last executing test programs: 4m37.008293071s ago: executing program 4 (id=723): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="40fa1a"], 0x0, 0x0, 0x0}, 0x0) 4m35.280716922s ago: executing program 4 (id=738): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) unshare(0x2a020480) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0xc) 4m35.088613237s ago: executing program 4 (id=742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) sendfile(r0, r1, 0x0, 0x20000023896) 4m34.874152284s ago: executing program 4 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 4m34.635316702s ago: executing program 4 (id=749): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000300006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 4m33.640545357s ago: executing program 4 (id=758): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad337212006a3e508b8040c7bc6e583cc41170a13349e2cfcc4b64bd4fbf41ee", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]}) 4m33.176544596s ago: executing program 32 (id=758): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad337212006a3e508b8040c7bc6e583cc41170a13349e2cfcc4b64bd4fbf41ee", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]}) 3m47.788505577s ago: executing program 2 (id=1047): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 3m47.498205537s ago: executing program 2 (id=1050): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) 3m46.280450008s ago: executing program 2 (id=1054): r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 3m46.075045965s ago: executing program 2 (id=1056): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x8, 0x0, 0xfffffffd}) 3m45.680096542s ago: executing program 2 (id=1061): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 3m45.42522929s ago: executing program 2 (id=1062): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1, 0x100, "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", 0x55, 0x0, 0x5, 0x0, 0x5, 0xb, 0x4, 0x1}, r2}}, 0x120) 3m30.268114005s ago: executing program 33 (id=1062): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1, 0x100, "4a9ed88995ac02df2c525c6e65518e015138763dd364e970256b91f9c441158b3c212b6b37e9f7aea65d51d241ca09acfa2d56b36f94a5c8973ce998e18e699e92a4313b1a617d7fc66259dc336639c58c29a345e8757dd12f4f442ffb5b149f215641e3273241a6d61c82bdd0cd21de42fdce71620ff50b9ef62a2d19a82f3ddac7028206a0c09eb991e2ebe5584bac512dc6afe5eb4708e4bf678cbd893a3be0947616c78b79d17132698ceff0c4e91175883d3f7b505fdfd9e9873e74d82a3561093b7c3eb1cfc9208eaf38fdfdf1ec09ce37d54958a203a13898e858992188ae8dd663f9592851431fb3ec62ba854a02897f4601cc768d59c25dc133aed5", 0x55, 0x0, 0x5, 0x0, 0x5, 0xb, 0x4, 0x1}, r2}}, 0x120) 2m15.741399488s ago: executing program 0 (id=1741): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x8, r0, 0x33, {0x81, 0x7fffffff}, 0x3}, 0x1) 2m15.465050226s ago: executing program 0 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0xf, 0x1, 0x0, 0x27c}]}}}]}, 0x3c}}, 0x0) 2m15.116790734s ago: executing program 0 (id=1750): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001100)={r1, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) 2m14.939730875s ago: executing program 0 (id=1754): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) 2m14.703658696s ago: executing program 0 (id=1758): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m14.518653252s ago: executing program 0 (id=1760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffe0}, {0xe, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044010) 1m59.324576644s ago: executing program 34 (id=1760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffe0}, {0xe, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044010) 48.980077415s ago: executing program 7 (id=2453): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) 48.877508732s ago: executing program 6 (id=2454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff277a049e"]) 48.41540383s ago: executing program 6 (id=2460): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 48.275729982s ago: executing program 6 (id=2462): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 47.079479381s ago: executing program 1 (id=2471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2}, 0xc) 46.915416942s ago: executing program 1 (id=2475): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb4600000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4, @multicast2}}) 46.654927844s ago: executing program 1 (id=2477): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x2, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) close_range(r0, r1, 0x0) 46.421375669s ago: executing program 1 (id=2480): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 46.384201288s ago: executing program 7 (id=2481): r0 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x400200, 0x23456}) io_uring_enter(r0, 0x5745, 0x0, 0x0, 0x0, 0x0) 46.225449214s ago: executing program 1 (id=2482): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/94, 0x5e}, 0x0) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x10) 45.933254181s ago: executing program 6 (id=2485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) 45.721404669s ago: executing program 7 (id=2487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x4) 45.666873102s ago: executing program 6 (id=2488): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0xa, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 45.423322633s ago: executing program 7 (id=2489): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 44.900275961s ago: executing program 7 (id=2500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 44.498759741s ago: executing program 1 (id=2492): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x1, 0x3, 0x1800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 42.629499612s ago: executing program 35 (id=2492): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000001c0)=[{0x1, 0x3, 0x1800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 42.588572331s ago: executing program 7 (id=2494): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 42.5663267s ago: executing program 6 (id=2495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 40.658682831s ago: executing program 5 (id=2499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) 39.471543377s ago: executing program 5 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) 39.31734042s ago: executing program 5 (id=2502): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/197, 0xc5}], 0x1, 0x2, 0x4) 38.632100783s ago: executing program 5 (id=2503): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0x11, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 37.938308983s ago: executing program 5 (id=2504): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x100) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 37.725141449s ago: executing program 5 (id=2505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xb}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004801}, 0x4000090) 27.417239035s ago: executing program 36 (id=2494): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 27.106770842s ago: executing program 37 (id=2495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 21.844843154s ago: executing program 38 (id=2505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xb}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004801}, 0x4000090) 21.529436757s ago: executing program 3 (id=2512): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0x17}, 0x1c) 20.255480386s ago: executing program 3 (id=2513): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0x5f7b, 0x43, 0x0, 0x0) 19.309530077s ago: executing program 3 (id=2514): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) 17.14953059s ago: executing program 3 (id=2515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x1d, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17.149151401s ago: executing program 3 (id=2516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.129078817s ago: executing program 3 (id=2517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 39 (id=2517): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): ed promiscuous mode [ 208.349820][ T7673] veth1_macvtap: entered promiscuous mode [ 208.518844][ T8021] batadv1: entered promiscuous mode [ 208.518877][ T8021] batadv1: entered allmulticast mode [ 208.742140][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.814196][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.874103][ T7155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.902405][ T7155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.904960][ T7155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.916618][ T7175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.542990][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.544806][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.938924][ T7186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.938947][ T7186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.047702][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.181951][ T7155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.181973][ T7155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.497677][ T7759] veth0_vlan: entered promiscuous mode [ 210.540263][ T7759] veth1_vlan: entered promiscuous mode [ 210.661222][ T1016] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.761424][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.806178][ T7759] veth0_macvtap: entered promiscuous mode [ 210.811242][ T1016] usb 2-1: Using ep0 maxpacket: 8 [ 210.827942][ T1016] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.827974][ T1016] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.827999][ T1016] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.828023][ T1016] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.828068][ T1016] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.828093][ T1016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.840540][ T7759] veth1_macvtap: entered promiscuous mode [ 210.937611][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.937648][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.937753][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 210.937777][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.973416][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.979343][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.010314][ T9] usb 1-1: config 0 descriptor?? [ 211.076495][ T7143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.096533][ T7143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.096850][ T7143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.096892][ T7143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.135050][ T1016] usb 2-1: GET_CAPABILITIES returned 0 [ 211.135108][ T1016] usbtmc 2-1:16.0: can't read capabilities [ 211.385096][ T2180] usb 2-1: USB disconnect, device number 8 [ 211.470691][ T9] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 211.470729][ T9] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 211.470756][ T9] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 211.470782][ T9] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 211.470810][ T9] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 211.560637][ T9] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 211.869565][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.869591][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.888265][ T9] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71 [ 211.888295][ T9] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71 [ 211.888355][ T9] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 211.888370][ T9] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 211.929926][ T9] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -71 [ 211.988549][ T9] usb 1-1: USB disconnect, device number 13 [ 212.089511][ T8070] QAT: failed to copy from user cfg_data. [ 212.251304][ T7143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.251328][ T7143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.611345][ T2180] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 212.771316][ T2180] usb 4-1: Using ep0 maxpacket: 8 [ 212.774616][ T2180] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.778415][ T2180] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 212.778446][ T2180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 212.778465][ T2180] usb 4-1: SerialNumber: syz [ 212.796855][ T2180] usb 4-1: config 0 descriptor?? [ 212.836532][ T2180] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 212.839468][ T2180] usb 4-1: Failed to create links for entity 255 [ 212.839492][ T2180] usb 4-1: Failed to register entities (-22). [ 213.022911][ T8095] program syz.2.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.045262][ T1016] usb 4-1: USB disconnect, device number 8 [ 213.531303][ T5916] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.681235][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 213.686189][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.686250][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.686275][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.686296][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.686316][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.688028][ T5916] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.688057][ T5916] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.688077][ T5916] usb 2-1: Manufacturer: syz [ 213.732223][ T5916] usb 2-1: config 0 descriptor?? [ 214.302017][ T5916] rc_core: IR keymap rc-hauppauge not found [ 214.302042][ T5916] Registered IR keymap rc-empty [ 214.302673][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.322709][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.348611][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 214.357496][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 214.391523][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.411567][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.442252][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.473339][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.491507][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.511397][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.531555][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.551407][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.571939][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.591430][ T5916] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.631196][ T5916] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 214.631224][ T5916] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 214.676068][ T5916] usb 2-1: USB disconnect, device number 9 acpid: input device has been disconnected, fd 3 [ 214.832787][ T8135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.687216][ T8142] netlink: 830 bytes leftover after parsing attributes in process `syz.5.961'. [ 217.188921][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 217.188941][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 217.188973][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 217.235478][ T8179] pim6reg: entered allmulticast mode [ 217.239300][ T8181] dummy0: left allmulticast mode [ 217.246535][ T8178] pim6reg: left allmulticast mode [ 217.865831][ T8192] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 219.021331][ T5916] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 219.183297][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 219.186462][ T5916] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 219.186489][ T5916] usb 6-1: config 0 has no interface number 0 [ 219.190293][ T5916] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 219.190325][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.190345][ T5916] usb 6-1: Product: syz [ 219.190360][ T5916] usb 6-1: Manufacturer: syz [ 219.190373][ T5916] usb 6-1: SerialNumber: syz [ 219.259556][ T5916] usb 6-1: config 0 descriptor?? [ 219.272528][ T5916] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 219.542337][ T5916] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 219.598607][ T5916] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 219.970090][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 220.161437][ T5916] usb 6-1: USB disconnect, device number 2 [ 220.204642][ T8229] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 220.204665][ T8229] netlink: 172 bytes leftover after parsing attributes in process `syz.0.996'. [ 220.388456][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 220.422448][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 220.423218][ T5916] quatech2 6-1:0.51: device disconnected [ 220.911221][ T5916] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 220.988235][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1001'. [ 221.081283][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 221.084488][ T5916] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 221.084512][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.118880][ T5916] usb 1-1: config 0 descriptor?? [ 221.365194][ T5916] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 221.388000][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.403355][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 221.403422][ T5916] usb 1-1: media controller created [ 221.466034][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.584229][ T5916] az6027: usb out operation failed. (-71) [ 221.586877][ T5916] az6027: usb out operation failed. (-71) [ 221.586896][ T5916] stb0899_attach: Driver disabled by Kconfig [ 221.586907][ T5916] az6027: no front-end attached [ 221.586907][ T5916] [ 221.588375][ T5916] az6027: usb out operation failed. (-71) [ 221.588393][ T5916] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 221.635771][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 221.639005][ T5916] dvb-usb: schedule remote query interval to 400 msecs. [ 221.639026][ T5916] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 221.669535][ T5916] usb 1-1: USB disconnect, device number 14 [ 221.752208][ T8257] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1009'. [ 221.788881][ T5916] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 223.623928][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 223.794260][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.794299][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 223.817138][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 223.817167][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.817185][ T9] usb 4-1: SerialNumber: syz [ 223.848712][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 223.849547][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 223.909019][ T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 223.910637][ T9] scsi host1: usb-storage 4-1:1.0 [ 224.075877][ T5915] usb 4-1: USB disconnect, device number 9 [ 224.451322][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.602378][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 224.616710][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 224.616739][ T10] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 224.616758][ T10] usb 2-1: Product: syz [ 224.616771][ T10] usb 2-1: Manufacturer: syz [ 224.616783][ T10] usb 2-1: SerialNumber: syz [ 224.632633][ T10] usb 2-1: config 0 descriptor?? [ 224.733794][ T8312] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 224.733821][ T8312] netlink: 'syz.0.1033': attribute type 2 has an invalid length. [ 224.733836][ T8312] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 224.733849][ T8312] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1033'. [ 224.906732][ T10] usb 2-1: USB disconnect, device number 10 [ 225.631385][ T5915] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 225.787552][ T5915] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 225.787625][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.789499][ T5915] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 225.789527][ T5915] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 225.789548][ T5915] usb 6-1: Manufacturer: syz [ 225.847172][ T5915] usb 6-1: config 0 descriptor?? [ 226.591585][ T5915] rc_core: IR keymap rc-hauppauge not found [ 226.591609][ T5915] Registered IR keymap rc-empty [ 226.593640][ T5915] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 226.624614][ T5915] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 226.648184][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 226.672180][ T5915] usb 6-1: USB disconnect, device number 3 acpid: input device has been disconnected, fd 3 [ 227.537791][ T8373] vxlan0: entered promiscuous mode [ 227.537826][ T8373] vxlan0: entered allmulticast mode [ 227.538847][ T7143] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.538898][ T7143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.538934][ T7143] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.538970][ T7143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.460947][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1065'. [ 228.636577][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b1e000: rx timeout, send abort [ 228.640384][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b1e000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 232.291233][ T1016] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 232.480112][ T1016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.480149][ T1016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.480190][ T1016] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 232.480213][ T1016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.554418][ T1016] usb 6-1: config 0 descriptor?? [ 232.710726][ T8337] syz.3.1044 (8337): drop_caches: 1 [ 233.054119][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.054166][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.054192][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.054218][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.054244][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.054269][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.054295][ T1016] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 233.115958][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.143741][ T1016] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 233.265328][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.265428][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.265471][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 233.265494][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.323236][ T10] usb 2-1: config 0 descriptor?? [ 233.448520][ T1016] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 233.448662][ T1016] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 233.495306][ T1016] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 233.537693][ T1016] usb 6-1: USB disconnect, device number 4 [ 233.768083][ T10] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 233.768121][ T10] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 233.768147][ T10] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 233.815869][ T10] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 233.997256][ T10] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 234.198824][ T10] cp2112 0003:10C4:EA90.000D: error requesting SMBus config [ 234.212492][ T10] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71 [ 234.256229][ T10] usb 2-1: USB disconnect, device number 11 [ 235.851291][ T1016] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 236.001260][ T1016] usb 4-1: Using ep0 maxpacket: 16 [ 236.003986][ T1016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.004051][ T1016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.004079][ T1016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 236.004101][ T1016] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 236.004133][ T1016] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.007782][ T1016] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.007813][ T1016] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.007833][ T1016] usb 4-1: Manufacturer: syz [ 236.103565][ T1016] usb 4-1: config 0 descriptor?? [ 236.817581][ T1016] rc_core: IR keymap rc-hauppauge not found [ 236.817603][ T1016] Registered IR keymap rc-empty [ 236.817784][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.831270][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.852868][ T1016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 236.856432][ T1016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 236.902626][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.921514][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.941481][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.961283][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 236.981360][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.001409][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.021376][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.041247][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.061394][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.081246][ T1016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 237.113327][ T1016] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 237.113602][ T1016] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 237.248438][ T5916] usb 4-1: USB disconnect, device number 10 [ 237.271733][ T8486] iommufd_mock iommufd_mock0: Adding to iommu group 0 acpid: input device has been disconnected, fd 3 [ 238.884336][ T8510] Bluetooth: MGMT ver 1.23 [ 241.827840][ T8548] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.894656][ T8548] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 241.971830][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1133'. [ 245.680581][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.730492][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.747137][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.748779][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.750223][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.097653][ T8605] syz.5.1152 (8605): drop_caches: 1 [ 247.821325][ T59] Bluetooth: hci3: command tx timeout [ 248.307610][ T8631] netlink: 'syz.1.1163': attribute type 4 has an invalid length. [ 248.307646][ T8631] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1163'. [ 248.759319][ T7155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.061334][ T5916] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.211128][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 249.214031][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.214082][ T5916] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 249.214105][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.260795][ T5916] usb 4-1: config 0 descriptor?? [ 249.428128][ T7155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.723521][ T5916] hid_parser_main: 4 callbacks suppressed [ 249.723549][ T5916] hid-multitouch 0003:0EEF:72C4.000E: unknown main item tag 0x0 [ 249.723580][ T5916] hid-multitouch 0003:0EEF:72C4.000E: unknown main item tag 0x0 [ 249.723606][ T5916] hid-multitouch 0003:0EEF:72C4.000E: unknown main item tag 0x0 [ 249.723632][ T5916] hid-multitouch 0003:0EEF:72C4.000E: unknown main item tag 0x0 [ 249.723658][ T5916] hid-multitouch 0003:0EEF:72C4.000E: unknown main item tag 0x0 [ 249.777570][ T5916] hid-multitouch 0003:0EEF:72C4.000E: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 249.901360][ T59] Bluetooth: hci3: command tx timeout [ 250.012551][ T7155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.056251][ T10] usb 4-1: USB disconnect, device number 11 [ 250.567162][ T7155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.572806][ T8693] program syz.5.1189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.591325][ T7155] bridge_slave_1: left allmulticast mode [ 251.591363][ T7155] bridge_slave_1: left promiscuous mode [ 251.591689][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.693655][ T7155] bridge_slave_0: left allmulticast mode [ 251.693694][ T7155] bridge_slave_0: left promiscuous mode [ 251.694023][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.991276][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 251.991532][ T59] Bluetooth: hci3: command tx timeout [ 252.069142][ T8707] tmpfs: Cannot retroactively limit size [ 252.151816][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 252.154648][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.154674][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.160281][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.160314][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.160334][ T10] usb 4-1: Product: syz [ 252.160348][ T10] usb 4-1: Manufacturer: syz [ 252.160363][ T10] usb 4-1: SerialNumber: syz [ 252.440903][ T10] usb 4-1: 0:2 : does not exist [ 252.503269][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 252.624229][ T10] usb 4-1: USB disconnect, device number 12 [ 254.061280][ T5851] Bluetooth: hci3: command tx timeout [ 255.602434][ T7155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.669632][ T7155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.710888][ T7155] bond0 (unregistering): Released all slaves [ 255.913256][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 256.081828][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.081912][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.120041][ T8759] io-wq is not configured for unbound workers [ 256.141945][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 256.220917][ T8756] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1218'. [ 257.341592][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 257.344958][ T8793] block nbd0: server does not support multiple connections per device. [ 257.346071][ T8793] block nbd0: shutting down sockets [ 257.491305][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 257.500083][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 257.500116][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.520728][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 257.520754][ T10] pvrusb2: ********** [ 257.520761][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 257.520771][ T10] pvrusb2: Important functionality might not be entirely working. [ 257.520779][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 257.520788][ T10] pvrusb2: ********** [ 257.621311][ T2180] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 257.736667][ T2368] pvrusb2: Invalid write control endpoint [ 257.761439][ T8802] support for cryptoloop has been removed. Use dm-crypt instead. [ 257.771209][ T2180] usb 4-1: Using ep0 maxpacket: 16 [ 257.801517][ T2180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.801553][ T2180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.801603][ T2180] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 257.801626][ T2180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.858858][ T2180] usb 4-1: config 0 descriptor?? [ 257.929640][ T2368] pvrusb2: Invalid write control endpoint [ 257.929658][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.929668][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.929677][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.929687][ T2368] pvrusb2: Device being rendered inoperable [ 257.929764][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.929822][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.952514][ T2368] pvrusb2: Attached sub-driver cx25840 [ 257.952532][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 257.952541][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 257.969259][ T1016] usb 1-1: USB disconnect, device number 15 [ 258.221701][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.221864][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.222129][ T8610] bridge_slave_0: entered allmulticast mode [ 258.236791][ T8610] bridge_slave_0: entered promiscuous mode [ 258.257267][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.257413][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.257672][ T8610] bridge_slave_1: entered allmulticast mode [ 258.272787][ T8610] bridge_slave_1: entered promiscuous mode [ 258.296964][ T2180] hid (null): invalid report_size -301085748 [ 258.489465][ T2180] usb 4-1: string descriptor 0 read error: -71 [ 258.516922][ T2180] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 258.517022][ T2180] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -32 [ 258.544350][ T2180] usb 4-1: USB disconnect, device number 13 [ 258.611635][ T7155] hsr_slave_0: left promiscuous mode [ 258.661790][ T7155] hsr_slave_1: left promiscuous mode [ 258.663063][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.663096][ T7155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.726527][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.726563][ T7155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.954585][ T7155] veth1_macvtap: left promiscuous mode [ 258.954741][ T7155] veth0_macvtap: left promiscuous mode [ 258.955089][ T7155] veth1_vlan: left promiscuous mode [ 258.955324][ T7155] veth0_vlan: left promiscuous mode [ 259.301287][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 259.454402][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 259.454455][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.454481][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.454503][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.457227][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.457255][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.457276][ T31] usb 2-1: Manufacturer: syz [ 259.533941][ T31] usb 2-1: config 0 descriptor?? [ 260.110847][ T31] appleir 0003:05AC:8243.0010: item fetching failed at offset 0/1 [ 260.127503][ T31] appleir 0003:05AC:8243.0010: parse failed [ 260.127637][ T31] appleir 0003:05AC:8243.0010: probe with driver appleir failed with error -22 [ 260.328734][ T1016] usb 2-1: USB disconnect, device number 12 [ 262.344698][ T7155] team0 (unregistering): Port device team_slave_1 removed [ 262.595304][ T7155] team0 (unregistering): Port device team_slave_0 removed [ 265.315855][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.329260][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.751929][ T37] audit: type=1326 audit(1757720781.277:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.751991][ T37] audit: type=1326 audit(1757720781.287:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.753787][ T37] audit: type=1326 audit(1757720781.287:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.753842][ T37] audit: type=1326 audit(1757720781.287:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.754993][ T37] audit: type=1326 audit(1757720781.287:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.755049][ T37] audit: type=1326 audit(1757720781.287:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.755094][ T37] audit: type=1326 audit(1757720781.287:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.755141][ T37] audit: type=1326 audit(1757720781.287:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 265.969737][ T8610] team0: Port device team_slave_0 added [ 265.985467][ T8610] team0: Port device team_slave_1 added [ 266.533916][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.533936][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.533965][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.536819][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.536834][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.536860][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.180186][ T8610] hsr_slave_0: entered promiscuous mode [ 267.203549][ T8610] hsr_slave_1: entered promiscuous mode [ 267.204683][ T8610] debugfs: 'hsr0' already exists in 'hsr' [ 267.204711][ T8610] Cannot create hsr debugfs directory [ 268.551330][ T8896] serio: Serial port ptm0 [ 268.799967][ T8610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.887380][ T8610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.918842][ T8610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.994249][ T8610] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.694167][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.779376][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.825257][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.826136][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.865093][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.865275][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.336748][ T8930] tap0: tun_chr_ioctl cmd 2147767520 [ 271.189174][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.101821][ T8978] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1311'. [ 272.290764][ T8981] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 272.462559][ T8981] team0: Port device netdevsim0 added [ 272.731920][ T8610] veth0_vlan: entered promiscuous mode [ 272.776208][ T8610] veth1_vlan: entered promiscuous mode [ 272.931211][ T2180] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 272.940314][ T8610] veth0_macvtap: entered promiscuous mode [ 272.973603][ T8610] veth1_macvtap: entered promiscuous mode [ 273.025785][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.084980][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.103929][ T2180] usb 4-1: Using ep0 maxpacket: 16 [ 273.106505][ T2180] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 273.106544][ T2180] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 273.106570][ T2180] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 273.106592][ T2180] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.110339][ T2180] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 273.110368][ T2180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.110389][ T2180] usb 4-1: Product: syz [ 273.110403][ T2180] usb 4-1: Manufacturer: syz [ 273.110418][ T2180] usb 4-1: SerialNumber: syz [ 273.200513][ T7175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.212892][ T2180] usb 4-1: config 0 descriptor?? [ 273.223301][ T7175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.236841][ T7175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.236954][ T7175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.437596][ T2180] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 273.444931][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.570837][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.676088][ T8989] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.701850][ T7175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.701876][ T7175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.730361][ T5193] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 273.771410][ T9] usb 4-1: USB disconnect, device number 14 [ 273.809903][ T6786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.809928][ T6786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.691175][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 274.864040][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.864075][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.864132][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 274.864153][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.886437][ T9] usb 7-1: config 0 descriptor?? [ 275.407956][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 275.407997][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 275.408023][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 275.408049][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 275.408076][ T9] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0 [ 275.423787][ T9] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 275.615036][ T9] playstation 0003:054C:0DF2.0011: Invalid byte count transferred, expected 20 got 0 [ 275.615066][ T9] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -22 [ 275.615127][ T9] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense [ 275.615142][ T9] playstation 0003:054C:0DF2.0011: Failed to create dualsense. [ 275.639431][ T9] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -22 [ 275.691247][ T9025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.691390][ T9025] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.790095][ T9025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.790234][ T9025] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 275.842733][ T6021] usb 7-1: USB disconnect, device number 2 [ 275.898945][ T9025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.899104][ T9025] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.974344][ T9025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.978040][ T9025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 276.089513][ T9025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 276.147799][ T9025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.147971][ T9025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 276.245097][ T9025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.181700][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.341428][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 277.358167][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 277.358199][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.380782][ T9] usb 2-1: config 0 descriptor?? [ 277.414529][ T9] cp210x 2-1:0.0: cp210x converter detected [ 277.821933][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 277.911572][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 277.981183][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 278.013972][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 278.128793][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 278.141215][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 278.304212][ T5929] usb 2-1: USB disconnect, device number 13 [ 278.335509][ T5929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.451839][ T5929] cp210x 2-1:0.0: device disconnected [ 279.270801][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'. [ 279.421887][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 279.902318][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 279.988071][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 280.062087][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.221447][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 280.307859][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.471305][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 280.474216][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.474287][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.474311][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.492185][ T9] usb 6-1: config 0 descriptor?? [ 280.661223][ T5929] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 280.789109][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 280.829537][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 280.833591][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.833621][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.833644][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.833665][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.833706][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.833727][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.004516][ T6021] usb 6-1: USB disconnect, device number 5 [ 281.110594][ T5929] usb 4-1: GET_CAPABILITIES returned 0 [ 281.110648][ T5929] usbtmc 4-1:16.0: can't read capabilities [ 281.369828][ T6021] usb 4-1: USB disconnect, device number 15 [ 281.765742][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 282.075932][ T9142] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1383'. [ 282.142613][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.302061][ T59] Bluetooth: hci3: command 0x0405 tx timeout [ 282.961335][ T37] audit: type=1326 audit(1757720798.487:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443e99eba9 code=0x7fc00000 [ 283.871720][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.725563][ T37] audit: type=1326 audit(1757720800.257:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.725719][ T37] audit: type=1326 audit(1757720800.257:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.740343][ T37] audit: type=1326 audit(1757720800.267:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.740405][ T37] audit: type=1326 audit(1757720800.267:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.740455][ T37] audit: type=1326 audit(1757720800.267:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.740545][ T37] audit: type=1326 audit(1757720800.267:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.740593][ T37] audit: type=1326 audit(1757720800.267:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.740640][ T37] audit: type=1326 audit(1757720800.267:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 284.741880][ T37] audit: type=1326 audit(1757720800.277:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9209 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 287.231154][ T6026] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 287.387342][ T6026] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 287.387377][ T6026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.387397][ T6026] usb 1-1: Product: syz [ 287.387411][ T6026] usb 1-1: Manufacturer: syz [ 287.387427][ T6026] usb 1-1: SerialNumber: syz [ 287.428083][ T6026] usb 1-1: config 0 descriptor?? [ 287.471411][ T6026] ch341 1-1:0.0: ch341-uart converter detected [ 288.285152][ T6026] usb 1-1: failed to send control message: -71 [ 288.285217][ T6026] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 288.305796][ T6026] usb 1-1: USB disconnect, device number 16 [ 288.322228][ T6026] ch341 1-1:0.0: device disconnected [ 288.627216][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.781222][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 288.787193][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 288.787226][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.787246][ T9] usb 7-1: Product: syz [ 288.787259][ T9] usb 7-1: Manufacturer: syz [ 288.787271][ T9] usb 7-1: SerialNumber: syz [ 288.818150][ T9] usb 7-1: config 0 descriptor?? [ 288.827505][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 289.043918][ T9] gspca_sn9c2028: read1 error -32 [ 289.044744][ T9] gspca_sn9c2028: read1 error -32 [ 289.257194][ T6021] usb 7-1: USB disconnect, device number 3 [ 289.850984][ T9312] erspan0: entered promiscuous mode [ 290.271466][ T9324] netlink: 'syz.6.1463': attribute type 14 has an invalid length. [ 292.611272][ T5915] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 292.631377][ T6021] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.749661][ T9362] bond0: entered promiscuous mode [ 292.749686][ T9362] bond_slave_0: entered promiscuous mode [ 292.749980][ T9362] bond_slave_1: entered promiscuous mode [ 292.763161][ T9362] batadv0: entered promiscuous mode [ 292.764992][ T9362] hsr1: entered promiscuous mode [ 292.765589][ T9362] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 292.789137][ T6021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.789172][ T6021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.789211][ T6021] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 292.789233][ T6021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.834570][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 292.834607][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 292.834632][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 292.837902][ T5915] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 292.837932][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.837952][ T5915] usb 2-1: Product: syz [ 292.837966][ T5915] usb 2-1: Manufacturer: syz [ 292.837989][ T5915] usb 2-1: SerialNumber: syz [ 292.904926][ T6021] usb 4-1: config 0 descriptor?? [ 292.923619][ T5915] usb 2-1: config 0 descriptor?? [ 292.924720][ T9356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.925029][ T9356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 292.930572][ T5915] usb 2-1: ucan: probing device on interface #0 [ 293.408252][ T5915] usb 2-1: ucan: device reported invalid tx-fifo size [ 293.408277][ T5915] usb 2-1: ucan: probe failed; try to update the device firmware [ 293.453936][ T6021] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 293.453979][ T6021] isku 0003:1E7D:319C.0012: unknown main item tag 0x0 [ 293.475412][ T6021] isku 0003:1E7D:319C.