last executing test programs: 4m13.624210854s ago: executing program 3 (id=931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m13.457523388s ago: executing program 3 (id=937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 4m13.457086288s ago: executing program 3 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51012049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m13.414804556s ago: executing program 3 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 4m13.342051169s ago: executing program 3 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x1c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 4m13.004785481s ago: executing program 3 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "38bf72941d484c506bcf7ba36c"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 4m12.961016828s ago: executing program 32 (id=954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "38bf72941d484c506bcf7ba36c"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m23.196078682s ago: executing program 2 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) 2m23.11324233s ago: executing program 2 (id=2589): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2m22.418560581s ago: executing program 2 (id=2598): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, 0x0) 2m22.210183064s ago: executing program 2 (id=2602): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m22.025343661s ago: executing program 2 (id=2606): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000000)='./cgroup\x00') 2m21.866461841s ago: executing program 2 (id=2609): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 2m6.634935346s ago: executing program 33 (id=2609): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 2.499155484s ago: executing program 0 (id=4315): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.403208346s ago: executing program 0 (id=4317): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) 1.525828256s ago: executing program 4 (id=4327): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000380)=@caif=@dgm={0x25, 0x3, 0x80}, 0x80, 0x0}, 0x4000) 1.442531225s ago: executing program 4 (id=4329): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2084) writev(r0, &(0x7f0000002180)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000020c0)="090b51e52598c61daf651a", 0xb}], 0x2) 1.318347491s ago: executing program 4 (id=4333): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.315797143s ago: executing program 0 (id=4334): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, &(0x7f0000000000)=0x1e) 1.250575959s ago: executing program 4 (id=4336): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x0, 0x0, 0x7}) 1.235898552s ago: executing program 0 (id=4338): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.070006559s ago: executing program 4 (id=4340): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendto$rxrpc(r0, &(0x7f0000000300)="c326", 0x2, 0x200080c0, 0x0, 0x0) 891.310378ms ago: executing program 4 (id=4344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) 740.714444ms ago: executing program 1 (id=4348): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) 740.437193ms ago: executing program 5 (id=4349): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000001200)='./control\x00', 0x0) utime(&(0x7f0000000240)='./control\x00', 0x0) 722.78752ms ago: executing program 1 (id=4350): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x4c) 713.101021ms ago: executing program 5 (id=4351): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x2) 483.62902ms ago: executing program 1 (id=4352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000000000007900000000000000950000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 483.471714ms ago: executing program 5 (id=4353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a3214"], 0x60}}, 0x2400c000) 375.887741ms ago: executing program 5 (id=4354): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendto$rxrpc(r0, &(0x7f0000000300)="c326", 0x2, 0x200080c0, 0x0, 0x0) 375.134457ms ago: executing program 1 (id=4355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}}, 0x10) 250.630289ms ago: executing program 0 (id=4356): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000005680)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000003200)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x2, [{0x2, 0x9, "9856d713834684"}, {0x0, 0x9, "2501d069d2e9e6"}, {0x1, 0x7, '=s\a0\r'}, {0x1, 0x5, "1c07d9"}, {0x0, 0x5, "bbd3bb"}]}]}}}], 0x38}}], 0x2, 0x4004000) 249.188883ms ago: executing program 5 (id=4357): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) 139.832566ms ago: executing program 1 (id=4358): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) 138.592012ms ago: executing program 0 (id=4359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 64.242134ms ago: executing program 1 (id=4360): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xffffffff}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfff}]}}]}, 0x40}}, 0x2000400c) 0s ago: executing program 5 (id=4361): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): new high-speed USB device number 2 using dummy_hcd [ 96.488687][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.498296][ T5847] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 96.586938][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 96.598327][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 96.601979][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 96.605459][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 96.610491][ T9] usb 5-1: config 250 has no interface number 0 [ 96.613645][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 96.625530][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 96.632184][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 96.638141][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 96.644057][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 96.649512][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 96.653369][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 96.657501][ T9] usb 5-1: Product: syz [ 96.659235][ T9] usb 5-1: SerialNumber: syz [ 96.672497][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 96.674806][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 96.817217][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.883629][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 96.991927][ T7969] veth0_vlan: entered promiscuous mode [ 97.004236][ T7969] veth1_vlan: entered promiscuous mode [ 97.033814][ T7969] veth0_macvtap: entered promiscuous mode [ 97.042347][ T7969] veth1_macvtap: entered promiscuous mode [ 97.056554][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.064241][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.074580][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.077624][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.085826][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.091345][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.164963][ C1] usblp0: nonzero read bulk status received: -71 [ 97.173375][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.176015][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.188732][ T856] usb 5-1: USB disconnect, device number 2 [ 97.200668][ T856] usblp0: removed [ 97.217741][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.221133][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.249314][ T8241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.330380][ T5742] Bluetooth: hci1: command tx timeout [ 98.532359][ T8270] tmpfs: Cannot change global quota limit on remount [ 98.762041][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 98.762622][ T8293] CUSE: DEVNAME unspecified [ 98.765687][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 98.829584][ T8299] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 98.840242][ T8299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.101508][ T8326] bond1: (slave bond_slave_1): Device is not our slave [ 99.104022][ T8326] bond1: option active_slave: invalid value (bond_slave_1) [ 99.114282][ T8326] bond1 (unregistering): Released all slaves [ 99.638870][ T8376] tipc: Started in network mode [ 99.640792][ T8376] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 99.643641][ T8376] tipc: Enabling of bearer rejected, failed to enable media [ 99.731768][ T8389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 99.735116][ T8389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.764361][ T8389] vhci_hcd vhci_hcd.0: Device attached [ 99.771661][ T8390] vhci_hcd: connection closed [ 99.773305][ T58] vhci_hcd vhci_hcd.4: stop threads [ 99.777454][ T58] vhci_hcd vhci_hcd.4: release socket [ 99.779358][ T58] vhci_hcd vhci_hcd.4: disconnect device [ 99.925408][ T8406] program syz.0.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.028109][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 100.406340][ T5742] Bluetooth: hci1: command tx timeout [ 100.453073][ T40] audit: type=1326 audit(1778714552.314:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.2.1147" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe4fcc code=0x0 [ 100.702816][ T8468] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 100.705599][ T8468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.705924][ T8468] vhci_hcd vhci_hcd.0: Device attached [ 100.733280][ T8469] vhci_hcd: connection closed [ 100.733710][ T58] vhci_hcd vhci_hcd.0: stop threads [ 100.740771][ T58] vhci_hcd vhci_hcd.0: release socket [ 100.740795][ T58] vhci_hcd vhci_hcd.0: disconnect device [ 100.765191][ T8473] dvmrp1: entered allmulticast mode [ 100.768958][ T8472] dvmrp1: left allmulticast mode [ 100.892729][ T8477] program syz.4.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.895821][ T8477] ata1.00: non-matching transfer count (8388608/133) [ 101.811670][ T8509] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 101.814398][ T8509] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.821471][ T8509] vhci_hcd vhci_hcd.0: Device attached [ 101.828495][ T8510] vhci_hcd: connection closed [ 101.828831][ T1262] vhci_hcd vhci_hcd.2: stop threads [ 101.833961][ T1262] vhci_hcd vhci_hcd.2: release socket [ 101.838977][ T1262] vhci_hcd vhci_hcd.2: disconnect device [ 102.025176][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1173'. [ 102.486183][ T5742] Bluetooth: hci1: command tx timeout [ 102.673986][ T8548] bond1: (slave bond_slave_1): Device is not our slave [ 102.677332][ T8548] bond1: option active_slave: invalid value (bond_slave_1) [ 102.681846][ T8548] bond1 (unregistering): Released all slaves [ 102.796961][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 102.946203][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 102.948320][ T5836] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 102.948348][ T5836] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 102.948366][ T5836] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 102.948384][ T5836] usb 7-1: config 250 has no interface number 0 [ 102.948420][ T5836] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 102.948443][ T5836] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 102.948464][ T5836] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 102.948485][ T5836] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 102.948509][ T5836] usb 7-1: config 250 interface 228 has no altsetting 0 [ 102.950047][ T5836] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 102.950069][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 102.950093][ T5836] usb 7-1: Product: syz [ 102.950107][ T5836] usb 7-1: SerialNumber: syz [ 102.965745][ T8556] netlink: 'syz.1.1188': attribute type 4 has an invalid length. [ 102.979980][ T5836] hub 7-1:250.228: bad descriptor, ignoring hub [ 103.017250][ T5836] hub 7-1:250.228: probe with driver hub failed with error -5 [ 103.185091][ T5836] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 103.185815][ T8565] PKCS8: Unsupported PKCS#8 version [ 103.430569][ T8582] bond1: (slave bond_slave_1): Device is not our slave [ 103.433091][ T8582] bond1: option active_slave: invalid value (bond_slave_1) [ 103.440374][ T8582] bond1 (unregistering): Released all slaves [ 103.449014][ C2] usblp0: nonzero read bulk status received: -71 [ 103.467011][ T1346] usb 7-1: USB disconnect, device number 3 [ 103.478862][ T1346] usblp0: removed [ 103.712736][ T59] bridge0: entered promiscuous mode [ 104.192857][ T8606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.224221][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'. [ 104.229152][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'. [ 104.233252][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'. [ 104.237810][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'. [ 104.421255][ T8616] bond1: (slave bond_slave_1): Device is not our slave [ 104.424148][ T8616] bond1: option active_slave: invalid value (bond_slave_1) [ 104.429842][ T8616] bond1 (unregistering): Released all slaves [ 105.891705][ T8711] PKCS7: Unknown OID: [5] (bad) [ 105.895586][ T8711] PKCS7: Only support pkcs7_signedData type [ 105.927299][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 105.930315][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1272'. [ 105.932988][ T8716] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1271'. [ 105.940403][ T8716] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1271'. [ 108.527317][ T8768] warning: `syz.1.1276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.659712][ T8778] team0: Cannot enslave team device to itself [ 109.341398][ T8865] Zero length message leads to an empty skb [ 109.428353][ T8874] CUSE: unknown device info "" [ 109.430775][ T8874] CUSE: unknown device info "" [ 109.432795][ T8874] CUSE: unknown device info "" [ 109.433175][ T40] audit: type=1326 audit(1778714561.294:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.434799][ T8874] CUSE: unknown device info "" [ 109.434812][ T8874] CUSE: unknown device info "" [ 109.434821][ T8874] CUSE: unknown device info "" [ 109.434829][ T8874] CUSE: unknown device info "" [ 109.434837][ T8874] CUSE: unknown device info "" [ 109.434844][ T8874] CUSE: unknown device info "" [ 109.434852][ T8874] CUSE: unknown device info "" [ 109.460937][ T8874] CUSE: unknown device info "" [ 109.463206][ T8874] CUSE: unknown device info "r" [ 109.465433][ T8874] CUSE: unknown device info "#" [ 109.466358][ T40] audit: type=1326 audit(1778714561.294:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.471239][ T8874] CUSE: unknown device info "" [ 109.479543][ T8874] CUSE: unknown device info "" [ 109.481823][ T8874] CUSE: unknown device info "" [ 109.484494][ T8874] CUSE: DEVNAME unspecified [ 109.487470][ T40] audit: type=1326 audit(1778714561.314:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.497211][ T40] audit: type=1326 audit(1778714561.324:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.507445][ T40] audit: