last executing test programs: 8m39.831625706s ago: executing program 1 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe53, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdb}, 0x94) 8m39.55577796s ago: executing program 1 (id=268): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 8m37.762570366s ago: executing program 1 (id=284): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141e00) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000000040)=""/46, 0x2e) 8m37.376620773s ago: executing program 1 (id=290): unshare(0x20000400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 8m37.030446567s ago: executing program 1 (id=294): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 8m36.689931159s ago: executing program 1 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @private1, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="99", 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x20, 0x4855}, 0x8850) 8m21.423409513s ago: executing program 32 (id=297): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @private1, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="99", 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x20, 0x4855}, 0x8850) 5m38.112892411s ago: executing program 3 (id=2129): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$nfs4(&(0x7f0000000340)='/dev/fb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x400, 0x0) 5m37.889329565s ago: executing program 3 (id=2133): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0xf, {{0xa, 0x4e26, 0x100, @mcast1, 0x10400005}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 5m37.710071324s ago: executing program 3 (id=2136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m37.255931766s ago: executing program 3 (id=2141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 5m36.927977698s ago: executing program 3 (id=2144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 5m36.707602143s ago: executing program 3 (id=2146): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000004000)=""/4073, 0xfe9}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}], 0x7}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 5m21.332007916s ago: executing program 33 (id=2146): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000004000)=""/4073, 0xfe9}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000940)=""/199, 0xc7}], 0x7}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2m26.105597192s ago: executing program 5 (id=3892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffd0850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m25.239169974s ago: executing program 5 (id=3903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) 2m24.874013355s ago: executing program 5 (id=3907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m24.122378997s ago: executing program 5 (id=3913): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1a852a3ac0122d5100000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0x1, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x49}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 2m23.930319657s ago: executing program 5 (id=3916): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m23.650003066s ago: executing program 5 (id=3920): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xb, 0xfff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x42}], 0x1, &(0x7f0000000200), 0x0, 0x0) 2m8.461500339s ago: executing program 34 (id=3920): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xb, 0xfff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x42}], 0x1, &(0x7f0000000200), 0x0, 0x0) 24.435102059s ago: executing program 0 (id=4977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000010c0)=ANY=[@ANYRES8]) 24.149692577s ago: executing program 7 (id=4982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000380)=0x8) 24.101830551s ago: executing program 6 (id=4984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 23.92905218s ago: executing program 7 (id=4985): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 23.885681023s ago: executing program 4 (id=4986): r0 = syz_io_uring_setup(0x509, &(0x7f0000000140)={0x0, 0x114df, 0x10, 0x2, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 23.872277569s ago: executing program 0 (id=4987): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, r2, 0x0, 0x0, 0x8000, 0x200000000000, 0xffffffffffffffff, 0x0}) 23.749562331s ago: executing program 6 (id=4988): r0 = socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002400)=""/4098, 0x1002}], 0x1}, 0x0) 23.708255471s ago: executing program 7 (id=4990): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8000000) 23.579276197s ago: executing program 0 (id=4991): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 23.107329711s ago: executing program 0 (id=4992): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 22.979140124s ago: executing program 7 (id=4993): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x48}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) 22.439446018s ago: executing program 7 (id=4994): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 22.439165074s ago: executing program 2 (id=4995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000090000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) 21.938240437s ago: executing program 2 (id=4996): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff1}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 21.898963724s ago: executing program 7 (id=4997): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 21.656338701s ago: executing program 0 (id=4998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r0) 21.167297408s ago: executing program 4 (id=4999): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x20001b1) mmap$xdp(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x200000c, 0x10, r0, 0x180000000) 17.693539507s ago: executing program 4 (id=5000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x10}}], 0x10, 0x5}, 0x0) 17.691864136s ago: executing program 4 (id=5001): unshare(0x24020400) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000100)='./bus\x00', 0x282042, 0x40) tee(r0, 0xffffffffffffffff, 0x3, 0x0) 17.691556018s ago: executing program 4 (id=5002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c00)={0x58, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 17.672603617s ago: executing program 0 (id=5003): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 17.670658067s ago: executing program 2 (id=5004): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000096000040"]) 17.67029223s ago: executing program 6 (id=5005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0xffe}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffff7f}]}, 0x5c}}, 0x0) 17.635391254s ago: executing program 4 (id=5006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x40}}, 0x0) 17.425168085s ago: executing program 2 (id=5007): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 17.335285791s ago: executing program 6 (id=5008): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001780)={0x44, &(0x7f0000001600)={0x0, 0x15, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x8402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000780)=[{0xd0, 0x8000, 0x0, 0x0}], 0x1}) 17.078267459s ago: executing program 2 (id=5009): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x207, 0x9, 0x0, 0x19, "0400"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 16.874081798s ago: executing program 2 (id=5010): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) 15.45516079s ago: executing program 6 (id=5011): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) io_uring_enter(r0, 0x2cbc, 0x366, 0x12, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.255591263s ago: executing program 6 (id=5012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.904481849s ago: executing program 35 (id=4997): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1.823197029s ago: executing program 36 (id=5003): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 298.523429ms ago: executing program 37 (id=5006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x40}}, 0x0) 297.543302ms ago: executing program 38 (id=5010): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) 0s ago: executing program 39 (id=5012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): ********* [ 439.705894][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 439.705905][ T31] pvrusb2: Important functionality might not be entirely working. [ 439.705914][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 439.705926][ T31] pvrusb2: ********** [ 439.978745][ T2367] pvrusb2: Invalid write control endpoint [ 440.163488][ T31] usb 1-1: USB disconnect, device number 28 [ 440.269676][ T2367] pvrusb2: Invalid write control endpoint [ 440.269698][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 440.269709][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 440.269718][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 440.269728][ T2367] pvrusb2: Device being rendered inoperable [ 440.301242][ T5844] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 440.315958][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 440.316026][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 440.337904][ T2367] pvrusb2: Attached sub-driver cx25840 [ 440.337919][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 440.337928][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 440.387168][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.387285][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.521208][ T5844] usb 7-1: Using ep0 maxpacket: 16 [ 440.527433][ T5844] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 440.530429][ T5844] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 440.530473][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.530494][ T5844] usb 7-1: Product: syz [ 440.530508][ T5844] usb 7-1: Manufacturer: syz [ 440.530523][ T5844] usb 7-1: SerialNumber: syz [ 440.607208][ T5844] usb 7-1: config 0 descriptor?? [ 440.629474][ T5844] hub 7-1:0.0: bad descriptor, ignoring hub [ 440.629521][ T5844] hub 7-1:0.0: probe with driver hub failed with error -5 [ 440.657013][ T5844] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 440.862205][ T5931] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 440.991270][ T5844] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 441.072540][ T5931] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 441.072571][ T5931] usb 6-1: config 0 has no interface number 0 [ 441.080115][ T5931] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 441.080212][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.080234][ T5931] usb 6-1: Product: syz [ 441.080248][ T5931] usb 6-1: Manufacturer: syz [ 441.080262][ T5931] usb 6-1: SerialNumber: syz [ 441.099883][ T5931] usb 6-1: config 0 descriptor?? [ 441.151215][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 441.154316][ T5844] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 441.154344][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.154364][ T5844] usb 5-1: config 0 has no interface number 0 [ 441.181660][ T5844] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 441.181694][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.181714][ T5844] usb 5-1: Product: syz [ 441.181727][ T5844] usb 5-1: Manufacturer: syz [ 441.181740][ T5844] usb 5-1: SerialNumber: syz [ 441.227091][ T5903] usb 7-1: USB disconnect, device number 3 [ 441.257073][ T5844] usb 5-1: config 0 descriptor?? [ 441.308280][ T5844] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 441.308312][ T5844] usb 5-1: No valid video chain found. [ 441.469039][ T5844] usb 5-1: USB disconnect, device number 27 [ 441.606869][ T5931] usb 6-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 441.824346][ T5931] usb 6-1: failed to fetch extended address, random address set [ 441.996082][ T5931] usb 6-1: USB disconnect, device number 18 [ 443.971324][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 443.971344][ T37] audit: type=1326 audit(1758187326.183:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13328 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 443.972793][ T37] audit: type=1326 audit(1758187326.193:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13328 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 443.974143][ T37] audit: type=1326 audit(1758187326.193:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13328 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 443.976295][ T37] audit: type=1326 audit(1758187326.193:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13328 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 443.976609][ T37] audit: type=1326 audit(1758187326.193:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13328 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 443.980579][ T37] audit: type=1326 audit(1758187326.193:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13328 comm="syz.0.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 444.298220][T13335] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 444.298247][T13335] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 444.298262][T13335] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3272'. [ 444.298279][T13335] netlink: 'syz.0.3272': attribute type 1 has an invalid length. [ 444.298291][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 444.484034][ T37] audit: type=1326 audit(1758187326.703:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13337 comm="syz.5.3274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbada9beba9 code=0x0 [ 445.241713][T13360] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3282'. [ 445.356439][T13364] program syz.5.