last executing test programs: 14m22.414476807s ago: executing program 32 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 10m9.542760655s ago: executing program 33 (id=3971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) 8m46.32294931s ago: executing program 34 (id=4983): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040), 0x4) 7m29.808898089s ago: executing program 35 (id=5744): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0x0) 6m0.151924881s ago: executing program 6 (id=7297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) 6m0.029637072s ago: executing program 6 (id=7299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1f8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000300)=""/4112, 0x1010}, {&(0x7f00000015c0)=""/165, 0xa5}, {&(0x7f0000002f80)=""/245, 0xf5}], 0x3}, 0x81}], 0x4, 0x40010132, 0x0) 5m59.875041763s ago: executing program 6 (id=7303): ioperm(0x3, 0x7, 0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) epoll_create1(0x91caa68f2fd717bd) 5m59.806822289s ago: executing program 6 (id=7306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x64, r1, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x6, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 5m59.695405315s ago: executing program 6 (id=7309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 5m59.642350862s ago: executing program 6 (id=7310): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m56.69835096s ago: executing program 2 (id=7337): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 5m56.506620964s ago: executing program 2 (id=7339): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x4}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x81}], 0x6, 0x102, 0x0) 5m56.348501188s ago: executing program 2 (id=7341): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 5m56.256744835s ago: executing program 2 (id=7343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) 5m56.176777445s ago: executing program 2 (id=7344): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 5m56.021833556s ago: executing program 2 (id=7345): r0 = socket$inet(0xa, 0x801, 0x6) listen(r0, 0x48) accept4(r0, 0x0, 0x0, 0x0) 5m44.587324616s ago: executing program 36 (id=7310): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m40.813189662s ago: executing program 37 (id=7345): r0 = socket$inet(0xa, 0x801, 0x6) listen(r0, 0x48) accept4(r0, 0x0, 0x0, 0x0) 2m29.599168971s ago: executing program 7 (id=9631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m29.361293986s ago: executing program 7 (id=9632): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 2m29.143269646s ago: executing program 7 (id=9633): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x0, 0x11, 0x21, "5fcaa314ae5ee33b4f2ffffcfc089f12932820bc9ffb550cf1374e5ea7c2b84468"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m25.96261762s ago: executing program 7 (id=9668): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[]) 2m25.703886012s ago: executing program 7 (id=9670): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 2m25.436972074s ago: executing program 7 (id=9671): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r0, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x800c5011, &(0x7f00000001c0)) 2m10.28249971s ago: executing program 38 (id=9671): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r0, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x800c5011, &(0x7f00000001c0)) 2m5.387895402s ago: executing program 8 (id=9945): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x8d, 0x2, 0x0, 0xf00, 0x30cd, [0x3f, 0xffffc0]}]}}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 2m2.559169673s ago: executing program 8 (id=9960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x1, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 2m2.407530302s ago: executing program 8 (id=9961): socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$watch_queue(r0, &(0x7f00000002c0)=""/193, 0xc1) 2m1.982729215s ago: executing program 8 (id=9965): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 2m1.584826004s ago: executing program 8 (id=9975): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m1.010756465s ago: executing program 8 (id=9977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) 1m45.907258371s ago: executing program 39 (id=9977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, 0x0, 0x0) 1m13.960218715s ago: executing program 9 (id=10339): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 1m13.806706194s ago: executing program 9 (id=10341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, r1, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}}, 0x0) 1m13.625562892s ago: executing program 9 (id=10346): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000000) 1m13.478578722s ago: executing program 9 (id=10355): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x1) 1m13.124415649s ago: executing program 3 (id=10351): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200) 1m13.124282471s ago: executing program 9 (id=10352): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 1m13.010203954s ago: executing program 3 (id=10353): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8801}]}) write$ppp(r0, &(0x7f0000000000)="00ba", 0x2) 1m12.769468109s ago: executing program 9 (id=10364): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x201000, 0x8}) 1m12.722716981s ago: executing program 3 (id=10357): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0xa, 0x0, [{0x80000019, 0x3f, 0x3, 0x7, 0x9, 0xb, 0x1000}, {0x4, 0x3ff, 0x0, 0xfffffff7, 0x5, 0x10a, 0x9}, {0x80000007, 0x40, 0x4, 0x8, 0x3, 0x10, 0x2}, {0xd, 0x2, 0x4, 0x7, 0x32f4, 0x10001, 0x8}, {0x80000007, 0x1000, 0x0, 0x4, 0x3, 0x3, 0x80}, {0xb, 0x1, 0x2, 0x5, 0x0, 0x6, 0x7}, {0x80000001, 0x1, 0x2, 0x1, 0x6, 0xfffffffc, 0x4}, {0x40000000, 0x0, 0x6, 0xfffffffe, 0x6, 0xc, 0x2}, {0xa, 0x8, 0x1, 0xff, 0x92, 0x54cfdb43}, {0x7, 0x9, 0x0, 0x9, 0x1, 0x2, 0xffffffdf}]}) 1m12.468017402s ago: executing program 3 (id=10362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000680)={0x1, 0x0, [{0x48, 0x0, 0x4}]}) 1m12.193644544s ago: executing program 3 (id=10365): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 1m12.013861532s ago: executing program 3 (id=10367): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x53, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 57.751501728s ago: executing program 40 (id=10364): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x0, 0x201000, 0x8}) 56.959178684s ago: executing program 41 (id=10367): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x53, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 2.192709546s ago: executing program 4 (id=10766): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x80}]}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.902489505s ago: executing program 4 (id=10771): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) 1.350546468s ago: executing program 5 (id=10776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) 1.288916144s ago: executing program 1 (id=10777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) 1.172618012s ago: executing program 0 (id=10778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x583, 0x0, 0x8000000000000000}]}) 1.046502193s ago: executing program 4 (id=10779): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) 990.811701ms ago: executing program 1 (id=10780): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4048014, &(0x7f0000000200)={0x11, 0x80f3, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) 882.893678ms ago: executing program 0 (id=10781): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) 882.74539ms ago: executing program 4 (id=10782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) 857.51757ms ago: executing program 4 (id=10783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0xf00) 846.172023ms ago: executing program 5 (id=10784): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) prctl$PR_GET_IO_FLUSHER(0x3a) 766.709058ms ago: executing program 1 (id=10785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x44004) 765.780739ms ago: executing program 5 (id=10786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xb, 0x4, 0x8, 0x4, 0x3, 0x80}]}) 638.540478ms ago: executing program 4 (id=10787): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)={0x20, 0xc, 0xb, {0xb, 0x11, "5e66d352dc868086b8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 633.932813ms ago: executing program 0 (id=10788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000001040)=""/221, 0xdd) 592.411119ms ago: executing program 1 (id=10789): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 474.701187ms ago: executing program 0 (id=10790): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 451.139426ms ago: executing program 1 (id=10791): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x2}) 403.149988ms ago: executing program 5 (id=10792): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x1, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000280)) 314.62758ms ago: executing program 0 (id=10793): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[], 0x17e8}}, 0x40) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 292.081679ms ago: executing program 5 (id=10794): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 229.856534ms ago: executing program 0 (id=10795): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 50.450299ms ago: executing program 1 (id=10796): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xb8}}, 0x4008800) ptrace$setregs(0xd, r0, 0x100, &(0x7f0000000240)="7b6ddd951ce4eef691063a401d46950323b282b366840621dd0feb4a3a49913e913767c07fa1627a39fab8cfc1cfd7c48cf6187a56d6c1425120a9e886025d2e3c94e22aeeb81136b97e9c326addb7a9a01ea1ae659247b4bfc52a85ddf68ad50151d631405a6f8d10ad7222acd04dff6cdb537ad1046f822def639e66d0f52815f5c7cb5f3bde9adff0804f0835919e4fadbf4400849be49e48a5be144a1aef0b") 0s ago: executing program 5 (id=10797): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x0, 0x80000001, 0xfffffffd}, 0x10) kernel console output (not intermixed with test programs): 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.548675][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.691718][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 753.691753][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.787161][T25870] Dev loop6: unable to read RDB block 0 [ 753.793360][T25870] loop6: unable to read partition table [ 753.793571][T25870] loop6: partition table beyond EOD, truncated [ 753.793603][T25870] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 754.559769][T25899] Attempt to restore checkpoint with obsolete wellknown handles [ 755.101600][T25916] serio: Serial port ttyS3 [ 755.418885][T25933] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8769'. [ 755.789827][T25945] netlink: 'syz.8.8773': attribute type 25 has an invalid length. [ 755.789850][T25945] netlink: 'syz.8.8773': attribute type 28 has an invalid length. [ 756.050520][ T5894] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 756.250515][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 756.254128][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.254161][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.254263][ T5894] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 756.254286][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.264352][ T5894] usb 6-1: config 0 descriptor?? [ 756.359526][T25963] netlink: 1030 bytes leftover after parsing attributes in process `syz.9.8784'. [ 756.359555][T25963] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 756.467727][ T2352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 756.575410][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8794'. [ 756.716880][ T5894] ntrig 0003:1B96:0008.0064: unknown main item tag 0x1 [ 756.716916][ T5894] ntrig 0003:1B96:0008.0064: unknown main item tag 0x5 [ 756.727159][ T5894] ntrig 0003:1B96:0008.0064: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 756.905895][ T5894] ntrig 0003:1B96:0008.0064: Firmware version: 2.2.30.12.3 (4be5 8bc9) [ 757.117802][ T5892] usb 6-1: USB disconnect, device number 46 [ 758.274592][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8808'. [ 758.570665][T17572] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 758.723005][T17572] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 758.723032][T17572] usb 9-1: config 0 has no interface number 0 [ 758.723077][T17572] usb 9-1: config 0 interface 41 has no altsetting 0 [ 758.747890][T17572] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 758.747920][T17572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.747939][T17572] usb 9-1: Product: syz [ 758.747952][T17572] usb 9-1: Manufacturer: syz [ 758.747959][T17572] usb 9-1: SerialNumber: syz [ 758.784270][T17572] usb 9-1: config 0 descriptor?? [ 758.810397][ T5892] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 758.962535][ T5892] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 758.962651][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.967873][ T5892] usb 6-1: config 0 descriptor?? [ 758.976865][ T5892] cp210x 6-1:0.0: cp210x converter detected [ 759.378632][ T5892] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 759.409599][ T5892] usb 6-1: cp210x converter now attached to ttyUSB0 [ 759.491051][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 759.587056][T23393] usb 6-1: USB disconnect, device number 47 [ 759.594081][T23393] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 759.657399][T17572] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 759.658140][T17572] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 759.700007][T17572] usb 9-1: USB disconnect, device number 14 [ 759.762010][T23393] cp210x 6-1:0.0: device disconnected [ 760.278409][T26033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input47 [ 761.232584][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 762.034773][T26073] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 764.956580][T26178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8882'. [ 765.351294][T26189] input: syz0 as /devices/virtual/input/input48 [ 765.512490][ T38] audit: type=1326 audit(2000000203.290:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26162 comm="syz.9.