type=1326 audit(1778714561.324:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.519107][ T40] audit: type=1326 audit(1778714561.324:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8879 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71661ab code=0x7ffc0000 [ 109.543125][ T40] audit: type=1326 audit(1778714561.404:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.610952][ T40] audit: type=1326 audit(1778714561.474:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8879 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.623103][ T40] audit: type=1326 audit(1778714561.494:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f66fe8 code=0x7ffc0000 [ 109.638804][ T40] audit: type=1326 audit(1778714561.494:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.0.1329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 109.688543][ T8899] netlink: 'syz.0.1341': attribute type 3 has an invalid length. [ 109.772816][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 109.778887][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 109.891052][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 110.095892][ T8955] fuse: blksize only supported for fuseblk [ 110.111497][ T8957] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1368'. [ 110.119405][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'. [ 110.137358][ T8960] program syz.4.1369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.142093][ T8960] ata1.00: invalid service action 3 [ 110.819570][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'. [ 112.645188][ T59] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 112.826745][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 112.847672][ T59] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.851908][ T59] usb 7-1: config 179 has no interface number 0 [ 112.854786][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 112.859970][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 112.864382][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.868350][ T59] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 112.887531][ T59] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 112.893640][ T59] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 112.898108][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.918103][ T9048] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.047474][ T5742] Bluetooth: hci1: command tx timeout [ 113.195807][ T59] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input7 [ 113.203898][ T7481] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.384935][ T5836] usb 7-1: USB disconnect, device number 4 [ 113.384935][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 113.384981][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 113.441061][ T7481] usb 5-1: Using ep0 maxpacket: 32 [ 113.462810][ T7481] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.494809][ T7481] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 113.510755][ T7481] usb 5-1: config 8 has no interface number 0 [ 113.513310][ T7481] usb 5-1: config 8 interface 188 has no altsetting 0 [ 113.553303][ T7481] usb 5-1: string descriptor 0 read error: -22 [ 113.557671][ T7481] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 113.580748][ T7481] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.626709][ T7481] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 113.633606][ T7481] dw2102: su3000_power_ctrl: 1, initialized 0 [ 113.643449][ T7481] dvb-usb: bulk message failed: -22 (2/0) [ 113.659956][ T7481] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.701775][ T7481] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 113.709480][ T7481] usb 5-1: media controller created [ 113.724177][ T7481] dvb-usb: bulk message failed: -22 (6/0) [ 113.730287][ T7481] dw2102: i2c transfer failed. [ 113.734741][ T7481] dvb-usb: bulk message failed: -22 (6/0) [ 113.743420][ T7481] dw2102: i2c transfer failed. [ 113.749021][ T7481] dvb-usb: bulk message failed: -22 (6/0) [ 113.766759][ T7481] dw2102: i2c transfer failed. [ 113.773154][ T7481] dvb-usb: bulk message failed: -22 (6/0) [ 113.780268][ T7481] dw2102: i2c transfer failed. [ 113.782608][ T7481] dvb-usb: bulk message failed: -22 (6/0) [ 113.787094][ T7481] dw2102: i2c transfer failed. [ 113.789866][ T7481] dvb-usb: bulk message failed: -22 (6/0) [ 113.793749][ T7481] dw2102: i2c transfer failed. [ 113.797599][ T7481] dvb-usb: MAC address: 02:02:02:02:02:02 [ 113.815392][ T7481] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.883331][ T9063] dvb-usb: bulk message failed: -22 (5/0) [ 113.908833][ T9063] dw2102: i2c transfer failed. [ 113.937401][ T7481] dvb-usb: bulk message failed: -22 (3/0) [ 113.962049][ T7481] dw2102: command 0x0e transfer failed. [ 114.006033][ T7481] dvb-usb: bulk message failed: -22 (3/0) [ 114.019859][ T7481] dw2102: command 0x0e transfer failed. [ 114.356274][ T7481] dvb-usb: bulk message failed: -22 (3/0) [ 114.358802][ T7481] dw2102: command 0x0e transfer failed. [ 114.361545][ T7481] dvb-usb: bulk message failed: -22 (3/0) [ 114.364872][ T7481] dw2102: command 0x0e transfer failed. [ 114.384159][ T7481] dvb-usb: bulk message failed: -22 (1/0) [ 114.395420][ T7481] dw2102: command 0x51 transfer failed. [ 114.564571][ T7481] DVB: Unable to find symbol ds3000_attach() [ 114.568539][ T7481] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 114.660361][ T5847] IPVS: starting estimator thread 0... [ 114.750872][ T9074] IPVS: using max 25 ests per chain, 60000 per kthread [ 114.786203][ T7481] rc_core: IR keymap rc-su3000 not found [ 114.791679][ T7481] Registered IR keymap rc-empty [ 114.797504][ T7481] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 114.875105][ T7481] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8 [ 114.945861][ T7481] dvb-usb: schedule remote query interval to 150 msecs. [ 114.949133][ T7481] dw2102: su3000_power_ctrl: 0, initialized 1 [ 114.952588][ T7481] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 115.039883][ T7481] usb 5-1: USB disconnect, device number 3 [ 115.461271][ T7481] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 115.743565][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1436'. [ 116.454455][ T9120] : entered promiscuous mode [ 116.610611][ T9130] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1450'. [ 117.034175][ T9153] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1458'. [ 117.220181][ T9159] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1462'. [ 117.224376][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 117.441211][ T9162] : entered promiscuous mode [ 117.444704][ T9168] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 117.828598][ T9180] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 117.831731][ T9180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.836490][ T9180] vhci_hcd vhci_hcd.0: Device attached [ 118.084930][ T1346] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 118.170873][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.360121][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 118.405114][ T9183] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 118.418119][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.422894][ T10] usb 5-1: no configurations [ 118.425021][ T10] usb 5-1: can't read configurations, error -22 [ 118.447630][ T1157] vhci_hcd vhci_hcd.0: stop threads [ 118.479360][ T1157] vhci_hcd vhci_hcd.0: release socket [ 118.512653][ T1157] vhci_hcd vhci_hcd.0: disconnect device [ 118.680566][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 118.895219][ T34] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 118.930618][ T34] usb 6-1: config 0 has no interface number 0 [ 118.953635][ T34] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.962453][ T34] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 118.967265][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.971437][ T34] usb 6-1: Product: syz [ 118.974110][ T34] usb 6-1: Manufacturer: syz [ 118.978476][ T34] usb 6-1: SerialNumber: syz [ 119.010343][ T34] usb 6-1: config 0 descriptor?? [ 119.035316][ T34] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 119.112606][ T9200] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 119.119020][ T9200] CUSE: unknown device info "ٮ,<_eF" [ 119.123747][ T9200] CUSE: unknown device info "3ܟ,̘" [ 119.135379][ T9200] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 119.144163][ T9200] CUSE: unknown device info " [ 119.144163][ T9200] fzXS! [ 119.144163][ T9200] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 119.158050][ T9200] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 119.164032][ T9200] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 119.195287][ T9200] CUSE: zero length info key specified [ 119.258656][ T34] usb 6-1: USB disconnect, device number 6 [ 119.408905][ T34] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 119.726645][ T9212] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1485'. [ 119.730617][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 120.405526][ T9226] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1492'. [ 122.123636][ T9269] xt_l2tp: invalid flags combination: 8 [ 122.633666][ T5832] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5832 comm: kworker/1:4) [ 122.657716][ T856] kernel write not supported for file /bluetooth/6lowpan_control (pid: 856 comm: kworker/1:2) [ 122.973025][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.200754][ T1346] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 124.398888][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 125.521549][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.242162][ T9400] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 128.032359][ T9416] qrtr: Invalid version 255 [ 129.095821][ T9449] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.1595'. [ 130.429923][ T5817] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 130.617893][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.629091][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 130.633775][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 130.655403][ T5817] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 130.687810][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.692202][ T5817] usb 6-1: Product: syz [ 130.693973][ T5817] usb 6-1: Manufacturer: syz [ 130.714828][ T5817] usb 6-1: SerialNumber: syz [ 130.760440][ T5817] usb 6-1: config 0 descriptor?? [ 130.764729][ T9487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.907213][ T5817] rc_core: IR keymap rc-streamzap not found [ 130.909537][ T5817] Registered IR keymap rc-empty [ 130.912872][ T5817] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 130.929841][ T5817] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 131.054013][ T5817] usb 6-1: USB disconnect, device number 7 [ 132.223362][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 132.490034][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 132.891492][ T9555] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 133.239374][ T9568] comedi comedi2: pcl730: I/O port conflict (0x100,4) [ 135.375815][ T9630] tipc: Invalid UDP bearer configuration [ 135.375865][ T9630] tipc: Enabling of bearer rejected, failed to enable media [ 136.759589][ T9691] block nbd2: not configured, cannot reconfigure [ 137.014644][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 137.020680][ T9701] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1715'. [ 137.288964][ T9709] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 137.693269][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.714678][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.720736][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1743'. [ 139.053222][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.069607][ T5742] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.258333][ T9775] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.1750'. [ 139.265046][ T9776] xt_limit: Overflow, try lower: 271964/0 [ 139.284004][ T9775] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.1750'. [ 139.528468][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 139.528499][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 139.528528][ T9786] netlink: 'syz.1.1757': attribute type 7 has an invalid length. [ 139.528542][ T9786] netlink: 'syz.1.1757': attribute type 13 has an invalid length. [ 140.334573][ T5817] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 140.566234][ T5817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.573705][ T5817] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.615221][ T5817] usb 7-1: New USB device found, idVendor=5443, idProduct=0042, bcdDevice= 0.00 [ 140.620556][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.646546][ T5817] usb 7-1: config 0 descriptor?? [ 140.685052][ T5817] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 141.199402][ T9832] ALSA: seq fatal error: cannot create timer (-19) [ 141.420125][ T5847] usb 7-1: USB disconnect, device number 5 [ 141.812378][ T9856] smc: net device wlan0 applied user defined pnetid SYZ0 [ 142.534503][ T9886] tmpfs: Cannot change global quota limit on remount [ 142.867789][ T9905] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 143.025148][ T9911] Invalid ELF header len 9 [ 143.552485][ T9936] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 143.699751][ T9936] @0: renamed from bond_slave_1 (while UP) [ 144.045716][ T9949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.096420][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 144.103319][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1833'. [ 144.705074][ T9983] program syz.1.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.939415][ T9990] netlink: 'syz.0.1852': attribute type 7 has an invalid length. [ 144.947836][ T9990] netlink: 'syz.0.1852': attribute type 8 has an invalid length. [ 144.966709][ T9990] netlink: 209824 bytes leftover after parsing attributes in process `syz.0.1852'. [ 145.451141][T10007] program syz.4.