last executing test programs: 23.079392112s ago: executing program 1 (id=3467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 23.011591498s ago: executing program 1 (id=3469): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) bind$netlink(r0, &(0x7f0000000240), 0xc) 22.763497542s ago: executing program 1 (id=3470): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201107000000070729bb19"], 0x0, 0x0, 0x0, 0x0}, 0x0) 21.284176687s ago: executing program 3 (id=3479): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000500)}, 0x10) 21.224466544s ago: executing program 4 (id=3480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 20.964400316s ago: executing program 2 (id=3481): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60480) pread64(r0, 0x0, 0x0, 0x7a97) 20.932360548s ago: executing program 4 (id=3482): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x56) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 20.755598787s ago: executing program 3 (id=3483): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)={0xc, 0x0, 0x4}) 20.716647413s ago: executing program 1 (id=3484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d"], 0x1c}}, 0x0) 20.581406561s ago: executing program 4 (id=3485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011101000d00204355810700000000000109022400010000400909040204020300020009210700840122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 20.385255612s ago: executing program 3 (id=3486): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x2, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x34000}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 20.085820439s ago: executing program 1 (id=3487): r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000004c0)=@add_del={0x2, 0x0}) 20.085686254s ago: executing program 2 (id=3488): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000980)=0x20, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000001680)) 19.87111221s ago: executing program 3 (id=3489): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0xc8) 19.762150795s ago: executing program 1 (id=3490): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000d80), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057180ce88661691192dfeb3f420ab94d7b4656eb34b5a6d05aa918223dc798962d3d3be2d2eade00403b6061549e8fc2ebbc4234133cc54df2476337ebec1a5cf2a2ae64d5a9286ddc8955fcca6c082dd79fd4f1b843f7458defb3dc58d291284dc04f2b5496ff20278a", 0xb5}, {&(0x7f00000005c0)="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", 0x13f}, {&(0x7f0000000dc0)="4a3dfc057366065560145a484cb1f78097b0bce43d7391d769edd2e5d976fe7b7969d33e2e83c86dc597c7ce3dd775d0cb0e484ddfd7fc2cce12618fa00b885f1fc92edc913e17647897133fa82e224c47a5b78470032dcfb2dde8647db6f6058116352146d6bfed039eddf2804c4116946d3acd6daaedb354298bcc750aa2efbbfd6a4beea75e8712aca3f5", 0x8c}], 0x3}, 0x0) 19.619123865s ago: executing program 2 (id=3491): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0x9) 18.959213638s ago: executing program 3 (id=3493): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000540)={r1}) 18.421400994s ago: executing program 4 (id=3495): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x5, 0x200, {"0b05bbc5147b8b0000005c798ecdbb00"}, 0x5, 0x0, 0xffffffffffffff94}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x40000000}}}, 0x118) 18.295920427s ago: executing program 3 (id=3496): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x8001) 18.209249432s ago: executing program 0 (id=3497): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000017c0)=""/193, 0xc1}, {&(0x7f0000001680)=""/100, 0x64}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2000, 0x0) 17.518297578s ago: executing program 2 (id=3498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 17.518189996s ago: executing program 4 (id=3499): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000300)) r1 = dup(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) 17.517658627s ago: executing program 2 (id=3500): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) 17.517474987s ago: executing program 0 (id=3501): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)=0x6) 17.516918992s ago: executing program 4 (id=3502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5ffffffffffffff02000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 17.516588786s ago: executing program 0 (id=3503): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 17.353453324s ago: executing program 0 (id=3504): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 17.142783832s ago: executing program 0 (id=3505): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) kcmp(r0, r0, 0x0, 0xffffffffffffffff, r1) 17.027844581s ago: executing program 2 (id=3506): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) 16.839265381s ago: executing program 0 (id=3507): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x3, 0x201}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x40) 4.670078874s ago: executing program 32 (id=3490): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000d80), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057180ce88661691192dfeb3f420ab94d7b4656eb34b5a6d05aa918223dc798962d3d3be2d2eade00403b6061549e8fc2ebbc4234133cc54df2476337ebec1a5cf2a2ae64d5a9286ddc8955fcca6c082dd79fd4f1b843f7458defb3dc58d291284dc04f2b5496ff20278a", 0xb5}, {&(0x7f00000005c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a5800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea533340a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca13562373", 0x13f}, {&(0x7f0000000dc0)="4a3dfc057366065560145a484cb1f78097b0bce43d7391d769edd2e5d976fe7b7969d33e2e83c86dc597c7ce3dd775d0cb0e484ddfd7fc2cce12618fa00b885f1fc92edc913e17647897133fa82e224c47a5b78470032dcfb2dde8647db6f6058116352146d6bfed039eddf2804c4116946d3acd6daaedb354298bcc750aa2efbbfd6a4beea75e8712aca3f5", 0x8c}], 0x3}, 0x0) 3.156290297s ago: executing program 33 (id=3496): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x8001) 290.392µs ago: executing program 34 (id=3502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5ffffffffffffff02000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 226.042µs ago: executing program 35 (id=3507): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x3, 0x201}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x40) 0s ago: executing program 36 (id=3506): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ll=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.372659][ T38] audit: type=1326 audit(1756119719.864:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9377 comm="syz.3.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.373825][ T38] audit: type=1326 audit(1756119719.864:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9377 comm="syz.3.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.376447][ T38] audit: type=1326 audit(1756119719.864:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9377 comm="syz.3.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.377781][ T38] audit: type=1326 audit(1756119719.874:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9377 comm="syz.3.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.378320][ T38] audit: type=1326 audit(1756119719.874:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9377 comm="syz.3.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.379337][ T38] audit: type=1326 audit(1756119719.874:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9377 comm="syz.3.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 255.479999][ T5910] hid-steam 0003:28DE:1142.0029: unknown main item tag 0x1 [ 255.480090][ T5910] hid-steam 0003:28DE:1142.0029: item fetching failed at offset 4/5 [ 255.489565][ T5910] hid-steam 0003:28DE:1142.0029: steam_probe:parse of hid interface failed [ 255.489690][ T5910] hid-steam 0003:28DE:1142.0029: probe with driver hid-steam failed with error -22 [ 255.682099][ T5910] usb 2-1: USB disconnect, device number 21 [ 256.231505][ T9391] sp0: Synchronizing with TNC [ 256.247608][ T9390] [U] [ 256.435920][ T6009] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 256.611593][ T6009] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 256.611626][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.647018][ T6009] usb 4-1: config 0 descriptor?? [ 257.111099][ T6009] hackrf 4-1:0.0: Board ID: 00 [ 257.111125][ T6009] hackrf 4-1:0.0: Firmware version: [ 257.163136][ T9410] usb usb8: usbfs: process 9410 (syz.4.1572) did not claim interface 0 before use [ 257.185328][ T5931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 257.187151][ T6009] hackrf 4-1:0.0: Registered as swradio24 [ 257.187178][ T6009] videodev: could not get a free minor [ 257.187190][ T6009] hackrf 4-1:0.0: Failed to register as video device (-23) [ 257.231108][ T6009] hackrf 4-1:0.0: probe with driver hackrf failed with error -23 [ 257.349099][ T5931] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.349132][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.349168][ T5931] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 257.349191][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.404212][ T5931] usb 2-1: config 0 descriptor?? [ 257.419312][ T5910] usb 4-1: USB disconnect, device number 22 [ 257.864178][ T5931] aquacomputer_d5next 0003:0C70:F003.002A: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 258.040429][ T5910] usb 2-1: USB disconnect, device number 22 [ 258.158062][ T9421] random: crng reseeded on system resumption [ 258.390798][ T9419] fido_id[9419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 259.136040][ T9448] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 259.299634][ T9447] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1587'. [ 259.578193][ T9464] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 259.578232][ T9464] CIFS mount error: No usable UNC path provided in device string! [ 259.578232][ T9464] [ 259.578494][ T9464] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.681864][ T9469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.161605][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 260.313422][ T9491] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 260.313448][ T9491] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 260.374249][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 260.972551][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.972633][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.225569][ T6009] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 261.378853][ T6009] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.378884][ T6009] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.378939][ T6009] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 261.378965][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.406224][ T6009] usb 5-1: config 0 descriptor?? [ 261.447592][ T6009] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 261.447649][ T6009] dvb-usb: bulk message failed: -22 (3/0) [ 261.498874][ T6009] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 261.506448][ T6009] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 261.506513][ T6009] usb 5-1: media controller created [ 261.515705][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.561669][ T6009] dvb-usb: bulk message failed: -22 (6/0) [ 261.561774][ T6009] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 261.595518][ T5910] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 261.603029][ T6009] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 261.636555][ T6009] dvb-usb: schedule remote query interval to 150 msecs. [ 261.636579][ T6009] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 261.668309][ T9517] dvb-usb: bulk message failed: -22 (4/0) [ 261.717459][ T6009] usb 5-1: USB disconnect, device number 12 [ 261.747960][ T5910] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.747996][ T5910] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.748021][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 261.748055][ T5910] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 261.748087][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.804305][ T5910] usb 2-1: config 0 descriptor?? [ 261.961335][ T6009] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 262.252940][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.252981][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.253010][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.253038][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.253065][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.253092][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.253120][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.253147][ T5910] holtek_mouse 0003:04D9:A067.002B: unknown main item tag 0x0 [ 262.342575][ T5910] holtek_mouse 0003:04D9:A067.002B: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 262.524265][ T5910] usb 2-1: USB disconnect, device number 23 [ 262.725011][ T5846] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 262.864887][ T5931] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 262.882822][ T5846] usb 5-1: Using ep0 maxpacket: 32 [ 262.890626][ T5846] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.890657][ T5846] usb 5-1: config 0 has no interface number 0 [ 262.933831][ T5846] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 262.933864][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.933951][ T5846] usb 5-1: Product: syz [ 262.933967][ T5846] usb 5-1: Manufacturer: syz [ 262.933983][ T5846] usb 5-1: SerialNumber: syz [ 262.957749][ T5846] usb 5-1: config 0 descriptor?? [ 262.986099][ T5846] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 262.986127][ T5846] usb 5-1: selecting invalid altsetting 1 [ 262.986144][ T5846] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 263.003942][ T5846] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.004430][ T5846] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 263.004489][ T5846] usb 5-1: media controller created [ 263.078437][ T5931] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 263.078466][ T5931] usb 4-1: config 0 has no interface number 0 [ 263.094000][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.139851][ T5931] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 263.139884][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.139905][ T5931] usb 4-1: Product: syz [ 263.139920][ T5931] usb 4-1: Manufacturer: syz [ 263.139935][ T5931] usb 4-1: SerialNumber: syz [ 263.182631][ T5931] usb 4-1: config 0 descriptor?? [ 263.278629][ T5846] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 263.278686][ T5846] zl10353_read_register: readreg error (reg=127, ret==-71) [ 263.279170][ T5846] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 263.345119][ T9552] netlink: 'syz.1.1635': attribute type 2 has an invalid length. [ 263.346467][ T9552] netlink: 'syz.1.1635': attribute type 2 has an invalid length. [ 263.420695][ T5931] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 263.438392][ T5931] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 263.438555][ T5931] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 263.438727][ T5931] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 263.469032][ T5931] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 263.516137][ T5846] usb 5-1: USB disconnect, device number 13 [ 263.814860][ T9558] sp0: Synchronizing with TNC [ 263.867085][ T5846] usb 4-1: USB disconnect, device number 23 [ 263.902185][ T5846] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 263.903155][ T5846] keyspan 4-1:0.133: device disconnected [ 264.861878][ T9593] vlan2: entered promiscuous mode [ 264.861901][ T9593] macvtap0: entered promiscuous mode [ 265.658433][ T9622] vivid-002: disconnect [ 265.661792][ T9619] vivid-002: reconnect [ 266.286635][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 266.313500][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1681'. [ 266.313613][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1681'. [ 266.429895][ T9649] sp0: Synchronizing with TNC [ 266.438018][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.438052][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.438092][ T10] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 266.438119][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.467780][ T10] usb 5-1: config 0 descriptor?? [ 266.920612][ T10] greenasia 0003:0E8F:0012.002C: ignoring exceeding usage max [ 266.981582][ T10] greenasia 0003:0E8F:0012.002C: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 266.981632][ T10] greenasia 0003:0E8F:0012.002C: no inputs found [ 267.099786][ T5931] usb 5-1: USB disconnect, device number 14 [ 267.313767][ T9662] fido_id[9662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 267.784825][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 267.945428][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 267.947849][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 267.947877][ T10] usb 2-1: config 0 has no interface number 0 [ 267.954361][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 267.954404][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.954426][ T10] usb 2-1: Product: syz [ 267.954442][ T10] usb 2-1: Manufacturer: syz [ 267.954457][ T10] usb 2-1: SerialNumber: syz [ 267.991858][ T10] usb 2-1: config 0 descriptor?? [ 268.008178][ T10] smsc95xx v2.0.0 [ 268.371620][ T9689] bad cache= option: no%e [ 268.371620][ T9689] [ 268.371892][ T9689] CIFS: VFS: bad cache= option: no%e [ 268.621234][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 268.621267][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 268.621944][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 268.622262][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 268.678534][ T10] usb 2-1: USB disconnect, device number 24 [ 269.217827][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 269.371814][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.371869][ T10] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 269.371895][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.413081][ T10] usb 4-1: config 0 descriptor?? [ 269.666228][ T38] audit: type=1326 audit(1756119734.134:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 269.666363][ T38] audit: type=1326 audit(1756119734.164:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 269.668766][ T38] audit: type=1326 audit(1756119734.164:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 269.668822][ T38] audit: type=1326 audit(1756119734.164:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 269.681778][ T38] audit: type=1326 audit(1756119734.174:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 269.681845][ T38] audit: type=1326 audit(1756119734.174:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.4.