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1feaac819 code=0x7fc00000 [ 765.772829][T26206] netlink: 1 bytes leftover after parsing attributes in process `syz.9.8896'. [ 765.922587][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8899'. [ 766.362502][ C1] sd 0:0:1:0: [sda] tag#1252 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 766.362551][ C1] sd 0:0:1:0: [sda] tag#1252 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 766.531635][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8913'. [ 766.680300][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 766.840338][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 766.843407][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.843445][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.843483][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 766.843506][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.904896][ T9] usb 9-1: config 0 descriptor?? [ 766.925119][ T9] hub 9-1:0.0: USB hub found [ 766.979950][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8919'. [ 767.121414][ T9] hub 9-1:0.0: 1 port detected [ 767.310298][ T5894] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 767.633943][ T9] usb 9-1: USB disconnect, device number 15 [ 767.732469][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.732525][ T5894] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 767.732548][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.748662][ T5894] usb 6-1: config 0 descriptor?? [ 767.781153][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 768.177868][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.388577][ T5894] pwc: recv_control_msg error -71 req 02 val 2c00 [ 768.390281][ T5894] pwc: recv_control_msg error -71 req 04 val 1000 [ 768.390736][ T5894] pwc: recv_control_msg error -71 req 04 val 1300 [ 768.391183][ T5894] pwc: recv_control_msg error -71 req 04 val 1400 [ 768.391615][ T5894] pwc: recv_control_msg error -71 req 02 val 2000 [ 768.393459][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 768.393891][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 768.394304][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 768.394711][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 768.395130][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 768.396057][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 768.398648][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 768.407858][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 768.408328][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 768.412714][ T5894] pwc: Registered as video103. [ 768.447376][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8932'. [ 768.456648][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 768.492760][ T5894] usb 6-1: USB disconnect, device number 48 [ 769.051679][T26286] loop5: detected capacity change from 0 to 7 [ 769.200867][T26286] Dev loop5: unable to read RDB block 7 [ 769.200907][T26286] loop5: AHDI p1 [ 769.200938][T26286] loop5: partition table partially beyond EOD, truncated [ 769.550309][ T5892] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 769.707518][ T5892] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 769.707565][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.707592][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.707613][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 769.715685][ T5892] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 769.715714][ T5892] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 769.715734][ T5892] usb 6-1: Manufacturer: syz [ 769.737960][ T5892] usb 6-1: config 0 descriptor?? [ 769.830999][T26303] netlink: 'syz.9.8942': attribute type 16 has an invalid length. [ 769.831021][T26303] netlink: 176 bytes leftover after parsing attributes in process `syz.9.8942'. [ 769.898457][T26307] netlink: 'syz.9.8943': attribute type 2 has an invalid length. [ 769.898479][T26307] netlink: 'syz.9.8943': attribute type 4 has an invalid length. [ 769.988169][T26308] netlink: 'syz.7.8940': attribute type 10 has an invalid length. [ 770.217430][ T5892] appleir 0003:05AC:8243.0065: unknown main item tag 0x0 [ 770.346503][ T5892] appleir 0003:05AC:8243.0065: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 770.431005][T26308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.439183][T26308] team0: Port device netdevsim0 added [ 770.520292][ T5892] usb 6-1: USB disconnect, device number 49 [ 771.241292][T26338] program syz.9.8957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.615086][T26353] macvlan1: entered promiscuous mode [ 771.615305][T26353] macvlan1: entered allmulticast mode [ 771.615319][T26353] veth1_vlan: entered allmulticast mode [ 771.963560][T26374] netlink: 124 bytes leftover after parsing attributes in process `syz.7.8975'. [ 773.183499][T26425] netlink: 26332 bytes leftover after parsing attributes in process `syz.7.8999'. [ 773.356819][T26431] netlink: 'syz.8.9009': attribute type 16 has an invalid length. [ 773.356842][T26431] netlink: 176 bytes leftover after parsing attributes in process `syz.8.9009'. [ 773.562442][T26438] loop5: detected capacity change from 0 to 7 [ 774.522882][T26438] Dev loop5: unable to read RDB block 7 [ 774.522910][T26438] loop5: unable to read partition table [ 774.523038][T26438] loop5: partition table beyond EOD, truncated [ 774.523068][T26438] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 774.638233][T26449] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9010'. [ 774.855259][T26453] loop4: detected capacity change from 0 to 65536 [ 774.934263][T26454] loop4: detected capacity change from 65536 to 523370496 [ 775.111195][ T5191] Dev loop5: unable to read RDB block 7 [ 775.111237][ T5191] loop5: unable to read partition table [ 775.111466][ T5191] loop5: partition table beyond EOD, truncated [ 775.424074][T26472] netlink: 124 bytes leftover after parsing attributes in process `syz.5.9021'. [ 775.497815][T26474] netlink: 'syz.5.9024': attribute type 27 has an invalid length. [ 775.497839][T26474] netlink: 'syz.5.9024': attribute type 1 has an invalid length. [ 775.826425][T26490] netlink: 56 bytes leftover after parsing attributes in process `syz.9.9029'. [ 776.050308][ T5892] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 776.209544][ T5892] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.209616][ T5892] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 776.209640][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.228063][ T5892] usb 9-1: config 0 descriptor?? [ 776.247936][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 776.696683][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 776.814621][T26512] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9050'. [ 776.925722][ T5892] pwc: recv_control_msg error -71 req 02 val 2c00 [ 776.926096][ T5892] pwc: recv_control_msg error -71 req 04 val 1000 [ 776.926422][ T5892] pwc: recv_control_msg error -71 req 04 val 1300 [ 776.926742][ T5892] pwc: recv_control_msg error -71 req 04 val 1400 [ 776.927059][ T5892] pwc: recv_control_msg error -71 req 02 val 2000 [ 776.927356][ T5892] pwc: recv_control_msg error -71 req 02 val 2100 [ 776.927711][ T5892] pwc: recv_control_msg error -71 req 04 val 1500 [ 776.930309][ T5892] pwc: recv_control_msg error -71 req 02 val 2500 [ 776.979477][ T5892] pwc: recv_control_msg error -71 req 02 val 2400 [ 776.979941][ T5892] pwc: recv_control_msg error -71 req 02 val 2600 [ 776.981839][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 776.982951][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 776.984373][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 776.984794][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 776.998306][ T5892] pwc: Registered as video103. [ 777.096982][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input50 [ 777.277798][ T5892] usb 9-1: USB disconnect, device number 16 [ 777.549731][ T32] IPVS: starting estimator thread 0... [ 777.640334][T26529] IPVS: using max 10 ests per chain, 24000 per kthread [ 777.748979][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9052'. [ 777.996545][T26545] loop4: detected capacity change from 0 to 65536 [ 778.032154][T26545] loop4: detected capacity change from 65536 to 523370496 [ 778.974959][T26576] sctp: [Deprecated]: syz.7.9070 (pid 26576) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.974959][T26576] Use struct sctp_sack_info instead [ 779.143046][ T5892] IPVS: starting estimator thread 0... [ 779.230315][T26581] IPVS: using max 10 ests per chain, 24000 per kthread [ 779.254867][T26585] loop5: detected capacity change from 0 to 7 [ 779.779344][T26585] Dev loop5: unable to read RDB block 7 [ 779.779382][T26585] loop5: unable to read partition table [ 779.779557][T26585] loop5: partition table beyond EOD, truncated [ 779.779587][T26585] loop_reread_partitions: partition scan of loop5 (Wý) failed (rc=-5) [ 782.105676][T26621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 782.105815][T26621] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 783.180531][T26621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 783.180995][T26621] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 783.253908][T26621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 783.254024][T26621] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 783.302127][T26621] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 783.680362][ T6103] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 783.862429][ T6103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 783.862477][ T6103] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 783.862500][ T6103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.931474][ T6103] usb 6-1: config 0 descriptor?? [ 783.932478][T26634] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 784.050288][ T8968] Bluetooth: hci3: command 0x0405 tx timeout [ 784.148237][ T6103] usbhid 6-1:0.0: can't add hid device: -71 [ 784.148360][ T6103] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 784.179058][ T6103] usb 6-1: USB disconnect, device number 50 [ 785.241909][ T8968] Bluetooth: hci4: command 0x0406 tx timeout [ 785.320228][ T8968] Bluetooth: hci2: command 0x0c1a tx timeout [ 785.391449][ T6103] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 785.556160][ T6103] usb 6-1: unable to get BOS descriptor or descriptor too short [ 785.577688][ T6103] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 785.577719][ T6103] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.577739][ T6103] usb 6-1: Product: syz [ 785.577754][ T6103] usb 6-1: Manufacturer: syz [ 785.577769][ T6103] usb 6-1: SerialNumber: syz [ 786.166981][ T8968] Bluetooth: hci3: command 0x0405 tx timeout [ 786.725036][ T6103] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 786.896018][ T6103] usb 6-1: USB disconnect, device number 51 [ 787.320706][ T8968] Bluetooth: hci4: command 0x0406 tx timeout [ 787.400277][ T8968] Bluetooth: hci2: command 0x0c1a tx timeout [ 787.577617][ T2993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 789.480483][ T8968] Bluetooth: hci2: command 0x0c1a tx timeout [ 789.529916][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9144'. [ 789.908385][ T6103] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 790.079155][T26760] kvm: kvm [26759]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000007) = 0x4 [ 790.092986][ T6103] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 790.093046][ T6103] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.093072][ T6103] usb 10-1: config 0 interface 0 has no altsetting 0 [ 790.093104][ T6103] usb 10-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 790.093126][ T6103] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.118572][ T6103] usb 10-1: config 0 descriptor?? [ 790.525927][T26763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9153'. [ 790.550327][ T6103] hid (null): global environment stack underflow [ 790.550472][ T6103] hid (null): report_id 2839661142 is invalid [ 790.610394][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610441][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610467][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610493][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610518][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610544][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610570][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610595][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610621][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.610647][ T6103] semitek 0003:1EA7:0907.0066: unknown main item tag 0x0 [ 790.613261][ T6103] semitek 0003:1EA7:0907.0066: global environment stack underflow [ 790.613284][ T6103] semitek 0003:1EA7:0907.0066: item 0 4 1 11 parsing failed [ 790.614792][ T6103] semitek 0003:1EA7:0907.0066: probe with driver semitek failed with error -22 [ 790.828001][ T6103] usb 10-1: USB disconnect, device number 18 [ 790.927918][T26766] input: syz0 as /devices/virtual/input/input51 [ 791.514312][T26788] netlink: 52 bytes leftover after parsing attributes in process `syz.9.9164'. [ 791.515853][T26788] netlink: 52 bytes leftover after parsing attributes in process `syz.9.9164'. [ 791.607664][T26792] team0: No ports can be present during mode change [ 792.450708][T26823] input: syz0 as /devices/virtual/input/input52 [ 793.654124][T26869] program syz.9.9201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.836985][T26880] netlink: 190972 bytes leftover after parsing attributes in process `syz.8.9206'. [ 794.523216][T26901] binder: 26899:26901 ioctl c0306201 0 returned -14 [ 794.633846][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9217'. [ 795.659922][T26944] netlink: 770 bytes leftover after parsing attributes in process `syz.9.9233'. [ 796.507774][T26977] binder: 26976:26977 ioctl 400c620e 0 returned -14 [ 797.021698][T26996] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9257'. [ 797.021720][T26996] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 797.557349][T27010] netlink: 1 bytes leftover after parsing attributes in process `syz.8.9263'. [ 797.670270][ T6103] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 797.822692][ T6103] usb 6-1: unable to get BOS descriptor or descriptor too short [ 797.823260][ T6103] usb 6-1: not running at top speed; connect to a high speed hub [ 797.824426][ T6103] usb 6-1: config 61 has an invalid interface number: 37 but max is 0 [ 797.824459][ T6103] usb 6-1: config 61 has no interface number 0 [ 797.824489][ T6103] usb 6-1: config 61 interface 37 has no altsetting 0 [ 797.827042][ T6103] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 797.827071][ T6103] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.827091][ T6103] usb 6-1: Product: syz [ 797.827105][ T6103] usb 6-1: Manufacturer: syz [ 797.827119][ T6103] usb 6-1: SerialNumber: syz [ 798.255238][T27035] binder: 27034:27035 ioctl 40046205 0 returned -22 [ 798.257968][ T6103] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 798.660799][ T6103] gp8psk: usb in 128 operation failed. [ 798.661193][ T6103] gp8psk: usb in 137 operation failed. [ 798.661207][ T6103] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 798.661241][ T6103] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 798.672669][ T6103] usb 6-1: USB disconnect, device number 52 [ 799.983176][T27079] tipc: Enabling of bearer rejected, failed to enable media [ 800.647184][ T38] audit: type=1326 audit(2000000238.420:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27103 comm="syz.8.9309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f060546c819 code=0x0 [ 800.648286][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9307'. [ 800.648308][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9307'. [ 800.965052][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9314'. [ 801.130412][ T6103] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 801.280330][ T6103] usb 10-1: Using ep0 maxpacket: 16 [ 801.285345][ T6103] usb 10-1: config 127 has an invalid interface number: 124 but max is 0 [ 801.285375][ T6103] usb 10-1: config 127 has no interface number 0 [ 801.285406][ T6103] usb 10-1: config 127 interface 124 has no altsetting 0 [ 801.325048][ T6103] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 801.325076][ T6103] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.325094][ T6103] usb 10-1: Product: syz [ 801.325108][ T6103] usb 10-1: Manufacturer: syz [ 801.325122][ T6103] usb 10-1: SerialNumber: syz [ 801.373123][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9317'. [ 802.003525][T27143] netlink: 'syz.8.9327': attribute type 2 has an invalid length. [ 802.140750][T27149] overlayfs: failed lookup in lower (newroot/464, name='file0', err=-40): overlapping layers [ 802.250728][ T6103] usb 10-1: reset high-speed USB device number 19 using dummy_hcd [ 802.405640][ T6103] usb 10-1: device firmware changed [ 802.423446][ T6103] usb 10-1: USB disconnect, device number 19 [ 802.640220][ T6103] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 802.870863][ T6103] usb 10-1: Using ep0 maxpacket: 16 [ 802.980522][ T6103] usb 10-1: config 127 has an invalid interface number: 124 but max is 0 [ 802.980547][ T6103] usb 10-1: config 127 has no interface number 0 [ 802.980574][ T6103] usb 10-1: config 127 interface 124 has no altsetting 0 [ 803.019486][ T6103] usb 10-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 803.019514][ T6103] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.019534][ T6103] usb 10-1: Product: syz [ 803.019548][ T6103] usb 10-1: Manufacturer: syz [ 803.019563][ T6103] usb 10-1: SerialNumber: syz [ 804.415878][ T6103] usb 10-1: USB disconnect, device number 20 [ 804.949919][T27202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.400644][ T6103] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 805.589960][ T38] audit: type=1326 audit(2000000243.360:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27224 comm="syz.9.9362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1feaac819 code=0x0 [ 805.615650][ T6103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.615681][ T6103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.615703][ T6103] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 805.615747][ T6103] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.615776][ T6103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.679166][ T6103] usb 6-1: config 0 descriptor?? [ 805.910290][ T5834] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 806.060195][ T5834] usb 9-1: Using ep0 maxpacket: 32 [ 806.063281][ T5834] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.063316][ T5834] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 806.063343][ T5834] usb 9-1: config 0 interface 0 has no altsetting 0 [ 806.063375][ T5834] usb 9-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 806.063388][ T5834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.072152][ T5834] usb 9-1: config 0 descriptor?? [ 806.158890][ T6103] hid_parser_main: 49 callbacks suppressed [ 806.158914][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.158949][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.158974][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159003][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159028][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159052][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159154][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159180][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159206][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.159229][ T6103] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 806.272804][ T6103] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 806.455284][ T6103] usb 6-1: USB disconnect, device number 53 [ 806.793558][ T5834] usb 9-1: language id specifier not provided by device, defaulting to English [ 806.998747][ T5834] uclogic 0003:5543:3031.0068: failed retrieving Huion firmware version: -71 [ 806.998805][ T5834] uclogic 0003:5543:3031.0068: failed probing parameters: -71 [ 806.998908][ T5834] uclogic 0003:5543:3031.0068: probe with driver uclogic failed with error -71 [ 807.017393][ T5834] usb 9-1: USB disconnect, device number 17 [ 807.751274][T27264] sctp: [Deprecated]: syz.8.9377 (pid 27264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 807.751274][T27264] Use struct sctp_sack_info instead [ 807.980405][ T6103] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 808.131693][ T6103] usb 10-1: Using ep0 maxpacket: 16 [ 808.137115][ T6103] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.137169][ T6103] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.137198][ T6103] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 808.137217][ T6103] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 808.137237][ T6103] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.138524][ T6103] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 808.138553][ T6103] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 808.138574][ T6103] usb 10-1: Manufacturer: syz [ 808.162808][ T6103] usb 10-1: config 0 descriptor?? [ 808.526486][ T6103] rc_core: IR keymap rc-hauppauge not found [ 808.526505][ T6103] Registered IR keymap rc-empty [ 808.526670][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.540283][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.565245][ T6103] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 808.575130][ T6103] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input54 [ 808.611666][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.617198][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.662043][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.684746][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.700697][T27277] netlink: 'syz.8.9384': attribute type 9 has an invalid length. [ 808.700888][T27277] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.9384'. [ 808.713288][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.730608][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.750432][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.770378][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.794446][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.813936][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.830289][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.860510][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.902035][ T6103] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 808.947533][ T6103] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 808.947562][ T6103] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 809.070380][ T6103] usb 10-1: USB disconnect, device number 21 [ 809.297659][T27293] veth1_macvtap: left promiscuous mode [ 809.297695][T27293] macsec0: entered promiscuous mode [ 809.521358][T27298] veth1_macvtap: entered promiscuous mode [ 809.521774][T27298] macsec0: left promiscuous mode [ 809.632556][T27302] program syz.9.9395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 810.690375][ T5834] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 810.854621][ T5834] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.854658][ T5834] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.854680][ T5834] usb 6-1: config 1 interface 0 has no altsetting 0 [ 810.900289][ T5834] usb 6-1: string descriptor 0 read error: -22 [ 810.900433][ T5834] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 810.900465][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.456015][ T5834] hid_parser_main: 28 callbacks suppressed [ 811.456041][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456070][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456095][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456120][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456144][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456169][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456204][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456228][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456254][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.456279][ T5834] glorious 0003:258A:0033.0069: unknown main item tag 0x0 [ 811.458839][ T5834] glorious 0003:258A:0033.0069: unexpected long global item [ 811.459863][ T5834] glorious 0003:258A:0033.0069: probe with driver glorious failed with error -22 [ 811.470352][ T6103] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 811.610947][ T5834] usb 6-1: USB disconnect, device number 54 [ 811.667068][ T6103] usb 9-1: unable to get BOS descriptor or descriptor too short [ 811.668950][ T6103] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 811.668985][ T6103] usb 9-1: can't read configurations, error -71 [ 811.728299][T27381] netlink: 180 bytes leftover after parsing attributes in process `syz.7.9430'. [ 811.826398][T27384] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 812.886217][T27417] tap0: tun_chr_ioctl cmd 1074025675 [ 812.886243][T27417] tap0: persist enabled [ 813.338324][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 814.176200][T27462] Invalid ELF header len 16 [ 814.310373][ T6103] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 814.440386][ T8968] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 814.477110][ T6103] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 814.477152][ T6103] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.477171][ T6103] usb 10-1: Product: syz [ 814.477184][ T6103] usb 10-1: Manufacturer: syz [ 814.477198][ T6103] usb 10-1: SerialNumber: syz [ 814.538191][ T6103] usb 10-1: config 0 descriptor?? [ 815.074068][ T6103] usb 10-1: Firmware: major: 163, minor: 102, hardware type: UNKNOWN (62) [ 815.273640][ T6103] usb 10-1: failed to fetch extended address, random address set [ 815.273670][ T6103] usb 10-1: atusb_probe: initialization failed, error = -524 [ 815.274491][ T6103] atusb 10-1:0.0: probe with driver atusb failed with error -524 [ 815.287108][ T6103] usb 10-1: USB disconnect, device number 22 [ 815.670286][ T5892] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 815.820661][ T5892] usb 9-1: Using ep0 maxpacket: 16 [ 815.825628][ T5892] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.825661][ T5892] usb 9-1: config 0 interface 0 has no altsetting 0 [ 815.825705][ T5892] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 815.825727][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.837773][ T5892] usb 9-1: config 0 descriptor?? [ 816.085796][T27492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.341912][ T5892] mcp2221 0003:04D8:00DD.006A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 816.914526][ T5892] usb 9-1: USB disconnect, device number 20 [ 817.717084][ T932] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 817.891838][ T932] usb 6-1: Using ep0 maxpacket: 16 [ 817.904968][ T932] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 817.904997][ T932] usb 6-1: config 0 has no interface number 0 [ 817.905041][ T932] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 817.905066][ T932] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 817.949664][ T932] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 817.949696][ T932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.949714][ T932] usb 6-1: Product: syz [ 817.949727][ T932] usb 6-1: Manufacturer: syz [ 817.949740][ T932] usb 6-1: SerialNumber: syz [ 818.024844][ T932] usb 6-1: config 0 descriptor?? [ 818.025655][T27521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 818.025766][T27521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 818.246420][T27521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 818.246591][T27521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 818.579401][T27554] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9510'. [ 818.660239][ T5834] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 818.865035][ T5834] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.865059][ T5834] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.869522][ T5834] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 818.869549][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 818.869568][ T5834] usb 10-1: SerialNumber: syz [ 818.921023][ T932] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 818.921053][ T932] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 818.921337][ T932] asix 6-1:0.251: probe with driver asix failed with error -71 [ 818.927607][ T932] usb 6-1: USB disconnect, device number 55 [ 818.931770][ T2352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 819.210950][ T5834] usb 10-1: 0:2 : does not exist [ 819.356877][ T5834] usb 10-1: USB disconnect, device number 23 [ 819.494210][T17166] udevd[17166]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.829790][ T38] audit: type=1800 audit(2000000257.560:86): pid=27581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9522" name="file1" dev="tmpfs" ino=4463 res=0 errno=0 [ 820.076463][T27589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9525'. [ 820.352248][T27599] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9531'. [ 822.342618][T27666] netlink: 'syz.8.9562': attribute type 4 has an invalid length. [ 822.800747][T27686] netlink: 16146 bytes leftover after parsing attributes in process `syz.5.9570'. [ 822.960221][ T5834] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 823.116097][ T5834] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 823.116128][ T5834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.142600][ T5834] usb 10-1: config 0 descriptor?? [ 823.146780][ T5834] cp210x 10-1:0.0: cp210x converter detected [ 823.367239][ T5834] usb 10-1: cp210x converter now attached to ttyUSB0 [ 825.731892][ T9] usb 10-1: USB disconnect, device number 24 [ 825.753701][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 825.754718][ T9] cp210x 10-1:0.0: device disconnected [ 826.198586][T27781] hugetlbfs: syz.8.9613 (27781): Using mlock ulimits for SHM_HUGETLB is obsolete [ 826.267019][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9616'. [ 826.267043][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9616'. [ 826.621511][ T5834] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 826.788554][ T32] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 826.790400][ T5834] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 826.790429][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.821071][ T5834] usb 6-1: config 0 descriptor?? [ 826.875333][T27807] netlink: 72 bytes leftover after parsing attributes in process `syz.9.9626'. [ 826.875363][T27807] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9626'. [ 826.945775][ T32] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 826.947318][ T32] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.947347][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 826.947366][ T32] usb 9-1: SerialNumber: syz [ 827.041802][ T5834] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 827.217153][T27813] program syz.7.9629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.357344][ T5834] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 827.357369][ T5834] [drm] Initialized udl on minor 2 [ 827.596951][ T32] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 827.660817][ T5834] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 827.669123][ T5834] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 827.700229][T17572] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 827.710376][ T5834] usb 6-1: USB disconnect, device number 56 [ 827.753484][ T932] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 827.847748][ T32] usb 9-1: USB disconnect, device number 21 [ 827.863538][T17572] usb 10-1: config 150 has an invalid interface number: 204 but max is 1 [ 827.863724][T17572] usb 10-1: config 150 has no interface number 0 [ 827.863768][T17572] usb 10-1: config 150 interface 204 has no altsetting 0 [ 827.904769][T17572] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 827.904787][T17572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.904798][T17572] usb 10-1: Product: syz [ 827.904806][T17572] usb 10-1: Manufacturer: syz [ 827.904814][T17572] usb 10-1: SerialNumber: syz [ 828.152612][T17572] xr_serial 10-1:150.204: xr_serial converter detected [ 828.666603][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 828.754447][T17572] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 828.754503][T17572] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 828.769919][T17572] usb 10-1: USB disconnect, device number 25 [ 828.815924][T17572] xr_serial 10-1:150.204: device disconnected [ 830.077203][T27866] bridge0: port 3(veth1_macvtap) entered blocking state [ 830.088020][T27866] bridge0: port 3(veth1_macvtap) entered disabled state [ 830.119334][T27866] veth1_macvtap: entered allmulticast mode [ 830.234328][T27866] veth1_macvtap: left allmulticast mode [ 830.830516][ T5834] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 831.014052][ T5834] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 