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.569280][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 145.825011][T10023] kAFS: unable to lookup cell 'syz1' [ 145.835282][T10026] kAFS: unable to lookup cell 'syz1' [ 146.444119][T10045] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 147.672320][T10109] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 149.384092][T10167] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.760369][T10177] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 150.040014][ T29] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 150.152548][T10186] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1943'. [ 151.786790][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.960267][ T29] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 151.965972][ T29] usb 5-1: config 0 has no interface number 0 [ 151.969489][ T29] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.975997][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 152.019869][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.025067][ T29] usb 5-1: Product: syz [ 152.028366][ T29] usb 5-1: Manufacturer: syz [ 152.044382][ T29] usb 5-1: SerialNumber: syz [ 152.085507][ T29] usb 5-1: config 0 descriptor?? [ 152.128463][ T29] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 152.163267][ T29] kernel read not supported for file /bluetooth/6lowpan_control (pid: 29 comm: kworker/1:0) [ 152.229135][ T7481] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 152.338574][ T29] usb 5-1: USB disconnect, device number 7 [ 152.359422][ T29] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 154.313965][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'. [ 154.394887][T10276] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 154.464065][T10278] sock: sock_timestamping_bind_phc: sock not bind to device [ 154.584767][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 154.899948][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 155.081129][T10301] comedi comedi2: pcl730: I/O port conflict (0x100,4) [ 155.258605][T10307] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.926271][ T1346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.106245][ T1346] usb 5-1: Using ep0 maxpacket: 32 [ 158.111062][ T1346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.115416][ T1346] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 158.120045][ T1346] usb 5-1: config 8 has no interface number 0 [ 158.122912][ T1346] usb 5-1: config 8 interface 188 has no altsetting 0 [ 158.140997][ T1346] usb 5-1: string descriptor 0 read error: -22 [ 158.144008][ T1346] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 158.148391][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.253613][ T1346] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 158.258462][ T1346] dw2102: su3000_power_ctrl: 1, initialized 0 [ 158.268085][ T1346] dvb-usb: bulk message failed: -22 (2/0) [ 158.282456][ T1346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.312374][ T1346] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 158.321279][ T1346] usb 5-1: media controller created [ 158.323354][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 158.325814][ T1346] dw2102: i2c transfer failed. [ 158.340906][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 158.351888][ T1346] dw2102: i2c transfer failed. [ 158.354710][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 158.434635][ T1346] dw2102: i2c transfer failed. [ 158.437334][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 158.452173][ T1346] dw2102: i2c transfer failed. [ 158.454640][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 158.463206][ T1346] dw2102: i2c transfer failed. [ 158.473003][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 158.485036][ T1346] dw2102: i2c transfer failed. [ 158.489546][ T1346] dvb-usb: MAC address: 02:02:02:02:02:02 [ 158.525856][T10354] dvb-usb: bulk message failed: -22 (5/0) [ 158.529035][T10354] dw2102: i2c transfer failed. [ 158.545536][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.643834][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 158.652505][ T1346] dw2102: command 0x0e transfer failed. [ 158.662103][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 158.677592][ T1346] dw2102: command 0x0e transfer failed. [ 158.773080][T10372] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2026'. [ 158.796838][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 158.996287][ T5847] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 158.997083][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 159.049931][ T1346] dw2102: command 0x0e transfer failed. [ 159.059882][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 159.069627][ T1346] dw2102: command 0x0e transfer failed. [ 159.078998][ T1346] dvb-usb: bulk message failed: -22 (1/0) [ 159.092832][ T1346] dw2102: command 0x51 transfer failed. [ 159.148127][ T1346] DVB: Unable to find symbol ds3000_attach() [ 159.153011][ T1346] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 159.281759][ T1346] rc_core: IR keymap rc-su3000 not found [ 159.284164][ T1346] Registered IR keymap rc-empty [ 159.434482][ T1346] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 159.442516][ T1346] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input12 [ 159.542343][ T1346] dvb-usb: schedule remote query interval to 150 msecs. [ 159.562335][ T1346] dw2102: su3000_power_ctrl: 0, initialized 1 [ 159.567209][ T1346] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 159.602501][ T1346] usb 5-1: USB disconnect, device number 8 [ 159.870999][ T1346] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 159.885349][T10398] tipc: Invalid UDP bearer configuration [ 159.885759][T10398] tipc: Enabling of bearer rejected, failed to enable media [ 160.529972][T10415] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 160.695127][T10422] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 163.242767][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2100'. [ 163.995677][T10538] usb usb7: usbfs: process 10538 (syz.0.2104) did not claim interface 0 before use [ 164.493846][T10561] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 164.807045][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.810846][ T5742] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.367265][T10583] tmpfs: Cannot enable quota on remount [ 165.504521][T10591] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 165.531982][T10591] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2129'. [ 165.978674][T10606] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 166.107875][ T1346] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 166.304565][ T1346] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 166.310856][ T1346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.315984][ T1346] usb 7-1: Product: syz [ 166.318609][ T1346] usb 7-1: Manufacturer: syz [ 166.321078][ T1346] usb 7-1: SerialNumber: syz [ 166.755566][ T1346] rtl8150 7-1:1.0: couldn't reset the device [ 166.760921][ T1346] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 166.798704][ T1346] usb 7-1: USB disconnect, device number 7 [ 170.258961][ T5817] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 170.441797][ T5817] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 170.465351][T10705] vlan3: entered promiscuous mode [ 170.474580][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.478650][T10705] bridge0: entered promiscuous mode [ 170.482387][ T5817] usb 7-1: Product: syz [ 170.484480][ T5817] usb 7-1: Manufacturer: syz [ 170.502540][ T5817] usb 7-1: SerialNumber: syz [ 170.885823][ T5817] rtl8150 7-1:1.0: couldn't reset the device [ 170.898040][ T5817] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 170.909778][ T5817] usb 7-1: USB disconnect, device number 8 [ 172.600341][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2208'. [ 172.613885][T10769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2208'. [ 172.653243][T10767] vlan2: entered promiscuous mode [ 172.653827][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2208'. [ 172.688495][T10770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2208'. [ 174.895512][T10843] batman_adv: batadv0: Adding interface: gretap1 [ 174.915143][T10843] batman_adv: batadv0: Interface activated: gretap1 [ 175.653587][T10867] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2250'. [ 175.661915][T10867] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 175.667987][T10867] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2250'. [ 175.986985][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 175.987008][ T40] audit: type=1804 audit(1778714627.834:30): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2254" name="/newroot/282/file0" dev="tmpfs" ino=1438 res=1 errno=0 [ 176.761221][T10906] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2273'. [ 176.814605][T10906] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 176.858878][T10906] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2273'. [ 177.097137][ T40] audit: type=1804 audit(1778714628.954:31): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2271" name="/newroot/580/file0" dev="tmpfs" ino=2946 res=1 errno=0 [ 177.493387][ T5847] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 177.518580][T10934] binder: 10933:10934 ioctl c018620c 80000240 returned -22 [ 177.784491][ T5847] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 177.803885][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.820835][ T5847] usb 5-1: Product: syz [ 177.824236][ T5847] usb 5-1: Manufacturer: syz [ 177.827204][ T5847] usb 5-1: SerialNumber: syz [ 177.849339][ T5847] usb 5-1: config 0 descriptor?? [ 177.861047][ T40] audit: type=1804 audit(1778714629.724:32): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2285" name="/newroot/573/file0" dev="tmpfs" ino=2907 res=1 errno=0 [ 178.184549][ T5832] usb 5-1: USB disconnect, device number 9 [ 178.866604][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 179.092800][T10985] batman_adv: batadv0: Adding interface: gretap1 [ 179.098893][T10985] batman_adv: batadv0: Interface activated: gretap1 [ 179.753774][T11010] syz.0.2316 (11010): drop_caches: 4 [ 180.126563][T11020] binder: 11018:11020 ioctl 541b 0 returned -22 [ 180.208696][T11023] Invalid logical block size (53355) [ 180.750348][ T5098] Bluetooth: hci3: command 0x0419 tx timeout [ 180.753380][ T5749] Bluetooth: hci2: command 0x0406 tx timeout [ 180.753430][ T5755] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.399640][T11059] netlink: 'syz.1.2340': attribute type 58 has an invalid length. [ 181.410690][T11059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2340'. [ 181.744330][T11066] team0: Device gtp0 is up. Set it down before adding it as a team port [ 181.953253][T11076] Cannot find add_set index 46338 as target [ 182.009897][T11080] [U] V3Fپ"S/4:XTZWTLW= [ 182.014750][T11080] [U] J"E:" [ 182.389167][T11094] netlink: 'syz.4.2357': attribute type 3 has an invalid length. [ 182.482676][T11098] netlink: 'syz.4.2359': attribute type 58 has an invalid length. [ 182.486516][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2359'. [ 182.858312][T11104] team0: Device gtp0 is up. Set it down before adding it as a team port [ 183.755674][T11133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 183.760681][T11133] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 183.774901][T11133] vhci_hcd vhci_hcd.0: Device attached [ 183.868620][T11133] vhci_hcd vhci_hcd.0: port 0 already used [ 183.882173][T11135] vhci_hcd: connection closed [ 183.885957][ T13] vhci_hcd vhci_hcd.1: stop threads [ 183.892200][ T13] vhci_hcd vhci_hcd.1: release socket [ 183.916757][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 184.404850][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.853723][T11152] team0: Device gtp0 is up. Set it down before adding it as a team port [ 184.972242][T11158] netlink: 'syz.1.2381': attribute type 3 has an invalid length. [ 186.841177][T11212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2407'. [ 187.109083][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2420'. [ 187.413365][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 188.192776][ T5847] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 188.394129][ T5847] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.399764][ T5847] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 188.412287][ T5847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.416047][ T5847] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.457404][ T5847] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 188.492388][ T5847] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.524354][ T5847] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.537549][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.552473][ T5847] usb 6-1: Product: syz [ 188.561867][ T5847] usb 6-1: Manufacturer: syz [ 188.669104][T11252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.695128][ T5847] cdc_wdm 6-1:1.0: skipping garbage [ 188.711643][ T5847] cdc_wdm 6-1:1.0: skipping garbage [ 188.844290][ T5847] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 188.950930][T11262] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 188.950956][T11262] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 188.951074][T11262] vhci_hcd vhci_hcd.0: Device attached [ 188.974240][T11261] vhci_hcd vhci_hcd.0: port 0 already used [ 188.975681][T11263] vhci_hcd: connection closed [ 188.978467][ T46] vhci_hcd vhci_hcd.4: stop threads [ 188.978495][ T46] vhci_hcd vhci_hcd.4: release socket [ 188.978514][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 189.223680][ T5847] cdc_wdm 6-1:1.0: Unknown control protocol [ 189.254384][ T5847] usb 6-1: USB disconnect, device number 10 [ 189.380163][T11271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2431'. [ 190.383096][T11303] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 190.386696][T11303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.397536][T11303] vhci_hcd vhci_hcd.0: Device attached [ 190.425839][T11303] vhci_hcd vhci_hcd.0: port 0 already used [ 190.468251][T11306] vhci_hcd: connection closed [ 190.483045][ T1162] vhci_hcd vhci_hcd.0: stop threads [ 190.515010][ T1162] vhci_hcd vhci_hcd.0: release socket [ 190.517517][ T1162] vhci_hcd vhci_hcd.0: disconnect device [ 190.759884][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2451'. [ 190.768174][T11319] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2451'. [ 190.773241][T11319] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2451'. [ 191.148231][T11334] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2456'. [ 191.603484][T11349] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 192.040435][T11352] tipc: Enabling of bearer rejected, failed to enable media [ 192.130119][T11356] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2467'. [ 192.581774][T11377] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 192.866810][ T5832] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 192.952069][ T29] kernel read not supported for file /1330/net/snmp6 (pid: 29 comm: kworker/1:0) [ 193.034723][ T5832] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.071511][ T5832] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 193.140250][ T5832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.151043][ T5832] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.161277][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 193.171512][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.197846][ T5832] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.203353][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.217007][ T5832] usb 7-1: Product: syz [ 193.222450][ T5832] usb 7-1: Manufacturer: syz [ 193.263079][T11381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.277563][ T5832] cdc_wdm 7-1:1.0: skipping garbage [ 193.283211][ T5832] cdc_wdm 7-1:1.0: skipping garbage [ 193.364248][ T5832] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 193.399755][ T5832] cdc_wdm 7-1:1.0: Unknown control protocol [ 193.481898][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 193.497819][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 193.502462][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 193.505421][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 193.520413][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 193.526260][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 193.532907][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 193.539800][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 193.543777][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 193.547641][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 193.553727][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 193.567682][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 193.582400][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 193.657790][ T5832] usb 7-1: USB disconnect, device number 9 [ 193.730803][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 193.748518][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 193.766267][T11414] netlink: 'syz.0.2495': attribute type 14 has an invalid length. [ 193.907677][T11419] can0: slcan on ttynull. [ 194.004173][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.018771][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.189420][T11418] can0 (unregistered): slcan off ttynull. [ 195.165224][T11460] Bluetooth: MGMT ver 1.23 [ 196.998087][ T29] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 197.165286][T11512] can0: slcan on ttynull. [ 197.192872][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 197.211985][ T29] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 197.229212][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.233328][ T29] usb 7-1: Product: syz [ 197.235762][ T29] usb 7-1: Manufacturer: syz [ 197.277145][ T29] usb 7-1: SerialNumber: syz [ 197.370123][ T29] usb 7-1: config 0 descriptor?? [ 197.403404][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 197.443971][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 197.455236][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 197.522557][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 197.559724][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 197.606570][T11511] can0 (unregistered): slcan off ttynull. [ 197.633610][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.660251][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 197.697420][ T29] usb 7-1: media controller created [ 197.760196][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.802847][ T29] usb 7-1: selecting invalid altsetting 3 [ 197.804605][T11504] ttusb2: i2c rd len=58 too high [ 197.844025][ T29] ttusb2: set interface to alts=3 failed [ 197.911986][ T29] DVB: Unable to find symbol tda10086_attach() [ 197.939124][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 197.945036][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 197.950563][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 197.964029][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 197.971250][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 197.977439][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 198.011116][ T29] usb 7-1: USB disconnect, device number 10 [ 198.036967][ T6806] udevd[6806]: setting mode of /dev/dvb/adapter1/demux0 to 020660 failed: No such file or directory [ 198.077059][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 198.081301][ T6806] udevd[6806]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 199.062707][T11574] tipc: Enabled bearer , priority 10 [ 199.144508][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.148342][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.208878][ T29] tipc: Node number set to 4278255617 [ 200.915044][T11617] ptrace attach of "/syz-executor exec"[5750] was attempted by ""[11617] [ 201.397524][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.547913][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 201.680017][ T29] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 201.683859][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.692349][ T29] usb 5-1: Product: syz [ 201.708428][ T29] usb 5-1: Manufacturer: syz [ 201.715040][ T29] usb 5-1: SerialNumber: syz [ 201.730562][ T29] usb 5-1: config 0 descriptor?? [ 201.795477][ T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 201.799457][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 201.811068][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.824241][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 201.837638][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.853333][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.895456][ T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 201.909560][ T29] usb 5-1: media controller created [ 201.957179][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.004542][T11623] ttusb2: i2c rd len=58 too high [ 202.012445][ T29] usb 5-1: selecting invalid altsetting 3 [ 202.031959][ T29] ttusb2: set interface to alts=3 failed [ 202.151812][ T29] DVB: Unable to find symbol tda10086_attach() [ 202.168267][ T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 202.188023][ T29] dvb-usb: bulk message failed: -22 (4/0) [ 202.193060][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.197659][ T29] dvb-usb: bulk message failed: -22 (5/0) [ 202.209688][ T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 202.213830][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 202.216230][ T5817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 202.271023][ T29] usb 5-1: USB disconnect, device number 10 [ 202.315374][ T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 202.369975][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 202.375757][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 202.383459][ T5817] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 202.389152][ T5817] usb 6-1: config 8 has no interface number 0 [ 202.393396][ T5817] usb 6-1: config 8 interface 188 has no altsetting 0 [ 202.409500][ T5817] usb 6-1: string descriptor 0 read error: -22 [ 202.413677][ T5817] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 202.426175][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.451049][ T5817] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 202.454898][ T5817] dw2102: su3000_power_ctrl: 1, initialized 0 [ 202.457668][ T5817] dvb-usb: bulk message failed: -22 (2/0) [ 202.472088][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.476803][ T5817] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 202.481246][ T5817] usb 6-1: media controller created [ 202.483908][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 202.487621][ T5817] dw2102: i2c transfer failed. [ 202.492231][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 202.495773][ T5817] dw2102: i2c transfer failed. [ 202.503294][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 202.508231][ T5817] dw2102: i2c transfer failed. [ 202.510210][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 202.512648][ T5817] dw2102: i2c transfer failed. [ 202.514810][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 202.517566][ T5817] dw2102: i2c transfer failed. [ 202.534075][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 202.546440][ T5817] dw2102: i2c transfer failed. [ 202.551797][ T5817] dvb-usb: MAC address: 02:02:02:02:02:02 [ 202.569122][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.647900][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 202.659758][ T5817] dw2102: command 0x0e transfer failed. [ 202.662010][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 202.664454][ T5817] dw2102: command 0x0e transfer failed. [ 202.982969][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 202.985487][ T5817] dw2102: command 0x0e transfer failed. [ 203.004860][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 203.012465][ T5817] dw2102: command 0x0e transfer failed. [ 203.014672][ T5817] dvb-usb: bulk message failed: -22 (1/0) [ 203.019396][ T5817] dw2102: command 0x51 transfer failed. [ 203.024106][T11641] dw2102: i2c wr: len=66 is too big! [ 203.024106][T11641] [ 203.121489][ T5817] DVB: Unable to find symbol ds3000_attach() [ 203.124065][ T5817] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 203.236298][ T5817] rc_core: IR keymap rc-su3000 not found [ 203.240275][ T5817] Registered IR keymap rc-empty [ 203.244907][ T5817] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 203.266467][ T5817] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input16 [ 203.309718][ T5817] dvb-usb: schedule remote query interval to 150 msecs. [ 203.313484][ T5817] dw2102: su3000_power_ctrl: 0, initialized 1 [ 203.316079][ T5817] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 203.338901][ T5817] usb 6-1: USB disconnect, device number 11 [ 203.484076][ T5817] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 204.222435][T11668] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 205.456565][T11709] netem: change failed [ 206.231587][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 206.430730][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.435046][ T29] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 206.452928][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.457313][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 206.489592][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 206.601898][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.607302][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.611063][ T29] usb 5-1: Product: syz [ 206.612925][ T29] usb 5-1: Manufacturer: syz [ 206.680938][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 206.690182][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 206.707942][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 206.721118][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 206.824395][ T40] audit: type=1326 audit(1778714660.692:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.4.2631" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efcc code=0x0 [ 206.951519][ T1346] usb 5-1: USB disconnect, device number 11 [ 208.542331][T11773] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 208.637155][ T7481] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 208.870598][ T7481] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.880371][ T7481] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.890253][ T7481] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.893470][ T7481] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.928120][ T7481] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 208.938885][ T7481] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.942696][ T7481] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.945736][ T7481] usb 6-1: Product: syz [ 208.967684][ T7481] usb 6-1: Manufacturer: syz [ 209.009256][ T7481] cdc_wdm 6-1:1.0: skipping garbage [ 209.011725][ T7481] cdc_wdm 6-1:1.0: skipping garbage [ 209.031784][ T7481] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 209.035005][ T7481] cdc_wdm 6-1:1.0: Unknown control protocol [ 209.466498][ T59] usb 6-1: USB disconnect, device number 12 [ 211.426556][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 220.573735][T11823] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 220.605418][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.625659][T11823] CIFS mount error: No usable UNC path provided in device string! [ 220.625659][T11823] [ 220.649352][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.661251][T11823] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 220.679488][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.723474][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.728769][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.380945][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 221.914918][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.852709][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.038829][ T5742] Bluetooth: hci4: command tx timeout [ 223.229743][ T8147] hid (null): global environment stack underflow [ 223.272024][ T8147] hid-generic 616F:20C2607D:F72986D9.0003: global environment stack underflow [ 223.277217][ T8147] hid-generic 616F:20C2607D:F72986D9.0003: item 0 1 1 11 parsing failed [ 223.284876][ T8147] hid-generic 616F:20C2607D:F72986D9.0003: probe with driver hid-generic failed with error -22 [ 223.389131][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.487356][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.493001][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.507329][T11816] bridge_slave_0: entered allmulticast mode [ 223.514010][T11816] bridge_slave_0: entered promiscuous mode [ 223.542325][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.558515][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.566640][T11816] bridge_slave_1: entered allmulticast mode [ 223.572705][T11816] bridge_slave_1: entered promiscuous mode [ 224.098213][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.227191][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.281927][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.402961][T11816] team0: Port device team_slave_0 added [ 224.430241][T11816] team0: Port device team_slave_1 added [ 224.504534][T11816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.525367][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.537017][T11816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.565254][T11816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.579682][T11816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.610367][T11816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.126698][ T5742] Bluetooth: hci4: command tx timeout [ 225.210755][T11816] hsr_slave_0: entered promiscuous mode [ 225.215073][T11816] hsr_slave_1: entered promiscuous mode [ 225.219379][T11816] debugfs: 'hsr0' already exists in 'hsr' [ 225.222010][T11816] Cannot create hsr debugfs directory [ 225.452471][T11948] binder: 11946:11948 ioctl c0306201 80000080 returned -22 [ 225.842288][ T13] bridge_slave_1: left allmulticast mode [ 225.844942][ T13] bridge_slave_1: left promiscuous mode [ 225.864058][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.003239][ T13] bridge_slave_0: left allmulticast mode [ 226.018423][ T13] bridge_slave_0: left promiscuous mode [ 226.024803][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.157403][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 226.684237][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 227.207258][ T5742] Bluetooth: hci4: command tx timeout [ 227.406386][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 