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 269.853716][ T10] zydacron 0003:13EC:0006.002D: item fetching failed at offset 4/5 [ 269.854575][ T10] zydacron 0003:13EC:0006.002D: parse failed [ 269.855503][ T10] zydacron 0003:13EC:0006.002D: probe with driver zydacron failed with error -22 [ 270.044211][ T5931] usb 4-1: USB disconnect, device number 24 [ 270.619850][ T9747] comedi: No check for data length of config insn id 3 is implemented [ 270.619869][ T9747] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 270.619883][ T9747] comedi: Assuming n=15 is correct [ 271.357930][ T9773] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 271.359060][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 271.359081][ T9777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 272.075172][ T5938] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 272.199323][ T9802] program syz.1.1755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.225671][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 272.229049][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 272.229083][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.229127][ T5938] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 272.229151][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.238220][ T5938] usb 3-1: config 0 descriptor?? [ 272.348981][ T9804] Zero length message leads to an empty skb [ 272.636463][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 272.793366][ T5938] playstation 0003:054C:0DF2.002E: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 272.909409][ T5938] playstation 0003:054C:0DF2.002E: Failed to retrieve feature with reportID 9: -71 [ 272.909454][ T5938] playstation 0003:054C:0DF2.002E: Failed to retrieve DualSense pairing info: -71 [ 272.909508][ T5938] playstation 0003:054C:0DF2.002E: Failed to get MAC address from DualSense [ 272.909529][ T5938] playstation 0003:054C:0DF2.002E: Failed to create dualsense. [ 272.958577][ T5938] playstation 0003:054C:0DF2.002E: probe with driver playstation failed with error -71 [ 272.985907][ T5938] usb 3-1: USB disconnect, device number 22 [ 273.064431][ T9815] fido_id[9815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 273.255277][ T5910] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 273.407272][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 273.407326][ T5910] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 273.407350][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.428730][ T5910] usb 4-1: config 0 descriptor?? [ 273.430455][ T9814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.834479][ T9829] program syz.2.1767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.950113][ T5910] belkin 0003:050D:3201.002F: unknown main item tag 0x2 [ 273.950155][ T5910] belkin 0003:050D:3201.002F: unknown main item tag 0x0 [ 274.156300][ T5910] belkin 0003:050D:3201.002F: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 274.215966][ T5910] usb 4-1: USB disconnect, device number 25 [ 274.362792][ T9838] fido_id[9838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 274.587063][ T9848] netlink: 'syz.2.1776': attribute type 10 has an invalid length. [ 274.618667][ T9848] batman_adv: batadv0: Adding interface: team0 [ 274.618685][ T9848] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.618716][ T9848] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 274.645432][ T9848] netlink: 'syz.2.1776': attribute type 10 has an invalid length. [ 274.645464][ T9848] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1776'. [ 274.645700][ T9848] team0: entered promiscuous mode [ 274.645720][ T9848] team_slave_0: entered promiscuous mode [ 274.645999][ T9848] team_slave_1: entered promiscuous mode [ 274.649101][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.649505][ T9848] batman_adv: batadv0: Interface activated: team0 [ 274.649557][ T9848] batman_adv: batadv0: Interface deactivated: team0 [ 274.649593][ T9848] batman_adv: batadv0: Removing interface: team0 [ 274.765450][ T9848] bridge0: port 3(team0) entered blocking state [ 274.765629][ T9848] bridge0: port 3(team0) entered disabled state [ 274.765832][ T9848] team0: entered allmulticast mode [ 274.765857][ T9848] team_slave_0: entered allmulticast mode [ 274.765882][ T9848] team_slave_1: entered allmulticast mode [ 274.822421][ T9848] bridge0: port 3(team0) entered blocking state [ 274.822594][ T9848] bridge0: port 3(team0) entered forwarding state [ 275.822977][ T9876] bridge_slave_0: left allmulticast mode [ 275.823012][ T9876] bridge_slave_0: left promiscuous mode [ 275.828313][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.870923][ T38] audit: type=1326 audit(1756119740.364:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9853 comm="syz.3.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7fc00000 [ 275.943063][ T9876] bridge_slave_1: left allmulticast mode [ 275.943098][ T9876] bridge_slave_1: left promiscuous mode [ 275.943374][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.075219][ T5938] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 276.087338][ T9876] bond0: (slave bond_slave_0): Releasing backup interface [ 276.187556][ T9876] bond0: (slave bond_slave_1): Releasing backup interface [ 276.235986][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 276.268108][ T5938] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 276.268143][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.268165][ T5938] usb 5-1: Product: syz [ 276.268181][ T5938] usb 5-1: Manufacturer: syz [ 276.268196][ T5938] usb 5-1: SerialNumber: syz [ 276.306620][ T5938] usb 5-1: config 0 descriptor?? [ 276.333170][ T5938] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 276.391378][ T5938] usb 5-1: Detected FT232H [ 276.450874][ T9876] team0: Port device team_slave_0 removed [ 276.538195][ T9876] team0: Port device team_slave_1 removed [ 276.539506][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.539635][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.542213][ T5938] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 276.625694][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.625788][ T9876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.745257][ T5938] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 276.765317][ T5938] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.806332][ T5938] usb 5-1: USB disconnect, device number 15 [ 276.841199][ T5938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.842087][ T5938] ftdi_sio 5-1:0.0: device disconnected [ 277.350591][ T6009] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 277.499348][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.499386][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.499427][ T6009] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 277.499452][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.568057][ T6009] usb 4-1: config 0 descriptor?? [ 277.721694][ T9921] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 277.830235][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1812'. [ 278.042891][ T6009] cypress 0003:04B4:DE61.0030: unknown main item tag 0x0 [ 278.042931][ T6009] cypress 0003:04B4:DE61.0030: unknown main item tag 0x0 [ 278.082687][ T6009] cypress 0003:04B4:DE61.0030: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 278.241522][ T5910] usb 4-1: USB disconnect, device number 26 [ 278.455815][ T9934] fido_id[9934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 278.537443][ T9941] program syz.1.1818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.045089][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 279.198332][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 279.200950][ T10] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 279.200979][ T10] usb 2-1: config 0 has no interface number 0 [ 279.201033][ T10] usb 2-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.201061][ T10] usb 2-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.201084][ T10] usb 2-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.201113][ T10] usb 2-1: config 0 interface 63 has no altsetting 0 [ 279.201148][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 279.201172][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.217829][ T10] usb 2-1: config 0 descriptor?? [ 279.678947][ T10] uclogic 0003:28BD:0909.0031: interface is invalid, ignoring [ 279.889174][ T5931] usb 2-1: USB disconnect, device number 25 [ 280.585704][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 280.733562][T10012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.141443][T10025] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1858'. [ 281.505729][T10041] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 281.505790][T10041] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 281.505843][T10041] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 281.506041][T10041] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 281.506093][T10041] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 281.506143][T10041] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 282.517864][T10078] program syz.4.1883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.624291][T10084] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1886'. [ 283.984260][ T38] audit: type=1800 audit(1756119748.444:81): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1906" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 285.034897][T10160] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 285.034958][T10160] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 285.035011][T10160] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 285.035062][T10160] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 285.035114][T10160] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 285.035239][T10160] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 285.035292][T10160] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 285.035344][T10160] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 286.239149][ T38] audit: type=1326 audit(1756119750.724:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10200 comm="syz.0.1942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f312828ebe9 code=0x0 [ 286.291613][T10202] vlan0: entered promiscuous mode [ 286.392522][T10202] vlan0: entered allmulticast mode [ 286.392548][T10202] veth0_vlan: entered allmulticast mode [ 286.406952][T10202] team0: Port device vlan0 added [ 287.208117][T10219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.491636][T10229] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 287.491666][T10229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.524384][T10229] vhci_hcd vhci_hcd.0: Device attached [ 287.765242][ T5923] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 288.188236][T10248] tmpfs: Cannot retroactively limit inodes [ 288.260770][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'. [ 289.868570][T10289] delete_channel: no stack [ 289.870055][T10286] delete_channel: no stack [ 289.971434][ T6009] hid-generic 0000:0004:0000.0032: unknown main item tag 0x0 [ 289.971471][ T6009] hid-generic 0000:0004:0000.0032: unknown main item tag 0x0 [ 289.971500][ T6009] hid-generic 0000:0004:0000.0032: unknown main item tag 0x0 [ 290.037374][ T6009] hid-generic 0000:0004:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 290.270878][ T5209] udevd[5209]: worker [5965] terminated by signal 33 (Unknown signal 33) [ 290.270937][ T5209] udevd[5209]: worker [5965] failed while handling '/devices/virtual/misc/uhid/0000:0004:0000.0032/hidraw/hidraw0' [ 290.425794][ T6009] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 290.577362][ T6009] usb 3-1: Using ep0 maxpacket: 16 [ 290.580932][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.580966][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.581006][ T6009] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 290.581030][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.630374][T10231] vhci_hcd: connection reset by peer [ 290.638696][ T6009] usb 3-1: config 0 descriptor?? [ 290.672375][ T3605] vhci_hcd: stop threads [ 290.673486][ T3605] vhci_hcd: release socket [ 290.705088][ T3605] vhci_hcd: disconnect device [ 290.844895][ T5910] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 291.021893][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 291.024306][ T5910] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.024336][ T5910] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 291.024372][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 291.024409][ T5910] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 291.024435][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.055457][ T5910] usb 2-1: config 0 descriptor?? [ 291.102446][ T6009] corsair 0003:1B1C:1B02.0033: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 291.309158][ T6009] corsair 0003:1B1C:1B02.0033: Failed to get K90 initial state (error -71). [ 291.358029][ T6009] usb 3-1: USB disconnect, device number 23 [ 291.585487][ T5910] betop 0003:20BC:5500.0034: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0 [ 291.585523][ T5910] betop 0003:20BC:5500.0034: no inputs found [ 291.657249][T10320] fido_id[10320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 291.776396][ T10] usb 2-1: USB disconnect, device number 26 [ 292.009640][T10328] fido_id[10328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 292.321750][T10338] tmpfs: Bad value for 'mpol' [ 292.360072][T10338] tmpfs: Bad value for 'mpol' [ 292.895373][ T5923] vhci_hcd: vhci_device speed not set [ 293.865636][T10386] tmpfs: Cannot retroactively limit inodes [ 294.101119][T10393] autofs: Bad value for 'fd' [ 294.133604][T10397] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 294.202324][T10399] netlink: 'syz.0.2034': attribute type 66 has an invalid length. [ 294.379052][T10405] tmpfs: Cannot change global quota limit on remount [ 295.525134][T10441] Bluetooth: MGMT ver 1.23 [ 296.409741][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'. [ 296.409785][T10474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.025595][ T6009] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 297.193843][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.193878][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.193906][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 