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.498931][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3286'. [ 447.316638][ T5917] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 447.469562][ T5917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.470828][ T5917] usb 6-1: no configurations [ 447.470844][ T5917] usb 6-1: can't read configurations, error -22 [ 448.358310][T13431] loop9: detected capacity change from 0 to 8 [ 448.379348][T13431] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 448.379407][T13431] loop9: partition table partially beyond EOD, truncated [ 448.379531][T13431] loop9: p1 size 81768186 extends beyond EOD, truncated [ 448.651313][ T5917] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 448.767205][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.770966][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.801385][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 448.804475][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 448.804529][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 448.804553][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.852476][ T5917] usb 6-1: config 0 descriptor?? [ 448.876513][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 449.152109][ T5917] bcm5974 6-1:0.0: could not read from device [ 449.222108][ T5917] input: failed to attach handler mousedev to device input21, error: -5 [ 449.252344][ T5917] usb 6-1: USB disconnect, device number 21 [ 449.889875][T13462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3330'. [ 450.665255][ T6018] kernel write not supported for file /amidi2 (pid: 6018 comm: kworker/1:6) [ 451.221169][ T5917] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 451.361941][T13493] block device autoloading is deprecated and will be removed. [ 451.374199][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.374237][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.374278][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 451.374301][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.433755][ T5917] usb 3-1: config 0 descriptor?? [ 451.491295][ T5844] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 451.647163][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.647260][ T5844] usb 6-1: config 0 has no interfaces? [ 451.647295][ T5844] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.647319][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.708849][ T5844] usb 6-1: config 0 descriptor?? [ 451.873299][ T5917] lg-g15 0003:046D:C22E.0033: item fetching failed at offset 4/5 [ 451.874270][ T5917] lg-g15 0003:046D:C22E.0033: probe with driver lg-g15 failed with error -22 [ 451.930727][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.931659][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.941393][ T5931] usb 6-1: USB disconnect, device number 22 [ 452.103675][ T6018] usb 3-1: USB disconnect, device number 25 [ 452.266611][T13518] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3357'. [ 452.283307][T13515] hub 1-0:1.0: USB hub found [ 452.286898][T13515] hub 1-0:1.0: 1 port detected [ 452.651274][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 452.803578][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 452.815597][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.815626][ T31] usb 1-1: config 0 has no interface number 0 [ 452.815687][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.815710][ T31] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.815747][ T31] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 452.815768][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.826499][ T31] usb 1-1: config 0 descriptor?? [ 453.211397][ T5917] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 453.364373][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.364409][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.364436][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 453.364456][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.364502][ T5917] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.364523][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.442578][ T5917] usb 3-1: config 0 descriptor?? [ 453.499905][ T31] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0034/input/input22 [ 453.566822][ T31] uclogic 0003:28BD:0094.0034: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 453.603401][T13536] bridge_slave_1: left allmulticast mode [ 453.603437][T13536] bridge_slave_1: left promiscuous mode [ 453.603949][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.693690][T13536] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 453.696571][ T5844] usb 1-1: USB disconnect, device number 29 [ 453.978256][ T5917] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 454.194937][ T5917] usb 3-1: USB disconnect, device number 26 [ 455.435852][T13577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.741420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.752444][T13600] netlink: 'syz.2.3393': attribute type 9 has an invalid length. [ 457.701355][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 457.851683][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 457.871803][ T31] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 457.871834][ T31] usb 5-1: config 0 has no interface number 0 [ 457.875125][ T31] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 457.875155][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.875176][ T31] usb 5-1: Product: syz [ 457.875191][ T31] usb 5-1: Manufacturer: syz [ 457.875205][ T31] usb 5-1: SerialNumber: syz [ 457.896090][ T31] usb 5-1: config 0 descriptor?? [ 457.945048][ T31] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 458.158047][T13632] netlink: 'syz.2.3409': attribute type 7 has an invalid length. [ 458.158071][T13632] netlink: 'syz.2.3409': attribute type 8 has an invalid length. [ 458.158084][T13632] netlink: 'syz.2.3409': attribute type 4 has an invalid length. [ 458.158096][T13632] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3409'. [ 458.296072][ T31] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 458.377843][ T31] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 458.532259][T13637] netlink: 'syz.2.3411': attribute type 25 has an invalid length. [ 458.532683][T13637] netlink: 'syz.2.3411': attribute type 8 has an invalid length. [ 458.697460][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 458.699110][ T5930] usb 5-1: USB disconnect, device number 28 [ 458.740240][ T5930] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 458.768386][ T5930] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 458.769195][ T5930] quatech2 5-1:0.51: device disconnected [ 460.351386][ T5930] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 460.504042][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 460.504077][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 460.504103][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 460.508653][ T5930] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 460.508682][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.508703][ T5930] usb 1-1: Product: syz [ 460.508717][ T5930] usb 1-1: Manufacturer: syz [ 460.508733][ T5930] usb 1-1: SerialNumber: syz [ 460.590578][ T5930] usb 1-1: config 0 descriptor?? [ 460.608615][ T5930] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 460.823507][ T5917] usb 1-1: USB disconnect, device number 30 [ 461.261254][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 461.406790][T13687] program syz.2.3432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.413730][ T31] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 461.413760][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 461.420513][ T31] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 461.420539][ T31] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 461.420557][ T31] usb 7-1: Product: syz [ 461.420570][ T31] usb 7-1: Manufacturer: syz [ 461.420582][ T31] usb 7-1: SerialNumber: syz [ 461.433686][ T31] usb 7-1: config 0 descriptor?? [ 461.452887][ T31] usb 7-1: selecting invalid altsetting 0 [ 461.657805][ T31] usb 7-1: USB disconnect, device number 4 [ 461.895438][T13698] program syz.4.3438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.984435][T13696] syz.0.3437 (13696) used greatest stack depth: 16696 bytes left [ 462.751598][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 462.911429][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 462.914502][ T31] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 462.914531][ T31] usb 7-1: config 0 has no interface number 0 [ 462.914583][ T31] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 462.914608][ T31] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 462.920444][ T31] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 462.920475][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.920494][ T31] usb 7-1: Product: syz [ 462.920509][ T31] usb 7-1: Manufacturer: syz [ 462.920524][ T31] usb 7-1: SerialNumber: syz [ 462.943655][ T31] usb 7-1: config 0 descriptor?? [ 462.945085][T13718] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 462.946045][T13718] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 463.167291][ T5917] kernel read not supported for file /dsp (pid: 5917 comm: kworker/0:4) [ 463.243731][T13718] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 463.243875][T13718] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 463.653716][ T31] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 463.654071][ T31] asix 7-1:0.251: probe with driver asix failed with error -524 [ 463.878585][ T31] usb 7-1: USB disconnect, device number 5 [ 464.265803][T13747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 464.265865][T13747] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 464.265979][T13747] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 464.601412][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 464.761328][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 464.764111][ T31] usb 6-1: config 4 has an invalid interface number: 8 but max is 0 [ 464.764141][ T31] usb 6-1: config 4 has no interface number 0 [ 464.764192][ T31] usb 6-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 464.764215][ T31] usb 6-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 464.764239][ T31] usb 6-1: config 4 interface 8 has no altsetting 0 [ 464.771793][ T31] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 464.771822][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.771839][ T31] usb 6-1: Product: syz [ 464.771852][ T31] usb 6-1: Manufacturer: syz [ 464.771865][ T31] usb 6-1: SerialNumber: syz [ 465.046173][ T31] opticon 6-1:4.8: opticon converter detected [ 465.050797][ T31] usb 6-1: opticon converter now attached to ttyUSB0 [ 465.063680][ T31] usb 6-1: USB disconnect, device number 23 [ 465.077972][ T31] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 465.078616][ T31] opticon 6-1:4.8: device disconnected [ 466.601399][ T5917] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 466.751926][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 466.754480][ T5917] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 466.754512][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.787442][ T5917] usb 3-1: config 0 descriptor?? [ 467.024441][ T5917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 467.045533][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.062449][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 467.062514][ T5917] usb 3-1: media controller created [ 467.120323][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.232442][ T5917] az6027: usb out operation failed. (-71) [ 467.247072][ T5917] az6027: usb out operation failed. (-71) [ 467.247095][ T5917] stb0899_attach: Driver disabled by Kconfig [ 467.247104][ T5917] az6027: no front-end attached [ 467.247104][ T5917] [ 467.247578][ T5917] az6027: usb out operation failed. (-71) [ 467.247600][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 467.283462][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 467.285756][ T5917] dvb-usb: schedule remote query interval to 400 msecs. [ 467.285777][ T5917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 467.288856][ T5917] usb 3-1: USB disconnect, device number 27 [ 467.514167][ T5917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 467.711664][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 467.861444][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 467.864691][ T31] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 467.864723][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.885469][ T31] usb 6-1: config 0 descriptor?? [ 467.914158][ T31] gspca_main: sq930x-2.14.0 probing 041e:403c [ 468.286653][ T37] audit: type=1326 audit(1758187350.503:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13823 comm="syz.6.3498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c7baaeba9 code=0x0 [ 468.370961][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3499'. [ 468.761471][ T31] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 468.821244][ T31] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 468.827798][ T31] usb 6-1: USB disconnect, device number 24 [ 469.548826][ T37] audit: type=1326 audit(1758187351.763:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.550271][ T37] audit: type=1326 audit(1758187351.763:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.560165][ T37] audit: type=1326 audit(1758187351.773:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.560219][ T37] audit: type=1326 audit(1758187351.773:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.560259][ T37] audit: type=1326 audit(1758187351.773:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.560298][ T37] audit: type=1326 audit(1758187351.773:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.560765][ T37] audit: type=1326 audit(1758187351.773:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.560809][ T37] audit: type=1326 audit(1758187351.773:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 469.562030][ T37] audit: type=1326 audit(1758187351.783:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13845 comm="syz.2.3508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f24bcada9 code=0x7ffc0000 [ 470.131511][ T5931] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 470.203872][T13854] loop7: detected capacity change from 0 to 7 [ 470.206833][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.207066][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.207419][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.207447][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.207709][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.207735][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.207974][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.208000][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.208220][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.208245][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.208656][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.208681][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.208900][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.208922][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.209015][T13854] ldm_validate_partition_table(): Disk read