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 293.649521][ T9] usb 2-1: USB disconnect, device number 14 [ 293.772403][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.773236][ T9370] batadv_slave_0: entered promiscuous mode [ 293.855431][ T5929] usb 4-1: USB disconnect, device number 16 [ 293.912341][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1486'. [ 294.137459][ T9374] bridge_slave_1: left allmulticast mode [ 294.137494][ T9374] bridge_slave_1: left promiscuous mode [ 294.137930][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.251545][ T9374] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 294.329975][ T9379] vivid-002: disconnect [ 294.356476][ T9378] vivid-002: reconnect [ 294.844692][ T37] kauditd_printk_skb: 2448 callbacks suppressed [ 294.844714][ T37] audit: type=1326 audit(1757720810.377:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9396 comm="syz.6.1498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x0 [ 294.921202][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 294.931266][ T5929] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 295.071838][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 295.078154][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 295.078188][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.078260][ T9] usb 4-1: Product: syz [ 295.078276][ T9] usb 4-1: Manufacturer: syz [ 295.078290][ T9] usb 4-1: SerialNumber: syz [ 295.083941][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 295.086458][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 295.086488][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 295.103199][ T5929] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.103231][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.103249][ T5929] usb 1-1: Product: syz [ 295.103262][ T5929] usb 1-1: Manufacturer: syz [ 295.103274][ T5929] usb 1-1: SerialNumber: syz [ 295.144011][ T9] usb 4-1: config 0 descriptor?? [ 295.173611][ T5929] usb 1-1: config 0 descriptor?? [ 295.254923][ T5929] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.254963][ T5929] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 295.435680][ T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 295.893113][ T5929] em28xx 1-1:0.0: chip ID is em28178 [ 296.054541][ T9] usb write operation failed. (-71) [ 296.085965][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.086709][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 296.086766][ T9] usb 4-1: media controller created [ 296.087273][ T9] usb read operation failed. (-71) [ 296.087774][ T9] usb write operation failed. (-71) [ 296.106578][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 296.118224][ T9] usb 4-1: USB disconnect, device number 17 [ 296.155805][ T5929] usb 1-1: USB disconnect, device number 17 [ 296.172122][ T5929] em28xx 1-1:0.0: Disconnecting em28xx [ 296.220089][ T5929] em28xx 1-1:0.0: Freeing device [ 296.310402][ T9421] tipc: Started in network mode [ 296.310439][ T9421] tipc: Node identity ac14140f, cluster identity 4711 [ 296.322853][ T9421] tipc: New replicast peer: 255.255.255.255 [ 296.333243][ T9421] tipc: Enabled bearer , priority 10 [ 296.767380][ T9431] loop7: detected capacity change from 0 to 524255231 [ 296.819000][ T9431] loop7: detected capacity change from 524255231 to 524287912 [ 297.063575][ T9439] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 297.063857][ T9439] syzkaller1: linktype set to 780 [ 297.442260][ T5929] tipc: Node number set to 2886997007 [ 298.312098][ T5915] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 298.451577][ T9473] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 298.451604][ T9473] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 298.451617][ T9473] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1534'. [ 298.481223][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 298.500943][ T5915] usb 7-1: config 0 has an invalid interface number: 24 but max is 0 [ 298.500974][ T5915] usb 7-1: config 0 has no interface number 0 [ 298.516216][ T5915] usb 7-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.516259][ T5915] usb 7-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.516303][ T5915] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 298.516327][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.564461][ T5915] usb 7-1: config 0 descriptor?? [ 298.610189][ T37] audit: type=1326 audit(1757720814.137:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 298.610256][ T37] audit: type=1326 audit(1757720814.137:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 298.635727][ T37] audit: type=1326 audit(1757720814.167:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 298.637120][ T37] audit: type=1326 audit(1757720814.167:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 298.637295][ T37] audit: type=1326 audit(1757720814.167:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 298.691390][ T37] audit: type=1326 audit(1757720814.217:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x7ffc0000 [ 299.016472][ T5915] hid (null): unknown global tag 0x39 [ 299.016512][ T5915] hid (null): report_id 0 is invalid [ 299.153901][ T37] audit: type=1326 audit(1757720814.697:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9487 comm="syz.1.1541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe019d6eba9 code=0x0 [ 299.200988][ T5929] usb 7-1: USB disconnect, device number 4 [ 300.571209][ T6026] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 300.721547][ T6026] usb 1-1: Using ep0 maxpacket: 16 [ 300.729590][ T6026] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 300.729624][ T6026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.729645][ T6026] usb 1-1: Product: syz [ 300.729659][ T6026] usb 1-1: Manufacturer: syz [ 300.729674][ T6026] usb 1-1: SerialNumber: syz [ 300.735833][ T6026] usb 1-1: config 0 descriptor?? [ 300.762071][ T6026] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 300.986437][ T6026] gp8psk: usb in 128 operation failed. [ 300.992983][ T6026] gp8psk: usb in 137 operation failed. [ 300.993005][ T6026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.994112][ T6026] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 300.994181][ T6026] usb 1-1: media controller created [ 301.158753][ T6026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.314003][ T6026] gp8psk_fe: Frontend revision 1 attached [ 301.315089][ T6026] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 301.316445][ T6026] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 301.748232][ T6026] gp8psk: usb in 137 operation failed. [ 301.748255][ T6026] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 301.748269][ T6026] gp8psk: found Genpix USB device pID = 201 (hex) [ 301.764896][ T6026] usb 1-1: USB disconnect, device number 18 [ 302.184317][ T6026] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 302.353269][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 302.503756][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 302.506290][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 302.506319][ T9] usb 6-1: config 0 has no interface number 0 [ 302.515868][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 302.515897][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.515915][ T9] usb 6-1: Product: syz [ 302.515928][ T9] usb 6-1: Manufacturer: syz [ 302.515941][ T9] usb 6-1: SerialNumber: syz [ 302.543693][ T9] usb 6-1: config 0 descriptor?? [ 302.564564][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 302.822170][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 302.857164][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.887721][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 302.994010][ T9561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 302.994074][ T9561] netem: change failed [ 303.195652][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 303.212003][ T5916] usb 6-1: USB disconnect, device number 6 [ 303.246745][ T5916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 303.262985][ T5916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 303.263754][ T5916] quatech2 6-1:0.51: device disconnected [ 304.354944][ T9597] netlink: 'syz.5.1589': attribute type 14 has an invalid length. [ 305.210207][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 305.500072][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 306.047437][ T9617] sp0: Synchronizing with TNC [ 306.093569][ T9620] sp0: Found TNC [ 308.039849][ T9670] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 308.039879][ T9670] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 309.957051][ T9704] loop9: detected capacity change from 0 to 8 [ 309.990494][ T9704] Dev loop9: unable to read RDB block 8 [ 309.990554][ T9704] loop9: unable to read partition table [ 309.990826][ T9704] loop9: partition table beyond EOD, truncated [ 309.990847][ T9704] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 310.601331][ T6021] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 310.765986][ T6021] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 310.766021][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.793633][ T6021] usb 7-1: config 0 descriptor?? [ 311.437439][ T6021] ath6kl: mismatched byte count 0 vs. expected 12 [ 311.453427][ T6021] ath6kl: Failed to init ath6kl core: -22 [ 311.454175][ T6021] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 311.658181][ T6026] usb 7-1: USB disconnect, device number 5 [ 312.342165][ T9767] bridge0: port 3(syz_tun) entered blocking state [ 312.344953][ T9767] bridge0: port 3(syz_tun) entered disabled state [ 312.345288][ T9767] syz_tun: entered allmulticast mode [ 312.439226][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'. [ 312.439258][ T9771] netlink: 'syz.5.1667': attribute type 1 has an invalid length. [ 312.439272][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1667'. [ 312.526089][ T9776] netlink: 'syz.3.1669': attribute type 3 has an invalid length. [ 312.630645][ T6021] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 312.781492][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 312.786303][ T6021] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.786364][ T6021] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.786425][ T6021] usb 7-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 312.786460][ T6021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.850247][ T6021] usb 7-1: config 0 descriptor?? [ 313.312289][ T6021] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x4 [ 313.312328][ T6021] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 313.312355][ T6021] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 313.312381][ T6021] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 313.312407][ T6021] hid-rmi 0003:06CB:81A7.0014: unbalanced collection at end of report description [ 313.313353][ T6021] hid-rmi 0003:06CB:81A7.0014: parse failed [ 313.313469][ T6021] hid-rmi 0003:06CB:81A7.0014: probe with driver hid-rmi failed with error -22 [ 313.505823][ T2180] usb 7-1: USB disconnect, device number 6 [ 313.530407][ T9799] Bluetooth: MGMT ver 1.23 [ 314.206865][ T9824] sg_write: process 151 (syz.6.1692) changed security contexts after opening file descriptor, this is not allowed. [ 314.587743][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 314.831506][ T9843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.883173][ T9839] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1699'. [ 314.883204][ T9839] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1699'. [ 314.883614][ T9839] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1699'. [ 314.883644][ T9839] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1699'. [ 315.007787][ T9847] bpf: Bad value for 'gid' [ 315.565129][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 315.647923][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.015729][ T9863] bridge_slave_1 (unregistering): left allmulticast mode [ 316.015769][ T9863] bridge_slave_1 (unregistering): left promiscuous mode [ 316.015915][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.327173][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1719'. [ 316.367361][ T9882] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 316.653256][ T9896] netlink: 'syz.6.1724': attribute type 6 has an invalid length. [ 317.050353][ T9907] can0: slcan on ttyS3. [ 317.221267][ T9913] netlink: 'syz.0.1734': attribute type 3 has an invalid length. [ 317.251305][ T9907] can0 (unregistered): slcan off ttyS3. [ 317.251877][ T9907] Falling back ldisc for ttyS3. [ 317.389299][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 317.517119][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.517196][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.096390][ T9941] netlink: 'syz.0.1746': attribute type 15 has an invalid length. [ 318.133401][ T9939] block nbd0: shutting down sockets [ 318.373494][ T9947] sctp: [Deprecated]: syz.0.1750 (pid 9947) Use of int in max_burst socket option. [ 318.373494][ T9947] Use struct sctp_assoc_value instead [ 318.548239][ T9955] __nla_validate_parse: 1 callbacks suppressed [ 318.548261][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 318.690442][ T9957] tipc: Started in network mode [ 318.690478][ T9957] tipc: Node identity ac14140f, cluster identity 4711 [ 318.690856][ T9957] tipc: New replicast peer: 255.255.255.255 [ 318.691862][ T9957] tipc: Enabled bearer , priority 10 [ 318.692982][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 318.693002][ T9957] tipc: Disabling bearer [ 318.777734][ T5907] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 318.940510][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 318.946324][ T5907] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 318.946359][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.946380][ T5907] usb 2-1: Product: syz [ 318.946394][ T5907] usb 2-1: Manufacturer: syz [ 318.946409][ T5907] usb 2-1: SerialNumber: syz [ 319.020005][ T5907] usb 2-1: config 0 descriptor?? [ 319.327463][ T2180] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 319.480487][ T2180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 319.480520][ T2180] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 319.480546][ T2180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 319.480569][ T2180] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 319.480618][ T2180] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 319.480643][ T2180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.543586][ T6021] usb 2-1: USB disconnect, device number 15 [ 319.574397][ T2180] usb 7-1: config 0 descriptor?? [ 319.834499][ T2180] hdpvr 7-1:0.0: firmware version 0x0 dated [ 319.834524][ T2180] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 320.348581][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1766'. [ 320.367053][ T2180] hdpvr 7-1:0.0: Could not setup controls [ 320.367964][ T2180] hdpvr 7-1:0.0: registering videodev failed [ 320.448529][ T2180] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 320.492251][ T2180] usb 7-1: USB disconnect, device number 7 [ 320.967475][ T9984] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1769'. [ 