297.193928][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.193960][ T6009] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.193976][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.273414][ T6009] usb 5-1: config 0 descriptor?? [ 297.771005][ T6009] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 297.820347][ T6009] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 297.925520][ T5938] usb 5-1: USB disconnect, device number 16 [ 297.950288][T10514] fido_id[10514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 298.344835][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 298.524861][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 298.530307][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.530342][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.530383][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 298.530408][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.538167][ T10] usb 3-1: config 0 descriptor?? [ 298.558907][ T10] hub 3-1:0.0: USB hub found [ 298.775749][ T10] hub 3-1:0.0: 1 port detected [ 298.977397][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 298.977427][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 299.000050][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 299.000185][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 299.006176][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 299.006206][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 299.047293][ T10] usb 3-1: USB disconnect, device number 24 [ 299.104013][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 299.104039][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 299.104067][T10545] netlink: 'syz.0.2103': attribute type 12 has an invalid length. [ 299.104082][T10545] netlink: 'syz.0.2103': attribute type 13 has an invalid length. [ 299.799943][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 299.955251][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 299.957917][ T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 299.957944][ T10] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 299.957984][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.958008][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.097056][T10576] tipc: Started in network mode [ 300.097088][T10576] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 300.101101][T10576] tipc: Enabled bearer , priority 5 [ 300.237303][ T5923] usb 2-1: USB disconnect, device number 27 [ 301.035889][T10606] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 301.186006][ T5923] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 301.235212][ T5893] tipc: Node number set to 4269801494 [ 301.335867][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 301.338327][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.338361][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 301.338406][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 301.338438][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.396450][ T5923] usb 2-1: config 0 descriptor?? [ 301.827109][ T5923] logitech 0003:046D:C623.0036: unknown main item tag 0x6 [ 301.827162][ T5923] logitech 0003:046D:C623.0036: collection stack underflow [ 301.827187][ T5923] logitech 0003:046D:C623.0036: item 0 4 0 12 parsing failed [ 301.828019][ T5923] logitech 0003:046D:C623.0036: parse failed [ 301.828127][ T5923] logitech 0003:046D:C623.0036: probe with driver logitech failed with error -22 [ 301.879223][T10626] netlink: 'syz.0.2140': attribute type 5 has an invalid length. [ 302.032344][ T5893] usb 2-1: USB disconnect, device number 28 [ 303.097353][T10668] nbd: must specify a size in bytes for the device [ 303.216396][ T5893] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 303.387398][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.387435][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.387478][ T5893] usb 4-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 303.387503][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.395952][ T5893] usb 4-1: config 0 descriptor?? [ 304.055637][ T6009] usb 4-1: USB disconnect, device number 27 [ 304.184879][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 304.335282][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 304.340306][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.340342][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.340383][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.340408][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.395938][ T10] usb 5-1: config 0 descriptor?? [ 304.412819][ T10] hub 5-1:0.0: USB hub found [ 304.627288][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 304.832961][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 304.833211][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 304.888328][ T10] usb 5-1: USB disconnect, device number 17 [ 305.993218][T10726] binder: 10725:10726 ioctl c0306201 0 returned -14 [ 306.766209][T10746] sp0: Synchronizing with TNC [ 306.855486][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.017705][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 307.021787][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 307.021820][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.021842][ T10] usb 5-1: Product: syz [ 307.021857][ T10] usb 5-1: Manufacturer: syz [ 307.021873][ T10] usb 5-1: SerialNumber: syz [ 307.079829][ T10] usb 5-1: config 0 descriptor?? [ 307.625260][ T5938] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 307.627055][ T5923] usb 5-1: USB disconnect, device number 18 [ 307.777430][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 307.781716][ T5938] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 307.803784][ T5938] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 307.803813][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.803832][ T5938] usb 2-1: Product: syz [ 307.803846][ T5938] usb 2-1: Manufacturer: syz [ 307.803859][ T5938] usb 2-1: SerialNumber: syz [ 307.869100][ T5938] usb 2-1: config 0 descriptor?? [ 307.968038][ T5938] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 307.968110][ T5938] usb 2-1: setting power ON [ 307.968131][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 308.055709][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 308.056555][ T5938] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 308.056615][ T5938] usb 2-1: media controller created [ 308.160399][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.237954][ T5938] usb 2-1: selecting invalid altsetting 6 [ 308.237981][ T5938] usb 2-1: digital interface selection failed (-22) [ 308.237997][ T5938] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 308.238856][ T5938] usb 2-1: setting power OFF [ 308.238886][ T5938] dvb-usb: bulk message failed: -22 (2/0) [ 308.238904][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 308.238916][ T5938] (NULL device *): no alternate interface [ 308.364132][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 308.387712][ T5938] usb 2-1: USB disconnect, device number 29 [ 309.435163][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 309.597656][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.597806][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.597950][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 309.598027][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.653143][ T10] usb 4-1: config 0 descriptor?? [ 310.151712][ T10] pyra 0003:1E7D:2CF6.0038: unknown main item tag 0x2 [ 310.187472][ T10] pyra 0003:1E7D:2CF6.0038: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 310.348142][ T10] pyra 0003:1E7D:2CF6.0038: couldn't init struct pyra_device [ 310.348198][ T10] pyra 0003:1E7D:2CF6.0038: couldn't install mouse [ 310.370797][ T10] pyra 0003:1E7D:2CF6.0038: probe with driver pyra failed with error -71 [ 310.389192][ T10] usb 4-1: USB disconnect, device number 28 [ 310.475550][ T5923] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 310.526443][T10835] fido_id[10835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 310.637000][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.637053][ T5923] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 310.637079][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.663340][ T5923] usb 2-1: config 0 descriptor?? [ 310.925480][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 311.095136][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 311.097835][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.097865][ T10] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.097893][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.097921][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.097945][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 311.097976][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.098012][ T10] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 311.098038][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.149552][ T5923] elecom 0003:056E:00FC.0039: unknown main item tag 0x0 [ 311.149597][ T5923] elecom 0003:056E:00FC.0039: unknown main item tag 0x0 [ 311.149629][ T5923] elecom 0003:056E:00FC.0039: unknown main item tag 0x0 [ 311.149658][ T5923] elecom 0003:056E:00FC.0039: unknown main item tag 0x0 [ 311.149690][ T5923] elecom 0003:056E:00FC.0039: unknown main item tag 0x0 [ 311.245644][ T5923] elecom 0003:056E:00FC.0039: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 311.249726][ T10] usb 5-1: config 0 descriptor?? [ 311.354210][ T5910] usb 2-1: USB disconnect, device number 30 [ 311.753770][ T10] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 311.753810][ T10] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 311.753838][ T10] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 311.753865][ T10] hid-thrustmaster 0003:044F:B65D.003A: unknown main item tag 0x0 [ 311.806798][ T10] hid-thrustmaster 0003:044F:B65D.003A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 311.807051][ T10] hid-thrustmaster 0003:044F:B65D.003A: setup data couldn't be sent [ 311.893014][T10852] fido_id[10852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 311.952500][ C0] hid-thrustmaster 0003:044F:B65D.003A: URB to get model id failed with error -71 [ 311.956966][ T6009] usb 5-1: USB disconnect, device number 19 [ 311.998222][T10862] tmpfs: User quota inode hardlimit too large. [ 312.453515][T10870] fido_id[10870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 313.160259][T10900] Invalid ELF header magic: != ELF [ 314.347237][ T38] audit: type=1326 audit(1756119778.844:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10941 comm="syz.2.2269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6994debe9 code=0x0 [ 315.895211][ T5923] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 316.045131][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 316.047593][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.047645][ T5923] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 316.047671][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.091899][ T5923] usb 5-1: config 0 descriptor?? [ 316.523872][ T5923] thrustmaster 0003:044F:B654.003B: item fetching failed at offset 0/2 [ 316.540498][ T5923] thrustmaster 0003:044F:B654.003B: parse failed [ 316.540583][ T5923] thrustmaster 0003:044F:B654.003B: probe with driver thrustmaster failed with error -22 [ 316.729929][ T10] usb 5-1: USB disconnect, device number 20 [ 317.252961][T11013] program syz.3.2300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.472759][T11017] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 317.472787][T11017] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.483940][T11017] vhci_hcd vhci_hcd.0: Device attached [ 317.715321][ T5923] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 317.754861][ T6009] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 317.929153][ T6009] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 317.929186][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.929206][ T6009] usb 3-1: Product: syz [ 317.929222][ T6009] usb 3-1: Manufacturer: syz [ 317.929237][ T6009] usb 3-1: SerialNumber: syz [ 317.941573][ T6009] usb 3-1: config 0 descriptor?? [ 318.169876][ T6009] usb 3-1: Firmware version (0.0) predates our first public release. [ 318.169904][ T6009] usb 3-1: Please update to version 0.2 or newer [ 318.188426][T11019] usb 37-1: recv xbuf, 0 [ 318.227408][ T3605] vhci_hcd: stop threads [ 318.227429][ T3605] vhci_hcd: release socket [ 318.227512][ T3605] vhci_hcd: disconnect device [ 318.258194][ T5923] vhci_hcd: vhci_device speed not set [ 318.294453][ T6009] usb 3-1: USB disconnect, device number 25 [ 318.635203][ T5938] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.785281][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 318.789141][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.789176][ T5938] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 318.789203][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 318.789229][ T5938] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.792492][ T5938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 318.792521][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.792541][ T5938] usb 5-1: Product: syz [ 318.792557][ T5938] usb 5-1: Manufacturer: syz [ 318.792571][ T5938] usb 5-1: SerialNumber: syz [ 318.904316][ T5938] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 318.926986][ T5938] usbtest 5-1:1.0: Linux user mode ISO test driver [ 318.927010][ T5938] usbtest 5-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 319.135620][ T5938] usb 5-1: USB disconnect, device number 21 [ 319.252250][T11059] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 319.253003][T11059] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.254860][ T6009] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 319.256804][T11059] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.308804][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 319.309818][T11059] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.310004][T11059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.310899][T11059] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.311102][T11059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.358708][T11059] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 319.359951][T11060] bridge_slave_1: left allmulticast mode [ 319.359983][T11060] bridge_slave_1: left promiscuous mode [ 319.360281][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.405242][ T6009] usb 2-1: Using ep0 maxpacket: 16 [ 319.410678][ T6009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.410705][ T6009] usb 2-1: config 0 has no interfaces? [ 319.447039][ T6009] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 319.447071][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.447092][ T6009] usb 2-1: Product: syz [ 319.447106][ T6009] usb 2-1: Manufacturer: syz [ 319.447119][ T6009] usb 2-1: SerialNumber: syz [ 319.461940][ T6009] usb 2-1: config 0 descriptor?? [ 319.529463][T11060] bridge_slave_0: left allmulticast mode [ 319.529500][T11060] bridge_slave_0: left promiscuous mode [ 319.529804][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.836392][T11060] bond0: (slave bridge0): Releasing backup interface [ 320.033931][T11071] usb usb8: usbfs: process 11071 (syz.2.2324) did not claim interface 0 before use [ 320.239860][ T6009] usb 2-1: USB disconnect, device number 31 [ 320.389170][T11079] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 320.389197][T11079] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2329'. [ 320.389226][T11079] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 320.389241][T11079] netlink: 'syz.4.2329': attribute type 2 has an invalid length. [ 320.595328][ T5893] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 320.747336][ T5893] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 320.747368][ T5893] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 320.747389][ T5893] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 320.747409][ T5893] usb 4-1: config 220 has no interface number 2 [ 320.747491][ T5893] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 320.747586][ T5893] usb 4-1: config 220 interface 0 has no altsetting 0 [ 320.747605][ T5893] usb 4-1: config 220 interface 76 has no altsetting 0 [ 320.747624][ T5893] usb 4-1: config 220 interface 1 has no altsetting 0 [ 320.751073][ T5893] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 320.751165][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.751188][ T5893] usb 