831.018722][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.018772][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.018793][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.019835][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.019875][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.019894][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.058662][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.058745][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.058776][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.134597][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.134648][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.134671][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.141439][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.141490][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.141515][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.149176][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.149231][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.149256][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.174986][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.175038][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.175063][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.227063][ T5834] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.227636][ T5834] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.227664][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 831.289571][ T5834] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 831.289601][ T5834] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 831.289617][ T5834] usb 10-1: Product: syz [ 831.289625][ T5834] usb 10-1: Manufacturer: syz [ 831.289633][ T5834] usb 10-1: SerialNumber: syz [ 831.310283][ T932] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 831.336545][ T5834] usb 10-1: config 0 descriptor?? [ 831.460226][ T932] usb 6-1: Using ep0 maxpacket: 8 [ 831.522969][ T932] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 831.523094][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.523122][ T932] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.523146][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.523169][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.524527][ T932] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 831.524574][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.524654][ T932] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.524679][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.524703][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.644663][ T932] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 831.644719][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 831.644735][ T932] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.644748][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.644761][ T932] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.645151][ T5834] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 831.710229][ T932] usb 6-1: string descriptor 0 read error: -22 [ 831.710331][ T932] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 831.710345][ T932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.795924][ T5834] usb 10-1: USB disconnect, device number 26 [ 831.862166][ T932] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 831.914079][ T5834] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 831.979712][T17572] usb 6-1: USB disconnect, device number 57 [ 832.831533][T27922] netlink: 'syz.5.9680': attribute type 8 has an invalid length. [ 833.222674][T27936] pimreg: tun_chr_ioctl cmd 1074025676 [ 833.222690][T27936] pimreg: owner set to 0 [ 834.148424][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9702'. [ 834.149637][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9702'. [ 834.540338][ T932] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 834.551792][T27987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.713435][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.713471][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.713509][ T932] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 834.713532][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.721275][ T932] usb 6-1: config 0 descriptor?? [ 834.890495][T17572] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 835.040395][T17572] usb 10-1: Using ep0 maxpacket: 8 [ 835.067567][T17572] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 835.067597][T17572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.067618][T17572] usb 10-1: Product: syz [ 835.067632][T17572] usb 10-1: Manufacturer: syz [ 835.067647][T17572] usb 10-1: SerialNumber: syz [ 835.106658][T17572] usb 10-1: config 0 descriptor?? [ 835.166044][ T932] hid_parser_main: 246 callbacks suppressed [ 835.166177][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.166214][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.166237][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.166260][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.166283][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.166306][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.166330][ T932] isku 0003:1E7D:319C.006B: unknown main item tag 0x0 [ 835.184449][ T932] isku 0003:1E7D:319C.006B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 835.334353][T17572] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 835.334651][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 835.346518][T17572] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 835.376054][ T932] isku 0003:1E7D:319C.006B: couldn't init struct isku_device [ 835.376100][ T932] isku 0003:1E7D:319C.006B: couldn't install keyboard [ 835.377888][T17572] usb 10-1: USB disconnect, device number 27 [ 835.397422][ T932] isku 0003:1E7D:319C.006B: probe with driver isku failed with error -71 [ 835.438476][ T932] usb 6-1: USB disconnect, device number 58 [ 835.669406][T28005] netlink: 164 bytes leftover after parsing attributes in process `syz.8.9719'. [ 835.756581][T28009] overlayfs: workdir and upperdir must be separate subtrees [ 835.814475][T28011] overlay: ./file0 is not a directory [ 836.510334][T17572] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 836.673086][T17572] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.673122][T17572] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.673169][T17572] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 836.673189][T17572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.883138][ T38] audit: type=1400 audit(2000000274.660:87): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 6-1: GET_CAPABILITIES returned 0 [ 836.943269][T17572] usbtmc 6-1:16.0: can't read capabilities [ 837.174248][T17572] usb 6-1: USB disconnect, device number 59 [ 837.239275][T28067] netlink: 14478 bytes leftover after parsing attributes in process `syz.8.9750'. [ 837.538606][T28078] netlink: 'syz.9.9755': attribute type 1 has an invalid length. [ 837.538647][T28078] netlink: 'syz.9.9755': attribute type 2 has an invalid length. [ 837.538659][T28078] netlink: 'syz.9.9755': attribute type 1 has an invalid length. [ 837.538671][T28078] netlink: 'syz.9.9755': attribute type 3 has an invalid length. [ 837.538682][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9755'. [ 838.431873][T28102] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9766'. [ 838.909822][T28118] netlink: 65051 bytes leftover after parsing attributes in process `syz.9.9774'. [ 839.619198][ T8968] Bluetooth: hci4: unexpected event for opcode 0x200f [ 840.001538][T28164] netlink: 190972 bytes leftover after parsing attributes in process `syz.9.9797'. [ 840.637810][T28189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9809'. [ 840.886594][T28195] binder: 28194:28195 ioctl c0306201 0 returned -14 [ 841.295294][T28217] program syz.5.9821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.580752][T28228] netlink: 770 bytes leftover after parsing attributes in process `syz.8.9827'. [ 843.191246][T28285] netlink: 128 bytes leftover after parsing attributes in process `syz.9.9856'. [ 843.191270][T28285] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 843.354223][T28290] netlink: 1 bytes leftover after parsing attributes in process `syz.9.9866'. [ 843.453036][T28293] binder: 28292:28293 ioctl 400c620e 0 returned -14 [ 843.994953][T28319] block nbd5: not configured, cannot reconfigure [ 844.511697][T28335] binder: 28334:28335 ioctl 40046205 0 returned -22 [ 844.555048][T28337] netlink: 'syz.9.9880': attribute type 83 has an invalid length. [ 845.840390][T17572] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 845.992934][T17572] usb 9-1: unable to get BOS descriptor or descriptor too short [ 845.993504][T17572] usb 9-1: not running at top speed; connect to a high speed hub [ 846.010528][T17572] usb 9-1: config 61 has an invalid interface number: 37 but max is 0 [ 846.010556][T17572] usb 9-1: config 61 has no interface number 0 [ 846.010588][T17572] usb 9-1: config 61 interface 37 has no altsetting 0 [ 846.019021][T17572] usb 9-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 846.019052][T17572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.019073][T17572] usb 9-1: Product: syz [ 846.019089][T17572] usb 9-1: Manufacturer: syz [ 846.019105][T17572] usb 9-1: SerialNumber: syz [ 846.559820][T28383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.573111][T17572] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 846.749525][T28389] tipc: Enabling of bearer rejected, already enabled [ 846.975445][T17572] gp8psk: usb in 128 operation failed. [ 846.976070][T17572] gp8psk: usb in 137 operation failed. [ 846.976087][T17572] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 846.976122][T17572] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 847.046730][T17572] usb 9-1: USB disconnect, device number 22 [ 847.439412][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 847.515231][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 847.559884][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.624421][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.687232][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 849.127595][T28391] chnl_net:caif_netlink_parms(): no params data found [ 849.577223][T28435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9923'. [ 849.577247][T28435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9923'. [ 849.612412][T28391] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.612906][T28391] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.613202][T28391] bridge_slave_0: entered allmulticast mode [ 849.616294][T28391] bridge_slave_0: entered promiscuous mode [ 849.647221][T28391] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.647687][T28391] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.647969][T28391] bridge_slave_1: entered allmulticast mode [ 849.676094][T28391] bridge_slave_1: entered promiscuous mode [ 849.759005][T28391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.778847][T28391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.976318][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 850.040196][ T5140] Bluetooth: hci1: command tx timeout [ 850.055907][T28391] team0: Port device team_slave_0 added [ 850.200646][T28391] team0: Port device team_slave_1 added [ 850.225077][ T38] audit: type=1326 audit(2000000287.970:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28444 comm="syz.5.9928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b90fac819 code=0x0 [ 850.375429][T28391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.375446][T28391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.375470][T28391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.379085][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9930'. [ 850.379679][T28391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.379693][T28391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.379718][T28391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.723265][T28391] hsr_slave_0: entered promiscuous mode [ 850.728220][T28391] hsr_slave_1: entered promiscuous mode [ 850.730010][T28391] debugfs: 'hsr0' already exists in 'hsr' [ 850.730031][T28391] Cannot create hsr debugfs directory [ 851.088806][T28467] netlink: 'syz.9.9938': attribute type 2 has an invalid length. [ 851.175902][T28469] overlayfs: failed lookup in lower (newroot/1587, name='file0', err=-40): overlapping layers [ 851.811091][T17572] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 851.962913][T17572] usb 9-1: Using ep0 maxpacket: 16 [ 851.966360][T17572] usb 9-1: config 127 has an invalid interface number: 124 but max is 0 [ 851.966479][T17572] usb 9-1: config 127 has no interface number 0 [ 851.966511][T17572] usb 9-1: config 127 interface 124 has no altsetting 0 [ 851.998649][T17572] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 851.998679][T17572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.998697][T17572] usb 9-1: Product: syz [ 851.998710][T17572] usb 9-1: Manufacturer: syz [ 851.998723][T17572] usb 9-1: SerialNumber: syz [ 852.120460][ T5140] Bluetooth: hci1: command tx timeout [ 852.952495][T17572] usb 9-1: reset high-speed USB device number 23 using dummy_hcd [ 853.107053][T17572] usb 9-1: device firmware changed [ 853.121767][T17572] usb 9-1: USB disconnect, device number 23 [ 853.290255][T17572] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 853.450248][T17572] usb 9-1: Using ep0 maxpacket: 16 [ 853.469522][T17572] usb 9-1: config 127 has an invalid interface number: 124 but max is 0 [ 853.469548][T17572] usb 9-1: config 127 has no interface number 0 [ 853.469575][T17572] usb 9-1: config 127 interface 124 has no altsetting 0 [ 853.488913][T17572] usb 9-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 853.488945][T17572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.488965][T17572] usb 9-1: Product: syz [ 853.488979][T17572] usb 9-1: Manufacturer: syz [ 853.488994][T17572] usb 9-1: SerialNumber: syz [ 854.203804][ T5140] Bluetooth: hci1: command tx timeout [ 854.473496][T28552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.556253][T17572] usb 9-1: USB disconnect, device number 24 [ 854.588099][T17166] udevd[17166]: setting owner of /dev/bus/usb/009/024 to uid=0, gid=0 failed: No such file or directory [ 856.288356][ T5140] Bluetooth: hci1: command tx timeout [ 857.237279][ T38] audit: type=1326 audit(2000000295.010:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28615 comm="syz.5.9976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b90fac819 code=0x0 [ 858.750795][T17572] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 858.885497][T28662] netlink: 'syz.5.9985': attribute type 9 has an invalid length. [ 858.885521][T28662] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9985'. [ 858.902562][T17572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.902593][T17572] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.902611][T17572] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 858.902645][T17572] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 858.902666][T17572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.000381][T17572] usb 10-1: config 0 descriptor?? [ 859.442296][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442332][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442359][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442384][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442410][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442435][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442458][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442483][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442509][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.442534][T17572] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 859.545598][T17572] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 859.707362][T17572] usb 10-1: USB disconnect, device number 28 [ 859.851143][T28391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 859.891271][T28391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.894784][T28391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 859.927193][T28391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.929454][T28391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 859.987794][T28391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.988692][T28391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 860.098614][T28391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 