last executing test programs: 1.796978497s ago: executing program 3 (id=502): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.684459012s ago: executing program 3 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.346021588s ago: executing program 3 (id=507): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1']) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1.280350793s ago: executing program 2 (id=509): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000340)={"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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xffffffffffffff72}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.149613503s ago: executing program 2 (id=511): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x8, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0x1, 0x8, 0x8, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffffc, 0x7, 0x5, 0x6, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.138736634s ago: executing program 0 (id=512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0x65) 1.11595934s ago: executing program 2 (id=513): socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) 977.458861ms ago: executing program 0 (id=514): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0xff, 0x2, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)='8250_pericom\n', 0x24) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/bus/pci/drivers/8250_pericom\x00', 0x0, 0x0) openat(r4, 0x0, 0x1, 0x0) r5 = openat(r4, &(0x7f0000000700)='new_id\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x10001) write(r5, &(0x7f0000000800)='8086 2', 0x6) 840.788472ms ago: executing program 0 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) write(r0, &(0x7f0000000340)='E', 0x1) 783.312415ms ago: executing program 1 (id=517): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f", 0x7, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 733.911706ms ago: executing program 1 (id=518): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) 708.385051ms ago: executing program 0 (id=519): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="0f20d835200000000f22d8660fede2b92f0300000f320f791a0f01c5660f2b7700c4e2612d08b980080000b866120000ba000000000f30b8000000000f23d00f21f835300000030f23f8b8010000000f01c1", 0x52}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 666.120371ms ago: executing program 1 (id=520): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r0, &(0x7f00000006c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) write$nci(r0, &(0x7f0000000c80)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 545.331058ms ago: executing program 1 (id=521): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200), 0x0, 0x1000000) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd01, &(0x7f0000000000)="04000000000000000000000038010000") ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/45) 492.43054ms ago: executing program 2 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x65) 417.316737ms ago: executing program 0 (id=523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 398.404921ms ago: executing program 3 (id=524): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0xff, 0x2, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)='8250_pericom\n', 0x24) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/bus/pci/drivers/8250_pericom\x00', 0x0, 0x0) openat(r4, 0x0, 0x1, 0x0) r5 = openat(r4, &(0x7f0000000700)='new_id\x00', 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x10001) write(r5, &(0x7f0000000800)='8086 2', 0x6) 387.950073ms ago: executing program 1 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 213.395332ms ago: executing program 0 (id=526): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(0x0, 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0xfffffffffffffe2f, 0x0}}) 127.002772ms ago: executing program 3 (id=527): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1002}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f", 0x7, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 126.199342ms ago: executing program 2 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) 49.590279ms ago: executing program 1 (id=529): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 13.105978ms ago: executing program 3 (id=530): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900060008"], 0xe) 0s ago: executing program 2 (id=531): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x24b, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x19, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x5a, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): e_1: entered allmulticast mode [ 81.100434][ T5777] bridge_slave_1: entered promiscuous mode [ 81.182973][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.225706][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.235214][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.243122][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.250484][ T5789] bridge_slave_0: entered allmulticast mode [ 81.257674][ T5789] bridge_slave_0: entered promiscuous mode [ 81.275721][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.282920][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.290356][ T5789] bridge_slave_1: entered allmulticast mode [ 81.302897][ T5789] bridge_slave_1: entered promiscuous mode [ 81.372310][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380029][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.388488][ T5775] bridge_slave_0: entered allmulticast mode [ 81.395652][ T5775] bridge_slave_0: entered promiscuous mode [ 81.411497][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.419002][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.426326][ T5776] bridge_slave_0: entered allmulticast mode [ 81.433413][ T5776] bridge_slave_0: entered promiscuous mode [ 81.444592][ T5777] team0: Port device team_slave_0 added [ 81.451892][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.459717][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.467462][ T5775] bridge_slave_1: entered allmulticast mode [ 81.474280][ T5775] bridge_slave_1: entered promiscuous mode [ 