227.911136][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.041758][T11992] netlink: 'syz.1.2736': attribute type 4 has an invalid length. [ 228.169661][ T13] bond0 (unregistering): (slave c@0): Releasing backup interface [ 228.231707][ T13] bond0 (unregistering): Released all slaves [ 228.405478][T11981] tipc: Enabling of bearer rejected, failed to enable media [ 228.632790][ T13] : left promiscuous mode [ 228.830287][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.838529][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.849748][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.853515][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.934857][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.957510][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.968647][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 228.995427][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 229.010423][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 229.039084][ T1346] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 229.208542][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 229.212220][ T1346] hid-generic 0103:0004:0000.0004: hidraw1: HID v0.02 Device [syz1] on syz1 [ 229.297515][ T5742] Bluetooth: hci4: command tx timeout [ 229.431953][ T13] IPVS: stopping master sync thread 10109 ... [ 229.679475][T12019] fido_id[12019]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.720019][T11816] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.852364][T11816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.162612][T12049] [U]  [ 230.447336][T11816] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.484761][T11816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.528145][T11816] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.590411][T11816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.600020][T11816] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.664494][T11816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.738083][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 231.631638][T12089] vivid-000: disconnect [ 231.739498][T12088] vivid-000: reconnect [ 231.765836][ T13] hsr_slave_0: left promiscuous mode [ 231.823613][ T13] hsr_slave_1: left promiscuous mode [ 231.830012][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.858524][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.899799][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.903907][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.015875][ T13] veth1_macvtap: left promiscuous mode [ 232.018963][ T13] veth0_macvtap: left promiscuous mode [ 232.021132][ T13] veth1_vlan: left promiscuous mode [ 232.030662][ T13] veth0_vlan: left promiscuous mode [ 232.187744][T12101] [U]  [ 233.232964][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.381559][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.574540][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 233.831045][T11816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.846837][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 233.892930][T11816] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.919677][T12121] team0: Device is already in use. [ 233.954407][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.957575][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.039813][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.049531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.915744][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 234.947977][ T5825] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.173840][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 235.246717][ T5825] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 235.250888][ T5825] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 235.271011][ T5825] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 235.275169][ T5825] usb 5-1: config 250 has no interface number 0 [ 235.308421][ T5825] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 235.321134][ T5825] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 235.330426][T11816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.333930][ T5825] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.354666][ T5825] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 235.361826][ T5825] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 235.371547][ T5825] usb 5-1: config 250 interface 228 has no altsetting 0 [ 235.378587][ T5825] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 235.382966][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 235.389710][ T5825] usb 5-1: Product: syz [ 235.391661][ T5825] usb 5-1: SerialNumber: syz [ 235.445074][ T5825] hub 5-1:250.228: bad descriptor, ignoring hub [ 235.457242][ T5825] hub 5-1:250.228: probe with driver hub failed with error -5 [ 235.638860][ T13] IPVS: stop unused estimator thread 0... [ 235.672817][ T5825] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 235.942496][ T856] usb 5-1: USB disconnect, device number 12 [ 235.975863][ T856] usblp0: removed [ 236.088188][T11816] veth0_vlan: entered promiscuous mode [ 236.130741][T11816] veth1_vlan: entered promiscuous mode [ 236.218859][T12217] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2809'. [ 236.250629][T11816] veth0_macvtap: entered promiscuous mode [ 236.260305][T11816] veth1_macvtap: entered promiscuous mode [ 236.285228][T11816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.298597][T11816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.398089][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.403792][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.409967][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.424038][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.755880][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.910089][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.075012][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.111530][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.280125][T12256] 9pnet_fd: p9_fd_create_tcp (12256): problem binding to privport [ 238.099477][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 238.139855][T12286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2822'. [ 238.260020][ T29] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.279958][ T29] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 238.285839][ T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.285924][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 238.299252][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 238.301340][ T29] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.301371][ T29] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.301390][ T29] usb 10-1: Product: syz [ 238.301436][ T29] usb 10-1: Manufacturer: syz [ 238.314097][ T29] cdc_wdm 10-1:1.0: skipping garbage [ 238.332491][ T29] cdc_wdm 10-1:1.0: skipping garbage [ 238.348206][ T29] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 238.348231][ T29] cdc_wdm 10-1:1.0: Unknown control protocol [ 238.533428][T12309] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 238.612720][ T5836] usb 10-1: USB disconnect, device number 2 [ 239.353856][T12347] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 239.817955][ T40] audit: type=1326 audit(1778714693.682:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 239.839653][ T40] audit: type=1326 audit(1778714693.682:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 239.866868][ T40] audit: type=1326 audit(1778714693.682:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 239.906278][ T40] audit: type=1326 audit(1778714693.682:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 239.931258][ T40] audit: type=1326 audit(1778714693.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 240.033704][ T40] audit: type=1326 audit(1778714693.712:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 240.084010][ T40] audit: type=1326 audit(1778714693.712:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 240.120174][ T40] audit: type=1326 audit(1778714693.712:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 240.155260][ T40] audit: type=1326 audit(1778714693.712:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 240.196031][ T40] audit: type=1326 audit(1778714693.722:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.0.2858" exe="/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf7f66fcc code=0x7ffc0000 [ 241.616197][T12437] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2883'. [ 242.258146][T12463] Dead loop on virtual device ip6_vti0 (net 77), fix it urgently! [ 243.019850][T12498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 243.323376][ T5836] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 243.497884][ T5836] usb 10-1: Using ep0 maxpacket: 32 [ 243.508402][ T5836] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 243.525363][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.534358][ T5836] usb 10-1: Product: syz [ 243.540834][ T5836] usb 10-1: Manufacturer: syz [ 243.552182][ T5836] usb 10-1: SerialNumber: syz [ 243.557729][ T5836] usb 10-1: config 0 descriptor?? [ 243.567099][ T5836] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 243.572807][ T5836] dvb-usb: bulk message failed: -22 (4/0) [ 243.605599][ T5836] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 243.633462][ T5836] dvb-usb: bulk message failed: -22 (5/0) [ 243.636265][ T5836] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 243.658012][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.667940][ T5836] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 243.672085][ T5836] usb 10-1: media controller created [ 243.686502][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.714239][ T5836] usb 10-1: selecting invalid altsetting 3 [ 243.723770][ T5836] ttusb2: set interface to alts=3 failed [ 243.782849][ T5836] DVB: Unable to find symbol tda10086_attach() [ 243.799414][ T5836] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 243.817713][T12500] dvb-usb: bulk message failed: -22 (7/0) [ 243.825948][T12500] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 243.826015][ T5836] dvb-usb: bulk message failed: -22 (4/0) [ 243.865727][ T5836] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 243.873416][ T5836] dvb-usb: bulk message failed: -22 (5/0) [ 243.881008][T12500] ttusb2: i2c transfer failed. [ 243.884931][ T5836] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 243.885003][ T5836] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 243.940146][ T5836] usb 10-1: USB disconnect, device number 3 [ 243.994266][ T5836] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 244.810075][ T5744] Bluetooth: hci3: command 0x1003 tx timeout [ 244.817605][ T5742] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 246.942669][T12657] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2953'. [ 247.028275][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2953'. [ 247.173677][ T1346] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 247.376721][ T1346] usb 6-1: unable to get BOS descriptor or descriptor too short [ 247.432428][ T1346] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 247.520404][ T1346] usb 6-1: can't read configurations, error -71 [ 248.580785][T12726] random: crng reseeded on system resumption [ 249.377785][ T5836] Process accounting resumed [ 249.413128][T12763] Process accounting resumed [ 249.499982][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 249.500007][ T40] audit: type=1326 audit(1778714703.362:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fcc code=0x7fc00000 [ 250.769545][T12813] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3009'. [ 250.832818][T12813] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3009'. [ 251.273699][T12830] hugetlbfs: Bad value 't1' for mount option 'nr_inodes' [ 251.273699][T12830] [ 252.596378][T12881] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 252.611765][ T40] audit: type=1326 audit(1778714706.462:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3043" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66fcc code=0x0 [ 252.703829][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 252.956918][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.973897][ T5742] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 256.077860][ T40] audit: type=1326 audit(1778714709.932:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.1.3086" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94fcc code=0x0 [ 258.156507][T13072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.512108][T13081] comedi comedi3: unsupported base address 0x4f23 [ 259.196435][T13120] CIFS mount error: No usable UNC path provided in device string! [ 259.196435][T13120] [ 259.220757][T13120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.315826][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 259.591010][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3157'. [ 259.627220][T13139] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 259.915798][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 260.508739][ T5832] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.575505][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.620959][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.714627][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 260.728761][ T5832] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 260.741626][ T5832] usb 5-1: config 0 has no interface number 0 [ 260.745644][ T5832] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.761181][ T5832] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 260.769980][ T5832] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.797975][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 260.809981][ T5832] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.810034][ T5832] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.810057][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.874099][ T5832] usb 5-1: config 0 descriptor?? [ 260.902057][ T5832] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 261.112397][ T8147] usb 5-1: USB disconnect, device number 13 [ 261.153747][ T8147] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 262.322627][ T842] hid (null): global environment stack underflow [ 262.351337][ T842] hid-generic 616F:20C2607D:F72986D9.0005: global environment stack underflow [ 262.364389][ T842] hid-generic 616F:20C2607D:F72986D9.0005: item 0 1 1 11 parsing failed [ 262.390780][ T842] hid-generic 616F:20C2607D:F72986D9.0005: probe with driver hid-generic failed with error -22 [ 262.403793][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3184'. [ 262.474564][ T5847] kernel read not supported for file /vga_arbiter (pid: 5847 comm: kworker/2:3) [ 263.157365][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 263.337412][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 263.387135][ T29] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 