failed. [ 470.209184][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.209210][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.209466][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.209492][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.225481][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.225519][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.227659][T13854] Dev loop7: unable to read RDB block 0 [ 470.228646][T13854] loop7: unable to read partition table [ 470.228878][T13854] loop7: partition table beyond EOD, truncated [ 470.228895][T13854] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 470.287584][ T5931] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 470.287614][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.287632][ T5931] usb 7-1: Product: syz [ 470.287644][ T5931] usb 7-1: Manufacturer: syz [ 470.287656][ T5931] usb 7-1: SerialNumber: syz [ 470.323083][ T5931] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 470.537687][ T5903] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 470.612947][T13860] smc: net device bond0 applied user defined pnetid SYZ0 [ 470.614666][T13860] smc: net device bond0 erased user defined pnetid SYZ0 [ 470.691567][ T6018] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 470.701994][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 470.708271][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 470.708423][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 470.739010][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 470.739107][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.739128][ T5903] usb 5-1: Product: syz [ 470.739142][ T5903] usb 5-1: Manufacturer: syz [ 470.739157][ T5903] usb 5-1: SerialNumber: syz [ 470.820258][ T5903] usb 5-1: config 0 descriptor?? [ 470.909555][ T5903] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 470.909669][ T5903] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 471.361821][ T5931] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 471.458628][ T5844] usb 7-1: USB disconnect, device number 6 [ 471.490178][ T5903] em28xx 5-1:0.0: chip ID is em28174 [ 471.521425][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 471.526034][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.526069][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.526111][ T5931] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.526135][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.553601][ T5931] usb 6-1: config 0 descriptor?? [ 471.558002][ T5931] hub 6-1:0.0: USB hub found [ 471.751713][ T5903] usb 5-1: USB disconnect, device number 29 [ 471.778529][ T5903] em28xx 5-1:0.0: Disconnecting em28xx [ 471.814396][ T5931] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 471.929862][ T5903] em28xx 5-1:0.0: Freeing device [ 472.152863][ T6018] usb 7-1: Service connection timeout for: 256 [ 472.152889][ T6018] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 472.161222][ T5917] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 472.176304][ T6018] ath9k_htc: Failed to initialize the device [ 472.195830][ T5844] usb 7-1: ath9k_htc: USB layer deinitialized [ 472.311249][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 472.317964][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.319517][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.319549][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.319571][ T5917] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.319593][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.326415][T13886] lo speed is unknown, defaulting to 1000 [ 472.351294][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.351328][ T5917] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.351348][ T5917] usb 3-1: Manufacturer: syz [ 472.412871][ T5931] hid-generic 0003:046D:C31C.0036: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 472.429788][ T5917] usb 3-1: config 0 descriptor?? [ 472.477803][ T5931] usb 6-1: USB disconnect, device number 25 [ 472.771180][ T5917] rc_core: IR keymap rc-hauppauge not found [ 472.771206][ T5917] Registered IR keymap rc-empty [ 472.771377][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.791341][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.812888][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 472.817909][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 472.851399][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.853844][ C0] mceusb 3-1:0.0: long-range (0x1) receiver active [ 472.871530][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.893426][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.912525][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.931271][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.951866][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.971264][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 472.991367][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 473.011341][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 473.031335][ T5917] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 473.062304][ T5917] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.062334][ T5917] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 473.110356][ T5931] usb 3-1: USB disconnect, device number 28 [ 473.503347][ T5844] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 473.671234][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 473.674685][ T5844] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 473.674716][ T5844] usb 1-1: config 0 has no interface number 0 [ 473.674799][ T5844] usb 1-1: config 0 interface 184 has no altsetting 0 [ 473.727026][ T5844] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 473.727057][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.727077][ T5844] usb 1-1: Product: syz [ 473.727091][ T5844] usb 1-1: Manufacturer: syz [ 473.727104][ T5844] usb 1-1: SerialNumber: syz [ 473.783618][ T5844] usb 1-1: config 0 descriptor?? [ 473.799809][ T5844] smsc75xx v1.0.0 [ 474.048699][T13923] netlink: 'syz.5.3538': attribute type 2 has an invalid length. [ 474.048724][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3538'. [ 474.450135][ T5844] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 474.450168][ T5844] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 474.450188][ T5844] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 474.450525][ T5844] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 474.503033][ T5844] usb 1-1: USB disconnect, device number 31 [ 474.549206][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 474.549244][T13930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3542'. [ 474.594634][T13930] vlan3: entered allmulticast mode [ 475.651039][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.571316][ T5844] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 476.611618][T13987] mkiss: ax0: crc mode is auto. [ 476.721182][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 476.723737][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.723788][ T5844] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 476.723812][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.805517][ T5844] usb 6-1: config 0 descriptor?? [ 477.264321][ T5844] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 477.652956][ T3118] usb 6-1: USB disconnect, device number 26 [ 479.647855][T14048] dummy0: entered promiscuous mode [ 480.441403][ T5844] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 480.516785][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3609'. [ 480.625445][ T5844] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 480.625588][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.645292][ T5844] usb 7-1: config 0 descriptor?? [ 480.668216][ T5844] cp210x 7-1:0.0: cp210x converter detected [ 481.074282][ T5844] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 481.113522][ T5844] usb 7-1: cp210x converter now attached to ttyUSB0 [ 481.189140][T14093] 9pnet_fd: Insufficient options for proto=fd [ 481.287670][ T5931] usb 7-1: USB disconnect, device number 7 [ 481.303835][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 481.505861][ T5931] cp210x 7-1:0.0: device disconnected [ 483.330898][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.338422][T14152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.652285][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3646'. [ 483.652338][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3646'. [ 487.031503][ T5931] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 487.205280][ T5931] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.205310][ T5931] usb 5-1: config 0 has no interface number 0 [ 487.210946][ T5931] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 487.210978][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.242861][ T5931] usb 5-1: Product: syz [ 487.242883][ T5931] usb 5-1: Manufacturer: syz [ 487.242899][ T5931] usb 5-1: SerialNumber: syz [ 487.267872][ T5931] usb 5-1: config 0 descriptor?? [ 487.490296][ T5931] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 487.506298][ T5931] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.506815][ T5931] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 487.506872][ T5931] usb 5-1: media controller created [ 487.580197][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.704490][ T5931] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 487.780851][ T5931] usb 5-1: USB disconnect, device number 30 [ 489.111487][T14284] nbd1: detected capacity change from 0 to 127 [ 489.127513][ T59] block nbd1: Receive control failed (result -32) [ 491.090730][T14349] netlink: 'syz.0.3735': attribute type 1 has an invalid length. [ 491.090756][T14349] netlink: 'syz.0.3735': attribute type 2 has an invalid length. [ 491.341457][ T3118] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 491.493803][ T3118] usb 5-1: Using ep0 maxpacket: 16 [ 491.522482][ T3118] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.522516][ T3118] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.522538][ T3118] usb 5-1: config 0 interface 0 has no altsetting 0 [ 491.522573][ T3118] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 491.522595][ T3118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.578825][ T3118] usb 5-1: config 0 descriptor?? [ 492.048937][T14370] bpf: Bad value for 'uid' [ 492.078467][ T3118] cougar 0003:060B:500A.0038: unexpected long global item [ 492.079435][ T3118] cougar 0003:060B:500A.0038: parse failed [ 492.079564][ T3118] cougar 0003:060B:500A.0038: probe with driver cougar failed with error -22 [ 492.131087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 492.294057][ T3118] usb 5-1: USB disconnect, device number 31 [ 493.434183][T14395] bond0: entered promiscuous mode [ 493.434206][T14395] bond_slave_0: entered promiscuous mode [ 493.434544][T14395] bond_slave_1: entered promiscuous mode [ 493.437421][T14395] dummy0: entered promiscuous mode [ 493.439898][T14395] hsr1: entered promiscuous mode [ 493.439987][T14395] hsr1: entered allmulticast mode [ 493.440000][T14395] bond0: entered allmulticast mode [ 493.440013][T14395] bond_slave_0: entered allmulticast mode [ 493.440037][T14395] bond_slave_1: entered allmulticast mode [ 493.440092][T14395] dummy0: entered allmulticast mode [ 493.960694][T14404] netlink: 'syz.5.3761': attribute type 1 has an invalid length. [ 493.960719][T14404] netlink: 'syz.5.3761': attribute type 4 has an invalid length. [ 493.960732][T14404] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3761'. [ 493.960748][T14404] NCSI netlink: No device for ifindex 458760 [ 494.961699][ T5931] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 495.114447][ T5931] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 495.114489][ T5931] usb 1-1: config 7 has no interface number 0 [ 495.118380][ T5931] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 495.118409][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.118429][ T5931] usb 1-1: Product: syz [ 495.118444][ T5931] usb 1-1: Manufacturer: syz [ 495.118458][ T5931] usb 1-1: SerialNumber: syz [ 495.201193][ T3118] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 495.351267][ T3118] usb 6-1: Using ep0 maxpacket: 8 [ 495.354750][ T3118] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 495.358593][ T3118] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 495.358623][ T3118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.358642][ T3118] usb 6-1: Product: syz [ 495.358658][ T3118] usb 6-1: Manufacturer: syz [ 495.358671][ T3118] usb 6-1: SerialNumber: syz [ 495.417968][ T3118] usb 6-1: config 0 descriptor?? [ 495.434745][ T3118] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 495.434806][ T3118] usb 6-1: setting power ON [ 495.434829][ T3118] dvb-usb: bulk message failed: -22 (2/0) [ 495.470352][ T3118] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.482170][ T3118] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 495.482234][ T3118] usb 6-1: media controller created [ 495.568689][ T3118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.609423][ T3118] usb 6-1: selecting invalid altsetting 6 [ 495.609447][ T3118] usb 6-1: digital interface selection failed (-22) [ 495.609463][ T3118] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 495.621552][ T3118] usb 6-1: setting power OFF [ 495.621578][ T3118] dvb-usb: bulk message failed: -22 (2/0) [ 495.621596][ T3118] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 495.621608][ T3118] (NULL device *): no alternate interface [ 495.729312][ T3118] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 495.758495][ T3118] usb 6-1: USB disconnect, device number 27 [ 496.021338][ T5931] as10x_usb: device has been detected [ 496.022479][ T5931] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 496.095352][T14448] netem: incorrect gi model size [ 496.095375][T14448] netem: change failed [ 496.097124][ T5931] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 496.501429][T14454] tmpfs: Invalid gid '0x00000000ffffffff' [ 496.583529][ T5931] as10x_usb: error during firmware upload part1 [ 496.584396][ T5931] Registered device Elgato EyeTV DTT Deluxe [ 496.633527][ T5931] usb 1-1: USB disconnect, device number 32 [ 496.783411][ T5931] Unregistered device Elgato EyeTV DTT Deluxe [ 496.792527][ T5931] as10x_usb: device has been disconnected [ 496.870635][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 496.870664][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 