322.016508][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 322.176723][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.176769][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.176810][ T5916] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 322.176834][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.233862][ T5916] usb 4-1: config 0 descriptor?? [ 322.423348][T10024] loop7: detected capacity change from 0 to 7 [ 322.430904][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.431022][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.431375][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.431400][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.432247][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.432273][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.439168][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.439201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.439527][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.439551][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.440689][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.440715][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.442236][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.442262][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.442441][T10024] ldm_validate_partition_table(): Disk read failed. [ 322.442665][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.442691][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.442947][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.442971][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.443210][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.443244][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 322.443574][T10024] Dev loop7: unable to read RDB block 0 [ 322.525843][T10024] loop7: unable to read partition table [ 322.526096][T10024] loop7: partition table beyond EOD, truncated [ 322.526114][T10024] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 322.710098][ T5916] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 322.710138][ T5916] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 322.710166][ T5916] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 322.710193][ T5916] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 322.710220][ T5916] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 322.754395][ T5916] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 322.912402][ T5916] playstation 0003:054C:0DF2.0015: Invalid reportID received, expected 9 got 32 [ 322.912433][ T5916] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense pairing info: -22 [ 322.912490][ T5916] playstation 0003:054C:0DF2.0015: Failed to get MAC address from DualSense [ 322.912505][ T5916] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 322.952543][ T5916] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -22 [ 323.188692][ T5929] usb 4-1: USB disconnect, device number 18 [ 323.570929][T10036] program syz.1.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.416205][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1832'. [ 328.602732][ T5916] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 328.776633][ T5916] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 328.776666][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.776687][ T5916] usb 4-1: Product: syz [ 328.776702][ T5916] usb 4-1: Manufacturer: syz [ 328.776716][ T5916] usb 4-1: SerialNumber: syz [ 329.622787][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1837'. [ 329.642752][T10132] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1836'. [ 329.693840][ T5916] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 329.693906][ T5916] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 329.696332][ T5916] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 329.749563][ T5916] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 329.770487][ T5916] usb 4-1: USB disconnect, device number 19 [ 329.952202][ T59] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 329.954696][ T59] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 330.686747][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 331.050488][T10171] netlink: 'syz.6.1852': attribute type 2 has an invalid length. [ 331.178835][T10158] cgroup: fork rejected by pids controller in /syz1 [ 332.480731][ T2180] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 332.641135][ T2180] usb 2-1: Using ep0 maxpacket: 32 [ 332.644142][ T2180] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 332.644169][ T2180] usb 2-1: config 0 has no interface number 0 [ 332.647621][ T2180] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 332.647651][ T2180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.647671][ T2180] usb 2-1: Product: syz [ 332.647685][ T2180] usb 2-1: Manufacturer: syz [ 332.647700][ T2180] usb 2-1: SerialNumber: syz [ 332.680030][ T2180] usb 2-1: config 0 descriptor?? [ 332.684692][ T2180] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.947455][ T2180] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 332.997247][ T2180] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.375659][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 333.376404][ T2180] usb 2-1: USB disconnect, device number 16 [ 333.411878][ T2180] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 333.433769][ T2180] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 333.434611][ T2180] quatech2 2-1:0.51: device disconnected [ 333.760924][T10243] netlink: 'syz.6.1875': attribute type 2 has an invalid length. [ 333.974547][ T59] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 333.976693][ T59] Bluetooth: hci3: Injecting HCI hardware error event [ 333.986306][ T59] Bluetooth: hci3: hardware error 0x00 [ 334.309869][ T5929] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 334.471908][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.471938][ T5929] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.471997][ T5929] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.472023][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.542547][ T5929] usb 7-1: config 0 descriptor?? [ 334.548806][ T5929] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 334.548863][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 334.580643][ T5929] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 334.583570][ T5929] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 334.583635][ T5929] usb 7-1: media controller created [ 334.629662][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.680049][ T5929] dvb-usb: bulk message failed: -22 (6/0) [ 334.680150][ T5929] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 334.684883][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 334.720515][ T5929] dvb-usb: schedule remote query interval to 150 msecs. [ 334.720541][ T5929] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 334.864634][T10249] dibusb: i2c wr: len=64 is too big! [ 334.864634][T10249] [ 334.867791][ T5907] usb 7-1: USB disconnect, device number 8 acpid: input device has been disconnected, fd 3 [ 335.097662][ T5907] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 335.216496][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1885'. [ 336.059395][ T59] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 336.181269][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.185790][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.191795][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.209363][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.230874][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.723523][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 338.367795][ T5851] Bluetooth: hci4: command tx timeout [ 338.971251][ T7184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.059459][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.066037][T10315] netlink: 'syz.5.1909': attribute type 49 has an invalid length. [ 339.117692][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.120165][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.137995][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.138862][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.515500][ T7184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.612101][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 339.612333][T10326] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1912'. [ 340.016714][ T7184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.146851][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 340.305633][ T5915] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 340.305669][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.305689][ T5915] usb 2-1: Product: syz [ 340.305704][ T5915] usb 2-1: Manufacturer: syz [ 340.305719][ T5915] usb 2-1: SerialNumber: syz [ 340.359510][ T5915] usb 2-1: config 0 descriptor?? [ 340.458442][ T5851] Bluetooth: hci4: command tx timeout [ 341.197309][ T5915] usb 2-1: Firmware version (0.0) predates our first public release. [ 341.197338][ T5915] usb 2-1: Please update to version 0.2 or newer [ 341.243138][ T7184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.326485][ T5851] Bluetooth: hci2: command tx timeout [ 341.638029][ T5915] usb 2-1: USB disconnect, device number 17 [ 342.250205][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 342.541353][ T5851] Bluetooth: hci4: command tx timeout [ 342.822946][T10277] chnl_net:caif_netlink_parms(): no params data found [ 342.925581][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 342.956323][T10375] batman_adv: batadv0: Adding interface: macvlan3 [ 342.956344][T10375] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.956380][T10375] batman_adv: batadv0: Interface activated: macvlan3 [ 343.405345][ T5851] Bluetooth: hci2: command tx timeout [ 343.963304][ T7184] bridge_slave_1: left allmulticast mode [ 343.963350][ T7184] bridge_slave_1: left promiscuous mode [ 343.963640][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.096731][ T7184] bridge_slave_0: left allmulticast mode [ 344.096770][ T7184] bridge_slave_0: left promiscuous mode [ 344.097067][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.604669][ T5851] Bluetooth: hci4: command tx timeout [ 345.487612][ T5851] Bluetooth: hci2: command tx timeout [ 345.666703][T10426] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1954'. [ 345.878009][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1956'. [ 347.101394][ T37] audit: type=1326 audit(1757721374.651:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.5.1971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca946eba9 code=0x0 [ 347.406202][ T7184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.469446][ T7184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.524124][ T7184] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 347.563460][ T5851] Bluetooth: hci2: command tx timeout [ 347.579268][ T7184] bond0 (unregistering): Released all slaves [ 348.446461][T10277] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.446626][T10277] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.446901][T10277] bridge_slave_0: entered allmulticast mode [ 348.477423][T10277] bridge_slave_0: entered promiscuous mode [ 348.607550][T10277] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.607805][T10277] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.608049][T10277] bridge_slave_1: entered allmulticast mode [ 348.611367][T10277] bridge_slave_1: entered promiscuous mode [ 348.640352][T10320] chnl_net:caif_netlink_parms(): no params data found [ 348.895149][ T5915] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 349.101306][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 349.105070][ T5915] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 349.105103][ T5915] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 349.105125][ T5915] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.105146][ T5915] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.105186][ T5915] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.105214][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.149035][ T7184] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 349.340419][ T5915] usb 7-1: GET_CAPABILITIES returned 0 [ 349.340474][ T5915] usbtmc 7-1:16.0: can't read capabilities [ 349.551636][ T5915] usb 7-1: USB disconnect, device number 9 [ 350.028278][T10277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.193136][T10277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.581837][ T7184] hsr_slave_0: left promiscuous mode [ 350.621657][ T7184] hsr_slave_1: left promiscuous mode [ 350.623781][ T7184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.623814][ T7184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.687076][ T7184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.687113][ T7184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.701703][ T5907] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 350.819772][ T7184] team_slave_0: left promiscuous mode [ 350.819885][ T7184] team_slave_1: left promiscuous mode [ 350.820095][ T7184] veth1_macvtap: left promiscuous mode [ 350.820242][ T7184] veth0_macvtap: left promiscuous mode [ 350.820595][ T7184] veth1_vlan: left promiscuous mode [ 350.820865][ T7184] veth0_vlan: left promiscuous mode [ 350.863457][ T5907] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 350.863479][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.870641][ T5907] usb 7-1: config 0 descriptor?? [ 350.896729][ T5907] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 351.123342][ T5907] gp8psk: usb in 128 operation failed. [ 351.325398][ T5907] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 351.526458][ T5907] gp8psk: usb in 149 operation failed. [ 351.526480][ T5907] gp8psk: failed to get FPGA version [ 351.527044][ T5907] gp8psk: usb in 138 operation failed. [ 351.527060][ T5907] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 351.527106][ T5907] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 351.567917][ T5907] usb 7-1: USB disconnect, device number 10 [ 352.423745][T10517] program syz.6.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.300810][ T7184] team0 (unregistering): Port device team_slave_1 removed [ 354.620677][ T7184] team0 (unregistering): Port device team_slave_0 removed [ 357.850936][T10277] team0: Port device team_slave_0 added [ 358.031915][T10277] team0: Port device team_slave_1 added [ 358.305328][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.305531][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.305708][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.305886][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.306071][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.306244][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.306417][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.306593][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.306765][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.306937][T10536] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 358.433501][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.433703][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.433966][T10320] bridge_slave_0: entered allmulticast mode [ 358.454488][T10320] bridge_slave_0: entered promiscuous mode [ 358.682484][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.682684][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.683046][T10320] bridge_slave_1: entered allmulticast mode [ 358.690453][T10320] bridge_slave_1: entered promiscuous mode [ 358.698592][T10277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.698610][T10277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.698638][T10277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.860249][T10277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.860276][T10277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.860305][T10277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.142047][T10320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.369346][T10320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.734083][T10277] hsr_slave_0: entered promiscuous mode [ 359.762063][T10277] hsr_slave_1: entered promiscuous mode [ 359.884212][T10320] team0: Port device team_slave_0 added [ 360.095586][T10320] team0: Port device team_slave_1 added [ 361.043612][T10567] program syz.6.