4-1: Product: syz [ 320.751211][ T5893] usb 4-1: Manufacturer: syz [ 320.751227][ T5893] usb 4-1: SerialNumber: syz [ 321.037021][ T5893] usb 4-1: selecting invalid altsetting 0 [ 321.039852][ T5893] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 321.039888][ T5893] usb 4-1: No valid video chain found. [ 321.128487][ T5893] usb 4-1: selecting invalid altsetting 0 [ 321.128534][ T5893] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 321.152197][ T5893] usb 4-1: USB disconnect, device number 29 [ 322.247922][T11131] hugetlbfs: Bad value '%' for mount option 'size' [ 322.247922][T11131] [ 322.412383][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.412464][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.778014][T11152] netlink: 'syz.4.2361': attribute type 13 has an invalid length. [ 323.008916][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 323.161610][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.162507][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.179871][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 323.183784][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.183819][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.183844][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 323.183880][ T10] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 323.183905][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.248773][ T10] usb 3-1: config 0 descriptor?? [ 323.569664][T11160] netlink: 'syz.3.2364': attribute type 23 has an invalid length. [ 323.690583][ T10] hid_parser_main: 1 callbacks suppressed [ 323.690609][ T10] dragonrise 0003:0079:0011.003C: unknown main item tag 0x0 [ 323.721563][ T10] dragonrise 0003:0079:0011.003C: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 323.921016][ T5938] usb 3-1: USB disconnect, device number 26 [ 324.320296][T11152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.350654][T11152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.638267][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.671575][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.673217][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.673264][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.305270][ T975] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 326.458306][ T975] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 326.458340][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.486977][ T975] usb 4-1: config 0 descriptor?? [ 327.125294][ T975] ath6kl: Failed to read usb control message: -71 [ 327.125349][ T975] ath6kl: Unable to read the bmi data from the device: -71 [ 327.125365][ T975] ath6kl: unable to read target info byte count: -71 [ 327.127017][ T975] ath6kl: Failed to init ath6kl core: -71 [ 327.187727][ T5938] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 327.203625][ T975] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 327.265242][ T975] usb 4-1: USB disconnect, device number 30 [ 327.337571][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.337608][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.337632][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.337677][ T5938] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 327.337703][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.344217][ T5938] usb 2-1: config 0 descriptor?? [ 327.816155][ T5938] ryos 0003:1E7D:3232.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 327.998488][ T5910] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 328.107411][ T5893] usb 2-1: USB disconnect, device number 32 [ 328.147985][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.148056][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 328.148087][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 328.148114][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 328.149845][ T5910] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.149874][ T5910] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.149894][ T5910] usb 3-1: Manufacturer: syz [ 328.224370][ T5910] usb 3-1: config 0 descriptor?? [ 328.685110][ T5910] rc_core: IR keymap rc-hauppauge not found [ 328.685133][ T5910] Registered IR keymap rc-empty [ 328.688447][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.715354][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.752208][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 328.771035][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 328.793887][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.806275][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.825531][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.852952][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.865684][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.885609][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.915859][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.946831][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.967562][T11243] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2400'. [ 328.967589][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2400'. [ 328.967951][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 328.985497][ T5910] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 329.009147][ T5910] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 329.009173][ T5910] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 329.050169][ T5910] usb 3-1: USB disconnect, device number 27 [ 329.497113][ T975] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 329.534241][ T975] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 329.861841][T11257] fido_id[11257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 330.554313][T11282] autofs4:pid:11282:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 330.849811][T11297] netlink: 'syz.2.2425': attribute type 10 has an invalid length. [ 330.850380][T11297] bridge0: port 3(team0) entered disabled state [ 330.850662][T11297] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.851539][T11297] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.919603][T11297] bridge0: port 3(team0) entered blocking state [ 330.919783][T11297] bridge0: port 3(team0) entered forwarding state [ 330.920239][T11297] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.920444][T11297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.920822][T11297] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.921023][T11297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.932964][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 330.953055][T11297] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 330.954553][T11298] team0: left allmulticast mode [ 330.954573][T11298] team_slave_0: left allmulticast mode [ 330.954600][T11298] team_slave_1: left allmulticast mode [ 330.954802][T11298] vlan0: left allmulticast mode [ 330.954819][T11298] veth0_vlan: left allmulticast mode [ 330.955458][T11298] bridge0: port 3(team0) entered disabled state [ 331.035191][ T975] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 331.091631][T11298] bridge_slave_1: left allmulticast mode [ 331.091665][T11298] bridge_slave_1: left promiscuous mode [ 331.091949][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.179077][T11298] bridge_slave_0: left allmulticast mode [ 331.179115][T11298] bridge_slave_0: left promiscuous mode [ 331.179386][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.197992][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 331.211676][ T975] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 331.211708][ T975] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 331.211731][ T975] usb 4-1: Product: syz [ 331.211746][ T975] usb 4-1: SerialNumber: syz [ 331.268052][ T975] usb 4-1: config 0 descriptor?? [ 331.310238][ T975] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.318332][ T975] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 331.323392][ T975] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 331.323499][ T975] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 331.484229][ T975] usb 4-1: USB disconnect, device number 31 [ 331.555340][T11298] bond0: (slave bridge0): Releasing backup interface [ 332.858403][T11347] netlink: 'syz.2.2447': attribute type 2 has an invalid length. [ 333.230087][T11358] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2453'. [ 334.135854][T11386] netlink: 'syz.1.2464': attribute type 13 has an invalid length. [ 334.820014][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.955993][ T6009] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 335.111246][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.111281][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.111305][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 335.111349][ T6009] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 335.111373][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.172698][ T6009] usb 5-1: config 0 descriptor?? [ 335.630924][ T6009] viewsonic 0003:2133:0018.003F: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.4-1/input0 [ 335.657767][T11386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.709200][T11386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.818859][ T5910] usb 5-1: USB disconnect, device number 22 [ 336.912225][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.926260][ T3626] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.928891][ T3626] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.928942][ T3626] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.826148][T11486] tipc: Enabling of bearer rejected, already enabled [ 339.576180][T11514] GUP no longer grows the stack in syz.4.2527 (11514): 200000005000-200000008000 (200000004000) [ 339.576245][T11514] CPU: 1 UID: 0 PID: 11514 Comm: syz.4.2527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.576271][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.576289][T11514] Call Trace: [ 339.576299][T11514] [ 339.576308][T11514] dump_stack_lvl+0x189/0x250 [ 339.576353][T11514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.576387][T11514] ? __pfx__printk+0x10/0x10 [ 339.576408][T11514] ? find_vma+0xe7/0x160 [ 339.576453][T11514] fixup_user_fault+0x661/0x720 [ 339.576491][T11514] fault_in_user_writeable+0x72/0xe0 [ 339.576516][T11514] futex_lock_pi+0x765/0xa70 [ 339.576556][T11514] ? __pfx_futex_lock_pi+0x10/0x10 [ 339.576621][T11514] ? __pfx_futex_wake_mark+0x10/0x10 [ 339.576669][T11514] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 339.576710][T11514] do_futex+0x292/0x420 [ 339.576742][T11514] ? __pfx_do_futex+0x10/0x10 [ 339.576769][T11514] ? __vm_munmap+0x301/0x3d0 [ 339.576803][T11514] __se_sys_futex+0x36f/0x400 [ 339.576848][T11514] ? __pfx___se_sys_futex+0x10/0x10 [ 339.576876][T11514] ? rcu_is_watching+0x15/0xb0 [ 339.576915][T11514] ? __x64_sys_futex+0x21/0xf0 [ 339.576946][T11514] do_syscall_64+0xfa/0x3b0 [ 339.576973][T11514] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.577001][T11514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.577023][T11514] ? clear_bhb_loop+0x60/0xb0 [ 339.577051][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.577074][T11514] RIP: 0033:0x7fc31839ebe9 [ 339.577099][T11514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.577120][T11514] RSP: 002b:00007fc3165fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.577153][T11514] RAX: ffffffffffffffda RBX: 00007fc3185c5fa0 RCX: 00007fc31839ebe9 [ 339.577171][T11514] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 339.577187][T11514] RBP: 00007fc318421e19 R08: 0000000000000000 R09: 0000000000000000 [ 339.577200][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.577214][T11514] R13: 00007fc3185c6038 R14: 00007fc3185c5fa0 R15: 00007fffa57e8578 [ 339.577250][T11514] [ 339.678640][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2528'. [ 340.043237][T11528] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 340.326610][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 340.407118][ T5851] Bluetooth: hci2: command 0x0401 tx timeout [ 340.725962][T11554] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2546'. [ 341.255390][ T975] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 341.413835][ T975] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 341.413869][ T975] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 341.413891][ T975] usb 4-1: config 0 has no interface number 0 [ 341.413950][ T975] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 341.413974][ T975] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.414015][ T975] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 341.414040][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.437657][ T975] usb 4-1: config 0 descriptor?? [ 342.076343][ T975] usb 4-1: USB disconnect, device number 32 [ 344.026188][T11654] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 345.072532][T11689] tipc: Enabled bearer , priority 5 [ 345.205199][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 346.292568][T11733] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 346.863939][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2638'. [ 347.223873][T11760] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 347.420567][T11768] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2647'. [ 347.495852][ T6009] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 347.655393][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 347.657861][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.657895][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.657920][ T6009] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.657966][ T6009] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.657993][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.677462][ T6009] usb 5-1: config 0 descriptor?? [ 348.162538][ T6009] HID 045e:07da: Invalid code 65791 type 1 [ 348.162902][ T6009] HID 045e:07da: Invalid code 768 type 1 [ 348.162918][ T6009] HID 045e:07da: Invalid code 769 type 1 [ 348.162932][ T6009] HID 045e:07da: Invalid code 770 type 1 [ 348.162946][ T6009] HID 045e:07da: Invalid code 771 type 1 [ 348.162960][ T6009] HID 045e:07da: Invalid code 772 type 1 [ 348.162974][ T6009] HID 045e:07da: Invalid code 773 type 1 [ 348.162988][ T6009] HID 045e:07da: Invalid code 774 type 1 [ 348.163002][ T6009] HID 045e:07da: Invalid code 775 type 1 [ 348.163016][ T6009] HID 045e:07da: Invalid code 776 type 1 [ 348.184351][T11785] openvswitch: netlink: IPv6 tunnel dst address is zero [ 348.271305][ T6009] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0040/input/input24 [ 348.397516][ T6009] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 348.443678][ T6009] usb 5-1: USB disconnect, device number 23 [ 348.666515][T11792] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2658'. [ 348.666544][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 348.666560][T11792] tipc: MTU too low for tipc bearer [ 348.671349][T11793] fido_id[11793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 349.554714][T11813] mkiss: ax0: crc mode is auto. [ 350.020431][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2677'. [ 350.021001][T11836] sit0: Master is either lo or non-ether device [ 350.211656][T11838] tipc: Enabled bearer , priority 10 [ 350.706573][ T5910] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 350.858881][ T5910] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.858912][ T5910] usb 4-1: config 0 has no interface number 0 [ 350.858961][ T5910] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.858988][ T5910] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.859012][ T5910] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.859057][ T5910] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 350.859082][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.945721][ T5910] usb 4-1: config 0 descriptor?? [ 351.206079][ T5893] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 351.357978][ T5893] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 351.358012][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.364375][ T5910] hid (null): report_id 35660 is invalid [ 351.375579][ T5893] usb 5-1: config 0 descriptor?? [ 351.399534][ T5893] pwc: Philips SPC 900NC USB webcam detected. [ 351.486846][T11872] binder: 11871:11872 ioctl 4018620d 0 returned -22 [ 351.490588][T11872] binder: 11871:11872 ioctl c0306201 200000000240 returned -11 [ 351.575222][ T5910] uclogic 0003:28BD:0042.0041: failed retrieving string descriptor #100: -71 [ 351.575288][ T5910] uclogic 0003:28BD:0042.0041: failed retrieving pen parameters: -71 [ 351.575308][ T5910] uclogic 0003:28BD:0042.0041: pen probing failed: -71 [ 351.575328][ T5910] uclogic 0003:28BD:0042.0041: failed probing parameters: -71 [ 351.575440][ T5910] uclogic 0003:28BD:0042.0041: probe with driver uclogic failed with error -71 [ 351.580628][ T5910] usb 4-1: USB disconnect, device number 33 [ 351.781729][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'. [ 351.887105][ T5893] pwc: send_video_command error -71 [ 351.887124][ T5893] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 351.887246][ T5893] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 351.912728][ T5893] usb 5-1: USB disconnect, device number 24 [ 352.082524][T11881] [U]  [ 353.335277][ T5938] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 353.487951][ T5938] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 353.487985][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.517428][ T5938] usb 2-1: config 0 descriptor?? [ 353.542269][ T5938] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 353.851634][T11935] vlan2: entered allmulticast mode [ 353.851659][T11935] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 354.146765][ T5938] gspca_sunplus: reg_w_riv err -71 [ 354.146871][ T5938] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 354.209024][ T5938] usb 2-1: USB disconnect, device number 33 [ 354.857254][ T5938] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 355.008119][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.008154][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.008193][ T5938] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 355.008216][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.035601][ T5910] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 355.069153][ T5938] usb 5-1: config 0 descriptor?? [ 355.198710][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.198803][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.198850][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 355.198882][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.258626][ T5910] usb 4-1: config 0 descriptor?? [ 355.361043][T11980] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 355.361111][T11980] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 355.361225][T11980] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 355.361374][T11980] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 355.361440][T11980] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 355.361492][T11980] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 355.361647][T11980] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 355.361716][T11980] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 355.361782][T11980] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 355.361892][T11980] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 355.361945][T11980] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 355.361997][T11980] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 355.376067][ T5893] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 355.524824][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 355.527919][ T5893] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 355.527949][ T5893] usb 3-1: config 0 has no interface number 0 [ 355.539626][ T5893] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 355.539660][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.539684][ T5893] usb 3-1: Product: syz [ 355.539701][ T5893] usb 3-1: Manufacturer: syz [ 355.539719][ T5893] usb 3-1: SerialNumber: syz [ 355.561954][ T5893] usb 3-1: config 0 descriptor?? [ 355.593314][ T5938] megaworld 0003:07B5:0312.0042: unknown main item tag 0x3 [ 355.620585][ T5893] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 355.644278][ T5938] megaworld 0003:07B5:0312.0042: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.4-1/input0 [ 355.644553][ T5938] megaworld 0003:07B5:0312.0042: no inputs found [ 355.737230][ T5910] logitech 0003:046D:C29C.0043: unknown main item tag 0x0 [ 355.737267][ T5910] logitech 0003:046D:C29C.0043: unknown main item tag 0x0 [ 355.744299][ T5938] usb 5-1: USB disconnect, device number 25 [ 355.792405][ T5910] logitech 0003:046D:C29C.0043: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 355.890116][ T5910] logitech 0003:046D:C29C.0043: no inputs found [ 355.947551][ T5910] usb 4-1: USB disconnect, device number 34 [ 355.959000][ T5893] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 356.064439][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 49 [ 356.083910][ T5893] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 356.128274][T11986] fido_id[11986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 356.289319][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 356.305030][ T5910] usb 3-1: USB disconnect, device number 28 [ 356.327392][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 356.360008][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 356.377429][ T5910] quatech2 3-1:0.51: device disconnected [ 356.467455][T11990] fido_id[11990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 356.887997][T12005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2746'. [ 357.144091][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2751'. [ 357.144129][T12016] netlink: 'syz.3.2751': attribute type 2 has an invalid length. [ 357.144144][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 359.097443][T12081] program syz.3.2782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.575911][ T5923] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 359.734948][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 359.737525][ T5923] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 359.737559][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 359.737595][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 359.737619][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.757396][ T5923] usb 4-1: config 0 descriptor?? [ 360.059769][T12106] netlink: 'syz.0.2796': attribute type 13 has an invalid length. [ 360.110301][T12106] tipc: Resetting bearer [ 360.124025][T12108] tmpfs: Bad value for 'mpol' [ 360.236648][ T5923] logitech 0003:046D:C626.0044: item fetching failed at offset 5/7 [ 360.237546][ T5923] logitech 0003:046D:C626.0044: parse failed [ 360.237654][ T5923] logitech 0003:046D:C626.0044: probe with driver logitech failed with error -22 [ 360.345979][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'. [ 360.438599][ T5923] usb 4-1: USB disconnect, device number 35 [ 360.933653][T12125] block nbd4: NBD_DISCONNECT [ 360.944080][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 360.944103][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 360.944131][T12127] netlink: 'syz.1.2805': attribute type 5 has an invalid length. [ 360.944146][T12127] netlink: 'syz.1.2805': attribute type 6 has an invalid length. [ 361.404816][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 361.555413][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 361.560495][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.560531][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.560555][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.560603][ T5910] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 361.560628][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.635801][ T5910] usb 5-1: config 0 descriptor?? [ 362.069310][ T5910] ryos 0003:1E7D:31CE.0045: unbalanced delimiter at end of report description [ 362.070139][ T5910] ryos 0003:1E7D:31CE.0045: parse failed [ 362.070351][ T5910] ryos 0003:1E7D:31CE.0045: probe with driver ryos failed with error -22 [ 362.271674][ T5910] usb 5-1: USB disconnect, device number 26 [ 362.613672][T12106] tipc: Resetting bearer [ 363.323860][ T1060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.326487][ T1060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.326544][ T1060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.326589][ T1060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.807391][T12168] pim6reg527: entered allmulticast mode [ 366.446210][T12259] tipc: Invalid UDP bearer configuration [ 366.446261][T12259] tipc: Enabling of bearer rejected, failed to enable media [ 366.878730][T12267] netlink: 'syz.2.2873': attribute type 2 has an invalid length. [ 366.940156][T12271] smc: net device bond0 applied user defined pnetid SYZ2 [ 367.738858][T12294] sp0: Synchronizing with TNC [ 369.270855][T12343] mkiss: ax0: crc mode is auto. [ 369.391083][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 369.456815][T12353] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 369.726837][T12364] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 369.726837][T12364] FãzR #xI6BYCg)'!A{g [ 369.726837][T12364] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 370.106149][T12378] Bluetooth: MGMT ver 1.23 [ 370.435517][ T5938] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 370.590012][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.590071][ T5938] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 370.590096][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.612140][ T5938] usb 4-1: config 0 descriptor?? [ 370.613462][T12383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 370.724837][ T5910] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 370.880013][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.880108][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.880133][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.880178][ T5910] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 370.880202][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.918920][ T5910] usb 5-1: config 0 descriptor?? [ 371.039450][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'. [ 371.075495][ T5923] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 371.093054][ T5938] elan 0003:04F3:0755.0046: unknown main item tag 0x7 [ 371.093102][ T5938] elan 0003:04F3:0755.0046: item fetching failed at offset 4/5 [ 371.104936][ T5938] elan 0003:04F3:0755.0046: Hid Parse failed [ 371.111299][ T5938] elan 0003:04F3:0755.0046: probe with driver elan failed with error -22 [ 371.224770][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 371.227788][ T5923] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 371.231495][ T5923] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 371.231528][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.231550][ T5923] usb 2-1: Product: syz [ 371.231565][ T5923] usb 2-1: Manufacturer: syz [ 371.231580][ T5923] usb 2-1: SerialNumber: syz [ 371.252264][ T975] usb 4-1: USB disconnect, device number 36 [ 371.342152][ T5923] usb 2-1: config 0 descriptor?? [ 371.362985][ T5910] dragonrise 0003:0079:0011.0047: invalid report_count -326368751 [ 371.363013][ T5910] dragonrise 0003:0079:0011.0047: item 0 4 1 9 parsing failed [ 371.363863][ T5910] dragonrise 0003:0079:0011.0047: parse failed [ 371.363937][ T5910] dragonrise 0003:0079:0011.0047: probe with driver dragonrise failed with error -22 [ 371.408356][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 371.408428][ T5923] usb 2-1: setting power ON [ 371.408448][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 371.444055][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.457164][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 371.457230][ T5923] usb 2-1: media controller created [ 371.501648][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.538441][ T5923] usb 2-1: selecting invalid altsetting 6 [ 371.538466][ T5923] usb 2-1: digital interface selection failed (-22) [ 371.538482][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 371.541249][ T5923] usb 2-1: setting power OFF [ 371.541271][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 371.541290][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 371.541303][ T5923] (NULL device *): no alternate interface [ 371.573975][ T975] usb 5-1: USB disconnect, device number 27 [ 371.586809][T12406] dvb-usb: bulk message failed: -22 (3/0) [ 371.586840][T12406] dvb-usb: bulk message failed: -22 (3/0) [ 371.714799][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 371.723239][ T5923] usb 2-1: USB disconnect, device number 34 [ 371.941878][ T5893] IPVS: starting estimator thread 0... [ 372.034944][T12415] IPVS: using max 6 ests per chain, 14400 per kthread [ 373.019164][T12450] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 373.038224][T12451] IPVS: stopping backup sync thread 12450 ... [ 373.192987][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.202868][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.213932][ T1060] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.213997][ T1060] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.728771][ T38] audit: type=1326 audit(1756119839.226:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.731654][ T38] audit: type=1326 audit(1756119839.226:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.755324][ T38] audit: type=1326 audit(1756119839.246:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.755387][ T38] audit: type=1326 audit(1756119839.246:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.762866][ T38] audit: type=1326 audit(1756119839.246:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.763323][ T38] audit: type=1326 audit(1756119839.256:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.975845][ T38] audit: type=1326 audit(1756119839.466:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 373.976995][ T38] audit: type=1326 audit(1756119839.476:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12472 comm="syz.4.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31839ebe9 code=0x7ffc0000 [ 374.063759][T12483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2972'. [ 374.195916][ T5923] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 374.353146][ T5923] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 374.353176][ T5923] usb 2-1: config 0 has no interface number 0 [ 374.353209][ T5923] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 374.353251][ T5923] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 374.353280][ T5923] usb 2-1: config 0 interface 255 has no altsetting 0 [ 374.353315][ T5923] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 374.353339][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.405408][ T5910] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 374.447068][ T5923] usb 2-1: config 0 descriptor?? [ 374.453136][ T5923] cp210x 2-1:0.255: cp210x converter detected [ 374.555477][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 374.561967][ T5910] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 374.562006][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.562030][ T5910] usb 5-1: Product: syz [ 374.562046][ T5910] usb 5-1: Manufacturer: syz [ 374.562062][ T5910] usb 5-1: SerialNumber: syz [ 374.580983][ T5910] usb 5-1: config 0 descriptor?? [ 374.629756][ T5910] gspca_main: sq930x-2.14.0 probing 2770:930c [ 374.879653][ T5923] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 374.912165][ T5923] usb 2-1: cp210x converter now attached to ttyUSB0 [ 374.926081][ T5923] usb 2-1: USB disconnect, device number 35 [ 374.945831][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 374.946630][ T5923] cp210x 2-1:0.255: device disconnected [ 375.078649][ T5851] Bluetooth: hci1: Malformed Event: 0x13 [ 375.305764][ T5910] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 375.305878][ T5910] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 375.312676][ T5910] usb 5-1: USB disconnect, device number 28 [ 375.486291][ T38] audit: type=1326 audit(1756119840.986:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12515 comm="syz.3.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 375.487169][ T38] audit: type=1326 audit(1756119840.986:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12515 comm="syz.3.