263.406677][ T29] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 263.412304][ T29] usb 6-1: Product: syz [ 263.414960][ T29] usb 6-1: Manufacturer: syz [ 263.429555][ T29] usb 6-1: SerialNumber: syz [ 263.471705][ T29] usb 6-1: config 0 descriptor?? [ 263.577825][ T1346] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 263.736397][ T1346] usb 10-1: Using ep0 maxpacket: 32 [ 263.740351][ T1346] usb 10-1: unable to get BOS descriptor or descriptor too short [ 263.747391][ T1346] usb 10-1: config 8 has an invalid interface number: 188 but max is 0 [ 263.765331][ T1346] usb 10-1: config 8 has no interface number 0 [ 263.790227][ T1346] usb 10-1: config 8 interface 188 has no altsetting 0 [ 263.802627][ T29] usb 6-1: USB disconnect, device number 15 [ 263.857919][ T1346] usb 10-1: string descriptor 0 read error: -22 [ 263.860820][ T1346] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 263.920070][ T1346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.971229][ T1346] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 263.992277][ T1346] dw2102: su3000_power_ctrl: 1, initialized 0 [ 263.998544][ T1346] dvb-usb: bulk message failed: -22 (2/0) [ 264.015475][ T1346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 264.038932][ T1346] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 264.042968][ T1346] usb 10-1: media controller created [ 264.066890][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 264.074449][ T1346] dw2102: i2c transfer failed. [ 264.077813][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 264.098812][ T1346] dw2102: i2c transfer failed. [ 264.107188][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 264.115753][ T1346] dw2102: i2c transfer failed. [ 264.138764][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 264.140972][ T1346] dw2102: i2c transfer failed. [ 264.142676][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 264.144715][ T1346] dw2102: i2c transfer failed. [ 264.149401][ T1346] dvb-usb: bulk message failed: -22 (6/0) [ 264.152034][ T1346] dw2102: i2c transfer failed. [ 264.172221][ T1346] dvb-usb: MAC address: 02:02:02:02:02:02 [ 264.220916][ T1346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.356087][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 264.375662][ T1346] dw2102: command 0x0e transfer failed. [ 264.391928][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 264.394740][ T1346] dw2102: command 0x0e transfer failed. [ 264.711228][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 264.714543][ T1346] dw2102: command 0x0e transfer failed. [ 264.717883][ T1346] dvb-usb: bulk message failed: -22 (3/0) [ 264.726199][ T1346] dw2102: command 0x0e transfer failed. [ 264.728968][ T1346] dvb-usb: bulk message failed: -22 (1/0) [ 264.731604][ T1346] dw2102: command 0x51 transfer failed. [ 264.755481][T13256] dw2102: i2c rd: len=155 is too big! [ 264.755481][T13256] [ 264.869834][ T1346] DVB: Unable to find symbol ds3000_attach() [ 264.872501][ T1346] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 264.961391][ T1346] rc_core: IR keymap rc-su3000 not found [ 264.969711][ T1346] Registered IR keymap rc-empty [ 264.984056][ T1346] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 265.018110][ T1346] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input17 [ 265.056520][ T1346] dvb-usb: schedule remote query interval to 150 msecs. [ 265.072462][ T1346] dw2102: su3000_power_ctrl: 0, initialized 1 [ 265.075580][ T1346] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 265.094077][ T1346] usb 10-1: USB disconnect, device number 4 [ 265.241357][ T1346] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 265.409050][T13353] tipc: Enabling of bearer rejected, failed to enable media [ 266.045305][T13370] netlink: 'syz.5.3224': attribute type 4 has an invalid length. [ 266.211203][T13376] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3227'. [ 266.214660][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3227'. [ 266.430953][T13383] tipc: Enabling of bearer rejected, failed to enable media [ 266.605429][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 266.806322][ T856] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 266.986564][ T856] usb 6-1: Using ep0 maxpacket: 32 [ 266.993861][ T856] usb 6-1: unable to get BOS descriptor or descriptor too short [ 267.003217][ T856] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 267.007485][ T856] usb 6-1: config 8 has no interface number 0 [ 267.011528][ T856] usb 6-1: config 8 interface 188 has no altsetting 0 [ 267.018891][ T856] usb 6-1: string descriptor 0 read error: -22 [ 267.022686][ T856] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 267.030027][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.060203][ T856] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 267.107651][ T856] dw2102: su3000_power_ctrl: 1, initialized 0 [ 267.111814][ T856] dvb-usb: bulk message failed: -22 (2/0) [ 267.140320][ T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.157941][ T856] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 267.165653][ T856] usb 6-1: media controller created [ 267.171920][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 267.175568][ T856] dw2102: i2c transfer failed. [ 267.201007][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 267.211219][ T856] dw2102: i2c transfer failed. [ 267.215933][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 267.220463][ T856] dw2102: i2c transfer failed. [ 267.222734][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 267.225341][ T856] dw2102: i2c transfer failed. [ 267.263165][T13389] dw2102: i2c rd: len=155 is too big! [ 267.263165][T13389] [ 267.276432][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 267.281089][ T856] dw2102: i2c transfer failed. [ 267.286618][ T856] dvb-usb: bulk message failed: -22 (6/0) [ 267.291054][ T856] dw2102: i2c transfer failed. [ 267.294824][ T856] dvb-usb: MAC address: 02:02:02:02:02:02 [ 267.312314][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.363360][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 267.370906][ T856] dw2102: command 0x0e transfer failed. [ 267.373396][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 267.380803][ T856] dw2102: command 0x0e transfer failed. [ 267.696324][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 267.712355][ T856] dw2102: command 0x0e transfer failed. [ 267.715994][ T856] dvb-usb: bulk message failed: -22 (3/0) [ 267.721113][ T856] dw2102: command 0x0e transfer failed. [ 267.724864][ T856] dvb-usb: bulk message failed: -22 (1/0) [ 267.731024][ T856] dw2102: command 0x51 transfer failed. [ 267.772555][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3246'. [ 267.788328][ T856] DVB: Unable to find symbol ds3000_attach() [ 267.793273][ T856] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 268.026789][ T856] rc_core: IR keymap rc-su3000 not found [ 268.042050][ T856] Registered IR keymap rc-empty [ 268.047204][ T856] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 268.082729][ T856] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input18 [ 268.115875][ T856] dvb-usb: schedule remote query interval to 150 msecs. [ 268.153097][ T856] dw2102: su3000_power_ctrl: 0, initialized 1 [ 268.155721][ T856] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 268.222895][ T856] usb 6-1: USB disconnect, device number 16 [ 268.458744][ T856] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 268.669013][T13474] vivid-002: disconnect [ 268.677611][T13473] vivid-002: reconnect [ 268.972980][T13488] [U]  [ 270.178855][ T1346] hid_parser_main: 2 callbacks suppressed [ 270.178881][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.222054][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.226280][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.239272][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.253765][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.258698][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.268699][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.278987][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.285651][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.290974][ T1346] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 270.346704][ T1346] hid-generic 0103:0004:0000.0006: hidraw1: HID v0.02 Device [syz1] on syz1 [ 270.465863][T13529] fido_id[13529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.478384][ T8147] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 270.760630][ T8147] usb 5-1: Using ep0 maxpacket: 32 [ 270.795069][ T8147] usb 5-1: unable to get BOS descriptor or descriptor too short [ 270.805276][ T8147] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 270.819610][ T8147] usb 5-1: config 8 has no interface number 0 [ 270.825131][ T8147] usb 5-1: config 8 interface 188 has no altsetting 0 [ 270.883544][ T8147] usb 5-1: string descriptor 0 read error: -22 [ 270.907920][ T8147] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 270.967460][ T8147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.011148][ T8147] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 271.016856][ T8147] dw2102: su3000_power_ctrl: 1, initialized 0 [ 271.026871][ T8147] dvb-usb: bulk message failed: -22 (2/0) [ 271.045874][ T8147] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.072290][ T8147] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 271.078282][ T8147] usb 5-1: media controller created [ 271.082452][ T8147] dvb-usb: bulk message failed: -22 (6/0) [ 271.088785][ T8147] dw2102: i2c transfer failed. [ 271.092807][ T8147] dvb-usb: bulk message failed: -22 (6/0) [ 271.100083][ T8147] dw2102: i2c transfer failed. [ 271.104592][ T8147] dvb-usb: bulk message failed: -22 (6/0) [ 271.109971][ T8147] dw2102: i2c transfer failed. [ 271.114003][ T8147] dvb-usb: bulk message failed: -22 (6/0) [ 271.119863][ T8147] dw2102: i2c transfer failed. [ 271.123942][ T8147] dvb-usb: bulk message failed: -22 (6/0) [ 271.133606][ T8147] dw2102: i2c transfer failed. [ 271.139418][ T8147] dvb-usb: bulk message failed: -22 (6/0) [ 271.143030][ T8147] dw2102: i2c transfer failed. [ 271.159040][ T8147] dvb-usb: MAC address: 02:02:02:02:02:02 [ 271.171766][ T8147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.201739][ T8147] dvb-usb: bulk message failed: -22 (3/0) [ 271.205537][ T8147] dw2102: command 0x0e transfer failed. [ 271.208758][ T8147] dvb-usb: bulk message failed: -22 (3/0) [ 271.211500][ T8147] dw2102: command 0x0e transfer failed. [ 271.539450][ T8147] dvb-usb: bulk message failed: -22 (3/0) [ 271.541866][ T8147] dw2102: command 0x0e transfer failed. [ 271.551199][ T8147] dvb-usb: bulk message failed: -22 (3/0) [ 271.561182][ T8147] dw2102: command 0x0e transfer failed. [ 271.565496][ T8147] dvb-usb: bulk message failed: -22 (1/0) [ 271.579669][ T8147] dw2102: command 0x51 transfer failed. [ 271.587421][T13521] dw2102: i2c rd: len=155 is too big! [ 271.587421][T13521] [ 271.695077][ T8147] DVB: Unable to find symbol ds3000_attach() [ 271.702468][ T8147] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 271.847176][ T8147] rc_core: IR keymap rc-su3000 not found [ 271.851205][ T8147] Registered IR keymap rc-empty [ 271.871982][ T8147] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 271.881207][ T8147] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input19 [ 271.915522][ T8147] dvb-usb: schedule remote query interval to 150 msecs. [ 271.946275][ T8147] dw2102: su3000_power_ctrl: 0, initialized 1 [ 271.968252][T13597] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3300'. [ 271.989286][ T8147] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 272.022366][ T8147] usb 5-1: USB disconnect, device number 14 [ 272.331545][ T8147] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 273.111397][T13646] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3315'. [ 273.287547][T13650] 9pnet_fd: p9_fd_create_tcp (13650): problem binding to privport [ 273.852541][T13674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3329'. [ 274.550937][T13702] 9pnet_fd: p9_fd_create_tcp (13702): problem binding to privport [ 274.685272][T13709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3340'. [ 275.247114][ T8147] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 275.412018][ T8147] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.430223][ T8147] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 275.446495][ T8147] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.452802][ T8147] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 275.458653][ T8147] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 275.470843][ T8147] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.474635][ T8147] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.478300][ T8147] usb 6-1: Product: syz [ 275.480117][ T8147] usb 6-1: Manufacturer: syz [ 275.504298][ T8147] cdc_wdm 6-1:1.0: skipping garbage [ 275.511353][ T8147] cdc_wdm 6-1:1.0: skipping garbage [ 275.515862][ T8147] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 275.522419][ T8147] cdc_wdm 6-1:1.0: Unknown control protocol [ 275.846977][ T8147] usb 6-1: USB disconnect, device number 17 [ 278.809006][ T40] audit: type=1326 audit(1778714732.662:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 278.905374][ T40] audit: type=1326 audit(1778714732.662:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 278.966677][ T40] audit: type=1326 audit(1778714732.672:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.044318][ T40] audit: type=1326 audit(1778714732.672:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.066360][ T40] audit: type=1326 audit(1778714732.672:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.112024][ T40] audit: type=1326 audit(1778714732.672:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.167220][ T40] audit: type=1326 audit(1778714732.672:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.191134][ T40] audit: type=1326 audit(1778714732.672:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.206285][ T40] audit: type=1326 audit(1778714732.672:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.239693][ T40] audit: type=1326 audit(1778714732.672:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13811 comm="syz.4.3381" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 279.711338][T13858] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 280.227580][T13878] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3412'. [ 280.823193][T13907] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 281.046009][T13916] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3424'. [ 281.473744][T13938] Dead loop on virtual device ip6_vti0 (net 33), fix it urgently! [ 281.485708][T13939] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 281.936400][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 282.331377][T13973] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 283.116939][ T5847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 283.276984][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 283.288251][ T5847] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 283.293567][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.304310][ T5847] usb 5-1: Product: syz [ 283.344506][ T5847] usb 5-1: Manufacturer: syz [ 283.364064][ T5847] usb 5-1: SerialNumber: syz [ 283.413863][ T5847] usb 5-1: config 0 descriptor?? [ 283.442218][ T5847] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 283.449151][ T5847] dvb-usb: bulk message failed: -22 (4/0) [ 283.453357][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 283.460618][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 283.463386][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 283.513205][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.538359][ T5847] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 283.542633][ T5847] usb 5-1: media controller created [ 283.565414][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.639284][ T5847] usb 5-1: selecting invalid altsetting 3 [ 283.650482][ T5847] ttusb2: set interface to alts=3 failed [ 283.663674][T13992] dvb-usb: bulk message failed: -22 (7/0) [ 283.669583][T13992] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 283.677590][T13992] ttusb2: i2c transfer failed. [ 283.721818][ T5847] DVB: Unable to find symbol tda10086_attach() [ 283.734890][ T5847] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 283.759147][ T5847] dvb-usb: bulk message failed: -22 (4/0) [ 283.762333][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 283.786911][ T5847] dvb-usb: bulk message failed: -22 (5/0) [ 283.791256][ T5847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 283.798107][ T5847] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 283.805839][ T5847] usb 5-1: USB disconnect, device number 15 [ 283.909926][ T5847] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 285.567765][T14081] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 285.648186][T14085] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3482'. [ 285.652289][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3482'. [ 285.847306][ T5742] Bluetooth: hci3: command 0x1003 tx timeout [ 285.873882][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 285.966891][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 285.978059][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3486'. [ 285.982618][T14099] netlink: 'syz.0.3486': attribute type 7 has an invalid length. [ 286.348085][T14113] netlink: 212372 bytes leftover after parsing attributes in process `syz.1.3493'. [ 286.365656][T14113] openvswitch: netlink: Message has 6 unknown bytes. [ 287.572743][ T5817] Process accounting resumed [ 287.700516][T14164] Process accounting resumed [ 288.432837][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 288.432859][ T40] audit: type=1326 audit(1778714742.292:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14165 comm="syz.1.3518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fcc code=0x7fc00000 [ 288.862879][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 290.882147][ T62] Bluetooth: hci4: command 0x0405 tx timeout [ 291.305918][ T5742] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 291.322204][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.962304][ T40] audit: type=1326 audit(1778714745.822:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.3581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fcc code=0x7ffc0000 [ 291.974815][ T40] audit: type=1326 audit(1778714745.822:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.3581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fcc code=0x7ffc0000 [ 292.016328][ T40] audit: type=1326 audit(1778714745.822:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.3581" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf7f94fcc code=0x7ffc0000 [ 292.028173][ T40] audit: type=1326 audit(1778714745.822:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.3581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fcc code=0x7ffc0000 [ 292.059462][ T40] audit: type=1326 audit(1778714745.822:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.1.3581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94fcc code=0x7ffc0000 [ 292.099103][ T1346] kernel read not supported for file /vcs (pid: 1346 comm: kworker/3:2) [ 292.853138][T14349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3599'. [ 293.527899][ T5744] Bluetooth: hci4: link tx timeout [ 293.545783][ T5744] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 295.095453][T14444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.399514][T14455] comedi comedi3: unsupported base address 0x4f23 [ 295.700852][ T5742] Bluetooth: hci4: command 0x0405 tx timeout [ 295.900698][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3655'. [ 295.903915][T14477] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 296.391166][T14495] batadv0: entered promiscuous mode [ 296.422498][T14495] macsec1: entered promiscuous mode [ 296.451581][T14495] macsec1: entered allmulticast mode [ 296.454223][T14495] batadv0: entered allmulticast mode [ 296.475806][T14495] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 296.514522][T14495] batadv0: left allmulticast mode [ 296.519646][T14495] batadv0: left promiscuous mode [ 296.982074][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3669'. [ 297.858376][T14555] udevd[14555]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 298.428839][T14577] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 299.195998][T14609] IPVS: persistence engine module ip_vs_pe_sir not found [ 299.499171][T14626] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3718'. [ 299.519853][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3718'. [ 300.238711][T14656] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 301.105439][T14689] xt_time: unknown flags 0xf4 [ 301.239833][T14697] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 302.108001][T14739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3764'. [ 302.185222][T14742] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 302.203739][T14741] IPVS: stopping backup sync thread 14742 ... [ 303.758656][ T5742] Bluetooth: hci3: command 0x1003 tx timeout [ 303.759494][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 303.797506][ T59] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 303.990671][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 304.016508][ T59] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 304.033191][ T59] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 304.081915][ T59] usb 5-1: Product: syz [ 304.092253][ T59] usb 5-1: Manufacturer: syz [ 304.108276][ T59] usb 5-1: SerialNumber: syz [ 304.113838][ T59] usb 5-1: config 0 descriptor?? [ 304.400867][ T59] usb 5-1: USB disconnect, device number 16 [ 305.761726][T14891] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 305.793179][T14890] IPVS: stopping backup sync thread 14891 ... [ 306.429567][T14917] IPVS: stopping backup sync thread 11773 ... [ 306.801951][T14931] random: crng reseeded on system resumption [ 306.958987][T14937] netlink: 212372 bytes leftover after parsing attributes in process `syz.0.3837'. [ 306.966556][T14937] openvswitch: netlink: Message has 6 unknown bytes. [ 307.174417][T14951] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 307.194511][T14949] IPVS: stopping backup sync thread 14951 ... [ 307.348964][ T842] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 307.563119][ T842] usb 10-1: unable to get BOS descriptor or descriptor too short [ 307.571891][ T842] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 307.609319][ T842] usb 10-1: can't read configurations, error -71 [ 307.687236][T14969] random: crng reseeded on system resumption [ 307.852981][ T1346] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 308.026421][ T1346] usb 6-1: Using ep0 maxpacket: 16 [ 308.032680][ T1346] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 308.037735][ T1346] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.048729][ T1346] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.055440][ T1346] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.064608][ T1346] usb 6-1: config 0 interface 0 has no altsetting 0 [ 308.089926][ T1346] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 308.094546][ T1346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.101310][ T1346] usb 6-1: Product: syz [ 308.103865][ T1346] usb 6-1: Manufacturer: syz [ 308.106340][ T1346] usb 6-1: SerialNumber: syz [ 308.124663][ T1346] usb 6-1: config 0 descriptor?? [ 308.133639][T14961] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 308.381255][T14961] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 308.437079][T14989] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 4, id = 0 [ 308.457186][T14990] IPVS: stopping backup sync thread 14989 ... [ 308.468482][ T1346] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input21 [ 308.690153][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 308.761098][ T5742] Bluetooth: hci1: command 0x0406 tx timeout [ 309.110175][ T8147] usb 6-1: USB disconnect, device number 18 [ 309.169879][ T5132] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 309.185566][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3861'. [ 309.284671][T15017] netlink: 'syz.4.3860': attribute type 7 has an invalid length. [ 309.293141][T15017] netlink: 'syz.4.3860': attribute type 8 has an invalid length. [ 312.248917][ T5744] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 312.257609][ T5742] Bluetooth: hci3: command 0x1003 tx timeout [ 312.853547][ T856] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 313.037777][ T856] usb 6-1: Using ep0 maxpacket: 32 [ 313.109840][ T856] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 313.116863][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.150050][ T856] usb 6-1: Product: syz [ 313.166866][ T856] usb 6-1: Manufacturer: syz [ 313.168899][ T856] usb 6-1: SerialNumber: syz [ 313.179771][ T856] usb 6-1: config 0 descriptor?? [ 313.190974][ T856] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 313.193811][ T856] dvb-usb: bulk message failed: -22 (4/0) [ 313.198243][ T856] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.273594][ T856] dvb-usb: bulk message failed: -22 (5/0) [ 313.284529][ T856] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.348493][ T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.368446][ T856] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 313.379916][ T856] usb 6-1: media controller created [ 313.415193][ T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.417763][T15072] dvb-usb: bulk message failed: -22 (7/0) [ 313.442596][T15072] ttusb2: there might have been an error during control message transfer. (rlen = 56, was 0) [ 313.447992][T15072] ttusb2: i2c transfer failed. [ 313.449990][ T856] usb 6-1: selecting invalid altsetting 3 [ 313.463219][ T856] ttusb2: set interface to alts=3 failed [ 313.522547][ T856] DVB: Unable to find symbol tda10086_attach() [ 313.559471][ T856] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 313.575829][ T856] dvb-usb: bulk message failed: -22 (4/0) [ 313.587578][ T856] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.606341][ T856] dvb-usb: bulk message failed: -22 (5/0) [ 313.614649][ T856] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 313.626903][ T856] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 313.637350][ T856] usb 6-1: USB disconnect, device number 19 [ 313.670813][ T856] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 314.837263][T15163] hugetlbfs: Bad value 't1' for mount option 'nr_inodes' [ 314.837263][T15163] [ 316.088932][ T5817] IPVS: starting estimator thread 0... [ 316.099596][ T5744] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 316.186374][T15204] IPVS: using max 30 ests per chain, 72000 per kthread [ 316.235976][ T40] audit: type=1326 audit(1778714770.092:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15208 comm="syz.5.3923" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f35fcc code=0x0 [ 316.706309][ T5817] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 316.866238][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 316.871736][ T5817] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 316.887530][ T5817] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.905980][ T5817] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.924284][ T5817] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 316.936021][ T5817] usb 5-1: config 0 interface 0 has no altsetting 0 [ 317.005754][ T5817] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 317.032331][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.039683][ T5817] usb 5-1: Product: syz [ 317.042075][ T5817] usb 5-1: Manufacturer: syz [ 317.044260][ T5817] usb 5-1: SerialNumber: syz [ 317.061871][ T5817] usb 5-1: config 0 descriptor?? [ 317.095138][T15220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.317859][T15220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.340273][ T5817] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input22 [ 317.747197][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 317.770585][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'. [ 317.774650][T15246] netlink: 'syz.4.3930': attribute type 7 has an invalid length. [ 317.897660][ T29] usb 5-1: USB disconnect, device number 17 [ 317.927048][ T5132] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 318.316301][ T40] audit: type=1326 audit(1778714772.172:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.4.3939" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efcc code=0x0 [ 318.541194][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3941'. [ 320.109258][ T29] IPVS: starting estimator thread 0... [ 320.134253][ T842] kernel read not supported for file /vcs (pid: 842 comm: kworker/0:2) [ 320.223640][T15332] IPVS: using max 27 ests per chain, 64800 per kthread [ 321.849230][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4005'. [ 322.014869][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.028642][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.790267][T15446] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 324.047022][T15504] random: crng reseeded on system resumption [ 324.050712][T15502] batadv0: entered promiscuous mode [ 324.077069][T15502] macsec1: entered promiscuous mode [ 324.111448][T15502] macsec1: entered allmulticast mode [ 324.116307][T15502] batadv0: entered allmulticast mode [ 324.120104][T15502] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 324.221347][T15502] batadv0: left allmulticast mode [ 324.238479][T15502] batadv0: left promiscuous mode [ 324.796860][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 324.799195][ T5744] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 326.236358][ T5742] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 326.237179][ T5744] Bluetooth: hci3: command 0x1003 tx timeout [ 326.418541][T15538] netlink: 'syz.4.4051': attribute type 3 has an invalid length. [ 326.849413][T15554] random: crng reseeded on system resumption [ 327.390454][T15570] IPVS: Scheduler module ip_vs_sip not found [ 327.790457][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4071'. [ 328.833207][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4091'. [ 328.843392][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4091'. [ 330.026379][T15686] veth1_macvtap: left promiscuous mode [ 330.041932][T15686] macsec0: entered allmulticast mode [ 330.053964][T15686] veth1_macvtap: entered promiscuous mode [ 330.059525][T15686] veth1_macvtap: entered allmulticast mode [ 330.097948][T15686] macsec0: left allmulticast mode [ 330.126264][T15686] veth1_macvtap: left allmulticast mode [ 330.281796][T15693] overlayfs: regular lower layers cannot follow data lower layers [ 332.246656][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 332.435575][T15742] batadv0: entered promiscuous mode [ 332.459411][T15742] macsec2: entered promiscuous mode [ 332.462791][T15742] macsec2: entered allmulticast mode [ 332.465698][T15742] batadv0: entered allmulticast mode [ 332.487825][T15742] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 332.517089][T15742] batadv0: left allmulticast mode [ 332.534655][T15742] batadv0: left promiscuous mode [ 332.934668][T15757] overlayfs: regular lower layers cannot follow data lower layers [ 333.707898][T15792] batadv0: entered promiscuous mode [ 333.712868][T15792] macsec1: entered promiscuous mode [ 333.722051][T15792] macsec1: entered allmulticast mode [ 333.731727][T15792] batadv0: entered allmulticast mode [ 333.746661][T15792] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 333.884651][T15792] batadv0: left allmulticast mode [ 333.888437][T15792] batadv0: left promiscuous mode [ 334.672734][T15818] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4166'. [ 335.063129][T15828] batadv0: entered promiscuous mode [ 335.065527][T15828] macsec1: entered promiscuous mode [ 335.085902][T15828] macsec1: entered allmulticast mode [ 335.101129][T15828] batadv0: entered allmulticast mode [ 335.104344][T15828] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 335.185523][T15828] batadv0: left allmulticast mode [ 335.191849][T15828] batadv0: left promiscuous mode [ 335.482552][T15846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'. [ 336.074522][T15872] sg_read: process 1626 (syz.4.4198) changed security contexts after opening file descriptor, this is not allowed. [ 336.277214][T15880] batadv0: entered promiscuous mode [ 336.290738][T15880] macsec1: entered promiscuous mode [ 336.298808][T15880] macsec1: entered allmulticast mode [ 336.309234][T15880] batadv0: entered allmulticast mode [ 336.318808][T15880] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 336.377063][T15880] batadv0: left allmulticast mode [ 336.379361][T15880] batadv0: left promiscuous mode [ 336.530202][T15890] usb usb9: usbfs: process 15890 (syz.4.4196) did not claim interface 0 before use [ 337.249194][T15911] [U] [ 338.605433][T15956] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4227'. [ 340.176882][T16003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.094910][T16042] batadv0: entered promiscuous mode [ 341.098224][T16042] macsec1: entered promiscuous mode [ 341.100992][T16042] macsec1: entered allmulticast mode [ 341.103150][T16042] batadv0: entered allmulticast mode [ 341.109804][T16042] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 341.140431][T16042] batadv0: left allmulticast mode [ 341.144105][T16042] batadv0: left promiscuous mode [ 341.321738][T16021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.327110][T16021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 341.333687][T16017] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 341.667456][T16021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.670207][T16021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.721178][T16021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 341.807665][T16021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 341.817914][T16021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 342.275205][T16071] tipc: Started in network mode [ 342.285089][T16071] tipc: Node identity ac14142f, cluster identity 4711 [ 342.342497][T16071] tipc: New replicast peer: 0.0.0.0 [ 342.383847][T16071] tipc: Enabled bearer , priority 10 [ 342.692397][ T5744] Bluetooth: hci2: command 0x0406 tx timeout [ 343.026501][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 343.042284][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 343.466814][ T856] tipc: Node number set to 2886997039 [ 343.766398][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 343.850999][ T5744] Bluetooth: hci4: command 0x0405 tx timeout [ 344.726305][ T5744] Bluetooth: hci2: command 0x0406 tx timeout [ 344.860455][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 344.875116][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 345.506995][T16168] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 345.520268][T16171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.531256][T16171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.535835][T16171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.541009][T16171] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.714006][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4355'. [ 346.757321][T16253] netlink: 'syz.5.4357': attribute type 3 has an invalid length. [ 346.908475][T16225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 346.914158][T16228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.922949][T16228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.936419][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4359'. [ 346.943530][T16228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.960221][T16228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.967862][T16259] ------------[ cut here ]------------ [ 346.990768][T16259] 1 [ 346.990783][T16259] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#0: syz.0.4359/16259 [ 347.001922][T16259] Modules linked in: [ 347.005186][T16259] CPU: 0 UID: 0 PID: 16259 Comm: syz.0.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.020066][T16259] Tainted: [L]=SOFTLOCKUP [ 347.022266][T16259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.028793][T16259] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 347.032264][T16259] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 347.042368][T16259] RSP: 0000:ffffc9000d1bf390 EFLAGS: 00010287 [ 347.045611][T16259] RAX: 0000000000000cd1 RBX: ffff888076e14000 RCX: ffffc9000c001000 [ 347.049739][T16259] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c3800 [ 347.054655][T16259] RBP: ffff888076e14000 R08: 0000000000000001 R09: 0000000000000000 [ 347.059353][T16259] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888021004d80 [ 347.063993][T16259] R13: ffff888021580f00 R14: 0000000000000000 R15: ffff888076e14058 [ 347.068883][T16259] FS: 0000000000000000(0000) GS:ffff888097177000(0063) knlGS:00000000f5426b40 [ 347.072651][T16259] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.080690][T16259] CR2: 00000000f73d6d50 CR3: 000000007720c000 CR4: 0000000000352ef0 [ 347.089464][T16259] Call Trace: [ 347.092547][T16259] [ 347.094958][T16259] ? __pfx_ip_rt_bug+0x10/0x10 [ 347.098334][T16259] ip_push_pending_frames+0x29e/0x300 [ 347.102082][T16259] icmp_push_reply+0x30e/0x450 [ 347.106443][T16259] __icmp_send+0x11b4/0x2c70 [ 347.109565][T16259] ? __pfx___icmp_send+0x10/0x10 [ 347.112936][T16259] ? __pfx_ip_route_input_slow+0x10/0x10 [ 347.117166][T16259] ? __lock_acquire+0x4a5/0x2630 [ 347.120839][T16259] ? __ip_options_compile+0x604/0x16a0 [ 347.123455][T16259] ? ip_route_input_noref+0x15f/0x2e0 [ 347.127946][T16259] ip_options_compile+0xb6/0x100 [ 347.132318][T16259] ? __pfx_ip_options_compile+0x10/0x10 [ 347.136402][T16259] ? __pfx_ip_rcv_finish+0x10/0x10 [ 347.139649][T16259] ip_rcv_finish_core+0x693/0x2c30 [ 347.143401][T16259] ip_rcv+0x1c0/0x3c0 [ 347.147285][T16259] ? __pfx_ip_rcv+0x10/0x10 [ 347.150301][T16259] __netif_receive_skb_one_core+0x197/0x1e0 [ 347.154087][T16259] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 347.159540][T16259] ? lock_acquire+0x1b1/0x370 [ 347.162904][T16259] __netif_receive_skb+0x1f/0x120 [ 347.167856][T16259] netif_receive_skb+0x13b/0x7f0 [ 347.172696][T16259] ? __pfx_netif_receive_skb+0x10/0x10 [ 347.192660][T16259] tun_rx_batched.isra.0+0x3f6/0x750 [ 347.197075][T16259] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 347.199832][T16259] ? rcu_is_watching+0x12/0xc0 [ 347.212354][T16259] ? tun_get_user+0x1cc8/0x3c20 [ 347.215005][T16259] tun_get_user+0x1e31/0x3c20 [ 347.221299][T16259] ? __pfx_tun_get_user+0x10/0x10 [ 347.223573][T16259] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 347.225929][T16259] ? find_held_lock+0x2b/0x80 [ 347.233307][T16259] ? tun_get+0x191/0x370 [ 347.242905][T16259] ? tun_get+0x191/0x370 [ 347.245200][T16259] tun_chr_write_iter+0xdc/0x200 [ 347.250512][T16259] vfs_write+0x6ac/0x1070 [ 347.252494][T16259] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 347.254944][T16259] ? __pfx_vfs_write+0x10/0x10 [ 347.267470][T16259] ? find_held_lock+0x2b/0x80 [ 347.269634][T16259] ksys_write+0x12a/0x250 [ 347.271648][T16259] ? __pfx_ksys_write+0x10/0x10 [ 347.273913][T16259] do_int80_emulation+0x141/0x700 [ 347.284283][T16259] asm_int80_emulation+0x1a/0x20 [ 347.286633][T16259] RIP: 0023:0xf71661ab [ 347.288435][T16259] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 347.312586][T16259] RSP: 002b:00000000f542644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 347.326394][T16259] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 347.331343][T16259] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.341200][T16259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.353138][T16259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.370273][T16259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.373485][T16259] [ 347.380191][T16259] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.383279][T16259] CPU: 0 UID: 0 PID: 16259 Comm: syz.0.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.413826][T16259] Tainted: [L]=SOFTLOCKUP [ 347.415517][T16259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 347.439906][T16259] Call Trace: [ 347.441300][T16259] [ 347.442610][T16259] dump_stack_lvl+0x100/0x190 [ 347.444559][T16259] vpanic+0x552/0x970 [ 347.468281][T16259] ? __pfx_vpanic+0x10/0x10 [ 347.470471][T16259] panic+0xd1/0xe0 [ 347.472336][T16259] ? __pfx_panic+0x10/0x10 [ 347.474623][T16259] check_panic_on_warn.cold+0x19/0x34 [ 347.488666][T16259] ? ip_rt_bug+0x2b/0x150 [ 347.490352][T16259] __warn.cold+0x191/0x328 [ 347.503557][T16259] __report_bug+0x296/0x3d0 [ 347.506095][T16259] ? ip_rt_bug+0x2b/0x150 [ 347.507940][T16259] ? __pfx___report_bug+0x10/0x10 [ 347.510665][T16259] ? ip_rt_bug+0x2b/0x150 [ 347.512794][T16259] report_bug+0xb2/0x220 [ 347.528178][T16259] ? ip_rt_bug+0x2b/0x150 [ 347.530451][T16259] handle_bug+0x16a/0x2a0 [ 347.532515][T16259] exc_invalid_op+0x17/0x50 [ 347.534353][T16259] asm_exc_invalid_op+0x1a/0x20 [ 347.536987][T16259] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 347.540755][T16259] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc b7 1b f8 66 90 e8 b5 b7 1b f8 ba 02 00 00 00 48 89 de 31 ff e8 76 31 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 8e b7 1b [ 347.560939][T16259] RSP: 0000:ffffc9000d1bf390 EFLAGS: 00010287 [ 347.563643][T16259] RAX: 0000000000000cd1 RBX: ffff888076e14000 RCX: ffffc9000c001000 [ 347.580610][T16259] RDX: 0000000000080000 RSI: ffffffff89587da4 RDI: ffffffff8c1c3800 [ 347.584597][T16259] RBP: ffff888076e14000 R08: 0000000000000001 R09: 0000000000000000 [ 347.588592][T16259] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888021004d80 [ 347.591551][T16259] R13: ffff888021580f00 R14: 0000000000000000 R15: ffff888076e14058 [ 347.600187][T16259] ? sk_skb_reason_drop+0x114/0x1b0 [ 347.602435][T16259] ? __pfx_ip_rt_bug+0x10/0x10 [ 347.604544][T16259] ip_push_pending_frames+0x29e/0x300 [ 347.611900][T16259] icmp_push_reply+0x30e/0x450 [ 347.614434][T16259] __icmp_send+0x11b4/0x2c70 [ 347.621551][T16259] ? __pfx___icmp_send+0x10/0x10 [ 347.623756][T16259] ? __pfx_ip_route_input_slow+0x10/0x10 [ 347.644452][T16259] ? __lock_acquire+0x4a5/0x2630 [ 347.647298][T16259] ? __ip_options_compile+0x604/0x16a0 [ 347.649741][T16259] ? ip_route_input_noref+0x15f/0x2e0 [ 347.652969][T16259] ip_options_compile+0xb6/0x100 [ 347.655554][T16259] ? __pfx_ip_options_compile+0x10/0x10 [ 347.657734][T16259] ? __pfx_ip_rcv_finish+0x10/0x10 [ 347.662302][T16259] ip_rcv_finish_core+0x693/0x2c30 [ 347.669639][T16259] ip_rcv+0x1c0/0x3c0 [ 347.672055][T16259] ? __pfx_ip_rcv+0x10/0x10 [ 347.682750][T16259] __netif_receive_skb_one_core+0x197/0x1e0 [ 347.685892][T16259] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 347.691439][T16259] ? lock_acquire+0x1b1/0x370 [ 347.696581][T16259] __netif_receive_skb+0x1f/0x120 [ 347.702439][T16259] netif_receive_skb+0x13b/0x7f0 [ 347.711390][T16259] ? __pfx_netif_receive_skb+0x10/0x10 [ 347.714596][T16259] tun_rx_batched.isra.0+0x3f6/0x750 [ 347.722730][T16259] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 347.726652][T16259] ? rcu_is_watching+0x12/0xc0 [ 347.729349][T16259] ? tun_get_user+0x1cc8/0x3c20 [ 347.732192][T16259] tun_get_user+0x1e31/0x3c20 [ 347.734999][T16259] ? __pfx_tun_get_user+0x10/0x10 [ 347.738424][T16259] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 347.742381][T16259] ? find_held_lock+0x2b/0x80 [ 347.745675][T16259] ? tun_get+0x191/0x370 [ 347.750576][T16259] ? tun_get+0x191/0x370 [ 347.753470][T16259] tun_chr_write_iter+0xdc/0x200 [ 347.756224][T16259] vfs_write+0x6ac/0x1070 [ 347.759228][T16259] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 347.763938][T16259] ? __pfx_vfs_write+0x10/0x10 [ 347.767363][T16259] ? find_held_lock+0x2b/0x80 [ 347.770211][T16259] ksys_write+0x12a/0x250 [ 347.772557][T16259] ? __pfx_ksys_write+0x10/0x10 [ 347.776195][T16259] do_int80_emulation+0x141/0x700 [ 347.779591][T16259] asm_int80_emulation+0x1a/0x20 [ 347.782396][T16259] RIP: 0023:0xf71661ab [ 347.785457][T16259] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 347.799257][T16259] RSP: 002b:00000000f542644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 347.807595][T16259] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000400 [ 347.815705][T16259] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.823118][T16259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.830193][T16259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 347.835198][T16259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.841919][T16259] [ 347.845030][T16259] Kernel Offset: disabled [ 347.847949][T16259] Rebooting in 86400 seconds..