497.057491][T14465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3789'. [ 497.081772][T14465] bridge0: port 3(syz_tun) entered disabled state [ 497.087829][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.088106][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.643821][T14486] program syz.5.3798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.458697][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'. [ 499.121328][ T5844] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 499.286756][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.286813][ T5844] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 499.286838][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.298265][ T5844] usb 1-1: config 0 descriptor?? [ 499.379611][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3826'. [ 499.736784][ T5844] hid-rmi 0003:17EF:6085.0039: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 499.910395][ T5931] usb 1-1: USB disconnect, device number 33 [ 500.729036][T13857] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 500.881542][T13857] usb 5-1: Using ep0 maxpacket: 16 [ 500.884254][T13857] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 500.884305][T13857] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 500.884328][T13857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.895373][T13857] usb 5-1: config 0 descriptor?? [ 500.942811][T13857] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 501.135658][T13857] bcm5974 5-1:0.0: could not read from device [ 501.173477][T14586] sp0: Synchronizing with TNC [ 501.311188][T13857] input: failed to attach handler mousedev to device input27, error: -5 [ 501.332447][T13857] usb 5-1: USB disconnect, device number 32 [ 501.503751][T11260] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.522610][T11260] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.522662][T11260] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.522698][T11260] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.837026][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.837144][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.422328][T14611] input: syz0 as /devices/virtual/input/input28 [ 503.321290][ T5844] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 503.475661][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 503.479952][ T5844] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 503.479983][ T5844] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 503.480004][ T5844] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 503.480026][ T5844] usb 6-1: config 1 has no interface number 0 [ 503.480094][ T5844] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.480122][ T5844] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 503.480168][ T5844] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 503.480200][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.591869][ T5844] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 503.810898][ T5844] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 504.262570][ T5931] usb 6-1: USB disconnect, device number 28 [ 504.265701][ T5931] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 506.654975][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3907'. [ 507.107757][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3904'. [ 508.849123][T14765] pimreg: entered allmulticast mode [ 508.909254][T14765] pimreg: left allmulticast mode [ 509.034405][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.541734][T14774] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3932'. [ 510.701826][ T5903] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 510.851337][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 510.854357][ T5903] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 510.854386][ T5903] usb 5-1: config 0 has no interface number 0 [ 510.854453][ T5903] usb 5-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 510.854481][ T5903] usb 5-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 510.858236][ T5903] usb 5-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76 [ 510.858266][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.858286][ T5903] usb 5-1: Product: syz [ 510.858299][ T5903] usb 5-1: Manufacturer: syz [ 510.858314][ T5903] usb 5-1: SerialNumber: syz [ 510.945308][ T5903] usb 5-1: config 0 descriptor?? [ 510.946730][T14787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 510.946985][T14787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 511.456954][T14787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 511.459518][T14787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 511.701511][ T5903] asix 5-1:0.47 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 511.701833][ T5903] asix 5-1:0.47: probe with driver asix failed with error -71 [ 511.742463][ T5903] usb 5-1: USB disconnect, device number 33 [ 512.850571][ T37] kauditd_printk_skb: 152 callbacks suppressed [ 512.850594][ T37] audit: type=1326 audit(1758187395.063:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 512.884529][ T37] audit: type=1326 audit(1758187395.093:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 512.886711][ T37] audit: type=1326 audit(1758187395.103:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 512.888236][ T37] audit: type=1326 audit(1758187395.103:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 512.890359][ T37] audit: type=1326 audit(1758187395.103:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 512.979832][ T37] audit: type=1326 audit(1758187395.103:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 512.979893][ T37] audit: type=1326 audit(1758187395.193:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 513.007183][ T37] audit: type=1326 audit(1758187395.223:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 513.007240][ T37] audit: type=1326 audit(1758187395.223:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 513.009246][ T37] audit: type=1326 audit(1758187395.223:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 513.622213][T14820] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3952'. [ 516.302523][T14886] mkiss: ax0: crc mode is auto. [ 516.386461][T14889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.204651][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3991'. [ 520.204880][T14905] netlink: 'syz.2.3991': attribute type 5 has an invalid length. [ 520.410279][T14917] kthread_run failed with err -4 [ 524.002932][T14983] syz_tun: entered allmulticast mode [ 524.013531][T14981] syz_tun: left allmulticast mode [ 524.177433][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 524.231323][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 524.233711][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 524.235854][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 524.236865][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 524.819020][T14999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4032'. [ 524.819095][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4032'. [ 524.897723][T14985] lo speed is unknown, defaulting to 1000 [ 525.486845][T15003] tipc: Started in network mode [ 525.486865][T15003] tipc: Node identity , cluster identity 4711 [ 525.486882][T15003] tipc: Failed to set node id, please configure manually [ 525.486933][T15003] tipc: Enabling of bearer rejected, failed to enable media [ 525.531926][ T5903] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 525.691678][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 525.696386][ T5903] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.696419][ T5903] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.698839][ T5903] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 525.698865][ T5903] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 525.698887][ T5903] usb 7-1: Product: syz [ 525.698901][ T5903] usb 7-1: Manufacturer: syz [ 525.764869][ T5903] hub 7-1:4.0: USB hub found [ 525.937537][T11303] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.987296][ T5903] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 526.321786][ T6018] usb 7-1: USB disconnect, device number 8 [ 526.381294][ T59] Bluetooth: hci3: command tx timeout [ 526.482033][T11303] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.821185][ T6018] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 526.846220][T11303] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.981318][ T6018] usb 5-1: Using ep0 maxpacket: 16 [ 526.987308][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.987354][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.987495][ T6018] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 526.987543][ T6018] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 526.987567][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.074631][ T6018] usb 5-1: config 0 descriptor?? [ 527.535713][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535749][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535775][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535800][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535824][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535849][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535874][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535898][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535923][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.535948][ T6018] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 527.552427][ T6018] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 527.552458][ T6018] microsoft 0003:045E:07DA.003A: no inputs found [ 527.552470][ T6018] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 527.700296][T11303] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 527.780453][ T5917] usb 5-1: USB disconnect, device number 34 [ 528.060672][T11303] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.168701][T14985] chnl_net:caif_netlink_parms(): no params data found [ 528.472453][ T59] Bluetooth: hci3: command tx timeout [ 529.207034][T14985] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.207783][T14985] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.208074][T14985] bridge_slave_0: entered allmulticast mode [ 529.218118][T14985] bridge_slave_0: entered promiscuous mode [ 529.315501][T14985] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.315712][T14985] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.315932][T14985] bridge_slave_1: entered allmulticast mode [ 529.329101][T14985] bridge_slave_1: entered promiscuous mode [ 529.889027][T14985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.915483][T14985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.116754][T11303] bridge_slave_0: left allmulticast mode [ 530.116790][T11303] bridge_slave_0: left promiscuous mode [ 530.117154][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.372049][ T5903] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 530.410075][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4070'. [ 530.533253][ T5903] usb 1-1: Using ep0 maxpacket: 32 [ 530.535850][ T5903] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 530.535879][ T5903] usb 1-1: config 0 has no interface number 0 [ 530.538708][ T5903] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 530.538738][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.538757][ T5903] usb 1-1: Product: syz [ 530.538771][ T5903] usb 1-1: Manufacturer: syz [ 530.538786][ T5903] usb 1-1: SerialNumber: syz [ 530.551774][ T59] Bluetooth: hci3: command tx timeout [ 530.567233][ T5903] usb 1-1: config 0 descriptor?? [ 530.624511][ T5903] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 530.953087][ T5903] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 530.998867][ T5903] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 531.226354][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 531.241706][ T3118] usb 1-1: USB disconnect, device number 34 [ 531.267572][ T3118] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 531.293831][ T3118] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 531.294631][ T3118] quatech2 1-1:0.51: device disconnected [ 532.621238][ T59] Bluetooth: hci3: command tx timeout [ 533.233160][T11303] team0: Port device geneve0 removed [ 533.306418][T11303] batman_adv: batadv0: Interface deactivated: macvlan3 [ 533.343229][ T37] kauditd_printk_skb: 134 callbacks suppressed [ 533.343251][ T37] audit: type=1326 audit(1758187415.563:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 533.438347][T11303] batman_adv: batadv0: Removing interface: macvlan3 [ 534.065536][ T37] audit: type=1326 audit(1758187416.283:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.065751][ T37] audit: type=1326 audit(1758187416.283:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.065901][ T37] audit: type=1326 audit(1758187416.283:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.066084][ T37] audit: type=1326 audit(1758187416.283:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.066227][ T37] audit: type=1326 audit(1758187416.283:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.066410][ T37] audit: type=1326 audit(1758187416.283:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.066773][ T37] audit: type=1326 audit(1758187416.283:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.066824][ T37] audit: type=1326 audit(1758187416.283:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.066945][ T37] audit: type=1326 audit(1758187416.283:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15119 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7fc00000 [ 534.697786][ T59] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 534.755418][T11303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.861433][T11303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.898119][T11303] bond0 (unregistering): Released all slaves [ 535.165302][T14985] team0: Port device team_slave_0 added [ 535.275347][T14985] team0: Port device team_slave_1 added [ 535.372865][T15114] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 535.607154][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4088'. [ 535.607269][T15133] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4088'. [ 535.671663][T14985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.671682][T14985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.671711][T14985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.684171][T14985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.684187][T14985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.684210][T14985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.083323][T14985] hsr_slave_0: entered promiscuous mode [ 536.084857][T14985] hsr_slave_1: entered promiscuous mode [ 536.106699][T14985] debugfs: 'hsr0' already exists in 'hsr' [ 536.106729][T14985] Cannot create hsr debugfs directory [ 536.242072][T15144] UHID_CREATE from different security context by process 724 (syz.6.4095), this is not allowed. [ 536.911177][ T5917] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 537.061300][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 537.064001][ T5917] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.064036][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.064072][ T5917] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 537.064095][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.070466][ T5917] usb 1-1: config 0 descriptor?? [ 537.149742][T11303] tipc: Left network mode [ 537.571645][ T5917] nzxt-smart2 0003:1E71:2009.003B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 538.018082][ T5917] usb 1-1: USB disconnect, device number 35 [ 538.418828][T15191] bridge0: entered promiscuous mode [ 538.418988][T15191] macvlan3: entered promiscuous mode [ 538.705506][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 538.705653][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 538.708795][ T59] Bluetooth: hci2: hardware error 0x00 [ 540.061870][T11303] hsr_slave_0: left promiscuous mode [ 540.136005][T11303] hsr_slave_1: left promiscuous mode [ 540.137066][T11303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.137099][T11303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.200526][T11303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.200561][T11303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.424479][T11303] team_slave_0: left promiscuous mode [ 540.424590][T11303] team_slave_1: left promiscuous mode [ 540.424789][T11303] veth1_macvtap: left promiscuous mode [ 540.424920][T11303] veth0_macvtap: left promiscuous mode [ 540.426254][T11303] veth1_vlan: left promiscuous mode [ 540.435125][T11303] veth0_vlan: left promiscuous mode [ 540.781225][ T59] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 543.832642][T11303] team0 (unregistering): Port device team_slave_1 removed [ 544.072460][T11303] team0 (unregistering): Port device team_slave_0 removed [ 546.792297][T14985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 546.888513][T15255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.889521][T15255] batadv_slave_0: entered promiscuous mode [ 546.979489][T14985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 547.082078][T14985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 547.226590][T15261] bridge0: entered promiscuous mode [ 547.227131][T15261] macvtap1: entered allmulticast mode [ 547.227149][T15261] bridge0: entered allmulticast mode [ 547.293046][T15261] bridge0: port 3(macvtap1) entered blocking state [ 547.293359][T15261] bridge0: port 3(macvtap1) entered disabled state [ 547.443112][T15261] bridge0: left allmulticast mode [ 547.443183][T15261] bridge0: left promiscuous mode [ 547.776000][T14985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 548.359714][T14985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.405609][T14985] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.448585][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.449075][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.743576][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.743775][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.066993][T11303] IPVS: stop unused estimator thread 0... [ 550.491781][T14985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.975199][T14985] veth0_vlan: entered promiscuous mode [ 551.989539][T14985] veth1_vlan: entered promiscuous mode [ 552.185027][T14985] veth0_macvtap: entered promiscuous mode [ 552.201461][T14985] veth1_macvtap: entered promiscuous mode [ 552.373223][T14985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.387823][T14985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.471323][T11263] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.476526][ T1012] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.476605][ T1012] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.476645][ T1012] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.900156][T15355] vlan3: entered allmulticast mode [ 553.678017][T11302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.678041][T11302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.816777][T11263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.816801][T11263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.690850][T15397] misc userio: Can't change port type on an already running userio instance [ 556.193844][T15432] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4215'. [ 556.193874][T15432] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4215'. [ 557.773398][T15465] netlink: 'syz.6.4229': attribute type 2 has an invalid length. [ 557.773423][T15465] netlink: 51 bytes leftover after parsing attributes in process `syz.6.4229'. [ 557.782620][T15465] netlink: 'syz.6.4229': attribute type 2 has an invalid length. [ 557.782642][T15465] netlink: 51 bytes leftover after parsing attributes in process `syz.6.4229'. [ 558.127026][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 558.127047][ T37] audit: type=1326 audit(557.783:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c7ba4ada9 code=0x7ffc0000 [ 558.127099][ T37] audit: type=1326 audit(557.783:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.127152][ T37] audit: type=1326 audit(557.783:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.127595][ T37] audit: type=1326 audit(557.783:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.127651][ T37] audit: type=1326 audit(557.783:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.127909][ T37] audit: type=1326 audit(557.783:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.128204][ T37] audit: type=1326 audit(557.783:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.128459][ T37] audit: type=1326 audit(557.783:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.128947][ T37] audit: type=1326 audit(557.783:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 558.129009][ T37] audit: type=1326 audit(557.783:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15467 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7baaeba9 code=0x7ffc0000 [ 559.031569][ T5930] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 559.181183][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 559.184283][ T5930] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 559.184317][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 559.184354][ T5930] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 559.184377][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.236282][ T3118] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 559.250295][ T5930] usb 1-1: config 0 descriptor?? [ 559.401230][ T3118] usb 5-1: Using ep0 maxpacket: 16 [ 559.407319][ T3118] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.407462][ T3118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.407491][ T3118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 559.407514][ T3118] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 559.407537][ T3118] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.473183][ T3118] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 559.473225][ T3118] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 559.473246][ T3118] usb 5-1: Manufacturer: syz [ 559.505514][ T3118] usb 5-1: config 0 descriptor?? [ 559.539006][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 559.539230][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 559.570288][ T5930] usb 1-1: USB disconnect, device number 36 [ 560.111252][ T3118] rc_core: IR keymap rc-hauppauge not found [ 560.111274][ T3118] Registered IR keymap rc-empty [ 560.111441][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.131567][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.133771][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'. [ 560.153574][ T3118] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 560.185045][ T3118] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 560.204731][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.245151][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.261384][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.281488][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.301316][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.334182][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.353096][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.371373][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.401463][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.422225][ T3118] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.469164][ T5903] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 560.491432][ T3118] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 560.491461][ T3118] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 560.523647][ T3118] usb 5-1: USB disconnect, device number 35 [ 560.632218][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 560.635115][ T5903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.635179][ T5903] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.635202][ T5903] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.687317][ T5903] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 560.687350][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.687370][ T5903] usb 7-1: Product: syz [ 560.687384][ T5903] usb 7-1: Manufacturer: syz [ 560.687400][ T5903] usb 7-1: SerialNumber: syz [ 560.806782][ T5903] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 560.808792][ T5903] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 560.808911][ T5903] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 560.870218][T15523] tipc: Started in network mode [ 560.870252][T15523] tipc: Node identity ac14140f, cluster identity 4711 [ 560.887214][T15523] tipc: New replicast peer: 255.255.255.255 [ 560.894844][T15523] tipc: Enabled bearer , priority 10 [ 560.895486][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4255'. [ 561.003372][ T3118] usb 7-1: USB disconnect, device number 9 [ 562.002823][ T5903] tipc: Node number set to 2886997007 [ 563.267281][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.267387][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.579873][ T37] kauditd_printk_skb: 207 callbacks suppressed [ 563.579893][ T37] audit: type=1326 audit(563.233:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.602780][T15576] netlink: 'syz.4.4278': attribute type 4 has an invalid length. [ 563.603289][ T37] audit: type=1326 audit(563.263:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.603335][ T37] audit: type=1326 audit(563.263:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.603374][ T37] audit: type=1326 audit(563.263:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.603413][ T37] audit: type=1326 audit(563.263:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.603451][ T37] audit: type=1326 audit(563.263:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.603490][ T37] audit: type=1326 audit(563.263:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15575 comm="syz.4.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.761302][ T49] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 563.802082][ T37] audit: type=1326 audit(563.463:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.805659][ T37] audit: type=1326 audit(563.463:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.805798][ T37] audit: type=1326 audit(563.463:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15577 comm="syz.4.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525758eba9 code=0x7ffc0000 [ 563.911255][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 563.914365][ T49] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.914397][ T49] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.914422][ T49] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.914446][ T49] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.914492][ T49] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.914516][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.161681][ T49] usb 7-1: GET_CAPABILITIES returned 0 [ 564.161738][ T49] usbtmc 7-1:16.0: can't read capabilities [ 564.381867][ T3118] usb 7-1: USB disconnect, device number 10 [ 566.586612][T15656] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4312'. [ 566.586644][T15656] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4312'. [ 566.586946][T15656] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4312'. [ 566.586965][T15656] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4312'. [ 566.661136][ T5930] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 566.821280][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 566.823974][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 566.824018][ T5930] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 566.824042][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.866466][ T5930] usb 1-1: config 0 descriptor?? [ 567.305896][ T5930] hid (null): nested delimiters [ 567.497404][ T5930] usb 1-1: USB disconnect, device number 37 [ 568.517141][T15687] 9pnet_fd: Insufficient options for proto=fd [ 571.755292][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4364'. [ 572.188917][ T59] Bluetooth: hci3: link tx timeout [ 572.189443][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.194029][ T59] Bluetooth: hci3: link tx timeout [ 572.194051][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.248714][ T59] Bluetooth: hci3: link tx timeout [ 572.248738][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.248770][ T59] Bluetooth: hci3: link tx timeout [ 572.248781][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.248806][ T59] Bluetooth: hci3: link tx timeout [ 572.248817][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.248925][ T59] Bluetooth: hci3: link tx timeout [ 572.248937][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.249018][ T59] Bluetooth: hci3: link tx timeout [ 572.249030][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.249116][ T59] Bluetooth: hci3: link tx timeout [ 572.249128][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.249229][ T59] Bluetooth: hci3: link tx timeout [ 572.249240][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.249333][ T59] Bluetooth: hci3: link tx timeout [ 572.249345][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.249432][ T59] Bluetooth: hci3: link tx timeout [ 572.249444][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.275510][ T59] Bluetooth: hci3: link tx timeout [ 572.275532][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.276713][ T59] Bluetooth: hci3: link tx timeout [ 572.276725][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.276861][ T59] Bluetooth: hci3: link tx timeout [ 572.276872][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.277004][ T59] Bluetooth: hci3: link tx timeout [ 572.277014][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283161][ T59] Bluetooth: hci3: link tx timeout [ 572.283178][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283308][ T59] Bluetooth: hci3: link tx timeout [ 572.283318][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283442][ T59] Bluetooth: hci3: link tx timeout [ 572.283452][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283571][ T59] Bluetooth: hci3: link tx timeout [ 572.283581][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283723][ T59] Bluetooth: hci3: link tx timeout [ 572.283733][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283855][ T59] Bluetooth: hci3: link tx timeout [ 572.283865][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.283993][ T59] Bluetooth: hci3: link tx timeout [ 572.286562][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.286781][ T59] Bluetooth: hci3: link tx timeout [ 572.286792][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.286911][ T59] Bluetooth: hci3: link tx timeout [ 572.286921][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.287048][ T59] Bluetooth: hci3: link tx timeout [ 572.287058][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.287180][ T59] Bluetooth: hci3: link tx timeout [ 572.287190][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.287311][ T59] Bluetooth: hci3: link tx timeout [ 572.287321][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.287464][ T59] Bluetooth: hci3: link tx timeout [ 572.287475][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.289063][ T59] Bluetooth: hci3: link tx timeout [ 572.289077][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.296525][ T59] Bluetooth: hci3: link tx timeout [ 572.296545][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.296677][ T59] Bluetooth: hci3: link tx timeout [ 572.296688][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.296807][ T59] Bluetooth: hci3: link tx timeout [ 572.296817][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.297037][ T59] Bluetooth: hci3: link tx timeout [ 572.297049][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.297177][ T59] Bluetooth: hci3: link tx timeout [ 572.297187][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.297309][ T59] Bluetooth: hci3: link tx timeout [ 572.297319][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.300495][ T59] Bluetooth: hci3: link tx timeout [ 572.300513][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.302437][ T59] Bluetooth: hci3: link tx timeout [ 572.302456][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.305196][ T59] Bluetooth: hci3: link tx timeout [ 572.305212][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.306372][ T59] Bluetooth: hci3: link tx timeout [ 572.306385][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.307551][ T59] Bluetooth: hci3: link tx timeout [ 572.307564][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.320109][ T59] Bluetooth: hci3: link tx timeout [ 572.320129][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.321191][ T59] Bluetooth: hci3: link tx timeout [ 572.321205][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.321319][ T59] Bluetooth: hci3: link tx timeout [ 572.321331][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.322456][ T59] Bluetooth: hci3: link tx timeout [ 572.322470][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.322591][ T59] Bluetooth: hci3: link tx timeout [ 572.322601][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.322721][ T59] Bluetooth: hci3: link tx timeout [ 572.322731][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.322851][ T59] Bluetooth: hci3: link tx timeout [ 572.322861][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.322991][ T59] Bluetooth: hci3: link tx timeout [ 572.323001][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.323143][ T59] Bluetooth: hci3: link tx timeout [ 572.323154][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.323273][ T59] Bluetooth: hci3: link tx timeout [ 572.323283][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.324688][ T59] Bluetooth: hci3: link tx timeout [ 572.324700][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.326047][ T59] Bluetooth: hci3: link tx timeout [ 572.326058][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.326179][ T59] Bluetooth: hci3: link tx timeout [ 572.326190][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.327163][ T59] Bluetooth: hci3: link tx timeout [ 572.327175][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.327296][ T59] Bluetooth: hci3: link tx timeout [ 572.327306][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.327428][ T59] Bluetooth: hci3: link tx timeout [ 572.327438][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.327563][ T59] Bluetooth: hci3: link tx timeout [ 572.327573][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.327694][ T59] Bluetooth: hci3: link tx timeout [ 572.327705][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.330330][ T59] Bluetooth: hci3: link tx timeout [ 572.330343][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.330470][ T59] Bluetooth: hci3: link tx timeout [ 572.330480][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.330602][ T59] Bluetooth: hci3: link tx timeout [ 572.330612][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.330730][ T59] Bluetooth: hci3: link tx timeout [ 572.330740][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.332771][ T59] Bluetooth: hci3: link tx timeout [ 572.332787][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.332913][ T59] Bluetooth: hci3: link tx timeout [ 572.332924][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.335034][ T59] Bluetooth: hci3: link tx timeout [ 572.335047][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.335171][ T59] Bluetooth: hci3: link tx timeout [ 572.335181][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.335301][ T59] Bluetooth: hci3: link tx timeout [ 572.335312][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.336172][ T59] Bluetooth: hci3: link tx timeout [ 572.336184][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 572.709503][T15792] trusted_key: encrypted_key: keyword 'udate' not recognized [ 572.978813][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4378'. [ 573.537918][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4383'. [ 574.236349][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 574.562787][T15834] netlink: 'syz.2.4392': attribute type 2 has an invalid length. [ 575.832739][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 575.832759][ T37] audit: type=1326 audit(575.493:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.832811][ T37] audit: type=1326 audit(575.493:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.854818][ T37] audit: type=1326 audit(575.503:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.854872][ T37] audit: type=1326 audit(575.513:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.854920][ T37] audit: type=1326 audit(575.513:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.856433][ T37] audit: type=1326 audit(575.513:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.856481][ T37] audit: type=1326 audit(575.513:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.856522][ T37] audit: type=1326 audit(575.513:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.861207][ T37] audit: type=1326 audit(575.513:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f24c2eba9 code=0x7ffc0000 [ 575.861263][ T37] audit: type=1326 audit(575.513:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15863 comm="syz.2.4406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f24c2eba9 code=0x7ff00000 [ 576.349354][T15878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.217462][T15899] netlink: 452 bytes leftover after parsing attributes in process `syz.0.4422'. [ 577.584637][T15907] bridge0: entered promiscuous mode [ 577.584780][T15907] macvlan2: entered promiscuous mode [ 578.581282][ T49] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 578.731254][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 578.735832][ T49] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 578.735865][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 578.735886][ T49] usb 5-1: SerialNumber: syz [ 578.781984][ T49] usb 5-1: config 0 descriptor?? [ 578.811695][ T49] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 578.813630][ T49] usb 5-1: Detected FT232A [ 578.818790][ T49] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 579.014127][ T49] usb 5-1: USB disconnect, device number 36 [ 579.027766][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 579.028350][ T49] ftdi_sio 5-1:0.0: device disconnected [ 580.827175][T15985] netlink: 'syz.4.4461': attribute type 9 has an invalid length. [ 580.827203][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4461'. [ 580.917848][T15985] hsr0: entered promiscuous mode [ 580.918271][T15985] macvlan4: entered promiscuous mode [ 580.918516][T15985] macvlan4: entered allmulticast mode [ 580.918526][T15985] hsr0: entered allmulticast mode [ 580.918535][T15985] hsr_slave_0: entered allmulticast mode [ 580.918554][T15985] hsr_slave_1: entered allmulticast mode [ 581.767417][T16009] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 581.775241][T16009] team0: Port device batadv1 added [ 582.182867][T16019] nbd: couldn't find device at index 0 [ 582.810699][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4485'. [ 582.956646][T16045] program syz.4.4489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.092920][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4504'. [ 584.092948][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4504'. [ 584.158129][T16078] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 584.542041][T16084] macvlan0: entered promiscuous mode [ 586.821300][ T3118] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 586.862474][ T49] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 586.971137][ T3118] usb 1-1: Using ep0 maxpacket: 16 [ 586.973677][ T3118] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 586.973709][ T3118] usb 1-1: config 0 has no interface number 0 [ 586.973768][ T3118] usb 1-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 586.979036][ T3118] usb 1-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 586.979069][ T3118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.979090][ T3118] usb 1-1: Product: syz [ 586.979103][ T3118] usb 1-1: Manufacturer: syz [ 586.979117][ T3118] usb 1-1: SerialNumber: syz [ 586.994756][ T3118] usb 1-1: config 0 descriptor?? [ 587.052305][T16133] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 587.080125][ T3118] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.081020][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 587.089182][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.089216][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.089257][ T49] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 587.089279][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.164132][ T49] usb 7-1: config 0 descriptor?? [ 587.629022][ T49] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.003D/input/input32 [ 587.711673][ T49] appleir 0003:05AC:8241.003D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 587.810676][ T5903] usb 7-1: USB disconnect, device number 11 [ 587.980513][T16155] overlayfs: failed to clone upperpath [ 588.551525][ T5917] usb 1-1: USB disconnect, device number 38 [ 589.682075][T16188] team0: Device macvlan5 is already an upper device of the team interface [ 589.812687][T16198] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4564'. [ 590.628236][ T37] kauditd_printk_skb: 2628 callbacks suppressed [ 590.628261][ T37] audit: type=1804 audit(590.263:3356): pid=16227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.4575" name="/newroot/943/bus" dev="tmpfs" ino=4791 res=1 errno=0 [ 591.561328][ T3118] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 591.629523][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bfa7800: rx timeout, send abort [ 591.634387][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bfa7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 591.742591][ T3118] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 591.742621][ T3118] usb 5-1: config 0 has no interface number 0 [ 591.746903][ T3118] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 591.746936][ T3118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.746956][ T3118] usb 5-1: Product: syz [ 591.746971][ T3118] usb 5-1: Manufacturer: syz [ 591.746985][ T3118] usb 5-1: SerialNumber: syz [ 591.758517][ T3118] usb 5-1: config 0 descriptor?? [ 591.982256][ T3118] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 592.004967][ T3118] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 592.005377][ T3118] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 592.005432][ T3118] usb 5-1: media controller created [ 592.126395][ T3118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.235332][ T3118] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 592.451189][ T3118] usb 5-1: USB disconnect, device number 37 [ 592.492580][T16270] cgroup: fork rejected by pids controller in /syz2 [ 594.364605][T16808] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4607'. [ 596.631285][ T3118] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 596.785848][ T3118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 596.785906][ T3118] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 596.785930][ T3118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.796005][ T3118] usb 7-1: config 0 descriptor?? [ 596.797302][T16874] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 596.845578][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4644'. [ 