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.662666][T10320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.662685][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.662712][T10320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.672042][T10320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.672058][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.672083][T10320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.389394][T10320] hsr_slave_0: entered promiscuous mode [ 362.390959][T10320] hsr_slave_1: entered promiscuous mode [ 362.392010][T10320] debugfs: 'hsr0' already exists in 'hsr' [ 362.392046][T10320] Cannot create hsr debugfs directory [ 363.317211][T10606] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2033'. [ 363.401190][T10277] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 363.455267][T10277] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 363.680540][T10277] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 363.784286][T10277] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.034248][T10624] program syz.1.2040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.242871][T10320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.325154][T10621] veth0_to_bridge: entered promiscuous mode [ 364.333851][T10619] veth0_to_bridge: left promiscuous mode [ 364.825799][T10320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.235617][T10320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.763294][T10320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.865285][T10277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.940692][T10277] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.980403][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.985470][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.051948][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.052248][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.184482][T10664] netlink: 'syz.6.2056': attribute type 10 has an invalid length. [ 366.270037][T10664] syz_tun: entered promiscuous mode [ 366.271304][T10664] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 366.741917][T10320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.839871][T10320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.904381][T10320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.024498][T10320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.537935][T10277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.739141][T10320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.846936][T10320] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.890759][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.891044][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.930865][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.931053][ T7142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.852280][T10277] veth0_vlan: entered promiscuous mode [ 368.912152][T10277] veth1_vlan: entered promiscuous mode [ 369.124995][T10320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.141512][T10277] veth0_macvtap: entered promiscuous mode [ 369.225115][T10277] veth1_macvtap: entered promiscuous mode [ 369.370849][T10277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.462645][T10277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.547489][ T7184] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.550248][ T7184] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.551323][T10320] veth0_vlan: entered promiscuous mode [ 369.557259][ T7184] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.560442][ T7184] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.652903][T10320] veth1_vlan: entered promiscuous mode [ 369.916072][ T7175] Bluetooth: hci5: Frame reassembly failed (-84) [ 369.936324][ T7175] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 370.079783][ T7143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.079807][ T7143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.212483][T10320] veth0_macvtap: entered promiscuous mode [ 370.309988][ T7175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.310012][ T7175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.335348][T10320] veth1_macvtap: entered promiscuous mode [ 370.559344][T10320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.612619][T10320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.709093][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.722230][ T1169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.731276][ T7184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.774342][ T7184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.459762][ T7155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.459787][ T7155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.692740][ T7186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.692766][ T7186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.951134][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 372.703157][ T2180] kernel read not supported for file /dsp (pid: 2180 comm: kworker/1:2) [ 374.022559][T10820] fuse: Bad value for 'fd' [ 375.024298][ T6021] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 375.172125][ T6021] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 375.172194][ T6021] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 375.172218][ T6021] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.175988][ T6021] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.176016][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 375.176035][ T6021] usb 4-1: Product: syz [ 375.176047][ T6021] usb 4-1: Manufacturer: syz [ 375.176062][ T6021] usb 4-1: SerialNumber: syz [ 375.257472][ T6021] usb 4-1: config 0 descriptor?? [ 375.267827][ T6021] hub 4-1:0.0: bad descriptor, ignoring hub [ 375.267873][ T6021] hub 4-1:0.0: probe with driver hub failed with error -5 [ 375.308819][ T6021] usb 4-1: selecting invalid altsetting 0 [ 375.585539][ T6021] usb 4-1: USB disconnect, device number 20 [ 375.664608][T10863] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 376.079082][ T6021] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 376.232468][ T6021] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 376.232539][ T6021] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 376.232563][ T6021] usb 4-1: config 0 interface 0 has no altsetting 0 [ 376.270486][ T6021] usb 4-1: string descriptor 0 read error: -22 [ 376.270662][ T6021] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.270688][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 376.304732][ T6021] usb 4-1: config 0 descriptor?? [ 376.315877][ T6021] hub 4-1:0.0: bad descriptor, ignoring hub [ 376.315922][ T6021] hub 4-1:0.0: probe with driver hub failed with error -5 [ 376.318954][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 376.354279][ T6021] usb 4-1: selecting invalid altsetting 0 [ 376.486451][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 376.489693][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.489724][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.489745][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 376.535956][ T9] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 376.535990][ T9] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 376.536011][ T9] usb 7-1: Product: syz [ 376.608015][ T9] usb 7-1: config 0 descriptor?? [ 376.689015][ T6021] usb 4-1: USB disconnect, device number 21 [ 377.071132][ T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 377.071174][ T9] waterforce 0003:1044:7A4D.0016: unknown main item tag 0x0 [ 377.071200][ T9] waterforce 0003:1044:7A4D.0016: item fetching failed at offset 2/5 [ 377.072108][ T9] waterforce 0003:1044:7A4D.0016: hid parse failed with -22 [ 377.072228][ T9] waterforce 0003:1044:7A4D.0016: probe with driver waterforce failed with error -22 [ 377.229213][T10894] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2152'. [ 377.230927][T10894] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2152'. [ 377.232180][T10894] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2152'. [ 377.259126][ T9] usb 7-1: USB disconnect, device number 11 [ 377.347700][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'. [ 377.347737][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'. [ 378.623864][ T5929] kernel write not supported for file /input/mouse0 (pid: 5929 comm: kworker/0:5) [ 378.778486][T10937] vxcan1: tx address claim with dest, not broadcast [ 378.941017][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.941113][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.874217][T10979] program syz.7.2187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.772089][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.696173][ T6021] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 381.855983][ T5915] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 381.863300][ T6021] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 381.863333][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.863352][ T6021] usb 7-1: Product: syz [ 381.863366][ T6021] usb 7-1: Manufacturer: syz [ 381.863380][ T6021] usb 7-1: SerialNumber: syz [ 381.951823][ T6021] usb 7-1: config 0 descriptor?? [ 381.983802][ T6021] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 012 [ 382.015933][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 382.025017][ T5915] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.025113][ T5915] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 382.025138][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.064296][ T5915] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 382.064330][ T5915] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 382.064352][ T5915] usb 4-1: Product: syz [ 382.064366][ T5915] usb 4-1: Manufacturer: syz [ 382.064381][ T5915] usb 4-1: SerialNumber: syz [ 382.131554][ T5915] usb 4-1: config 0 descriptor?? [ 382.253686][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2218'. [ 382.388172][ T6021] (null): failure reading functionality [ 382.430064][ T6021] i2c i2c-1: connected i2c-tiny-usb device [ 382.576673][ T5915] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 382.633629][ T1016] usb 7-1: USB disconnect, device number 12 [ 382.981823][ T5915] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 382.984980][ T5915] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 383.037446][ T5915] usb 4-1: USB disconnect, device number 22 [ 383.716072][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2233'. [ 383.765120][ T6021] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 383.927636][ T6021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 383.927672][ T6021] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 383.927716][ T6021] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 383.927738][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.984046][ T6021] usb 2-1: config 0 descriptor?? [ 383.992824][T11075] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.351973][ T37] audit: type=1326 audit(1757721411.919:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe57f7f5b67 code=0x7ffc0000 [ 384.352274][ T37] audit: type=1326 audit(1757721411.919:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe57f79ada9 code=0x7ffc0000 [ 384.352624][ T37] audit: type=1326 audit(1757721411.919:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 384.357822][ T37] audit: type=1326 audit(1757721411.929:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe57f7f5b67 code=0x7ffc0000 [ 384.358151][ T37] audit: type=1326 audit(1757721411.929:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe57f79ada9 code=0x7ffc0000 [ 384.358439][ T37] audit: type=1326 audit(1757721411.929:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe57f7f5b67 code=0x7ffc0000 [ 384.358777][ T37] audit: type=1326 audit(1757721411.929:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe57f79ada9 code=0x7ffc0000 [ 384.359049][ T37] audit: type=1326 audit(1757721411.929:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 384.359336][ T37] audit: type=1326 audit(1757721411.929:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 384.369359][ T37] audit: type=1326 audit(1757721411.929:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.6.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x7ffc0000 [ 384.498971][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.499011][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.499037][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.499065][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.499091][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.499116][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.499143][ T6021] apple 0003:05AC:0219.0017: unknown main item tag 0x0 [ 384.644482][ T6021] apple 0003:05AC:0219.0017: hidraw0: USB HID vff.fa Device [HID 05ac:0219] on usb-dummy_hcd.1-1/input0 [ 384.695559][ T9] usb 2-1: USB disconnect, device number 18 [ 384.816953][ T5929] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 384.967278][ T5929] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 384.967311][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.993057][ T5929] usb 4-1: config 0 descriptor?? [ 385.001509][ T5929] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 385.842898][ T5929] gspca_sunplus: reg_w_riv err -71 [ 385.843024][ T5929] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 385.858655][ T5929] usb 4-1: USB disconnect, device number 23 [ 386.229368][T11138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2261'. [ 387.025976][T11158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2270'. [ 387.729250][T11176] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2279'. [ 387.889692][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2280'. [ 389.162907][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 389.162938][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 389.219885][T11217] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2299'. [ 391.528930][T11268] netlink: 'syz.6.2323': attribute type 2 has an invalid length. [ 391.528957][T11268] netlink: 'syz.6.2323': attribute type 8 has an invalid length. [ 391.528972][T11268] netlink: 1160 bytes leftover after parsing attributes in process `syz.6.2323'. [ 391.861219][ T6026] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 392.017193][ T6026] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 392.017226][ T6026] usb 4-1: config 7 has no interface number 0 [ 392.026315][ T6026] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 392.026346][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.026365][ T6026] usb 4-1: Product: syz [ 392.026377][ T6026] usb 4-1: Manufacturer: syz [ 392.026390][ T6026] usb 4-1: SerialNumber: syz [ 392.580781][ T5851] Bluetooth: hci2: command tx timeout [ 392.822372][ T6026] as10x_usb: device has been detected [ 392.823975][ T6026] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 392.934479][ T6026] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 393.379986][ T6026] as10x_usb: error during firmware upload part1 [ 393.381747][ T6026] Registered device Elgato EyeTV DTT Deluxe [ 393.388460][ T6026] usb 4-1: USB disconnect, device number 24 [ 393.435668][ T37] audit: type=1326 audit(1757721421.014:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11275 comm="syz.1.2327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe019d6eba9 code=0x0 [ 393.477857][ T6026] Unregistered device Elgato