860.463106][T28391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.518840][T28391] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.566427][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.566652][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.658997][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.659197][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.966252][T17572] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 861.194235][T17572] usb 6-1: Using ep0 maxpacket: 32 [ 861.196656][T17572] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.196689][T17572] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 861.196715][T17572] usb 6-1: config 0 interface 0 has no altsetting 0 [ 861.196750][T17572] usb 6-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 861.196775][T17572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.266151][T17572] usb 6-1: config 0 descriptor?? [ 861.910344][T17572] usb 6-1: language id specifier not provided by device, defaulting to English [ 862.119655][T17572] uclogic 0003:5543:3031.006D: failed retrieving Huion firmware version: -71 [ 862.119714][T17572] uclogic 0003:5543:3031.006D: failed probing parameters: -71 [ 862.119818][T17572] uclogic 0003:5543:3031.006D: probe with driver uclogic failed with error -71 [ 862.140242][ T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 862.193568][T17572] usb 6-1: USB disconnect, device number 60 [ 862.209909][T28391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.336796][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.336829][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.338091][ T9] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 862.338118][ T9] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 862.338136][ T9] usb 10-1: Manufacturer: syz [ 862.348054][ T9] usb 10-1: config 0 descriptor?? [ 863.187499][ T9] uclogic 0003:256C:006D.006E: failed retrieving string descriptor #200: -71 [ 863.187560][ T9] uclogic 0003:256C:006D.006E: failed retrieving pen parameters: -71 [ 863.187577][ T9] uclogic 0003:256C:006D.006E: failed probing pen v2 parameters: -71 [ 863.187621][ T9] uclogic 0003:256C:006D.006E: failed probing parameters: -71 [ 863.187717][ T9] uclogic 0003:256C:006D.006E: probe with driver uclogic failed with error -71 [ 863.197570][ T9] usb 10-1: USB disconnect, device number 29 [ 863.284014][T28391] veth0_vlan: entered promiscuous mode [ 863.304886][T28391] veth1_vlan: entered promiscuous mode [ 863.385806][T28391] veth0_macvtap: entered promiscuous mode [ 863.395546][T28391] veth1_macvtap: entered promiscuous mode [ 863.450726][T28391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.485071][T28391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.526890][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.543826][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.544084][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.544224][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.868062][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.868082][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.538070][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.538222][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.128908][T28788] sctp: [Deprecated]: syz.5.10006 (pid 28788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.128908][T28788] Use struct sctp_sack_info instead [ 867.383221][ T9] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 867.542660][ T9] usb 10-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.542693][ T9] usb 10-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.542713][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 867.549677][ T9] usb 10-1: string descriptor 0 read error: -22 [ 867.549761][ T9] usb 10-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 867.549774][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.025062][ T9] hid_parser_main: 28 callbacks suppressed [ 868.025086][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025119][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025145][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025169][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025193][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025218][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025244][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025270][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025291][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.025315][ T9] glorious 0003:258A:0033.006F: unknown main item tag 0x0 [ 868.028072][ T9] glorious 0003:258A:0033.006F: unexpected long global item [ 868.030416][ T9] glorious 0003:258A:0033.006F: probe with driver glorious failed with error -22 [ 868.193614][T17572] usb 10-1: USB disconnect, device number 30 [ 869.395582][T28860] veth1_macvtap: left promiscuous mode [ 869.395604][T28860] macsec0: entered promiscuous mode [ 869.454550][T28861] veth1_macvtap: entered promiscuous mode [ 869.454800][T28861] macsec0: left promiscuous mode [ 869.965590][T28871] Invalid ELF header len 16 [ 870.047238][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.047331][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.862014][T17572] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 871.061038][T17572] usb 6-1: unable to get BOS descriptor or descriptor too short [ 871.067478][T17572] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 871.067522][T17572] usb 6-1: can't read configurations, error -71 [ 871.355343][ T8968] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 871.380508][ T8968] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 871.386993][ T8968] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 871.388181][ T8968] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 871.388929][ T8968] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 871.848127][T28903] chnl_net:caif_netlink_parms(): no params data found [ 871.959151][T28903] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.959348][T28903] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.959518][T28903] bridge_slave_0: entered allmulticast mode [ 871.964763][T28903] bridge_slave_0: entered promiscuous mode [ 871.982376][T28903] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.982729][T28903] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.983307][T28903] bridge_slave_1: entered allmulticast mode [ 871.986195][T28903] bridge_slave_1: entered promiscuous mode [ 872.050709][T28903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.055649][T28903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.101351][T28903] team0: Port device team_slave_0 added [ 872.104627][T28903] team0: Port device team_slave_1 added [ 872.144170][T28903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.144181][T28903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.144196][T28903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.146174][T28903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.146184][T28903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.146198][T28903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.231554][T28903] hsr_slave_0: entered promiscuous mode [ 872.233419][T28903] hsr_slave_1: entered promiscuous mode [ 872.234911][T28903] debugfs: 'hsr0' already exists in 'hsr' [ 872.234935][T28903] Cannot create hsr debugfs directory [ 873.498855][ T8968] Bluetooth: hci5: command tx timeout [ 875.561167][ T8968] Bluetooth: hci5: command tx timeout [ 875.809725][T28903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 875.846000][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.847503][T28903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 876.020403][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 876.021304][T28903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 876.061269][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 876.061987][T28903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 876.112134][T28903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 876.359157][T28903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.405314][T28903] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.436290][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.436533][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.484368][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.484457][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.067112][T28903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.363987][T28903] veth0_vlan: entered promiscuous mode [ 877.389455][T28903] veth1_vlan: entered promiscuous mode [ 877.619745][T28903] veth0_macvtap: entered promiscuous mode [ 877.628614][T28903] veth1_macvtap: entered promiscuous mode [ 877.640718][ T8968] Bluetooth: hci5: command tx timeout [ 877.695259][T28903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.718662][T28903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.788642][ T1038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.790224][ T1038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.792205][ T1038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.793081][ T1038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.320954][T23113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.320974][T23113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.453029][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.453044][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.722839][ T8968] Bluetooth: hci5: command tx timeout [ 879.792281][T29067] program syz.3.10051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 880.898574][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 881.091475][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 881.742058][ T6103] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 881.891622][ T6103] usb 4-1: Using ep0 maxpacket: 16 [ 881.893720][ T6103] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.893779][ T6103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 881.893807][ T6103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 881.893827][ T6103] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 881.893847][ T6103] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.959227][ T6103] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 881.959253][ T6103] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 881.959272][ T6103] usb 4-1: Manufacturer: syz [ 882.011063][ T6103] usb 4-1: config 0 descriptor?? [ 882.453213][ T6103] rc_core: IR keymap rc-hauppauge not found [ 882.453233][ T6103] Registered IR keymap rc-empty [ 882.453397][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.479128][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.492182][ T6103] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 882.507119][ T6103] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 882.529070][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.545656][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.560366][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.580262][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.601872][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.620285][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.640389][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.660296][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.680542][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.700234][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.720430][ T6103] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 882.772611][ T6103] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 882.772635][ T6103] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 882.803396][ T6103] usb 4-1: USB disconnect, device number 32 [ 883.320287][ T8968] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 883.321166][ T5140] Bluetooth: hci6: command 0x1003 tx timeout [ 883.929609][T29177] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0) [ 883.996355][T29181] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10085'. [ 884.436472][T29194] tap0: tun_chr_ioctl cmd 1074025675 [ 884.436486][T29194] tap0: persist enabled [ 885.032868][T29214] netlink: 'syz.3.10103': attribute type 4 has an invalid length. [ 886.030246][ T6103] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 886.184417][ T6103] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 886.184449][ T6103] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 886.184462][ T6103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.219924][ T6103] usb 6-1: config 0 descriptor?? [ 886.221363][T29246] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 886.659557][ T6103] hid_parser_main: 246 callbacks suppressed [ 886.659580][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659611][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659636][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659662][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659688][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659713][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659736][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659760][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659786][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.659811][ T6103] asus 0003:0B05:1ABE.0070: unknown main item tag 0x0 [ 886.749239][ T6103] asus 0003:0B05:1ABE.0070: unbalanced collection at end of report description [ 886.749702][ T6103] asus 0003:0B05:1ABE.0070: Asus hid parse failed: -22 [ 886.749760][ T6103] asus 0003:0B05:1ABE.0070: probe with driver asus failed with error -22 [ 886.883227][ T9] usb 6-1: USB disconnect, device number 63 [ 886.900226][ T32] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 886.904441][ T38] audit: type=1800 audit(2000000324.670:90): pid=29256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.10124" name="file1" dev="tmpfs" ino=3261 res=0 errno=0 [ 887.060333][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 887.068106][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.068140][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.068182][ T32] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 887.068205][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.116672][ T32] usb 4-1: config 0 descriptor?? [ 887.554314][ T32] samsung 0003:0419:0600.0071: hidraw0: USB HID v0.0b Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 887.720402][ T8968] Bluetooth: hci5: command tx timeout [ 887.768506][ T9] usb 4-1: USB disconnect, device number 33 [ 888.052307][ T32] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 888.222715][ T32] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 888.222746][ T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.248842][ T32] usb 10-1: config 0 descriptor?? [ 888.478531][ T32] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 888.652801][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 888.678041][ T5892] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 888.743731][ T32] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 888.743756][ T32] [drm] Initialized udl on minor 2 [ 888.845341][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 888.849640][ T5892] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.849734][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 888.849768][ T5892] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 888.849791][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.904397][ T5892] usb 6-1: config 0 descriptor?? [ 889.026873][T29299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10143'. [ 889.105413][ T32] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 889.216582][ T32] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 889.420887][ T5892] mcp2221 0003:04D8:00DD.0072: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 889.460264][ T32] usb 10-1: USB disconnect, device number 31 [ 889.554484][ T6103] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 