597.281723][ T3118] ryos 0003:1E7D:3138.003E: unknown main item tag 0x0 [ 597.281765][ T3118] ryos 0003:1E7D:3138.003E: unknown main item tag 0x1 [ 597.295083][ T3118] ryos 0003:1E7D:3138.003E: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.6-1/input0 [ 597.420066][T16906] sctp: Trying to GSO but underlying device doesn't support it. [ 597.498313][ T3118] usb 7-1: USB disconnect, device number 12 [ 598.249452][T16932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4661'. [ 598.685437][T16947] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 599.424935][T16955] bond0: entered promiscuous mode [ 599.424959][T16955] bond_slave_0: entered promiscuous mode [ 599.425254][T16955] bond_slave_1: entered promiscuous mode [ 599.427889][T16955] batadv0: entered promiscuous mode [ 599.429149][T16955] debugfs: 'hsr1' already exists in 'hsr' [ 599.429174][T16955] Cannot create hsr debugfs directory [ 599.429527][T16955] hsr1: entered promiscuous mode [ 599.430210][T16955] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 600.722908][T16982] batman_adv: batadv0: Adding interface: gretap1 [ 600.722927][T16982] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.722964][T16982] batman_adv: batadv0: Interface activated: gretap1 [ 602.055022][T17029] fuse: Bad value for 'fd' [ 603.552628][T17068] overlay: filesystem on ./file0 not supported as upperdir [ 603.877539][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4725'. [ 605.391518][ T5844] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 605.551124][ T5844] usb 7-1: Using ep0 maxpacket: 8 [ 605.553738][ T5844] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 605.553776][ T5844] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 605.553797][ T5844] usb 7-1: config 0 has no interface number 0 [ 605.553848][ T5844] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 605.553874][ T5844] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 605.553901][ T5844] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 605.555569][ T5844] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 605.555597][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 605.555617][ T5844] usb 7-1: Product: syz [ 605.657872][ T5844] usb 7-1: config 0 descriptor?? [ 605.658863][T17097] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 606.276254][ T5844] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input33 [ 606.511901][ T6018] usb 7-1: USB disconnect, device number 13 [ 606.512122][ C0] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 607.321286][T17131] 2g,{: renamed from lo (while UP) [ 609.010791][T17169] loop6: detected capacity change from 0 to 7 [ 609.031143][ C1] blk_print_req_error: 5 callbacks suppressed [ 609.031167][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.031197][ C1] buffer_io_error: 5 callbacks suppressed [ 609.031208][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.064054][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.064091][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.064486][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.064510][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.064740][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.064763][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.065023][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.065045][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.065283][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.065305][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.065528][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.065550][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.065634][T17169] ldm_validate_partition_table(): Disk read failed. [ 609.065782][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.065804][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.066028][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.066051][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.066326][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 609.066348][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 609.066660][T17169] Dev loop6: unable to read RDB block 0 [ 609.067516][T17169] loop6: unable to read partition table [ 609.067782][T17169] loop6: partition table beyond EOD, truncated [ 609.067819][T17169] loop_reread_partitions: partition scan of loop6 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 609.107649][T11004] ldm_validate_partition_table(): Disk read failed. [ 609.134257][T11004] Dev loop6: unable to read RDB block 0 [ 609.158099][T11004] loop6: unable to read partition table [ 609.158399][T11004] loop6: partition table beyond EOD, truncated [ 609.867913][T17193] sctp: [Deprecated]: syz.4.4780 (pid 17193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.867913][T17193] Use struct sctp_sack_info instead [ 611.051176][ T3118] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 611.224282][ T3118] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 611.224329][ T3118] usb 5-1: can't read configurations, error -71 [ 611.378673][T17226] openvswitch: netlink: Missing key (keys=40, expected=80) [ 611.851263][ T5903] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 612.001285][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 612.005932][ T5903] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 612.005965][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.044852][ T5903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 612.044874][ T5903] pvrusb2: ********** [ 612.044881][ T5903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 612.044893][ T5903] pvrusb2: Important functionality might not be entirely working. [ 612.044902][ T5903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 612.044913][ T5903] pvrusb2: ********** [ 612.261258][ T2367] pvrusb2: Invalid write control endpoint [ 612.459622][ T5844] usb 7-1: USB disconnect, device number 14 [ 612.558815][ T2367] pvrusb2: Invalid write control endpoint [ 612.558832][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 612.558848][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 612.558856][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 612.558865][ T2367] pvrusb2: Device being rendered inoperable [ 612.566110][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 612.566174][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 612.576452][ T2367] pvrusb2: Attached sub-driver cx25840 [ 612.576468][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 612.576477][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 614.071263][ T6018] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 614.223128][ T6018] usb 5-1: Using ep0 maxpacket: 32 [ 614.226867][ T6018] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 614.226901][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.269817][ T6018] usb 5-1: config 0 descriptor?? [ 614.526769][ T6018] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 614.542491][ T6018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 614.546832][ T6018] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 614.546897][ T6018] usb 5-1: media controller created [ 614.752112][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.785208][ T6018] az6027: usb out operation failed. (-71) [ 614.788790][ T6018] az6027: usb out operation failed. (-71) [ 614.788810][ T6018] stb0899_attach: Driver disabled by Kconfig [ 614.788821][ T6018] az6027: no front-end attached [ 614.788821][ T6018] [ 614.789264][ T6018] az6027: usb out operation failed. (-71) [ 614.789278][ T6018] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 614.797590][ T6018] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 614.838286][ T6018] dvb-usb: schedule remote query interval to 400 msecs. [ 614.838311][ T6018] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 614.848715][ T6018] usb 5-1: USB disconnect, device number 40 [ 615.150804][ T6018] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 616.425378][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'. [ 616.811733][ T49] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 616.961319][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 616.965750][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.967336][ T49] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 616.967365][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 616.967386][ T49] usb 7-1: SerialNumber: syz [ 616.985473][ T49] usb 7-1: config 0 descriptor?? [ 617.024568][ T49] usb 7-1: Found UVC 0.00 device (05ac:8501) [ 617.025502][ T49] usb 7-1: Failed to create links for entity 255 [ 617.025526][ T49] usb 7-1: Failed to register entities (-22). [ 617.124231][T17351] netlink: 'syz.0.4851': attribute type 6 has an invalid length. [ 617.240514][ T6018] usb 7-1: USB disconnect, device number 15 [ 617.532378][T17366] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4859'. [ 617.608806][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4860'. [ 617.748665][T17366] hsr0 (unregistering): left allmulticast mode [ 617.987892][T17375] program syz.6.4863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.668468][T17449] netlink: 'syz.7.4896': attribute type 1 has an invalid length. [ 620.761339][T17446] nbd2: detected capacity change from 0 to 127 [ 620.762488][ T59] block nbd2: Receive control failed (result -32) [ 620.802829][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4897'. [ 622.151863][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 623.108085][ T37] audit: type=1326 audit(622.763:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.108146][ T37] audit: type=1326 audit(622.763:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174633][ T37] audit: type=1326 audit(622.823:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174699][ T37] audit: type=1326 audit(622.823:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174747][ T37] audit: type=1326 audit(622.823:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174793][ T37] audit: type=1326 audit(622.823:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174840][ T37] audit: type=1326 audit(622.823:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174888][ T37] audit: type=1326 audit(622.823:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174937][ T37] audit: type=1326 audit(622.823:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.174985][ T37] audit: type=1326 audit(622.823:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17511 comm="syz.0.4925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8375f1eba9 code=0x7ffc0000 [ 623.690550][T17532] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4933'. [ 624.221413][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 624.716681][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.716783][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.759036][T17563] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 624.760275][T17563] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 625.232089][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4953'. [ 626.258024][ T5844] Process accounting resumed [ 627.106432][T17627] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4979'. [ 627.106458][T17627] netlink: 'syz.7.4979': attribute type 10 has an invalid length. [ 627.620366][T17642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.279964][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.987586][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5006'. [ 634.461779][ T6018] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 634.611408][ T6018] usb 7-1: Using ep0 maxpacket: 32 [ 634.614560][ T6018] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 634.614590][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.655379][ C0] sched: DL replenish lagged too much [ 634.689506][ T6018] usb 7-1: config 0 descriptor?? [ 634.965298][ T6018] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 635.007725][ T6018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 635.022559][ T6018] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 635.022634][ T6018] usb 7-1: media controller created [ 635.139949][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 635.227090][ T6018] az6027: usb out operation failed. (-71) [ 635.227640][ T6018] az6027: usb out operation failed. (-71) [ 635.227655][ T6018] stb0899_attach: Driver disabled by Kconfig [ 635.227665][ T6018] az6027: no front-end attached [ 635.227665][ T6018] [ 635.271590][ T6018] az6027: usb out operation failed. (-71) [ 635.271615][ T6018] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 635.304510][ T6018] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 635.310647][ T6018] dvb-usb: schedule remote query interval to 400 msecs. [ 635.310678][ T6018] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 635.352915][ T6018] usb 7-1: USB disconnect, device number 16 [ 646.534237][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.567370][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.601446][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.607405][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.609324][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 648.701329][ T5842] Bluetooth: hci5: command tx timeout [ 650.781587][ T5842] Bluetooth: hci5: command tx timeout [ 651.762979][ T3593] kworker/u8:12 (3593) used greatest stack depth: 12936 bytes left [ 651.865702][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 651.954221][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 651.968850][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 651.970284][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 651.986167][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 652.384290][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 652.417900][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 652.445073][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 652.446597][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 652.447621][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 652.861273][ T5842] Bluetooth: hci5: command tx timeout [ 653.725770][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 653.757265][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 653.759154][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 653.779723][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 653.780846][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 653.909979][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 653.941636][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 