EyeTV DTT Deluxe [ 393.499086][ T6026] as10x_usb: device has been disconnected [ 395.339361][ T1016] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 395.471955][T11341] ./file0: Can't lookup blockdev [ 395.502502][ T1016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.502540][ T1016] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.502585][ T1016] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 395.502609][ T1016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.521593][ T1016] usb 2-1: config 0 descriptor?? [ 395.922249][T11349] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.957002][ T37] audit: type=1326 audit(1757721423.535:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 395.957168][ T37] audit: type=1326 audit(1757721423.535:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 395.997135][ T1016] hid-led 0003:1294:1320.0018: item fetching failed at offset 0/3 [ 395.998054][ T1016] hid-led 0003:1294:1320.0018: probe with driver hid-led failed with error -22 [ 396.028512][ T37] audit: type=1326 audit(1757721423.605:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.028585][ T37] audit: type=1326 audit(1757721423.605:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.028634][ T37] audit: type=1326 audit(1757721423.605:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.028677][ T37] audit: type=1326 audit(1757721423.605:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.031158][ T37] audit: type=1326 audit(1757721423.605:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.031210][ T37] audit: type=1326 audit(1757721423.605:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.032099][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 396.032118][T11349] net_ratelimit: 44 callbacks suppressed [ 396.032128][T11349] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 396.049039][ T37] audit: type=1326 audit(1757721423.615:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11350 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3f74a4eba9 code=0x7ffc0000 [ 396.293034][ T6026] usb 2-1: USB disconnect, device number 19 [ 396.364576][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2363'. [ 396.907220][T11368] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2369'. [ 396.907249][T11368] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 397.195769][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2378'. [ 397.583371][T11392] overlayfs: conflicting lowerdir path [ 398.316311][T11420] syz_tun: entered promiscuous mode [ 398.320295][T11422] netlink: 'syz.3.2395': attribute type 9 has an invalid length. [ 398.320318][T11422] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.2395'. [ 398.396222][T11420] syz_tun: left promiscuous mode [ 400.133307][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 401.666328][ T6026] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 401.847776][ T6026] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 401.847808][ T6026] usb 2-1: config 0 has no interface number 0 [ 401.851047][ T6026] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 401.851077][ T6026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.851096][ T6026] usb 2-1: Product: syz [ 401.851111][ T6026] usb 2-1: Manufacturer: syz [ 401.851126][ T6026] usb 2-1: SerialNumber: syz [ 401.864017][ T6026] usb 2-1: config 0 descriptor?? [ 401.908349][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2425'. [ 402.301331][ T6026] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 402.504250][ T6026] usb 2-1: failed to fetch extended address, random address set [ 402.601761][ T6026] usb 2-1: USB disconnect, device number 20 [ 403.034085][T11515] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 403.467972][T11526] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2440'. [ 403.475470][T11523] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2440'. [ 403.505382][T11523] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2440'. [ 404.106596][T11537] IPVS: persistence engine module ip_vs_pe_ not found [ 404.255310][T11546] hsr0: entered promiscuous mode [ 404.255940][T11546] macsec1: entered allmulticast mode [ 404.255955][T11546] hsr0: entered allmulticast mode [ 404.255968][T11546] hsr_slave_0: entered allmulticast mode [ 404.255992][T11546] hsr_slave_1: entered allmulticast mode [ 404.349421][T11546] hsr0: left allmulticast mode [ 404.349446][T11546] hsr_slave_0: left allmulticast mode [ 404.349472][T11546] hsr_slave_1: left allmulticast mode [ 405.658933][T11579] overlayfs: failed to clone upperpath [ 405.678447][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 406.024658][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2467'. [ 406.024683][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2467'. [ 406.257527][T11593] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2468'. [ 406.974266][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 406.974287][ T37] audit: type=1326 audit(1757721434.551:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11572 comm="syz.6.2462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57f7feba9 code=0x0 [ 408.007436][ T5837] syz_tun (unregistering): left allmulticast mode [ 408.007665][ T5837] bridge0: port 3(syz_tun) entered disabled state [ 408.173686][ T6026] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 408.344398][ T6026] usb 7-1: Using ep0 maxpacket: 16 [ 408.347894][ T6026] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 408.347932][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.383307][ T6026] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 408.383339][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.383357][ T6026] usb 7-1: Product: syz [ 408.383370][ T6026] usb 7-1: Manufacturer: syz [ 408.383383][ T6026] usb 7-1: SerialNumber: syz [ 408.389240][ T6026] usb 7-1: config 0 descriptor?? [ 408.430968][ T6026] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 408.431005][ T6026] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 409.403393][ T6026] em28xx 7-1:0.0: chip ID is em2710 [ 409.742909][ T6026] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 409.752094][ T6026] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 409.752118][ T6026] em28xx 7-1:0.0: No AC97 audio processor [ 409.825726][ T6026] usb 7-1: USB disconnect, device number 13 [ 409.829283][ T6026] em28xx 7-1:0.0: Disconnecting em28xx [ 409.953810][ T6026] em28xx 7-1:0.0: Freeing device [ 412.828089][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.848076][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.883431][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.884950][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.885871][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.969876][ T59] Bluetooth: hci1: command tx timeout [ 417.048759][ T59] Bluetooth: hci1: command tx timeout [ 419.137848][ T59] Bluetooth: hci1: command tx timeout [ 421.216723][ T59] Bluetooth: hci1: command tx timeout [ 425.931384][ C1] sched: DL replenish lagged too much [ 428.344912][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.352440][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.393708][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.396465][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.397436][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.665420][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.690615][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.723934][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.725424][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.727011][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.482267][ T5851] Bluetooth: hci5: command tx timeout [ 430.801706][ T5851] Bluetooth: hci6: command tx timeout [ 432.561042][ T5851] Bluetooth: hci5: command tx timeout [ 432.882495][ T5851] Bluetooth: hci6: command tx timeout [ 433.639857][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 433.659372][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 433.693429][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 433.720225][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 433.721248][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 434.651886][ T59] Bluetooth: hci5: command tx timeout [ 434.969456][ T59] Bluetooth: hci6: command tx timeout [ 435.840303][ T59] Bluetooth: hci7: command tx timeout [ 436.720514][ T59] Bluetooth: hci5: command tx timeout [ 437.038627][ T59] Bluetooth: hci6: command tx timeout [ 437.933576][ T59] Bluetooth: hci7: command tx timeout [ 439.997282][ T59] Bluetooth: hci7: command tx timeout [ 440.326494][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.332100][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.076034][ T59] Bluetooth: hci7: command tx timeout [ 454.377037][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 454.405299][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 454.419165][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 454.431150][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 454.432234][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 456.481007][ T5851] Bluetooth: hci8: command tx timeout [ 458.547785][ T5851] Bluetooth: hci8: command tx timeout [ 460.626715][ T5851] Bluetooth: hci8: command tx timeout [ 462.705879][ T5851] Bluetooth: hci8: command tx timeout [ 462.880604][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 466.036154][ T143] kworker/u8:6 (143) used greatest stack depth: 12760 bytes left [ 471.986920][ T5157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 472.036041][ T5157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 472.039504][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 472.051720][ T5157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 472.052852][ T5157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 474.147210][ T59] Bluetooth: hci9: command tx timeout [ 476.229195][ T59] Bluetooth: hci9: command tx timeout [ 478.297984][ T59] Bluetooth: hci9: command tx timeout [ 480.379435][ T59] Bluetooth: hci9: command tx timeout [ 488.216748][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.236882][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.250936][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.252373][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.270385][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.582316][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.621750][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.638556][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.640269][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.641222][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.332939][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 494.368045][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 494.384335][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 494.398727][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 494.407124][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 499.807363][ T5851] Bluetooth: hci3: command tx timeout [ 499.808045][ T5851] Bluetooth: hci0: command tx timeout [ 499.815804][ T5847] Bluetooth: hci10: command tx timeout [ 501.738891][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.738982][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.886009][ T5157] Bluetooth: hci0: command tx timeout [ 501.886045][ T5157] Bluetooth: hci3: command tx timeout [ 501.887232][ T5847] Bluetooth: hci10: command tx timeout [ 503.965315][ T5847] Bluetooth: hci10: command tx timeout [ 503.965354][ T5847] Bluetooth: hci3: command tx timeout [ 503.965378][ T5847] Bluetooth: hci0: command tx timeout [ 506.044150][ T5851] Bluetooth: hci0: command tx timeout [ 506.044190][ T5851] Bluetooth: hci3: command tx timeout [ 506.044213][ T5851] Bluetooth: hci10: command tx timeout [ 511.878664][ T7143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.878704][ T7143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.419851][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.448561][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.463742][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.465294][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.466297][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.047993][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 514.520221][ T5157] Bluetooth: hci4: command tx timeout [ 516.599040][ T5157] Bluetooth: hci4: command tx timeout [ 518.677775][ T5157] Bluetooth: hci4: command tx timeout [ 520.756643][ T5157] Bluetooth: hci4: command tx timeout [ 533.845481][ T5157] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 533.877876][ T5157] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 533.879512][ T5157] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 533.914450][ T5157] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 533.915369][ T5157] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 547.886530][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 547.919419][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 547.957541][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 547.977258][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 547.979738][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 548.584558][T11747] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 548.617326][T11747] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 548.619138][T11747] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 548.621107][T11747] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 548.622345][T11747] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 553.746566][T11752] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 553.781497][T11752] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 553.784771][T11752] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 553.786845][T11752] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 553.787798][T11752] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 559.482905][T11656] bond0: (slave syz_tun): Releasing backup interface [ 563.165942][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.166042][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.364618][T11656] syz_tun (unregistering): left promiscuous mode [ 572.765791][ T59] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 572.792251][ T59] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 572.795268][ T59] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 572.796670][ T59] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 572.798475][ T59] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 592.789188][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 592.818621][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.833418][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.835453][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.836423][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 594.720217][T11755] Bluetooth: hci11: command tx timeout [ 595.938342][T11755] Bluetooth: hci9: command 0x0406 tx timeout [ 596.798593][T11755] Bluetooth: hci11: command tx timeout [ 598.318230][ T38] INFO: task syz.3.2517:11719 blocked for more than 143 seconds. [ 598.318259][ T38] Not tainted syzkaller #0 [ 598.318271][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.318281][ T38] task:syz.3.2517 state:D stack:25128 pid:11719 tgid:11719 ppid:10320 task_flags:0x400040 flags:0x00004004 [ 598.318351][ T38] Call Trace: [ 598.318359][ T38] [ 598.318376][ T38] __schedule+0x16f3/0x4c20 [ 598.318441][ T38] ? __lock_acquire+0xab9/0xd20 [ 598.318471][ T38] ? __pfx___schedule+0x10/0x10 [ 598.318521][ T38] ? schedule+0x91/0x360 [ 598.318553][ T38] schedule+0x165/0x360 [ 598.318595][ T38] schedule_timeout+0x9a/0x270 [ 598.318624][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 598.318667][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.318697][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.318725][ T38] ? wait_for_completion+0x267/0x5d0 [ 598.318757][ T38] wait_for_completion+0x2bf/0x5d0 [ 598.318803][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 598.318831][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 598.318865][ T38] rcu_barrier+0x463/0x570 [ 598.318901][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 598.318925][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 598.318955][ T38] kvm_put_kvm+0xf8e/0x1670 [ 598.318991][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 598.319019][ T38] kvm_vm_release+0x46/0x50 [ 598.319045][ T38] __fput+0x458/0xa80 [ 598.319081][ T38] task_work_run+0x1d4/0x260 [ 598.319108][ T38] ? __pfx_task_work_run+0x10/0x10 [ 598.319137][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 598.319170][ T38] exit_to_user_mode_loop+0xec/0x110 [ 598.319199][ T38] do_syscall_64+0x2bd/0x3b0 [ 598.319218][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.319248][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.319269][ T38] ? clear_bhb_loop+0x60/0xb0 [ 598.319295][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.319336][ T38] RIP: 0033:0x7f3f74a4eba9 [ 598.319356][ T38] RSP: 002b:00007ffdb0d27998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 598.319378][ T38] RAX: 0000000000000000 RBX: 000000000006a408 RCX: 00007f3f74a4eba9 [ 598.319393][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 598.319407][ T38] RBP: 00007f3f74c97da0 R08: 0000000000000001 R09: 00000004b0d27c8f [ 598.319421][ T38] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f3f[ 598.319421][ T38] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f3f74c95fac [ 598.319435][ T38] R13: 00007f3f74c95fa0 R14: ffffffffffffffff R15: 00007ffdb0d27ab0 [ 598.320861][ T38] [ 598.320886][ T38] [ 598.320886][ T38] Showing all locks held in the system: [ 598.320897][ T38] 7 locks held by ktimers/1/29: [ 598.320911][ T38] 1 lock held by khungtaskd/38: [ 598.320922][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 598.320980][ T38] 4 locks held by kworker/u9:0/59: [ 598.320991][ T38] #0: ffff88803a349138 ((wq_completion)hci5#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.321052][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.321105][ T38] #2: ffff88807cc500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 598.321158][ T38] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 598.321233][ T38] 4 locks held by kworker/u9:1/5157: [ 598.321246][ T38] #0: ffff888035fb4938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.321304][ T38] #1: ffffc9000fc67bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.321358][ T38] #2: ffff88807a1f40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 598.321413][ T38] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 598.321468][ T38] 2 locks held by getty/5594: [ 598.321479][ T38] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 598.321538][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 598.321598][ T38] 5 locks held by kworker/u9:5/5847: [ 598.321610][ T38] #0: ffff88802784e138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.321663][ T38] #1: ffffc90004bcfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.321716][ T38] #2: ffff888040470e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 598.321765][ T38] #3: ffff8880404700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 598.321819][ T38] #4: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 598.321875][ T38] 4 locks held by kworker/u9:7/5851: [ 598.321887][ T38] #0: ffff88805b068138 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.321944][ T38] #1: ffffc90004c0fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.321997][ T38] #2: ffff88806b0f80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 598.322052][ T38] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 598.322110][ T38] 3 locks held by kworker/u8:15/6786: [ 598.322122][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.322176][ T38] #1: ffffc9000ca1fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.322229][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 598.322278][ T38] 6 locks held by kworker/u8:23/7143: [ 598.322290][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.322343][ T38] #1: ffffc9001ae3fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.322395][ T38] #2: ffffffff8ecc6600 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 598.322452][ T38] #3: ffff88803ae1f0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 598.322500][ T38] #4: ffff888021ad0300 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 598.322554][ T38] #5: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 598.322610][ T38] 2 locks held by kworker/u8:28/7155: [ 598.322621][ T38] 3 locks held by kworker/u8:44/7184: [ 598.322632][ T38] #0: ffff8880300e8138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.322684][ T38] #1: ffffc9001af5fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.322738][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 598.322792][ T38] 2 locks held by kworker/1:7/8064: [ 598.322808][ T38] 1 lock held by syz.6.2495/11656: [ 598.322818][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 598.322866][ T38] 1 lock held by syz.7.2494/11660: [ 598.322878][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 598.322934][ T38] 2 locks held by syz-executor/11669: [ 598.322945][ T38] #0: ffff88804e74ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 598.322997][ T38] #1: ffff88804e74c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 598.323053][ T38] 1 lock held by syz.5.2505/11680: [ 598.323064][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 598.323120][ T38] 3 locks held by kworker/1:11/11695: [ 598.323132][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.323184][ T38] #1: ffffc90006b1fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.323236][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 598.323285][ T38] 2 locks held by kworker/1:13/11697: [ 598.323298][ T38] 3 locks held by syz-executor/11711: [ 598.323309][ T38] #0: ffff888068998e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 598.323361][ T38] #1: ffff8880689980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 598.323415][ T38] #2: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 598.323464][ T38] 1 lock held by syz.3.2517/11719: [ 598.323475][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 598.323523][ T38] 4 locks held by syz-executor/11722: [ 598.323535][ T38] #0: ffff88806aeece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 598.323595][ T38] #1: ffff88806aeec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 598.323650][ T38] #2: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 598.323698][ T38] #3: ffff88803c9c8b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 598.323759][ T38] 1 lock held by syz-executor/11725: [ 598.323771][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 598.323824][ T38] 1 lock held by syz-executor/11729: [ 598.323836][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.323886][ T38] 1 lock held by syz-executor/11731: [ 598.323897][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.323946][ T38] 1 lock held by syz-executor/11734: [ 598.323958][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324005][ T38] 1 lock held by syz-executor/11737: [ 598.324016][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324065][ T38] 1 lock held by syz-executor/11740: [ 598.324076][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324126][ T38] 1 lock held by syz-executor/11744: [ 598.324137][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324185][ T38] 1 lock held by syz-executor/11746: [ 598.324196][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324245][ T38] 4 locks held by kworker/u9:2/11747: [ 598.324256][ T38] #0: ffff88803a28c938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.324313][ T38] #1: ffffc90003b87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.324366][ T38] #2: ffff8880439ec0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 598.324421][ T38] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 598.324473][ T38] 1 lock held by syz-executor/11750: [ 598.324485][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324533][ T38] 4 locks held by kworker/u9:3/11752: [ 598.324545][ T38] #0: ffff88805eebd138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 598.324610][ T38] #1: ffffc90003b47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 598.324662][ T38] #2: ffff88804c3440a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 598.324713][ T38] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 598.324766][ T38] 1 lock held by syz-executor/11754: [ 598.324778][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324825][ T38] 1 lock held by syz-executor/11758: [ 598.324836][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 598.324885][ T38] [ 598.324890][ T38] ============================================= [ 598.324890][ T38] [ 598.324899][ T38] NMI backtrace for cpu 0 [ 598.324914][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 598.324937][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.324949][ T38] Call Trace: [ 598.324957][ T38] [ 598.324966][ T38] dump_stack_lvl+0x189/0x250 [ 598.325000][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.325030][ T38] ? __pfx__printk+0x10/0x10 [ 598.325067][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 598.325097][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 598.325125][ T38] ? __pfx__printk+0x10/0x10 [ 598.325152][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 598.325179][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 598.325208][ T38] watchdog+0xf93/0xfe0 [ 598.325241][ T38] ? watchdog+0x1de/0xfe0 [ 598.325272][ T38] kthread+0x70e/0x8a0 [ 598.325304][ T38] ? __pfx_watchdog+0x10/0x10 [ 598.325329][ T38] ? __pfx_kthread+0x10/0x10 [ 598.325365][ T38] ? __pfx_kthread+0x10/0x10 [ 598.325395][ T38] ret_from_fork+0x439/0x7d0 [ 598.325425][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 598.325459][ T38] ? __switch_to_asm+0x39/0x70 [ 598.325477][ T38] ? __switch_to_asm+0x33/0x70 [ 598.325495][ T38] ? __pfx_kthread+0x10/0x10 [ 598.325526][ T38] ret_from_fork_asm+0x1a/0x30 [ 598.325571][ T38] [ 598.325578][ T38] Sending NMI from CPU 0 to CPUs 1: [ 598.325608][ C1] NMI backtrace for cpu 1 [ 598.325625][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 598.325643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.325652][ C1] RIP: 0010:nft_do_chain+0x1a7/0x1920 [ 598.325672][ C1] Code: 89 44 24 40 48 89 4c 24 60 80 7c 24 2f 00 74 4f 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e9 b1 e9 f8 <4c> 8b 2b e8 01 f0 c2 01 89 c3 31 ff 89 c6 e8 c6 7b 8a f8 85 db 74 [ 598.325687][ C1] RSP: 0018:ffffc90000a3f1a0 EFLAGS: 00000246 [ 598.325702][ C1] RAX: 1ffff11004d6dd4f RBX: ffff888026b6ea78 RCX: ffffc90000a3f460 [ 598.325714][ C1] RDX: ffffc90000a3f464 RSI: 0000000000000000 RDI: 0000000000000100 [ 598.325725][ C1] RBP: ffffc90000a3f3f0 R08: ffffc90000a3f37f R09: 0000000000000000 [ 598.325736][ C1] R10: ffffc90000a3f370 R11: fffff52000147e70 R12: dffffc0000000000 [ 598.325748][ C1] R13: dffffc0000000000 R14: ffffc90000a3f5e0 R15: ffffc90000a3f370 [ 598.325760][ C1] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 598.325774][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.325786][ C1] CR2: 00007f361aa55f40 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 598.325802][ C1] Call Trace: [ 598.325809][ C1] [ 598.325828][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 598.325850][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 598.325868][ C1] ? call_timer_fn+0x17e/0x5f0 [ 598.325887][ C1] ? __run_timer_base+0x648/0x970 [ 598.325904][ C1] ? run_timer_softirq+0xb7/0x180 [ 598.325922][ C1] ? handle_softirqs+0x22f/0x710 [ 598.325949][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 598.325972][ C1] nft_do_chain_inet+0x25d/0x340 [ 598.325989][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 598.326004][ C1] ? __lock_acquire+0xab9/0xd20 [ 598.326029][ C1] ? NF_HOOK+0x9a/0x3a0 [ 598.326050][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 598.326067][ C1] nf_hook_slow+0xc2/0x220 [ 598.326091][ C1] NF_HOOK+0x206/0x3a0 [ 598.326111][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 598.326131][ C1] ? NF_HOOK+0x9a/0x3a0 [ 598.326157][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 598.326175][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 598.326197][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 598.326224][ C1] ? skb_dst+0x4f/0xd0 [ 598.326244][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 598.326266][ C1] NF_HOOK+0x30c/0x3a0 [ 598.326286][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 598.326305][ C1] ? NF_HOOK+0x9a/0x3a0 [ 598.326324][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 598.326344][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 598.326369][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 598.326387][ C1] __netif_receive_skb+0x143/0x380 [ 598.326406][ C1] ? rt_spin_unlock+0x65/0x80 [ 598.326426][ C1] ? process_backlog+0x27b/0x900 [ 598.326445][ C1] process_backlog+0x31e/0x900 [ 598.326469][ C1] __napi_poll+0xb3/0x540 [ 598.326490][ C1] net_rx_action+0x707/0xe00 [ 598.326509][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.326538][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 598.326573][ C1] handle_softirqs+0x22f/0x710 [ 598.326596][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 598.326620][ C1] run_ktimerd+0xcf/0x190 [ 598.326640][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 598.326662][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 598.326681][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 598.326699][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 598.326717][ C1] smpboot_thread_fn+0x53f/0xa60 [ 598.326736][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 598.326759][ C1] kthread+0x70e/0x8a0 [ 598.326781][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 598.326800][ C1] ? __pfx_kthread+0x10/0x10 [ 598.326829][ C1] ? __pfx_kthread+0x10/0x10 [ 598.326852][ C1] ret_from_fork+0x439/0x7d0 [ 598.326872][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 598.326893][ C1] ? __switch_to_asm+0x39/0x70 [ 598.326908][ C1] ? __switch_to_asm+0x33/0x70 [ 598.326922][ C1] ? __pfx_kthread+0x10/0x10 [ 598.326950][ C1] ret_from_fork_asm+0x1a/0x30 [ 598.326973][ C1] [ 598.608045][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 598.608069][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 598.608094][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.608106][ T38] Call Trace: [ 598.608115][ T38] [ 598.608124][ T38] dump_stack_lvl+0x99/0x250 [ 598.608161][ T38] ? __asan_memcpy+0x40/0x70 [ 598.608185][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.608215][ T38] ? __pfx__printk+0x10/0x10 [ 598.608252][ T38] vpanic+0x281/0x750 [ 598.608284][ T38] ? __pfx_vpanic+0x10/0x10 [ 598.608309][ T38] ? irqentry_exit+0x74/0x90 [ 598.608339][ T38] ? preempt_schedule+0xae/0xc0 [ 598.608368][ T38] ? preempt_schedule_common+0x83/0xd0 [ 598.608405][ T38] panic+0xb9/0xc0 [ 598.608433][ T38] ? __pfx_panic+0x10/0x10 [ 598.608462][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 598.608493][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 598.608522][ T38] watchdog+0xfd2/0xfe0 [ 598.608555][ T38] ? watchdog+0x1de/0xfe0 [ 598.608600][ T38] kthread+0x70e/0x8a0 [ 598.608634][ T38] ? __pfx_watchdog+0x10/0x10 [ 598.608660][ T38] ? __pfx_kthread+0x10/0x10 [ 598.608705][ T38] ? __pfx_kthread+0x10/0x10 [ 598.608737][ T38] ret_from_fork+0x439/0x7d0 [ 598.608767][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 598.608801][ T38] ? __switch_to_asm+0x39/0x70 [ 598.608819][ T38] ? __switch_to_asm+0x33/0x70 [ 598.608837][ T38] ? __pfx_kthread+0x10/0x10 [ 598.608869][ T38] ret_from_fork_asm+0x1a/0x30 [ 598.608905][ T38] [ 598.609220][ T38] Kernel Offset: disabled