: entered promiscuous mode [ 254.920663][ T9551] veth1_vlan: entered promiscuous mode [ 255.307711][ T9551] veth0_macvtap: entered promiscuous mode [ 255.313459][ T9551] veth1_macvtap: entered promiscuous mode [ 255.347268][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.703916][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.779032][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779099][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.900127][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.004249][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.007725][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.014573][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.027799][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.080816][ T5142] Bluetooth: hci5: command tx timeout [ 256.558678][ T3623] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.603212][ T162] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.875361][ T162] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.881058][ T162] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.117631][ T3623] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.149646][ T162] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.323977][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.353652][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.379813][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.383595][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.449951][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.792228][ T3623] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.081456][ T5828] Bluetooth: hci1: command tx timeout [ 258.157345][ T5828] Bluetooth: hci5: command tx timeout [ 258.298736][ T3623] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.315418][ T38] INFO: task syz-executor:5823 blocked for more than 143 [ 258.315418][ T38] INFO: task syz-executor:5823 blocked for more than 143 seconds. [ 258.315446][ T38] Tainted: G L syzkaller #0 [ 258.315458][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.315471][ T38] task:syz-executor state:D stack:22536 pid:5823 tgid:5823 ppid:1 task_flags:0x400140 flags:0x00080002 [ 258.315533][ T38] Call Trace: [ 258.315540][ T38] [ 258.315553][ T38] __schedule+0x169e/0x54f0 [ 258.315600][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.315630][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.315658][ T38] ? rt_spin_lock+0x1e0/0x400 [ 258.315681][ T38] ? __pfx___schedule+0x10/0x10 [ 258.315715][ T38] ? schedule+0x90/0x360 [ 258.315742][ T38] schedule+0x164/0x360 [ 258.315768][ T38] fuse_chan_wait_aborted+0x15b/0x250 [ 258.315803][ T38] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 258.315833][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 258.315857][ T38] ? __pfx_fuse_chan_abort+0x10/0x10 [ 258.315886][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.315914][ T38] fuse_conn_destroy+0x1e7/0x3e0 [ 258.315940][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 258.315962][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 258.315986][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.316012][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 258.316046][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 258.316082][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.316114][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 258.316139][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.316167][ T38] fuse_kill_sb_anon+0x1ef/0x270 [ 258.316197][ T38] deactivate_locked_super+0xbc/0x130 [ 258.316224][ T38] cleanup_mnt+0x437/0x4d0 [ 258.316268][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.316296][ T38] task_work_run+0x1d9/0x270 [ 258.316326][ T38] ? __pfx_task_work_run+0x10/0x10 [ 258.316359][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.316381][ T38] exit_to_user_mode_loop+0xed/0x480 [ 258.316404][ T38] ? rcu_is_watching+0x15/0xb0 [ 258.316432][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.316452][ T38] do_syscall_64+0x33e/0xf80 [ 258.316477][ T38] ? trace_irq_disable+0x3b/0x140 [ 258.316499][ T38] ? clear_bhb_loop+0x40/0x90 [ 258.316523][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.316544][ T38] RIP: 0033:0x7fb1d7dfda57 [ 258.316566][ T38] RSP: 002b:00007ffc72ba1d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 258.316586][ T38] RAX: 0000000000000000 RBX: 00007fb1d7e92048 RCX: 00007fb1d7dfda57 [ 258.316599][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc72ba1e10 [ 258.316612][ T38] RBP: 00007ffc72ba1e10 R08: 00007ffc72ba2e10 R09: 00000000ffffffff [ 258.316626][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc72ba2ea0 [ 258.316639][ T38] R13: 00007fb1d7e92048 R14: 000000000001a63b R15: 00007ffc72ba2ee0 [ 258.316670][ T38] [ 258.320531][ T38] [ 258.320531][ T38] Showing all locks held in the system: [ 258.320560][ T38] 1 lock held by kworker/0:1/10: [ 258.320572][ T38] #0: ffff888035466538 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 258.320712][ T38] 4 locks held by pr/legacy/17: [ 258.320723][ T38] #0: ffffffff8e3ba3a0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 258.320770][ T38] #1: ffffffff8e2a1c98 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 258.320814][ T38] #2: ffffffff9a0291d8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 258.320968][ T38] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 258.321017][ T38] 1 lock held by khungtaskd/38: [ 258.321027][ T38] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 258.321079][ T38] 3 locks held by kworker/u8:4/67: [ 258.321090][ T38] #0: ffff888032640138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 258.321131][ T38] #1: ffffc9000152fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 258.321175][ T38] #2: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 258.321250][ T38] 6 locks held by kworker/u8:16/3623: [ 258.321261][ T38] #0: ffff88801aea6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 258.321304][ T38] #1: ffffc9000f397c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 258.321354][ T38] #2: ffffffff8f7913a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 258.321405][ T38] #3: ffff888061027160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 258.321451][ T38] #4: ffff888063638310 