889.599973][ T6103] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 889.956004][ T5892] usb 6-1: USB disconnect, device number 64 [ 889.998429][T29317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.100375][ T5892] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 891.250252][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 891.254879][ T5892] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 891.254906][ T5892] usb 4-1: config 0 has no interface number 0 [ 891.254950][ T5892] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 891.254977][ T5892] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 891.260005][ T5892] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 891.260957][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.260979][ T5892] usb 4-1: Product: syz [ 891.260993][ T5892] usb 4-1: Manufacturer: syz [ 891.261007][ T5892] usb 4-1: SerialNumber: syz [ 891.354746][ T5892] usb 4-1: config 0 descriptor?? [ 891.356276][T29349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.356396][T29349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.590243][T29349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 891.591210][T29349] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 892.184067][T29383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10188'. [ 892.201271][ T5892] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 892.201299][ T5892] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 892.201605][ T5892] asix 4-1:0.251: probe with driver asix failed with error -71 [ 892.253700][ T5892] usb 4-1: USB disconnect, device number 34 [ 892.768216][T29404] Bluetooth: MGMT ver 1.23 [ 892.925712][T29410] netlink: 16146 bytes leftover after parsing attributes in process `syz.9.10194'. [ 892.931058][ T5989] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 893.102663][T29416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.115234][ T5989] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.115258][ T5989] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.116348][ T5989] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 893.116372][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 893.116391][ T5989] usb 6-1: SerialNumber: syz [ 893.419976][ T5989] usb 6-1: 0:2 : does not exist [ 893.672516][ T5989] usb 6-1: USB disconnect, device number 65 [ 893.829794][T17300] udevd[17300]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.977318][ T38] audit: type=1400 audit(2000000332.750:91): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 8 bytes leftover after parsing attributes in process `syz.5.10267'. [ 897.316621][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10267'. [ 898.205740][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10279'. [ 898.205764][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10279'. [ 898.470819][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 898.638693][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 898.673160][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 898.673190][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 898.673212][ T9] usb 6-1: SerialNumber: syz [ 898.675730][T29620] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.10291'. [ 899.046262][T29628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10295'. [ 899.355114][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 899.614665][ T32] usb 6-1: USB disconnect, device number 66 [ 900.087166][T29656] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10307'. [ 900.087196][T29656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10307'. [ 900.352262][T29663] overlayfs: workdir and upperdir must be separate subtrees [ 900.690342][ T5892] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 900.902159][ T5892] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 900.903434][ T5892] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.903461][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 900.903480][ T5892] usb 10-1: SerialNumber: syz [ 901.350186][ T32] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 901.600419][ T5892] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 901.697729][ T32] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 901.697748][ T32] usb 4-1: config 150 has no interface number 0 [ 901.697773][ T32] usb 4-1: config 150 interface 204 has no altsetting 0 [ 901.738889][ T32] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 901.738949][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.738969][ T32] usb 4-1: Product: syz [ 901.738983][ T32] usb 4-1: Manufacturer: syz [ 901.738997][ T32] usb 4-1: SerialNumber: syz [ 901.806241][T23393] usb 10-1: USB disconnect, device number 32 [ 902.149795][ T32] xr_serial 4-1:150.204: xr_serial converter detected [ 902.578075][T29709] bridge0: port 3(veth1_macvtap) entered blocking state [ 902.578450][T29709] bridge0: port 3(veth1_macvtap) entered disabled state [ 902.578739][T29709] veth1_macvtap: entered allmulticast mode [ 902.709032][ T32] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 902.709088][ T32] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 902.734492][ T32] usb 4-1: USB disconnect, device number 35 [ 902.738319][ T32] xr_serial 4-1:150.204: device disconnected [ 902.825615][T29709] veth1_macvtap: left allmulticast mode [ 903.273192][T29732] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10342'. [ 903.557053][T29744] bridge0: port 3(veth1_macvtap) entered blocking state [ 903.558606][T29744] bridge0: port 3(veth1_macvtap) entered disabled state [ 903.558925][T29744] veth1_macvtap: entered allmulticast mode [ 903.705642][T29744] veth1_macvtap: left allmulticast mode [ 904.310269][ T6103] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 904.462349][ T6103] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 904.462375][ T6103] usb 6-1: config 150 has no interface number 0 [ 904.462414][ T6103] usb 6-1: config 150 interface 204 has no altsetting 0 [ 904.465942][ T6103] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 904.465971][ T6103] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.465990][ T6103] usb 6-1: Product: syz [ 904.466004][ T6103] usb 6-1: Manufacturer: syz [ 904.466018][ T6103] usb 6-1: SerialNumber: syz [ 904.766907][ T6103] xr_serial 6-1:150.204: xr_serial converter detected [ 905.368651][ T6103] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 905.368705][ T6103] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 905.421340][ T6103] usb 6-1: USB disconnect, device number 67 [ 905.429176][ T6103] xr_serial 6-1:150.204: device disconnected [ 912.115361][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 919.312806][ T5140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 919.343214][ T5140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 919.367879][ T5140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 919.369317][ T5140] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 919.369922][ T5140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 919.731319][T29795] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.10380'. [ 919.976851][T29789] chnl_net:caif_netlink_parms(): no params data found [ 920.142702][T29789] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.143074][T29789] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.143390][T29789] bridge_slave_0: entered allmulticast mode [ 920.146786][T29789] bridge_slave_0: entered promiscuous mode [ 920.246084][T29789] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.246384][T29789] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.246885][T29789] bridge_slave_1: entered allmulticast mode [ 920.249483][T29789] bridge_slave_1: entered promiscuous mode [ 920.253386][ T5140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 920.304740][ T5140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 920.307895][ T5140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 920.310003][ T5140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 920.315094][ T5140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 920.568431][T29789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.587503][T29789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.674931][T29789] team0: Port device team_slave_0 added [ 920.679830][T29789] team0: Port device team_slave_1 added [ 920.741720][T29789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.741737][T29789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.741761][T29789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.765275][T29789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.765292][T29789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.765318][T29789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.887657][T29789] hsr_slave_0: entered promiscuous mode [ 920.889718][T29789] hsr_slave_1: entered promiscuous mode [ 920.891560][T29789] debugfs: 'hsr0' already exists in 'hsr' [ 920.891584][T29789] Cannot create hsr debugfs directory [ 921.640998][ T8968] Bluetooth: hci6: command tx timeout [ 922.024268][T29803] chnl_net:caif_netlink_parms(): no params data found [ 922.206699][T29803] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.207069][T29803] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.207347][T29803] bridge_slave_0: entered allmulticast mode [ 922.231350][T29803] bridge_slave_0: entered promiscuous mode [ 922.241601][T29803] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.241957][T29803] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.242241][T29803] bridge_slave_1: entered allmulticast mode [ 922.244781][T29803] bridge_slave_1: entered promiscuous mode [ 922.347750][T29803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.372807][T29803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.533733][ T5140] Bluetooth: hci7: command tx timeout [ 922.589210][T29803] team0: Port device team_slave_0 added [ 922.976201][T29803] team0: Port device team_slave_1 added [ 923.086531][T29803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.086564][T29803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.086587][T29803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.265912][T29803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.265930][T29803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.265954][T29803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.721375][ T5140] Bluetooth: hci6: command tx timeout [ 924.049619][T29803] hsr_slave_0: entered promiscuous mode [ 924.053845][T29803] hsr_slave_1: entered promiscuous mode [ 924.055312][T29803] debugfs: 'hsr0' already exists in 'hsr' [ 924.055334][T29803] Cannot create hsr debugfs directory [ 924.630632][ T5140] Bluetooth: hci7: command tx timeout [ 925.318298][T29789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 925.427935][T29789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 925.448109][T29789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 925.575835][T29789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 925.807387][ T5140] Bluetooth: hci6: command tx timeout [ 926.107572][T29789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 926.140694][T29789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 926.141748][T29789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 926.187665][T29789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.680202][ T5140] Bluetooth: hci7: command tx timeout [ 927.438862][T29789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.501143][T29789] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.573011][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.573249][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.592936][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.593185][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.884017][ T5140] Bluetooth: hci6: command tx timeout [ 928.763000][ T5140] Bluetooth: hci7: command tx timeout [ 929.098504][T29789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.672304][T29789] veth0_vlan: entered promiscuous mode [ 929.866569][T29803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 929.915611][T29803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 929.919939][T29803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 930.018277][T29803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.029114][T29789] veth1_vlan: entered promiscuous mode [ 930.050649][T29803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 930.098058][T29803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.117090][T29803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 930.187454][T29803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.473836][T29789] veth0_macvtap: entered promiscuous mode [ 930.510406][T29789] veth1_macvtap: entered promiscuous mode [ 930.583521][T29789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.637603][T29789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.679463][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.693968][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.701282][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.702749][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.732506][T29803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.453435][T29803] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.497274][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.497348][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.607663][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.607823][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.014802][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.053748][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.142024][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.142044][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.363465][ T2352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.363484][ T2352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.866646][ T38] audit: type=1326 audit(2000000370.640:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30023 comm="syz.0.10382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f705f64c819 code=0x0 [ 933.424048][T29803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.594964][T29803] veth0_vlan: entered promiscuous mode [ 934.630219][T23393] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 934.644777][T29803] veth1_vlan: entered promiscuous mode [ 934.782362][T23393] usb 6-1: unable to get BOS descriptor or descriptor too short [ 934.786633][T23393] usb 6-1: string descriptor 0 read error: -22 [ 934.786786][T23393] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 934.786809][T23393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.825245][T23393] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 934.825289][T23393] usb 6-1: MIDIStreaming interface descriptor not found [ 935.322159][ T932] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 935.423996][T29803] veth0_macvtap: entered promiscuous mode [ 935.499658][T29803] veth1_macvtap: entered promiscuous mode [ 935.533150][T23393] usb 6-1: USB disconnect, device number 68 [ 935.562899][ T932] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 935.562928][ T932] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 935.562947][ T932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 935.562994][ T932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 935.563020][ T932] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 935.565985][ T932] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 935.566010][ T932] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 935.566029][ T932] usb 2-1: Product: syz [ 935.566043][ T932] usb 2-1: Manufacturer: syz [ 935.627636][ T932] cdc_wdm 2-1:1.0: skipping garbage [ 935.627656][ T932] cdc_wdm 2-1:1.0: skipping garbage [ 935.816971][ T932] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 935.816992][ T932] cdc_wdm 2-1:1.0: Unknown control protocol [ 935.966906][T30106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10394'. [ 