653.948398][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 653.979646][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 653.980653][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 654.061350][ T59] Bluetooth: hci6: command tx timeout [ 654.541317][ T59] Bluetooth: hci7: command tx timeout [ 654.941614][ T59] Bluetooth: hci5: command tx timeout [ 655.901492][ T59] Bluetooth: hci8: command tx timeout [ 656.061773][ T59] Bluetooth: hci9: command tx timeout [ 656.141434][ T59] Bluetooth: hci6: command tx timeout [ 656.625867][ T59] Bluetooth: hci7: command tx timeout [ 657.981646][ T59] Bluetooth: hci8: command tx timeout [ 658.141347][ T59] Bluetooth: hci9: command tx timeout [ 658.221724][ T59] Bluetooth: hci6: command tx timeout [ 658.701924][ T59] Bluetooth: hci7: command tx timeout [ 660.061315][ T59] Bluetooth: hci8: command tx timeout [ 660.221382][ T59] Bluetooth: hci9: command tx timeout [ 660.301395][ T59] Bluetooth: hci6: command tx timeout [ 660.784835][ T59] Bluetooth: hci7: command tx timeout [ 662.141392][ T59] Bluetooth: hci8: command tx timeout [ 662.301678][ T59] Bluetooth: hci9: command tx timeout [ 672.731537][ T1184] kworker/u8:10 (1184) used greatest stack depth: 12360 bytes left [ 672.784012][ T6018] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 682.373468][T17698] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.221452][ T1129] wlan1: Trigger new scan to find an IBSS to join [ 686.460037][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.480720][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.449871][T11260] wlan1: Creating new IBSS network, BSSID 9a:3b:7d:0e:31:9d [ 707.549826][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 707.577021][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 707.579096][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 707.580872][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 707.603658][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.667370][ T59] Bluetooth: hci0: command tx timeout [ 711.751814][ T59] Bluetooth: hci0: command tx timeout [ 712.296851][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 712.335990][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 712.339318][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 712.358318][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 712.359290][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.695755][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 712.719748][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 712.729837][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 712.771579][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 712.772895][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 713.734007][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 713.791775][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 713.794235][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 713.795611][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 713.796533][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 713.822691][ T5842] Bluetooth: hci0: command tx timeout [ 714.186380][T14987] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 714.227453][T14987] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 714.229281][T14987] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 714.230710][T14987] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 714.253704][T14987] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 714.461340][ T59] Bluetooth: hci1: command tx timeout [ 714.861279][ T59] Bluetooth: hci2: command tx timeout [ 715.901347][T14987] Bluetooth: hci0: command tx timeout [ 715.901438][ T59] Bluetooth: hci4: command tx timeout [ 716.301537][ T59] Bluetooth: hci10: command tx timeout [ 716.548053][ T59] Bluetooth: hci1: command tx timeout [ 716.941434][ T59] Bluetooth: hci2: command tx timeout [ 717.984537][ T59] Bluetooth: hci4: command tx timeout [ 718.381592][ T59] Bluetooth: hci10: command tx timeout [ 718.621640][ T59] Bluetooth: hci1: command tx timeout [ 719.023195][ T59] Bluetooth: hci2: command tx timeout [ 720.061726][ T59] Bluetooth: hci4: command tx timeout [ 720.461454][ T59] Bluetooth: hci10: command tx timeout [ 720.705897][ T59] Bluetooth: hci1: command tx timeout [ 721.101290][ T59] Bluetooth: hci2: command tx timeout [ 721.480330][T11263] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.141212][ T59] Bluetooth: hci4: command tx timeout [ 722.541868][ T59] Bluetooth: hci10: command tx timeout [ 747.588805][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.588902][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.701421][T11277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 767.684245][T14987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 767.720642][T14987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 767.730224][T14987] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 767.742802][T14987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 767.758585][T14987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.822178][T14987] Bluetooth: hci3: command tx timeout [ 770.145877][T14987] Bluetooth: hci5: command 0x0406 tx timeout [ 771.901309][T14987] Bluetooth: hci3: command tx timeout [ 773.326486][T17751] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 773.365922][T17751] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 773.369527][T17751] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 773.385399][T17751] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 773.386416][T17751] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 773.629543][T17757] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 773.660482][T17757] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 773.663753][T17757] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 773.666381][T17757] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 773.667419][T17757] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 773.942664][T17754] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 773.947259][T17754] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 773.948968][T17754] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 773.950674][T17754] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 774.000685][T17754] Bluetooth: hci3: command tx timeout [ 774.012281][T17759] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 774.250582][T17761] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 774.269821][T17761] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 774.285111][T17761] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 774.303876][T17761] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 774.304857][T17761] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 775.290648][T17761] Bluetooth: hci6: command 0x0406 tx timeout [ 775.290699][T17761] Bluetooth: hci7: command 0x0406 tx timeout [ 776.063033][T17759] Bluetooth: hci3: command tx timeout [ 776.081922][T17682] syz_tun (unregistering): left allmulticast mode [ 776.081960][T17682] syz_tun (unregistering): left promiscuous mode [ 776.082111][T17682] bridge0: port 3(syz_tun) entered disabled state [ 780.541714][T17765] Bluetooth: hci8: command 0x0406 tx timeout [ 780.541757][T17765] Bluetooth: hci9: command 0x0406 tx timeout [ 795.354112][T11280] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 801.826832][ T5842] Bluetooth: hci11: command tx timeout [ 801.827615][ T5842] Bluetooth: hci14: command tx timeout [ 801.827904][ T5842] Bluetooth: hci13: command tx timeout [ 801.828173][ T5842] Bluetooth: hci12: command tx timeout [ 803.903597][T14987] Bluetooth: hci13: command tx timeout [ 803.903637][T14987] Bluetooth: hci14: command tx timeout [ 803.903662][T14987] Bluetooth: hci11: command tx timeout [ 803.921015][T17759] Bluetooth: hci12: command tx timeout [ 805.983490][T17759] Bluetooth: hci12: command tx timeout [ 805.983531][T17759] Bluetooth: hci11: command tx timeout [ 805.983555][T17759] Bluetooth: hci14: command tx timeout [ 805.983577][T17759] Bluetooth: hci13: command tx timeout [ 808.061344][T14987] Bluetooth: hci13: command tx timeout [ 808.061380][T14987] Bluetooth: hci14: command tx timeout [ 808.061403][T14987] Bluetooth: hci11: command tx timeout [ 808.061469][T17759] Bluetooth: hci12: command tx timeout [ 809.041862][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.041969][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.691095][T11303] ------------[ cut here ]------------ [ 817.691114][T11303] WARNING: CPU: 1 PID: 11303 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 817.691159][T11303] Modules linked in: [ 817.691180][T11303] CPU: 1 UID: 0 PID: 11303 Comm: kworker/u8:59 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 817.691203][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.691217][T11303] Workqueue: cfg80211 cfg80211_event_work [ 817.691246][T11303] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 817.691273][T11303] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 02 ca 68 f7 90 0f 0b 90 eb bd e8 f7 c9 68 f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 e7 c9 68 f7 90 0f 0b 90 e9 de fd [ 817.691291][T11303] RSP: 0018:ffffc90004bcf8e0 EFLAGS: 00010293 [ 817.691309][T11303] RAX: ffffffff8a55a449 RBX: dffffc0000000000 RCX: ffff88804a51bb80 [ 817.691325][T11303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.691338][T11303] RBP: ffffc90004bcf9b0 R08: ffffffff8f1d6137 R09: 1ffffffff1e3ac26 [ 817.691353][T11303] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: ffff88806205cf10 [ 817.691368][T11303] R13: 1ffff92000979f24 R14: ffff88804bc73e38 R15: 000000000000001f [ 817.691384][T11303] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 817.691400][T11303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.691415][T11303] CR2: 00007fd8ef4052ce CR3: 0000000061176000 CR4: 00000000003526f0 [ 817.691435][T11303] Call Trace: [ 817.691444][T11303] [ 817.691454][T11303] ? __pfx_migrate_enable+0x10/0x10 [ 817.691484][T11303] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 817.691512][T11303] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 817.691552][T11303] cfg80211_process_wdev_events+0x37b/0x4e0 [ 817.691589][T11303] cfg80211_process_rdev_events+0xa1/0x110 [ 817.691614][T11303] cfg80211_event_work+0x31/0x70 [ 817.691640][T11303] ? process_scheduled_works+0x9ef/0x17b0 [ 817.691666][T11303] process_scheduled_works+0xade/0x17b0 [ 817.691726][T11303] ? __pfx_process_scheduled_works+0x10/0x10 [ 817.691775][T11303] worker_thread+0x8a0/0xda0 [ 817.691833][T11303] kthread+0x70e/0x8a0 [ 817.691868][T11303] ? __pfx_worker_thread+0x10/0x10 [ 817.691905][T11303] ? __pfx_kthread+0x10/0x10 [ 817.691948][T11303] ? __pfx_kthread+0x10/0x10 [ 817.691980][T11303] ret_from_fork+0x439/0x7d0 [ 817.692011][T11303] ? __pfx_ret_from_fork+0x10/0x10 [ 817.692045][T11303] ? __switch_to_asm+0x39/0x70 [ 817.692064][T11303] ? __switch_to_asm+0x33/0x70 [ 817.692082][T11303] ? __pfx_kthread+0x10/0x10 [ 817.692114][T11303] ret_from_fork_asm+0x1a/0x30 [ 817.692152][T11303] [ 817.692163][T11303] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 817.692177][T11303] CPU: 1 UID: 0 PID: 11303 Comm: kworker/u8:59 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 817.692201][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.692213][T11303] Workqueue: cfg80211 cfg80211_event_work [ 817.692239][T11303] Call Trace: [ 817.692247][T11303] [ 817.692255][T11303] dump_stack_lvl+0x99/0x250 [ 817.692285][T11303] ? __asan_memcpy+0x40/0x70 [ 817.692308][T11303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.692338][T11303] ? __pfx__printk+0x10/0x10 [ 817.692377][T11303] vpanic+0x281/0x750 [ 817.692406][T11303] ? __pfx__printk+0x10/0x10 [ 817.692427][T11303] ? __pfx_vpanic+0x10/0x10 [ 817.692456][T11303] ? is_bpf_text_address+0x26/0x2b0 [ 817.692499][T11303] panic+0xb9/0xc0 [ 817.692526][T11303] ? __pfx_panic+0x10/0x10 [ 817.692573][T11303] __warn+0x31b/0x4b0 [ 817.692600][T11303] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 817.692630][T11303] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 817.692667][T11303] report_bug+0x2be/0x4f0 [ 817.692695][T11303] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 817.692721][T11303] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 817.692746][T11303] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 817.692772][T11303] handle_bug+0x84/0x160 [ 817.692795][T11303] exc_invalid_op+0x1a/0x50 [ 817.692816][T11303] asm_exc_invalid_op+0x1a/0x20 [ 817.692836][T11303] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 817.692862][T11303] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 02 ca 68 f7 90 0f 0b 90 eb bd e8 f7 c9 68 f7 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 e7 c9 68 f7 90 0f 0b 90 e9 de fd [ 817.692879][T11303] RSP: 0018:ffffc90004bcf8e0 EFLAGS: 00010293 [ 817.692905][T11303] RAX: ffffffff8a55a449 RBX: dffffc0000000000 RCX: ffff88804a51bb80 [ 817.692920][T11303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.692932][T11303] RBP: ffffc90004bcf9b0 R08: ffffffff8f1d6137 R09: 1ffffffff1e3ac26 [ 817.692947][T11303] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: ffff88806205cf10 [ 817.692962][T11303] R13: 1ffff92000979f24 R14: ffff88804bc73e38 R15: 000000000000001f [ 817.692987][T11303] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 817.693023][T11303] ? __pfx_migrate_enable+0x10/0x10 [ 817.693050][T11303] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 817.693076][T11303] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 817.693116][T11303] cfg80211_process_wdev_events+0x37b/0x4e0 [ 817.693151][T11303] cfg80211_process_rdev_events+0xa1/0x110 [ 817.693177][T11303] cfg80211_event_work+0x31/0x70 [ 817.693203][T11303] ? process_scheduled_works+0x9ef/0x17b0 [ 817.693228][T11303] process_scheduled_works+0xade/0x17b0 [ 817.693289][T11303] ? __pfx_process_scheduled_works+0x10/0x10 [ 817.693336][T11303] worker_thread+0x8a0/0xda0 [ 817.693393][T11303] kthread+0x70e/0x8a0 [ 817.693428][T11303] ? __pfx_worker_thread+0x10/0x10 [ 817.693450][T11303] ? __pfx_kthread+0x10/0x10 [ 817.693482][T11303] ? __pfx_kthread+0x10/0x10 [ 817.693513][T11303] ret_from_fork+0x439/0x7d0 [ 817.693541][T11303] ? __pfx_ret_from_fork+0x10/0x10 [ 817.693575][T11303] ? __switch_to_asm+0x39/0x70 [ 817.693593][T11303] ? __switch_to_asm+0x33/0x70 [ 817.693611][T11303] ? __pfx_kthread+0x10/0x10 [ 817.693642][T11303] ret_from_fork_asm+0x1a/0x30 [ 817.693682][T11303] [ 817.693976][T11303] Kernel Offset: disabled