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7ffc0000 [ 376.812789][T12562] sctp: [Deprecated]: syz.0.3008 (pid 12562) Use of int in maxseg socket option. [ 376.812789][T12562] Use struct sctp_assoc_value instead [ 377.104070][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3014'. [ 377.430743][T12583] 9pnet_rdma: rdma_create_trans (12583): problem binding to privport: 13 [ 377.505296][ T5938] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 377.658876][ T5938] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 377.658909][ T5938] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 377.658930][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 377.658984][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 377.659012][ T5938] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 377.661456][ T5938] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 377.661485][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 377.661507][ T5938] usb 2-1: Product: syz [ 377.661521][ T5938] usb 2-1: Manufacturer: syz [ 377.771346][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 377.771368][ T5938] cdc_wdm 2-1:1.0: skipping garbage [ 377.808522][ T5938] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 377.808556][ T5938] cdc_wdm 2-1:1.0: Unknown control protocol [ 379.694862][ T5923] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 379.849834][ T5923] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 379.849887][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.849917][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 379.849944][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 379.849989][ T5923] usb 5-1: New USB device found, idVendor=046d, idProduct=c70a, bcdDevice= 0.00 [ 379.850014][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.876776][ T5923] usb 5-1: config 0 descriptor?? [ 379.878197][T12639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 380.295524][ T5938] usb 2-1: USB disconnect, device number 36 [ 380.418389][ T5923] logitech-djreceiver 0003:046D:C70A.0048: hidraw0: USB HID v0.00 Device [HID 046d:c70a] on usb-dummy_hcd.4-1/input0 [ 380.546607][ T5923] usb 5-1: USB disconnect, device number 29 [ 380.752484][T12662] fido_id[12662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 383.023443][T12749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3096'. [ 383.542428][ T5910] IPVS: starting estimator thread 0... [ 383.625116][T12771] IPVS: using max 6 ests per chain, 14400 per kthread [ 383.784554][T12775] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3108'. [ 383.882982][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.883061][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.403238][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3118'. [ 384.520967][T12801] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3117'. [ 384.652170][T12805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3122'. [ 384.675842][ T5893] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 384.774773][ T5910] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 384.820357][T12811] syz.3.3125 (12811) used greatest stack depth: 17448 bytes left [ 384.834473][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 384.834509][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 384.834534][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 384.847897][ T5893] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 384.847936][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.847961][ T5893] usb 2-1: Product: syz [ 384.847978][ T5893] usb 2-1: Manufacturer: syz [ 384.847996][ T5893] usb 2-1: SerialNumber: syz [ 384.876650][ T5893] usb 2-1: config 0 descriptor?? [ 384.878166][T12798] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.880559][T12798] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.925315][ T5893] usb 2-1: ucan: probing device on interface #0 [ 385.007929][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.007990][ T5910] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 385.008016][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.014538][ T5910] usb 3-1: config 0 descriptor?? [ 385.060229][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 385.296722][ T5893] usb 2-1: ucan: device reported invalid device info [ 385.296747][ T5893] usb 2-1: ucan: probe failed; try to update the device firmware [ 385.516283][ T5938] usb 2-1: USB disconnect, device number 37 [ 385.698410][ T5910] pwc: recv_control_msg error -71 req 02 val 2700 [ 385.703735][ T5910] pwc: recv_control_msg error -71 req 02 val 2c00 [ 385.704266][ T5910] pwc: recv_control_msg error -71 req 04 val 1000 [ 385.725254][ T5910] pwc: recv_control_msg error -71 req 04 val 1300 [ 385.725789][ T5910] pwc: recv_control_msg error -71 req 04 val 1400 [ 385.726350][ T5910] pwc: recv_control_msg error -71 req 02 val 2000 [ 385.726854][ T5910] pwc: recv_control_msg error -71 req 02 val 2100 [ 385.727367][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 385.729432][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 385.729940][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 385.730574][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 385.733040][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 385.733590][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 385.734322][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 385.807783][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 385.823162][ T5910] pwc: Registered as video103. [ 385.837246][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 385.860141][ T5910] usb 3-1: USB disconnect, device number 29 [ 386.667945][T12859] sp0: Synchronizing with TNC [ 386.683263][T12858] [U] [ 387.906485][T12905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3168'. [ 387.961082][T12908] program syz.3.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.274765][ T5931] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 388.424789][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 388.427350][ T5931] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 388.427375][ T5931] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 388.427396][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.430586][ T5931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.430616][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.430636][ T5931] usb 3-1: Product: syz [ 388.430651][ T5931] usb 3-1: Manufacturer: syz [ 388.430666][ T5931] usb 3-1: SerialNumber: syz [ 388.670549][ T5931] usb 3-1: 0:2 : does not exist [ 388.780892][ T5931] usb 3-1: USB disconnect, device number 30 [ 388.919373][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.133565][T12930] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 389.133565][T12930] program syz.1.3178 not setting count and/or reply_len properly [ 389.372297][T12938] macsec1: entered promiscuous mode [ 389.372329][T12938] macsec1: entered allmulticast mode [ 389.834812][ T5910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 390.011561][ T5910] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 390.011593][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.011616][ T5910] usb 4-1: Product: syz [ 390.011640][ T5910] usb 4-1: Manufacturer: syz [ 390.011655][ T5910] usb 4-1: SerialNumber: syz [ 390.050226][ T5910] usb 4-1: config 0 descriptor?? [ 390.294320][ T5910] usb 4-1: USB disconnect, device number 37 [ 390.407276][T12971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3198'. [ 390.546710][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.817369][T12989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.936629][T12991] tmpfs: Bad value for 'mpol' [ 391.365931][ T5923] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 391.546445][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.546505][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 391.546560][ T5923] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 391.546585][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.594189][T13013] netlink: 'syz.1.3217': attribute type 5 has an invalid length. [ 391.609003][ T5923] usb 4-1: config 0 descriptor?? [ 391.627474][ T5923] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 391.627534][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 391.651420][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 391.653605][ T5923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 391.653661][ T5923] usb 4-1: media controller created [ 391.680546][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.748758][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 391.748850][ T5923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 391.754200][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 391.803090][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 391.803116][ T5923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 391.846454][ T5923] usb 4-1: USB disconnect, device number 38 [ 392.081500][ T5923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 392.225549][ T5846] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 392.304773][ T6009] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 392.375169][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 392.378616][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.378652][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.378694][ T5846] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 392.378718][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.409914][ T5846] usb 3-1: config 0 descriptor?? [ 392.439489][ T5846] hub 3-1:0.0: USB hub found [ 392.458459][ T6009] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.458490][ T6009] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.460214][ T6009] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.460244][ T6009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.460265][ T6009] usb 2-1: SerialNumber: syz [ 392.683349][ T5846] hub 3-1:0.0: 1 port detected [ 392.751401][ T6009] usb 2-1: 0:2 : does not exist [ 392.814060][ T6009] usb 2-1: USB disconnect, device number 38 [ 392.996619][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.140670][ T5846] usb 3-1: USB disconnect, device number 31 [ 393.503254][T13057] netlink: 'syz.4.3236': attribute type 18 has an invalid length. [ 393.565953][ T3626] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.569380][ T3626] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.569431][ T3626] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.569471][ T3626] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.067732][T13077] team0: entered allmulticast mode [ 394.068005][T13077] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 394.165130][ T5846] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 394.200692][T13080] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3248'. [ 394.200722][T13080] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 394.200740][T13080] openvswitch: netlink: Message has 1 unknown bytes. [ 394.317546][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 394.317586][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.317631][ T5846] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 394.317656][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.337931][ T5846] usb 3-1: config 0 descriptor?? [ 394.338911][T13073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 394.476194][T13088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3255'. [ 394.753989][T13095] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.3256'. [ 394.754315][T13095] netlink: get zone limit has 8 unknown bytes [ 395.065742][ T5846] usb 3-1: string descriptor 0 read error: -71 [ 395.067795][ T5846] uclogic 0003:5543:0047.0049: failed retrieving string descriptor #200: -71 [ 395.067860][ T5846] uclogic 0003:5543:0047.0049: failed retrieving pen parameters: -71 [ 395.067891][ T5846] uclogic 0003:5543:0047.0049: failed probing pen v2 parameters: -71 [ 395.067945][ T5846] uclogic 0003:5543:0047.0049: failed probing parameters: -71 [ 395.068057][ T5846] uclogic 0003:5543:0047.0049: probe with driver uclogic failed with error -71 [ 395.077809][ T5846] usb 3-1: USB disconnect, device number 32 [ 396.289384][T13141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3277'. [ 396.485983][ T6009] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 396.644804][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 396.647207][ T6009] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 396.647236][ T6009] usb 5-1: config 0 has no interface number 0 [ 396.647290][ T6009] usb 5-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.647318][ T6009] usb 5-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.647358][ T6009] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 396.647384][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.668527][ T6009] usb 5-1: config 0 descriptor?? [ 396.780554][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3285'. [ 397.192555][T13167] netlink: zone id is out of range [ 397.192572][T13167] netlink: zone id is out of range [ 397.192582][T13167] netlink: zone id is out of range [ 397.192592][T13167] netlink: zone id is out of range [ 397.192602][T13167] netlink: zone id is out of range [ 397.192611][T13167] netlink: zone id is out of range [ 397.192621][T13167] netlink: zone id is out of range [ 397.192630][T13167] netlink: zone id is out of range [ 397.192639][T13167] netlink: zone id is out of range [ 397.192648][T13167] netlink: zone id is out of range [ 397.295352][ T5910] usb 5-1: USB disconnect, device number 30 [ 397.768561][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3295'. [ 398.062428][T13192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3299'. [ 399.635842][T13248] program syz.4.3328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.132631][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 400.404988][ T6009] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 400.523160][T13279] netlink: 'syz.0.3345': attribute type 10 has an invalid length. [ 400.530214][T13279] syz_tun: entered allmulticast mode [ 400.534325][T13279] team0: Port device syz_tun added [ 400.557792][ T6009] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 400.557821][ T6009] usb 2-1: config 4 has no interface number 0 [ 400.568327][ T6009] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 400.568358][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.568378][ T6009] usb 2-1: Product: syz [ 400.568391][ T6009] usb 2-1: Manufacturer: syz [ 400.568405][ T6009] usb 2-1: SerialNumber: syz [ 400.657298][ T6009] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 401.072722][ T6009] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 401.072769][ T6009] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 401.295700][ T6009] usb 2-1: USB disconnect, device number 39 [ 401.626308][T13308] netlink: 'syz.2.3357': attribute type 10 has an invalid length. [ 402.275527][T13334] tipc: Enabled bearer , priority 2 [ 402.500243][T13344] ptrace attach of "./syz-executor exec"[5854] was attempted by ""[13344] [ 403.062560][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3384'. [ 403.298708][T13369] macsec0: entered allmulticast mode [ 403.302605][T13369] veth1_macvtap: entered allmulticast mode [ 403.302922][T13369] macsec0: left allmulticast mode [ 403.302935][T13369] veth1_macvtap: left allmulticast mode [ 403.385895][ T5923] tipc: Node number set to 4278255617 [ 403.664556][T13378] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3392'. [ 403.752269][ T5910] kernel write not supported for file /uinput (pid: 5910 comm: kworker/0:4) [ 405.503862][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 405.503882][ T38] audit: type=1326 audit(1756119870.996:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13412 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053b5bebe9 code=0x7fc00000 [ 405.592382][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 408.165775][ T5910] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 408.320726][ T5910] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.320766][ T5910] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.320790][ T5910] usb 3-1: config 0 interface 0 has no altsetting 0 [ 408.320826][ T5910] usb 3-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 408.320851][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.338702][ T5910] usb 3-1: config 0 descriptor?? [ 408.822959][ T5910] asus 0003:0B05:183D.004B: hidraw0: USB HID v0.08 Device [HID 0b05:183d] on usb-dummy_hcd.2-1/input0 [ 408.823003][ T5910] asus 0003:0B05:183D.004B: Asus input not registered [ 408.864508][ T5910] asus 0003:0B05:183D.004B: probe with driver asus failed with error -12 [ 409.047680][ T5938] usb 3-1: USB disconnect, device number 33 [ 409.415908][ T6009] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 409.590090][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.590127][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.590167][ T6009] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 409.590192][ T6009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.663293][ T6009] usb 2-1: config 0 descriptor?? [ 410.223672][ T6009] cypress 0003:04B4:DE61.004C: item fetching failed at offset 5/7 [ 410.224549][ T6009] cypress 