936.418639][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 936.476113][ T32] usb 2-1: USB disconnect, device number 53 [ 936.666638][T29803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.735254][T29803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.829229][ T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.829274][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.829304][ T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.829346][ T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.791418][T30141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10402'. [ 939.412594][T25720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.412614][T25720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.408481][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.408500][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.740309][ T5892] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 940.906629][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 940.995162][ T5892] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.995202][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 940.995229][ T5892] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 940.995250][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.046195][ T5892] usb 2-1: config 0 descriptor?? [ 941.550538][ T5894] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 941.622309][ T5892] mcp2221 0003:04D8:00DD.0073: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 941.780094][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 941.796580][ T5894] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 941.796610][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.796630][ T5894] usb 5-1: Product: syz [ 941.796644][ T5894] usb 5-1: Manufacturer: syz [ 941.796658][ T5894] usb 5-1: SerialNumber: syz [ 941.842137][ T5894] usb 5-1: config 0 descriptor?? [ 941.846296][ T5894] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 942.318376][ T5892] usb 2-1: USB disconnect, device number 54 [ 942.774136][ T5894] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 942.794729][ T5894] usb 5-1: USB disconnect, device number 55 [ 943.040332][T25720] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 943.863527][T30268] misc userio: Can't change port type on an already running userio instance [ 944.156531][T30275] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 944.671729][T30289] vxcan0: tx address claim with dlc 0 [ 945.133997][ T5989] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 945.330176][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 945.333073][ T5989] usb 5-1: unable to get BOS descriptor or descriptor too short [ 945.350283][ T5989] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 945.352570][ T5989] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 945.352599][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.352619][ T5989] usb 5-1: Product: syz [ 945.352634][ T5989] usb 5-1: Manufacturer: syz [ 945.352648][ T5989] usb 5-1: SerialNumber: syz [ 945.362609][T17870] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 945.535446][T17870] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 945.535859][T17870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.650141][T17870] usb 6-1: config 0 descriptor?? [ 945.658128][ T5989] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 945.658622][ T5989] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 946.093663][T17870] hackrf 6-1:0.0: Board ID: 00 [ 946.093686][T17870] hackrf 6-1:0.0: Firmware version: [ 946.159884][T17870] hackrf 6-1:0.0: Registered as swradio24 [ 946.159910][T17870] videodev: could not get a free minor [ 946.159919][T17870] hackrf 6-1:0.0: Failed to register as video device (-23) [ 946.235383][T17870] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 946.300616][ T5989] usb 5-1: USB disconnect, device number 56 [ 946.405346][ T5892] usb 6-1: USB disconnect, device number 69 [ 946.496266][T29790] udevd[29790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 947.825146][T30369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10475'. [ 948.511891][T30385] kvm: kvm [30383]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x6 [ 949.454887][T30414] input: syz1 as /devices/virtual/input/input58 [ 949.520600][ T5989] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 949.674135][ T5989] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.674170][ T5989] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.674193][ T5989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 949.674225][ T5989] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 949.674248][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.739139][ T5989] usb 5-1: config 0 descriptor?? [ 949.820910][ T5893] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 949.970635][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 949.973482][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 949.973509][ T5893] usb 2-1: config 0 has no interface number 0 [ 949.999374][ T5893] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 949.999403][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.999422][ T5893] usb 2-1: Product: syz [ 949.999435][ T5893] usb 2-1: Manufacturer: syz [ 949.999449][ T5893] usb 2-1: SerialNumber: syz [ 950.041263][ T5893] usb 2-1: config 0 descriptor?? [ 950.115239][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 950.237334][ T5989] hid_parser_main: 483 callbacks suppressed [ 950.237359][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237395][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237422][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237449][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237474][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237499][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237524][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237546][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237569][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.237593][ T5989] uclogic 0003:5543:0522.0074: unknown main item tag 0x0 [ 950.370622][ T5989] uclogic 0003:5543:0522.0074: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 950.418158][T30440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10496'. [ 950.621984][ T5894] usb 5-1: USB disconnect, device number 57 [ 950.944634][T30442] fido_id[30442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 950.984557][ T5893] gspca_spca1528: reg_w err -71 [ 951.000397][ T5893] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 951.017568][ T5893] usb 2-1: USB disconnect, device number 55 [ 951.401535][ T5892] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 951.553412][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 951.555690][ T5892] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.555720][ T5892] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.555741][ T5892] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.555766][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.555795][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 951.555817][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.578526][ T5892] usb 6-1: config 0 descriptor?? [ 951.934838][T30468] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10505'. [ 951.934862][T30468] netlink: 'syz.1.10505': attribute type 1 has an invalid length. [ 952.089728][ T5892] lg-g15 0003:046D:C22D.0075: hidraw0: USB HID vff.fc Device [HID 046d:c22d] on usb-dummy_hcd.5-1/input0 [ 952.237718][ T9] usb 6-1: USB disconnect, device number 70 [ 952.387981][T30477] fido_id[30477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 952.418829][T30482] loop5: detected capacity change from 0 to 7 [ 952.494507][T30083] buffer_io_error: 11 callbacks suppressed [ 952.494524][T30083] Buffer I/O error on dev loop5, logical block 0, async page read [ 952.495187][T30083] Buffer I/O error on dev loop5, logical block 0, async page read [ 952.495701][T30083] Buffer I/O error on dev loop5, logical block 0, async page read [ 952.496327][T30083] Buffer I/O error on dev loop5, logical block 0, async page read [ 952.496925][T30083] Buffer I/O error on dev loop5, logical block 0, async page read [ 953.139957][T30492] block nbd2: server does not support multiple connections per device. [ 953.248136][T30492] block nbd2: shutting down sockets [ 953.371316][T30512] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.10525'. [ 953.371415][T30512] openvswitch: netlink: Message has 5 unknown bytes. [ 953.659637][T30524] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 953.659661][T30524] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 954.189215][T30536] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10536'. [ 954.375038][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10540'. [ 954.724900][T30559] ALSA: mixer_oss: invalid OSS volume '' [ 954.895425][T30565] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.10548'. [ 955.055930][T30570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10551'. [ 955.196003][T30576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10556'. [ 955.446613][T30584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10558'. [ 955.456371][T30584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10558'. [ 955.528625][T30588] program syz.0.10560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 955.677632][T30594] program syz.4.10563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 956.532975][T30620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10575'. [ 956.710203][ T32] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 956.860548][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 956.874090][ T32] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 956.874122][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 956.874149][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 956.874191][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 956.874214][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.877965][ T32] usb 6-1: config 0 descriptor?? [ 956.878954][T30618] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 956.889461][ T32] hub 6-1:0.0: USB hub found [ 957.016607][ T932] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 957.092278][ T32] hub 6-1:0.0: 2 ports detected [ 957.180228][ T932] usb 2-1: Using ep0 maxpacket: 8 [ 957.186139][ T932] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 957.186168][ T932] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 957.186189][ T932] usb 2-1: Product: syz [ 957.186203][ T932] usb 2-1: Manufacturer: syz [ 957.186218][ T932] usb 2-1: SerialNumber: syz [ 957.227886][ T932] usb 2-1: config 0 descriptor?? [ 957.239710][ T932] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 957.703399][ T32] usb 6-1: USB disconnect, device number 71 [ 957.852559][ T932] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 958.055401][ T5894] usb 2-1: USB disconnect, device number 56 [ 958.160427][ T932] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 958.341866][ T932] usb 5-1: Using ep0 maxpacket: 32 [ 958.357797][ T932] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 958.357823][ T932] usb 5-1: config 2 has no interface number 0 [ 958.357858][ T932] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 958.357872][ T932] usb 5-1: config 2 interface 88 has no altsetting 0 [ 958.402700][ T932] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 958.402722][ T932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.402733][ T932] usb 5-1: Product: syz [ 958.402741][ T932] usb 5-1: Manufacturer: syz [ 958.402748][ T932] usb 5-1: SerialNumber: syz [ 958.456111][T30636] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 958.683334][T30636] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 959.338823][ T932] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 959.339106][ T932] asix 5-1:2.88: probe with driver asix failed with error -71 [ 959.382213][ T932] usb 5-1: USB disconnect, device number 58 [ 959.487979][T30662] smc: net device hsr0 applied user defined pnetid SYZ2 [ 959.489586][T30662] smc: net device hsr0 erased user defined pnetid SYZ2 [ 960.165141][T30683] sctp: Trying to GSO but underlying device doesn't support it. [ 960.361405][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 960.479717][T30693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10611'. [ 960.523192][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.523219][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 960.524346][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 960.524372][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 960.524392][ T9] usb 5-1: SerialNumber: syz [ 960.818007][ T9] usb 5-1: 0:2 : does not exist [ 961.222715][ T9] usb 5-1: USB disconnect, device number 59 [ 961.292569][T29790] udevd[29790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.077680][T30747] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10633'. [ 964.252300][T30784] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10649'. [ 964.361456][ T5892] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 964.530203][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 964.532342][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.532374][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.532412][ T5892] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 964.532436][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.539766][ T5892] usb 5-1: config 0 descriptor?? [ 964.997046][T30797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10655'. [ 965.032339][ T5892] cherry 0003:046A:0027.0076: fixing up Cherry Cymotion report descriptor [ 965.035393][ T5892] hid_parser_main: 59 callbacks suppressed [ 965.035425][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x2 [ 965.035459][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035485][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035510][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035535][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035598][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035623][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035649][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035674][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.035700][ T5892] cherry 0003:046A:0027.0076: unknown main item tag 0x0 [ 965.162477][ T5892] cherry 0003:046A:0027.0076: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 965.278260][T30804] pim6reg: entered allmulticast mode [ 965.296233][T30804] pim6reg: left allmulticast mode [ 965.306811][ T5894] usb 5-1: USB disconnect, device number 60 [ 965.699935][ T5892] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 965.860945][ T5893] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 965.880475][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 965.885297][ T5892] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 965.885334][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 965.885368][ T5892] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 965.885391][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.942410][ T5892] usb 2-1: config 0 descriptor?? [ 965.986575][ T38] audit: type=1800 audit(2000000404.712:93): pid=30800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10656" name="file0" dev="tmpfs" ino=853 res=0 errno=0 [ 966.030226][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 966.037097][ T5893] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 966.037129][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.037196][ T5893] usb 6-1: Product: syz [ 966.037210][ T5893] usb 6-1: Manufacturer: syz [ 966.037224][ T5893] usb 6-1: SerialNumber: syz [ 966.086306][ T5893] usb 6-1: config 0 descriptor?? [ 966.454418][ T5892] hid-thrustmaster 0003:044F:B65D.0077: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 966.454888][ T5892] hid-thrustmaster 0003:044F:B65D.0077: setup data couldn't be sent [ 