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 258.321501][ T38] #5: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 258.321554][ T38] 2 locks held by getty/5580: [ 258.321564][ T38] #0: ffff88803735e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.321611][ T38] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 258.321664][ T38] 1 lock held by syz-executor/5823: [ 258.321674][ T38] #0: ffff8880608160d0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 258.321734][ T38] 1 lock held by syz.4.1190/9093: [ 258.321745][ T38] #0: ffff8880608160d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 258.321796][ T38] 3 locks held by syz-executor/9551: [ 258.321806][ T38] #0: ffffffff8f80f8c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 258.321849][ T38] #1: ffffffff8f80f6d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 258.321907][ T38] #2: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x388d/0x4a70 [ 258.321956][ T38] 2 locks held by syz-executor/9708: [ 258.321967][ T38] #0: ffffffff8f7913a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 258.322015][ T38] #1: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 258.322057][ T38] 2 locks held by syz-executor/9726: [ 258.322067][ T38] #0: ffffffff8f7913a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 258.322114][ T38] #1: ffffffff8f79fcb8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 258.322165][ T38] [ 258.322170][ T38] ============================================= [ 258.322170][ T38] [ 258.322185][ T38] NMI backtrace for cpu 1 [ 258.322211][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.322236][ T38] Tainted: [L]=SOFTLOCKUP [ 258.322242][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.322253][ T38] Call Trace: [ 258.322260][ T38] [ 258.322268][ T38] dump_stack_lvl+0xe8/0x150 [ 258.322291][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 258.322311][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 258.322332][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 258.322359][ T38] sys_info+0x135/0x170 [ 258.322388][ T38] watchdog+0xfd3/0x1030 [ 258.322415][ T38] ? watchdog+0x1c9/0x1030 [ 258.322439][ T38] kthread+0x388/0x470 [ 258.322462][ T38] ? __pfx_watchdog+0x10/0x10 [ 258.322478][ T38] ? __pfx_kthread+0x10/0x10 [ 258.322503][ T38] ret_from_fork+0x514/0xb70 [ 258.322524][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 258.322544][ T38] ? __switch_to+0xc79/0x1410 [ 258.322572][ T38] ? __pfx_kthread+0x10/0x10 [ 258.322595][ T38] ret_from_fork_asm+0x1a/0x30 [ 258.322629][ T38] [ 258.322651][ T38] Sending NMI from CPU 1 to CPUs 0: [ 258.322685][ C0] NMI backtrace for cpu 0 [ 258.322699][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.322720][ C0] Tainted: [L]=SOFTLOCKUP [ 258.322726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.322735][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 258.322758][ C0] Code: e8 7e 3b 7e fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 99 e7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a c4 fd 05 cc 44 89 f9 80 e1 07 [ 258.322772][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 258.322785][ C0] RAX: 1ffffffff3405200 RBX: 00000000000003fd RCX: 0000000000000000 [ 258.322796][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 258.322806][ C0] RBP: ffffffff9a029490 R08: 0000000000000000 R09: 0000000000000000 [ 258.322816][ C0] R10: dffffc0000000000 R11: ffffffff8546b2d0 R12: dffffc0000000000 [ 258.322828][ C0] R13: 0000000000000000 R14: ffffffff9a029200 R15: 0000000000000000 [ 258.322839][ C0] FS: 0000000000000000(0000) GS:ffff888125a68000(0000) knlGS:0000000000000000 [ 258.322852][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.322863][ C0] CR2: 000055557bffaa28 CR3: 000000000e1b6000 CR4: 00000000003526f0 [ 258.322877][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.322887][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 258.322897][ C0] Call Trace: [ 258.322903][ C0] [ 258.322910][ C0] wait_for_lsr+0x1aa/0x2f0 [ 258.322933][ C0] serial8250_console_write+0x120d/0x1b90 [ 258.322961][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 258.322981][ C0] ? console_flush_one_record+0xfa/0xb90 [ 258.323002][ C0] ? console_flush_one_record+0x48f/0xb90 [ 258.323021][ C0] console_flush_one_record+0x68b/0xb90 [ 258.323042][ C0] ? console_flush_one_record+0xfa/0xb90 [ 258.323062][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 258.323081][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.323110][ C0] legacy_kthread_func+0x1b6/0x250 [ 258.323129][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 258.323146][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 258.323165][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 258.323185][ C0] kthread+0x388/0x470 [ 258.323203][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 258.323220][ C0] ? __pfx_kthread+0x10/0x10 [ 258.323239][ C0] ret_from_fork+0x514/0xb70 [ 258.323255][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 258.323271][ C0] ? __switch_to+0xc79/0x1410 [ 258.323292][ C0] ? __pfx_kthread+0x10/0x10 [ 258.323310][ C0] ret_from_fork_asm+0x1a/0x30 [ 258.323334][ C0] [ 258.323693][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 258.323710][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 258.323735][ T38] Tainted: [L]=SOFTLOCKUP [ 258.323741][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.323752][ T38] Call Trace: [ 258.323759][ T38] [ 258.323766][ T38] vpanic+0x56c/0xa60 [ 258.323788][ T38] ? __pfx___schedule+0x10/0x10 [ 258.323808][ T38] ? __pfx_vpanic+0x10/0x10 [ 258.323837][ T38] panic+0xc5/0xd0 [ 258.323859][ T38] ? __pfx_panic+0x10/0x10 [ 258.323878][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 258.323906][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 258.323926][ T38] watchdog+0x102c/0x1030 [ 258.323949][ T38] ? watchdog+0x1c9/0x1030 [ 258.323973][ T38] kthread+0x388/0x470 [ 258.323993][ T38] ? __pfx_watchdog+0x10/0x10 [ 258.324010][ T38] ? __pfx_kthread+0x10/0x10 [ 258.324034][ T38] ret_from_fork+0x514/0xb70 [ 258.324055][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 258.324073][ T38] ? __switch_to+0xc79/0x1410 [ 258.324097][ T38] ? __pfx_kthread+0x10/0x10 [ 258.324138][ T38] ret_from_fork_asm+0x1a/0x30 [ 258.324171][ T38] [ 258.324705][ T38] Kernel Offset: disabled