0003:04B4:DE61.004C: parse failed [ 410.248066][ T6009] cypress 0003:04B4:DE61.004C: probe with driver cypress failed with error -22 [ 410.375199][ T6009] usb 2-1: USB disconnect, device number 40 [ 411.284448][T13577] netlink: 'syz.1.3484': attribute type 61 has an invalid length. [ 411.656688][ T5923] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 411.804906][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 411.807486][ T5923] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 411.807514][ T5923] usb 5-1: config 0 has no interface number 0 [ 411.807568][ T5923] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.807596][ T5923] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.807620][ T5923] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.807647][ T5923] usb 5-1: config 0 interface 2 has no altsetting 0 [ 411.807683][ T5923] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 411.807709][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.923156][ T5923] usb 5-1: config 0 descriptor?? [ 412.460011][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.460050][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.460078][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.460104][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.460131][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.460158][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.460184][ T5923] uclogic 0003:5543:0781.004D: unknown main item tag 0x0 [ 412.575614][ T5923] uclogic 0003:5543:0781.004D: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input2 [ 412.675321][ T5923] usb 5-1: USB disconnect, device number 31 [ 413.196590][T13593] fido_id[13593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 414.158374][ T5851] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 425.816522][ T5910] sched: DL replenish lagged too much [ 428.208759][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.228488][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.233524][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.256261][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.260403][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.506801][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.529740][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.533984][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.551145][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.554020][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.326132][ T5851] Bluetooth: hci5: command tx timeout [ 430.719365][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 430.741442][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 430.753510][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 430.767949][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 430.768841][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 431.605547][ T5851] Bluetooth: hci6: command tx timeout [ 432.081871][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 432.104238][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 432.115278][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 432.117139][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 432.118859][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 432.373962][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 432.402272][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 432.403771][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 432.414952][ T5851] Bluetooth: hci5: command tx timeout [ 432.427659][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 432.428541][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 432.885890][ T5849] Bluetooth: hci7: command tx timeout [ 433.686016][ T5849] Bluetooth: hci6: command tx timeout [ 434.245403][ T5849] Bluetooth: hci8: command tx timeout [ 434.485109][ T5844] Bluetooth: hci5: command tx timeout [ 434.486472][ T5849] Bluetooth: hci9: command tx timeout [ 434.970160][ T5849] Bluetooth: hci7: command tx timeout [ 435.764818][ T5849] Bluetooth: hci6: command tx timeout [ 436.326369][ T5849] Bluetooth: hci8: command tx timeout [ 436.565973][ T5844] Bluetooth: hci5: command tx timeout [ 436.566027][ T5849] Bluetooth: hci9: command tx timeout [ 437.045922][ T5849] Bluetooth: hci7: command tx timeout [ 437.844815][ T5849] Bluetooth: hci6: command tx timeout [ 438.405287][ T5849] Bluetooth: hci8: command tx timeout [ 438.646075][ T5849] Bluetooth: hci9: command tx timeout [ 439.125267][ T5849] Bluetooth: hci7: command tx timeout [ 440.485318][ T5849] Bluetooth: hci8: command tx timeout [ 440.724885][ T5849] Bluetooth: hci9: command tx timeout [ 445.292084][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.292166][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.248384][T13645] chnl_net:caif_netlink_parms(): no params data found [ 484.819208][T13639] chnl_net:caif_netlink_parms(): no params data found [ 489.212768][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.252329][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.253781][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.271427][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.272446][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.301593][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.327937][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.329459][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.367195][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.375495][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.110645][ T5158] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 491.136115][ T5158] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 491.137647][ T5158] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 491.138986][ T5158] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 491.139887][ T5158] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 493.057902][ T5158] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 493.082706][ T5158] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 493.084102][ T5158] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 493.102422][ T5158] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 493.113125][ T5158] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 493.534432][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 493.598684][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 493.625853][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 493.627130][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 493.630242][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 499.525160][ T5851] Bluetooth: hci1: command tx timeout [ 499.614884][ T5851] Bluetooth: hci11: command tx timeout [ 499.615656][ T5851] Bluetooth: hci12: command tx timeout [ 499.615985][ T5851] Bluetooth: hci10: command tx timeout [ 499.616267][ T5851] Bluetooth: hci2: command tx timeout [ 501.605172][ T5158] Bluetooth: hci1: command tx timeout [ 501.685721][ T5853] Bluetooth: hci11: command tx timeout [ 501.685821][ T5851] Bluetooth: hci2: command tx timeout [ 501.685900][ T5158] Bluetooth: hci12: command tx timeout [ 501.765205][ T5158] Bluetooth: hci10: command tx timeout [ 503.684768][ T5158] Bluetooth: hci1: command tx timeout [ 503.764831][ T5158] Bluetooth: hci12: command tx timeout [ 503.764866][ T5158] Bluetooth: hci2: command tx timeout [ 503.764891][ T5158] Bluetooth: hci11: command tx timeout [ 503.845184][ T5158] Bluetooth: hci10: command tx timeout [ 505.765218][ T5158] Bluetooth: hci1: command tx timeout [ 505.845045][ T5851] Bluetooth: hci11: command tx timeout [ 505.845081][ T5851] Bluetooth: hci12: command tx timeout [ 505.845136][ T5158] Bluetooth: hci2: command tx timeout [ 505.924850][ T5158] Bluetooth: hci10: command tx timeout [ 506.775301][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.775386][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.777142][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.845562][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.860802][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.886317][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.887240][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.462439][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 551.525349][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.528269][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.529639][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.530545][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 553.008673][T13709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 553.065364][T13709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 553.067216][T13709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 553.068574][T13709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 553.092575][T13709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.569927][ T5844] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 553.597282][ T5844] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 553.605835][ T5844] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 553.607250][ T5844] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 553.608147][ T5844] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 554.098777][T13712] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 554.133104][T13712] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 554.135834][T13712] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 554.146144][T13712] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 554.161450][T13712] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 554.914917][T13712] Bluetooth: hci7: command 0x0406 tx timeout [ 554.965590][T13712] Bluetooth: hci8: command 0x0406 tx timeout [ 554.965630][T13712] Bluetooth: hci5: command 0x0406 tx timeout [ 568.177450][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.177535][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.561443][ T5853] Bluetooth: hci0: command tx timeout [ 574.966221][ T5844] Bluetooth: hci14: command tx timeout [ 574.987396][T13709] Bluetooth: hci13: command tx timeout [ 576.486051][T13709] Bluetooth: hci3: command tx timeout [ 576.577241][T13709] Bluetooth: hci0: command tx timeout [ 576.804938][T13709] Bluetooth: hci4: command tx timeout [ 577.044792][T13709] Bluetooth: hci14: command tx timeout [ 577.052105][T13709] Bluetooth: hci13: command tx timeout [ 578.564698][T13709] Bluetooth: hci3: command tx timeout [ 578.645870][T13709] Bluetooth: hci0: command tx timeout [ 578.886028][T13709] Bluetooth: hci4: command tx timeout [ 579.126450][T13709] Bluetooth: hci13: command tx timeout [ 579.126486][T13709] Bluetooth: hci14: command tx timeout [ 580.644764][T13709] Bluetooth: hci3: command tx timeout [ 580.725884][T13709] Bluetooth: hci0: command tx timeout [ 580.965128][T13709] Bluetooth: hci4: command tx timeout [ 581.205229][T13708] Bluetooth: hci14: command tx timeout [ 581.205284][T13709] Bluetooth: hci13: command tx timeout [ 582.724719][T13709] Bluetooth: hci3: command tx timeout [ 583.055063][T13709] Bluetooth: hci4: command tx timeout [ 609.713391][T13709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 609.742027][T13709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 609.760067][T13709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 609.762103][T13709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 609.763346][T13709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 611.267650][T13708] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 611.289438][T13708] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 611.308262][T13708] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 611.309913][T13708] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 611.310828][T13708] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 612.876586][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 612.902034][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 612.903640][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 612.923684][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 612.927146][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 613.571458][ T5158] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 613.591844][ T5158] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 613.593606][ T5158] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 613.609768][ T5158] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 613.610643][ T5158] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 614.221230][ T5158] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 614.238390][ T5158] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 614.242829][ T5158] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 614.244182][ T5158] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 614.269307][ T5158] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 629.612442][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.612538][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.524961][ T39] INFO: task syz.4.3502:13617 blocked for more than 143 seconds. [ 663.524990][ T39] Not tainted syzkaller #0 [ 663.525003][ T39] Blocked by coredump. [ 663.525010][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.525021][ T39] task:syz.4.3502 state:D stack:25608 pid:13617 tgid:13614 ppid:5854 task_flags:0x40054c flags:0x00004002 [ 663.525102][ T39] Call Trace: [ 663.525110][ T39] [ 663.525126][ T39] __schedule+0x16f3/0x4c20 [ 663.525167][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.525194][ T39] ? arch_stack_walk+0xfc/0x150 [ 663.525246][ T39] ? __pfx___schedule+0x10/0x10 [ 663.525294][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 663.525327][ T39] rt_mutex_schedule+0x77/0xf0 [ 663.525350][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 663.525373][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 663.525430][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 663.525456][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 663.525487][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 663.525530][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 663.525570][ T39] ? tun_chr_close+0x41/0x1c0 [ 663.525598][ T39] mutex_lock_nested+0x16a/0x1d0 [ 663.525623][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 663.525654][ T39] tun_chr_close+0x41/0x1c0 [ 663.525685][ T39] __fput+0x45b/0xa80 [ 663.525722][ T39] task_work_run+0x1d4/0x260 [ 663.525749][ T39] ? __pfx_task_work_run+0x10/0x10 [ 663.525773][ T39] ? do_exit+0x6b0/0x2300 [ 663.525791][ T39] ? kmem_cache_free+0x195/0x510 [ 663.525830][ T39] do_exit+0x6b5/0x2300 [ 663.525850][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 663.525886][ T39] ? __lock_acquire+0xab9/0xd20 [ 663.525919][ T39] ? __pfx_do_exit+0x10/0x10 [ 663.525937][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 663.525964][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 663.525999][ T39] do_group_exit+0x21c/0x2d0 [ 663.526027][ T39] get_signal+0x125e/0x1310 [ 663.526082][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 663.526112][ T39] ? __x64_sys_sendmsg+0x236/0x260 [ 663.526149][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 663.526195][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 663.526231][ T39] exit_to_user_mode_loop+0x75/0x110 [ 663.526262][ T39] do_syscall_64+0x2bd/0x3b0 [ 663.526291][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.526319][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.526342][ T39] ? clear_bhb_loop+0x60/0xb0 [ 663.526370][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.526399][ T39] RIP: 0033:0x7fc31839ebe9 [ 663.526419][ T39] RSP: 002b:00007fc3165dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.526442][ T39] RAX: 0000000000000098 RBX: 00007fc3185c6090 RCX: 00007fc31839ebe9 [ 663.526458][ T39] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 663.526479][ T39] RBP: 00007fc318421e19 R08: 0000000000000000 R09: 0000000000000000 [ 663.526493][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.526507][ T39] R13: 00007fc3185c6128 R14: 00007fc3185c6090 R15: 00007fffa57e8578 [ 663.526543][ T39] [ 663.526579][ T39] [ 663.526579][ T39] Showing all locks held in the system: [ 663.526590][ T39] 2 locks held by kworker/u8:1/13: [ 663.526604][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.526665][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.526724][ T39] 6 locks held by ktimers/0/16: [ 663.526739][ T39] 1 lock held by khungtaskd/39: [ 663.526751][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 663.526810][ T39] 3 locks held by kworker/u8:6/994: [ 663.526822][ T39] #0: ffff88814d35c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.526880][ T39] #1: ffffc900048f7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.526940][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 663.526940][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 663.526994][ T39] 2 locks held by kworker/u8:7/1060: [ 663.527020][ T39] 4 locks held by kworker/u8:13/3587: [ 663.527032][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.527089][ T39] #1: ffffc9000dbafbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.527146][ T39] #2: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 663.527202][ T39] #3: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 663.527254][ T39] 3 locks held by kworker/u8:14/3605: [ 663.527266][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.527323][ T39] #1: ffffc9000d94fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.527380][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 663.527445][ T39] 2 locks held by getty/5604: [ 663.527457][ T39] #0: ffff88823bf728a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 663.527525][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 663.527580][ T39] 4 locks held by kworker/u9:3/5844: [ 663.527592][ T39] #0: ffff88805e138938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.527654][ T39] #1: ffffc90004bf7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.527712][ T39] #2: ffff88808fa840a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.527763][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.527815][ T39] 4 locks held by kworker/0:3/5846: [ 663.527828][ T39] 4 locks held by kworker/u9:6/5851: [ 663.527840][ T39] #0: ffff888063596938 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.527903][ T39] #1: ffffc90004c87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.527961][ T39] #2: ffff88803c8200a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.528013][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.528065][ T39] 4 locks held by kworker/u9:7/5853: [ 663.528078][ T39] #0: ffff8880818ff138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.528139][ T39] #1: ffffc90004c97bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.528196][ T39] #2: ffff88803b8b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.528246][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.528304][ T39] 3 locks held by kworker/0:5/5938: [ 663.528318][ T39] 1 lock held by syz.3.3496/13603: [ 663.528331][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 663.528384][ T39] 1 lock held by syz.4.3502/13617: [ 663.528397][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 663.528454][ T39] 1 lock held by syz.0.3507/13627: [ 663.528466][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 663.528531][ T39] 2 locks held by syz-executor/13630: [ 663.528544][ T39] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 663.528597][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 663.528652][ T39] 1 lock held by syz-executor/13636: [ 663.528664][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 663.528721][ T39] 2 locks held by syz-executor/13639: [ 663.528733][ T39] #0: ffff888035834e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 663.528784][ T39] #1: ffff8880358340a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 663.528840][ T39] 1 lock held by syz-executor/13643: [ 663.528851][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 663.528908][ T39] 1 lock held by syz-executor/13645: [ 663.528920][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 663.528977][ T39] 3 locks held by syz-executor/13670: [ 663.528989][ T39] #0: ffff88803225ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 663.529040][ T39] #1: ffff88803225c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 663.529096][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 663.529157][ T39] 3 locks held by syz-executor/13675: [ 663.529169][ T39] #0: ffff88802eda4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 663.529221][ T39] #1: ffff88802eda40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 663.529276][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 663.529336][ T39] 3 locks held by syz-executor/13678: [ 663.529349][ T39] #0: ffff888065ee0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 663.529400][ T39] #1: ffff888065ee00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 663.529455][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 663.529524][ T39] 4 locks held by syz-executor/13682: [ 663.529537][ T39] #0: ffff88804dd58e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 663.529586][ T39] #1: ffff88804dd580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 663.529638][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 663.529696][ T39] #3: ffff888030a7ab58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 663.529757][ T39] 3 locks held by syz-executor/13684: [ 663.529769][ T39] #0: ffff8880495f8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 663.529820][ T39] #1: ffff8880495f80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 663.529874][ T39] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 663.529943][ T39] 1 lock held by syz-executor/13697: [ 663.529955][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530018][ T39] 1 lock held by syz-executor/13703: [ 663.530030][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530088][ T39] 1 lock held by syz-executor/13707: [ 663.530101][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530162][ T39] 4 locks held by kworker/u9:0/13708: [ 663.530174][ T39] #0: ffff888023784938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.530237][ T39] #1: ffffc90004157bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.530296][ T39] #2: ffff8880509540a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.530347][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.530399][ T39] 4 locks held by kworker/u9:2/13709: [ 663.530412][ T39] #0: ffff888086352938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.530480][ T39] #1: ffffc9000416fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.530535][ T39] #2: ffff8880509580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.530586][ T39] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.530637][ T39] 1 lock held by syz-executor/13711: [ 663.530650][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530713][ T39] 1 lock held by syz-executor/13714: [ 663.530725][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530788][ T39] 1 lock held by syz-executor/13730: [ 663.530801][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530863][ T39] 1 lock held by syz-executor/13734: [ 663.530876][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.530938][ T39] 1 lock held by syz-executor/13739: [ 663.530951][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.531013][ T39] 1 lock held by syz-executor/13741: [ 663.531026][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.531088][ T39] 1 lock held by syz-executor/13743: [ 663.531100][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.531162][ T39] 1 lock held by dhcpcd/13747: [ 663.531174][ T39] #0: ffff88805b4fccb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.531230][ T39] 1 lock held by dhcpcd/13748: [ 663.531243][ T39] #0: ffff88803bf9e0f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.531299][ T39] 1 lock held by dhcpcd/13750: [ 663.531311][ T39] #0: ffff88803e0cd378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.531368][ T39] 1 lock held by dhcpcd/13751: [ 663.531380][ T39] #0: ffff88803e0ca438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.531435][ T39] 1 lock held by dhcpcd/13752: [ 663.531447][ T39] #0: ffff88803e0c9d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.531510][ T39] 1 lock held by dhcpcd/13753: [ 663.531523][ T39] #0: ffff88805928a438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.531578][ T39] [ 663.531584][ T39] ============================================= [ 663.531584][ T39] [ 663.531602][ T39] NMI backtrace for cpu 1 [ 663.531626][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.531650][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.531663][ T39] Call Trace: [ 663.531671][ T39] [ 663.531680][ T39] dump_stack_lvl+0x189/0x250 [ 663.531717][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.531749][ T39] ? __pfx__printk+0x10/0x10 [ 663.531788][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 663.531816][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 663.531842][ T39] ? __pfx__printk+0x10/0x10 [ 663.531871][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.531902][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 663.531929][ T39] watchdog+0xf93/0xfe0 [ 663.531963][ T39] ? watchdog+0x1de/0xfe0 [ 663.531997][ T39] kthread+0x711/0x8a0 [ 663.532035][ T39] ? __pfx_watchdog+0x10/0x10 [ 663.532062][ T39] ? __pfx_kthread+0x10/0x10 [ 663.532100][ T39] ? __pfx_kthread+0x10/0x10 [ 663.532134][ T39] ret_from_fork+0x3fc/0x770 [ 663.532167][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 663.532202][ T39] ? __switch_to_asm+0x39/0x70 [ 663.532222][ T39] ? __switch_to_asm+0x33/0x70 [ 663.532241][ T39] ? __pfx_kthread+0x10/0x10 [ 663.532276][ T39] ret_from_fork_asm+0x1a/0x30 [ 663.532315][ T39] [ 663.532323][ T39] Sending NMI from CPU 1 to CPUs 0: [ 663.532352][ C0] NMI backtrace for cpu 0 [ 663.532367][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.532388][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.532399][ C0] RIP: 0010:check_preemption_disabled+0x47/0x120 [ 663.532429][ C0] Code: 06 65 8b 0d fb 74 ff 06 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d db 74 ff 06 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e <41> 5f 5d e9 81 94 03 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 [ 663.532445][ C0] RSP: 0018:ffffc90000156a00 EFLAGS: 00000286 [ 663.532461][ C0] RAX: 0000000000000000 RBX: ffffffff8212fde5 RCX: 7088d6cd4db22f00 [ 663.532475][ C0] RDX: 0000000000000000 RSI: ffffffff8b620c60 RDI: ffffffff8b620c20 [ 663.532488][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172b165 [ 663.532502][ C0] R10: ffffc90000156b58 R11: ffffffff81aae030 R12: 1ffff9200002ad61 [ 663.532515][ C0] R13: ffffc90000156b40 R14: ffffc90000156b08 R15: ffffffff8172b165 [ 663.532530][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 663.532545][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.532557][ C0] CR2: 00007f8e196c5b0e CR3: 000000003f228000 CR4: 00000000003526f0 [ 663.532575][ C0] Call Trace: [ 663.532581][ C0] [ 663.532588][ C0] ? unwind_next_frame+0xa5/0x2390 [ 663.532615][ C0] rcu_is_watching+0x15/0xb0 [ 663.532642][ C0] ? kmem_cache_free+0x195/0x510 [ 663.532667][ C0] ? unwind_next_frame+0xa5/0x2390 [ 663.532691][ C0] unwind_next_frame+0xd4/0x2390 [ 663.532719][ C0] ? unwind_next_frame+0xa5/0x2390 [ 663.532744][ C0] ? __kasan_slab_free+0x5b/0x80 [ 663.532769][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 663.532790][ C0] arch_stack_walk+0x11c/0x150 [ 663.532820][ C0] ? kmem_cache_free+0x195/0x510 [ 663.532848][ C0] stack_trace_save+0x9c/0xe0 [ 663.532866][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 663.532883][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 663.532901][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 663.532929][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 663.532955][ C0] ? nft_do_chain+0x40c/0x1920 [ 663.532983][ C0] ? __lock_acquire+0xab9/0xd20 [ 663.533028][ C0] kasan_save_track+0x3e/0x80 [ 663.533047][ C0] ? kasan_save_track+0x3e/0x80 [ 663.533066][ C0] ? kasan_save_free_info+0x46/0x50 [ 663.533081][ C0] ? __kasan_slab_free+0x5b/0x80 [ 663.533101][ C0] ? kmem_cache_free+0x195/0x510 [ 663.533154][ C0] kasan_save_free_info+0x46/0x50 [ 663.533170][ C0] __kasan_slab_free+0x5b/0x80 [ 663.533191][ C0] ? skb_release_data+0x62d/0x7c0 [ 663.533216][ C0] kmem_cache_free+0x195/0x510 [ 663.533251][ C0] skb_release_data+0x62d/0x7c0 [ 663.533281][ C0] consume_skb+0x9e/0xf0 [ 663.533305][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 663.533336][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 663.533366][ C0] ? nf_ip_checksum+0x13c/0x510 [ 663.533395][ C0] nft_synproxy_do_eval+0x345/0x570 [ 663.533426][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 663.533453][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 663.533490][ C0] nft_do_chain+0x40c/0x1920 [ 663.533525][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 663.533555][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 663.533584][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 663.533603][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 663.533626][ C0] nft_do_chain_inet+0x25d/0x340 [ 663.533652][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.533696][ C0] ? NF_HOOK+0x9a/0x3a0 [ 663.533717][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.533744][ C0] nf_hook_slow+0xc5/0x220 [ 663.533780][ C0] NF_HOOK+0x206/0x3a0 [ 663.533801][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.533822][ C0] ? NF_HOOK+0x9a/0x3a0 [ 663.533841][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 663.533860][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 663.533883][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 663.533906][ C0] ? skb_dst+0x4f/0xd0 [ 663.533927][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 663.533950][ C0] NF_HOOK+0x309/0x3a0 [ 663.533970][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.533991][ C0] ? NF_HOOK+0x9a/0x3a0 [ 663.534010][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 663.534031][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 663.534058][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 663.534077][ C0] __netif_receive_skb+0x143/0x380 [ 663.534096][ C0] ? rt_spin_unlock+0x65/0x80 [ 663.534116][ C0] ? process_backlog+0x27b/0x900 [ 663.534136][ C0] process_backlog+0x31e/0x900 [ 663.534163][ C0] __napi_poll+0xb6/0x540 [ 663.534184][ C0] net_rx_action+0x707/0xe00 [ 663.534215][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 663.534260][ C0] handle_softirqs+0x22c/0x710 [ 663.534288][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 663.534316][ C0] run_ktimerd+0xcf/0x190 [ 663.534340][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 663.534366][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 663.534389][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 663.534412][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 663.534433][ C0] smpboot_thread_fn+0x542/0xa60 [ 663.534455][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 663.534488][ C0] kthread+0x711/0x8a0 [ 663.534517][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 663.534541][ C0] ? __pfx_kthread+0x10/0x10 [ 663.534570][ C0] ? __pfx_kthread+0x10/0x10 [ 663.534597][ C0] ret_from_fork+0x3fc/0x770 [ 663.534622][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 663.534648][ C0] ? __switch_to_asm+0x39/0x70 [ 663.534665][ C0] ? __switch_to_asm+0x33/0x70 [ 663.534680][ C0] ? __pfx_kthread+0x10/0x10 [ 663.534707][ C0] ret_from_fork_asm+0x1a/0x30 [ 663.534733][ C0] [ 663.995677][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 663.995703][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.995727][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.995740][ T39] Call Trace: [ 663.995748][ T39] [ 663.995758][ T39] dump_stack_lvl+0x99/0x250 [ 663.995795][ T39] ? __asan_memcpy+0x40/0x70 [ 663.995819][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.995852][ T39] ? __pfx__printk+0x10/0x10 [ 663.995891][ T39] vpanic+0x281/0x750 [ 663.995926][ T39] ? __pfx_vpanic+0x10/0x10 [ 663.995955][ T39] ? irqentry_exit+0x74/0x90 [ 663.995982][ T39] ? preempt_schedule+0xae/0xc0 [ 663.996011][ T39] ? preempt_schedule_common+0x83/0xd0 [ 663.996045][ T39] panic+0xb9/0xc0 [ 663.996075][ T39] ? __pfx_panic+0x10/0x10 [ 663.996108][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 663.996141][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 663.996168][ T39] watchdog+0xfd2/0xfe0 [ 663.996202][ T39] ? watchdog+0x1de/0xfe0 [ 663.996236][ T39] kthread+0x711/0x8a0 [ 663.996273][ T39] ? __pfx_watchdog+0x10/0x10 [ 663.996299][ T39] ? __pfx_kthread+0x10/0x10 [ 663.996337][ T39] ? __pfx_kthread+0x10/0x10 [ 663.996371][ T39] ret_from_fork+0x3fc/0x770 [ 663.996403][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 663.996444][ T39] ? __switch_to_asm+0x39/0x70 [ 663.996463][ T39] ? __switch_to_asm+0x33/0x70 [ 663.996482][ T39] ? __pfx_kthread+0x10/0x10 [ 663.996516][ T39] ret_from_fork_asm+0x1a/0x30 [ 663.996555][ T39] [ 663.996845][ T39] Kernel Offset: disabled