966.513315][ T5893] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 966.581879][ C1] hid-thrustmaster 0003:044F:B65D.0077: URB to get model id failed with error -71 [ 966.583039][ T932] usb 2-1: USB disconnect, device number 57 [ 966.699173][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.709464][ T5893] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 966.709524][ T5893] usb 6-1: media controller created [ 966.739089][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.783925][T30823] fido_id[30823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 966.939674][T30828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 967.005088][ T5893] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 967.005107][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 967.036840][T30828] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 967.214624][ T5893] usb 6-1: USB disconnect, device number 72 [ 967.318057][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 967.675335][ T932] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 967.860687][ T932] usb 2-1: Using ep0 maxpacket: 16 [ 967.864053][ T932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.864072][ T932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 967.864095][ T932] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 967.864107][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.868177][ T932] usb 2-1: config 0 descriptor?? [ 968.342659][ T932] aquacomputer_d5next 0003:0C70:F003.0078: hidraw0: USB HID v0.0a Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 968.542016][ T932] usb 2-1: USB disconnect, device number 58 [ 969.190544][T30885] netlink: 'syz.1.10691': attribute type 6 has an invalid length. [ 969.190565][T30885] netlink: 'syz.1.10691': attribute type 7 has an invalid length. [ 971.402725][ T5893] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 971.564876][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.564910][ T5893] usb 2-1: config 0 has no interface number 0 [ 971.564952][ T5893] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.564977][ T5893] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.564997][ T5893] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 971.565012][ T5893] usb 2-1: config 0 interface 1 has no altsetting 0 [ 971.580257][ T5893] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 971.580288][ T5893] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 971.580309][ T5893] usb 2-1: Manufacturer: syz [ 971.671309][ T5893] usb 2-1: config 0 descriptor?? [ 972.334431][ T5893] uclogic 0003:145F:0212.0079: pen parameters not found [ 972.334447][ T5893] uclogic 0003:145F:0212.0079: interface is invalid, ignoring [ 972.360363][ T5893] usb 2-1: USB disconnect, device number 59 [ 973.450538][T31010] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10746'. [ 974.078373][T23113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 974.215270][T31034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10757'. [ 974.356676][T31039] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10759'. [ 974.526111][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 976.527981][T31104] vxcan0: tx address claim with dest, not broadcast [ 976.561004][ T9] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 976.596193][T31110] binder: 31108:31110 ioctl c018620c 200000000280 returned -1 [ 976.635384][T31106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.712411][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 976.712436][ T9] usb 5-1: config 0 has no interface number 0 [ 976.712474][ T9] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 976.712500][ T9] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.712528][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 976.712561][ T9] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 976.712583][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.736005][ T9] usb 5-1: config 0 descriptor?? [ 976.922754][ T39] INFO: task syz-executor:19243 blocked for more than 143 seconds. [ 976.922781][ T39] Tainted: G L syzkaller #0 [ 976.922793][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 976.922859][ T39] task:syz-executor state:D stack:21152 pid:19243 tgid:19243 ppid:1 task_flags:0x400140 flags:0x00080002 [ 976.922913][ T39] Call Trace: [ 976.922920][ T39] [ 976.922932][ T39] __schedule+0x169e/0x54f0 [ 976.923032][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 976.923056][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 976.923079][ T39] ? rt_spin_lock+0x1e0/0x400 [ 976.923106][ T39] ? __pfx___schedule+0x10/0x10 [ 976.923190][ T39] ? schedule+0x90/0x360 [ 976.923221][ T39] schedule+0x164/0x360 [ 976.923251][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 976.923275][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 976.923342][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 976.923367][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 976.923387][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 976.923413][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 976.923440][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 976.923511][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 976.923537][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 976.923556][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 976.923583][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 976.923607][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 976.923672][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 976.923692][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 976.923714][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 976.923745][ T39] deactivate_locked_super+0xbc/0x130 [ 976.923771][ T39] cleanup_mnt+0x437/0x4d0 [ 976.923840][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.923862][ T39] task_work_run+0x1d9/0x270 [ 976.923891][ T39] ? __pfx_task_work_run+0x10/0x10 [ 976.923923][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.923944][ T39] exit_to_user_mode_loop+0xed/0x480 [ 976.924010][ T39] ? rcu_is_watching+0x15/0xb0 [ 976.924038][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.924058][ T39] do_syscall_64+0x33e/0xf80 [ 976.924076][ T39] ? trace_irq_disable+0x3b/0x140 [ 976.924098][ T39] ? clear_bhb_loop+0x40/0x90 [ 976.924170][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.924191][ T39] RIP: 0033:0x7f1e7652da57 [ 976.924208][ T39] RSP: 002b:00007ffcaa42bf08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 976.924229][ T39] RAX: 0000000000000000 RBX: 00007f1e765c2048 RCX: 00007f1e7652da57 [ 976.924246][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcaa42bfc0 [ 976.924258][ T39] RBP: 00007ffcaa42bfc0 R08: 00007ffcaa42cfc0 R09: 00000000ffffffff [ 976.924271][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcaa42d050 [ 976.924346][ T39] R13: 00007f1e765c2048 R14: 00000000000caf45 R15: 00007ffcaa42d090 [ 976.924377][ T39] [ 976.924507][ T39] [ 976.924507][ T39] Showing all locks held in the system: [ 976.924518][ T39] 5 locks held by kworker/0:0/9: [ 976.924535][ T39] #0: ffff88801af79d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 976.924581][ T39] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 976.924675][ T39] #2: ffff88802b24e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 976.924723][ T39] #3: ffff88801bba0210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 976.924817][ T39] #4: ffff88805ea361d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 976.924863][ T39] 2 locks held by kworker/u8:0/12: [ 976.924873][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 976.924910][ T39] #1: ffffc90000117c40 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 976.924999][ T39] 2 locks held by kworker/u8:1/13: [ 976.925009][ T39] #0: ffff88801ae84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 976.925048][ T39] #1: ffffc90000127c40 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 976.925141][ T39] 1 lock held by khungtaskd/39: [ 976.925153][ T39] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 976.925231][ T39] 2 locks held by getty/5578: [ 976.925241][ T39] #0: ffff88803841b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 976.925356][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 976.925406][ T39] 1 lock held by syz-executor/19243: [ 976.925482][ T39] #0: ffff888042d900d0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 976.925545][ T39] 1 lock held by syz-executor/22762: [ 976.925556][ T39] #0: ffff88805de040d0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 976.925660][ T39] 1 lock held by syz.8.9977/28587: [ 976.925671][ T39] #0: ffff888042d900d0 (&type->s_umount_key#52){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 976.925723][ T39] 1 lock held by syz-executor/28903: [ 976.925783][ T39] #0: ffff88805a81e0d0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 976.925841][ T39] 4 locks held by syz.0.10795/31114: [ 976.925852][ T39] #0: ffff88803fd6aab0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 976.925948][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 976.925995][ T39] #2: ffff888065f9cad8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 976.926045][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 976.926145][ T39] 6 locks held by syz.1.10796/31116: [ 976.926157][ T39] #0: ffff88803b490948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 976.926290][ T39] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: prepare_alloc_pages+0x152/0x6b0 [ 976.926342][ T39] #2: ffff888025d8a7d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: handle_mm_fault+0xa3d/0x14c0 [ 976.926442][ T39] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 976.926491][ T39] #4: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: page_table_check_set+0x126/0x510 [ 976.926721][ T39] #5: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 976.926778][ T39] [ 976.926783][ T39] ============================================= [ 976.926783][ T39] [ 976.926800][ T39] NMI backtrace for cpu 0 [ 976.926820][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.926845][ T39] Tainted: [L]=SOFTLOCKUP [ 976.926852][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 976.926864][ T39] Call Trace: [ 976.926872][ T39] [ 976.926880][ T39] dump_stack_lvl+0xe8/0x150 [ 976.926903][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 976.926927][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.926949][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 976.926975][ T39] sys_info+0x135/0x170 [ 976.926996][ T39] watchdog+0xfd3/0x1030 [ 976.927023][ T39] ? watchdog+0x1c9/0x1030 [ 976.927048][ T39] kthread+0x388/0x470 [ 976.927073][ T39] ? __pfx_watchdog+0x10/0x10 [ 976.927091][ T39] ? __pfx_kthread+0x10/0x10 [ 976.927116][ T39] ret_from_fork+0x514/0xb70 [ 976.927138][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 976.927156][ T39] ? __switch_to+0xc79/0x1410 [ 976.927182][ T39] ? __pfx_kthread+0x10/0x10 [ 976.927203][ T39] ret_from_fork_asm+0x1a/0x30 [ 976.927238][ T39] [ 976.927262][ T39] Sending NMI from CPU 0 to CPUs 1: [ 976.927292][ C1] NMI backtrace for cpu 1 [ 976.927307][ C1] CPU: 1 UID: 0 PID: 31116 Comm: syz.1.10796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.927328][ C1] Tainted: [L]=SOFTLOCKUP [ 976.927334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 976.927344][ C1] RIP: 0010:__lock_acquire+0x517/0x2cf0 [ 976.927366][ C1] Code: 1d 44 89 e0 49 ff c7 49 63 8e f0 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 <25> ff 1f 00 00 48 0f a3 05 3c ea 22 12 73 10 48 69 c0 c8 00 00 00 [ 976.927379][ C1] RSP: 0000:ffffc9000f1776f0 EFLAGS: 00000087 [ 976.927393][ C1] RAX: 000000000002000b RBX: ffff88805ec00c90 RCX: 0000000000000006 [ 976.927405][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 976.927414][ C1] RBP: ffff88805ec00ce8 R08: ffffffff82358b56 R09: ffffffff8e3c8100 [ 976.927426][ C1] R10: dffffc0000000000 R11: fffff9400027ce81 R12: 0000000000000003 [ 976.927438][ C1] R13: ffff88805ec00ce8 R14: ffff88805ec00000 R15: 0000000000000003 [ 976.927450][ C1] FS: 0000555559c88500(0000) GS:ffff888125b62000(0000) knlGS:0000000000000000 [ 976.927464][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.927476][ C1] CR2: 000000110c326f03 CR3: 000000004ea46000 CR4: 00000000003526f0 [ 976.927491][ C1] Call Trace: [ 976.927497][ C1] [ 976.927507][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 976.927526][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 976.927549][ C1] ? pfn_valid+0xba/0x480 [ 976.927570][ C1] ? page_table_check_set+0x126/0x510 [ 976.927590][ C1] lock_acquire+0x106/0x350 [ 976.927609][ C1] ? page_table_check_set+0x126/0x510 [ 976.927630][ C1] ? pfn_valid+0xba/0x480 [ 976.927650][ C1] ? pfn_valid+0xba/0x480 [ 976.927669][ C1] ? pfn_valid+0xba/0x480 [ 976.927689][ C1] ? page_table_check_set+0x126/0x510 [ 976.927710][ C1] page_table_check_set+0x143/0x510 [ 976.927731][ C1] ? page_table_check_set+0x126/0x510 [ 976.927753][ C1] set_pte_range+0x84b/0x8a0 [ 976.927785][ C1] filemap_map_pages+0xd1c/0x1d10 [ 976.927806][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 976.927826][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 976.927845][ C1] ? filemap_map_pages+0x201/0x1d10 [ 976.927864][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 976.927882][ C1] ? __pte_offset_map+0x29/0x200 [ 976.927903][ C1] ? do_pte_missing+0x12b5/0x2950 [ 976.927926][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 976.927941][ C1] do_pte_missing+0x1646/0x2950 [ 976.927965][ C1] ? handle_mm_fault+0xed/0x14c0 [ 976.927985][ C1] handle_mm_fault+0xdb5/0x14c0 [ 976.928007][ C1] ? handle_mm_fault+0xed/0x14c0 [ 976.928028][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 976.928047][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 976.928069][ C1] ? __pfx_do_futex+0x10/0x10 [ 976.928099][ C1] do_user_addr_fault+0xa73/0x1340 [ 976.928119][ C1] ? rcu_is_watching+0x15/0xb0 [ 976.928140][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 976.928156][ C1] exc_page_fault+0x6a/0xc0 [ 976.928172][ C1] asm_exc_page_fault+0x26/0x30 [ 976.928188][ C1] RIP: 0033:0x7ff8ed7e1116 [ 976.928202][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 20 fe ff ff e9 d4 fd ff ff 0f 1f 80 [ 976.928215][ C1] RSP: 002b:00007ffc5d226710 EFLAGS: 00010202 [ 976.928229][ C1] RAX: 000000110c324000 RBX: ffffffff8133b8ce RCX: 0000000000000001 [ 976.928240][ C1] RDX: 00000000000018ce RSI: 0000000000000ee3 RDI: 0000000000000002 [ 976.928250][ C1] RBP: 0000000000000000 R08: 00007ff8edb70000 R09: 00007ff8edb72000 [ 976.928262][ C1] R10: 000000008133b8d2 R11: 0000000000000000 R12: 00007ff8edb86038 [ 976.928273][ C1] R13: 0000000000000018 R14: ffffffff8133b8ce R15: 00007ff8ee6b5720 [ 976.928285][ C1] ? in_gate_area_no_mm+0xe/0x60 [ 976.928309][ C1] ? in_gate_area_no_mm+0xe/0x60 [ 976.928332][ C1] [ 976.929366][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 976.929384][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 976.929408][ T39] Tainted: [L]=SOFTLOCKUP [ 976.929416][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 976.929425][ T39] Call Trace: [ 976.929432][ T39] [ 976.929439][ T39] vpanic+0x56c/0xa60 [ 976.929465][ T39] ? __pfx___schedule+0x10/0x10 [ 976.929489][ T39] ? __pfx_vpanic+0x10/0x10 [ 976.929526][ T39] panic+0xc5/0xd0 [ 976.929547][ T39] ? __pfx_panic+0x10/0x10 [ 976.929567][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 976.929595][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 976.929624][ T39] watchdog+0x102c/0x1030 [ 976.929650][ T39] ? watchdog+0x1c9/0x1030 [ 976.929674][ T39] kthread+0x388/0x470 [ 976.929698][ T39] ? __pfx_watchdog+0x10/0x10 [ 976.929716][ T39] ? __pfx_kthread+0x10/0x10 [ 976.929742][ T39] ret_from_fork+0x514/0xb70 [ 976.929764][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 976.929784][ T39] ? __switch_to+0xc79/0x1410 [ 976.929813][ T39] ? __pfx_kthread+0x10/0x10 [ 976.929838][ T39] ret_from_fork_asm+0x1a/0x30 [ 976.929874][ T39] [ 976.930071][ T39] Kernel Offset: disabled