81.483936][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.494037][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.501377][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.508816][ T5776] bridge_slave_1: entered allmulticast mode [ 81.516252][ T5776] bridge_slave_1: entered promiscuous mode [ 81.525361][ T5777] team0: Port device team_slave_1 added [ 81.544150][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.622739][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.636263][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.649040][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.660791][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.672946][ T5789] team0: Port device team_slave_0 added [ 81.683410][ T5789] team0: Port device team_slave_1 added [ 81.690415][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.697705][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.724087][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.737680][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.744784][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.771656][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.873319][ T5775] team0: Port device team_slave_0 added [ 81.882684][ T5776] team0: Port device team_slave_0 added [ 81.893489][ T5776] team0: Port device team_slave_1 added [ 81.901058][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.909277][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.935874][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.960187][ T5775] team0: Port device team_slave_1 added [ 81.975606][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.982615][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.009273][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.028226][ T5777] hsr_slave_0: entered promiscuous mode [ 82.034984][ T5777] hsr_slave_1: entered promiscuous mode [ 82.078606][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.086112][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.112457][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.125594][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.132596][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.159627][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.172917][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.180651][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.208623][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.249820][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.259829][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.289308][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.351492][ T5789] hsr_slave_0: entered promiscuous mode [ 82.357990][ T5088] Bluetooth: hci2: command tx timeout [ 82.364884][ T5789] hsr_slave_1: entered promiscuous mode [ 82.371127][ T5088] Bluetooth: hci1: command tx timeout [ 82.371151][ T5788] Bluetooth: hci0: command tx timeout [ 82.382809][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.391134][ T5789] Cannot create hsr debugfs directory [ 82.418890][ T5775] hsr_slave_0: entered promiscuous mode [ 82.425854][ T5775] hsr_slave_1: entered promiscuous mode [ 82.432195][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.440636][ T5088] Bluetooth: hci3: command tx timeout [ 82.441012][ T5775] Cannot create hsr debugfs directory [ 82.571787][ T5776] hsr_slave_0: entered promiscuous mode [ 82.578809][ T5776] hsr_slave_1: entered promiscuous mode [ 82.585919][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.593618][ T5776] Cannot create hsr debugfs directory [ 82.919114][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.941347][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.952114][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.964050][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.038800][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.050190][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.081655][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.094996][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.164454][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.191658][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.202693][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.239399][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.292180][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.319628][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.330357][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.357925][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.369710][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.400756][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.434841][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.442326][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.479338][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.486562][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.518748][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.583138][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.604302][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.611521][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.638168][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.645585][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.732528][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.781515][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.836987][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.861770][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.888372][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.895624][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.913931][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.921194][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.953746][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.961022][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.983766][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.991287][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.202084][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.343595][ T5777] veth0_vlan: entered promiscuous mode [ 84.384827][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.429121][ T5777] veth1_vlan: entered promiscuous mode [ 84.438239][ T5088] Bluetooth: hci0: command tx timeout [ 84.438260][ T5788] Bluetooth: hci1: command tx timeout [ 84.443834][ T5088] Bluetooth: hci2: command tx timeout [ 84.517007][ T5088] Bluetooth: hci3: command tx timeout [ 84.590838][ T5789] veth0_vlan: entered promiscuous mode [ 84.630498][ T5777] veth0_macvtap: entered promiscuous mode [ 84.647953][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.660458][ T5789] veth1_vlan: entered promiscuous mode [ 84.671097][ T5777] veth1_macvtap: entered promiscuous mode [ 84.700260][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.759906][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.780639][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.809693][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819325][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.829007][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.840045][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.868300][ T5789] veth0_macvtap: entered promiscuous mode [ 84.901494][ T5776] veth0_vlan: entered promiscuous mode [ 84.909410][ T5789] veth1_macvtap: entered promiscuous mode [ 84.940925][ T5776] veth1_vlan: entered promiscuous mode [ 84.973154][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.984708][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.001708][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.039246][ T5775] veth0_vlan: entered promiscuous mode [ 85.062547][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.074775][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.089605][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.102087][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.111647][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.121144][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.130518][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.179905][ T5775] veth1_vlan: entered promiscuous mode [ 85.211735][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.224476][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.267983][ T5776] veth0_macvtap: entered promiscuous mode [ 85.314354][ T5776] veth1_macvtap: entered promiscuous mode [ 85.346444][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.357825][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.376857][ T5775] veth0_macvtap: entered promiscuous mode [ 85.414936][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.438558][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.449149][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.460199][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.472539][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.499402][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.518940][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.534883][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.545004][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.560365][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.572101][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.591461][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.605310][ T5775] veth1_macvtap: entered promiscuous mode [ 85.623121][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.632318][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.641608][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.650694][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.809945][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.833396][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.842417][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.850643][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.861250][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.861516][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.884516][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.895550][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.906467][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.918303][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.929177][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.941451][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.982921][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.001804][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.012339][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.023343][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.033791][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.046619][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.058723][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.100658][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.103723][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.121888][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.134524][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.144430][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.154953][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.279654][ T5851] netlink: 'syz.3.5': attribute type 1 has an invalid length. [ 86.516138][ T5088] Bluetooth: hci1: command tx timeout [ 86.516190][ T5792] Bluetooth: hci2: command tx timeout [ 86.527850][ T5788] Bluetooth: hci0: command tx timeout [ 86.605935][ T5792] Bluetooth: hci3: command tx timeout [ 86.642480][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.655838][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.787450][ T5875] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 87.937072][ T5877] kvm: kvm [5876]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000034) = 0x2 [ 88.130320][ T5882] syz.1.12: attempt to access beyond end of device [ 88.130320][ T5882] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 88.197945][ T5882] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 88.208284][ T5882] device-mapper: ioctl: error adding target to table [ 88.596372][ T5788] Bluetooth: hci2: command tx timeout [ 88.596421][ T5792] Bluetooth: hci0: command tx timeout [ 88.675748][ T5792] Bluetooth: hci3: command tx timeout [ 89.321685][ T5860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.331239][ T5860] nci: nci_start_poll: failed to set local general bytes [ 89.347022][ T5852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.380529][ T5892] FAULT_INJECTION: forcing a failure. [ 89.380529][ T5892] name failslab, interval 1, probability 0, space 0, times 1 [ 89.388586][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.423630][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.431224][ T5892] CPU: 1 PID: 5892 Comm: syz.3.17 Not tainted syzkaller #0 [ 89.431280][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.431293][ T5892] Call Trace: [ 89.431302][ T5892] [ 89.431310][ T5892] dump_stack_lvl+0x18c/0x250 [ 89.431350][ T5892] ? show_regs_print_info+0x20/0x20 [ 89.431375][ T5892] ? load_image+0x420/0x420 [ 89.431401][ T5892] ? __might_sleep+0xe0/0xe0 [ 89.474737][ T5892] ? __lock_acquire+0x7d80/0x7d80 [ 89.479854][ T5892] should_fail_ex+0x394/0x4c0 [ 89.484755][ T5892] should_failslab+0x9/0x20 [ 89.489393][ T5892] slab_pre_alloc_hook+0x59/0x300 [ 89.494451][ T5892] kmem_cache_alloc_node+0x5e/0x310 [ 89.499687][ T5892] ? __alloc_skb+0x103/0x2c0 [ 89.504313][ T5892] __alloc_skb+0x103/0x2c0 [ 89.508808][ T5892] ctrl_getfamily+0x3d1/0x5b0 [ 89.513510][ T5892] ? nla_put_string+0x30/0x30 [ 89.518394][ T5892] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 89.525037][ T5892] genl_family_rcv_msg_doit+0x21a/0x310 [ 89.531397][ T5892] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 89.537438][ T5892] genl_rcv_msg+0x611/0x7a0 [ 89.542091][ T5892] ? genl_bind+0x360/0x360 [ 89.546547][ T5892] ? nla_put_string+0x30/0x30 [ 89.551270][ T5892] netlink_rcv_skb+0x235/0x4c0 [ 89.556059][ T5892] ? genl_bind+0x360/0x360 [ 89.560609][ T5892] ? netlink_ack+0x1160/0x1160 [ 89.565545][ T5892] ? __lock_acquire+0x7d80/0x7d80 [ 89.570605][ T5892] ? net_generic+0x1e/0x240 [ 89.575305][ T5892] ? down_read+0x1ac/0x2e0 [ 89.580351][ T5892] genl_rcv+0x28/0x40 [ 89.584443][ T5892] netlink_unicast+0x7b1/0x930 [ 89.589322][ T5892] netlink_sendmsg+0x8d0/0xbf0 [ 89.594299][ T5892] ? netlink_getsockopt+0x590/0x590 [ 89.599513][ T5892] ? apparmor_socket_sendmsg+0x8e/0x330 [ 89.605258][ T5892] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 89.610589][ T5892] ? security_socket_sendmsg+0x80/0xa0 [ 89.616173][ T5892] __sys_sendto+0x4a9/0x6b0 [ 89.620795][ T5892] ? __ia32_sys_getpeername+0x90/0x90 [ 89.626197][ T5892] ? __lock_acquire+0x7d80/0x7d80 [ 89.631255][ T5892] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 89.637364][ T5892] ? lock_chain_count+0x20/0x20 [ 89.642584][ T5892] ? lock_chain_count+0x20/0x20 [ 89.647460][ T5892] __x64_sys_sendto+0xde/0xf0 [ 89.652207][ T5892] do_syscall_64+0x55/0xb0 [ 89.656667][ T5892] ? clear_bhb_loop+0x40/0x90 [ 89.661366][ T5892] ? clear_bhb_loop+0x40/0x90 [ 89.666073][ T5892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.672074][ T5892] RIP: 0033:0x7f80fb55e98e [ 89.676519][ T5892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.696247][ T5892] RSP: 002b:00007f80fc475e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.704703][ T5892] RAX: ffffffffffffffda RBX: 00007f80fc4776c0 RCX: 00007f80fb55e98e [ 89.712780][ T5892] RDX: 000000000000001c RSI: 00007f80fc476000 RDI: 0000000000000007 [ 89.720793][ T5892] RBP: 0000000000000000 R08: 00007f80fc475f04 R09: 000000000000000c [ 89.728797][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 89.736967][ T5892] R13: 00007f80fc475f58 R14: 00007f80fc476000 R15: 0000000000000000 [ 89.745170][ T5892] [ 89.967335][ T5898] syzkaller0: entered promiscuous mode [ 89.973021][ T5898] syzkaller0: entered allmulticast mode [ 90.694584][ T2900] Bluetooth: hci4: Frame reassembly failed (-84) [ 90.755881][ T5788] Bluetooth: hci3: command tx timeout [ 90.815868][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.030314][ T5839] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 91.057068][ T5839] usb 4-1: config 1 has no interface number 0 [ 91.084515][ T5839] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 91.104136][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.125758][ T5839] usb 4-1: Product: syz [ 91.134097][ T5839] usb 4-1: Manufacturer: syz [ 91.145805][ T5839] usb 4-1: SerialNumber: syz [ 91.335918][ T5948] FAULT_INJECTION: forcing a failure. [ 91.335918][ T5948] name failslab, interval 1, probability 0, space 0, times 0 [ 91.359666][ T5948] CPU: 0 PID: 5948 Comm: syz.2.29 Not tainted syzkaller #0 [ 91.367749][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.377899][ T5948] Call Trace: [ 91.381227][ T5948] [ 91.384463][ T5948] dump_stack_lvl+0x18c/0x250 [ 91.389203][ T5948] ? show_regs_print_info+0x20/0x20 [ 91.394542][ T5948] ? load_image+0x420/0x420 [ 91.399538][ T5948] ? __might_sleep+0xe0/0xe0 [ 91.404197][ T5948] ? __lock_acquire+0x7d80/0x7d80 [ 91.405660][ T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.409614][ T5948] should_fail_ex+0x394/0x4c0 [ 91.409676][ T5948] should_failslab+0x9/0x20 [ 91.426614][ T5948] slab_pre_alloc_hook+0x59/0x300 [ 91.431704][ T5948] ? nbd_add_socket+0x4e4/0xa00 [ 91.436627][ T5948] ? nbd_add_socket+0x4e4/0xa00 [ 91.441545][ T5948] __kmem_cache_alloc_node+0x53/0x250 [ 91.447002][ T5948] ? nbd_add_socket+0x4e4/0xa00 [ 91.451931][ T5948] __kmalloc_node_track_caller+0xa4/0x230 [ 91.457732][ T5948] krealloc+0x86/0x120 [ 91.461890][ T5948] nbd_add_socket+0x4e4/0xa00 [ 91.466641][ T5948] ? refcount_inc+0x70/0x70 [ 91.471342][ T5948] ? __nla_parse+0x40/0x50 [ 91.476006][ T5948] nbd_genl_connect+0x11eb/0x1a60 [ 91.481208][ T5948] ? trace_raw_output_nbd_send_request+0xe0/0xe0 [ 91.487617][ T5948] ? __nla_parse+0x40/0x50 [ 91.492283][ T5948] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 91.498666][ T5948] genl_family_rcv_msg_doit+0x21a/0x310 [ 91.504240][ T5948] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 91.510170][ T5948] genl_rcv_msg+0x611/0x7a0 [ 91.514703][ T5948] ? genl_bind+0x360/0x360 [ 91.519169][ T5948] ? trace_raw_output_nbd_send_request+0xe0/0xe0 [ 91.525744][ T5948] netlink_rcv_skb+0x235/0x4c0 [ 91.530691][ T5948] ? genl_bind+0x360/0x360 [ 91.535140][ T5948] ? netlink_ack+0x1160/0x1160 [ 91.540345][ T5948] ? __lock_acquire+0x7d80/0x7d80 [ 91.545389][ T5948] ? net_generic+0x1e/0x240 [ 91.550011][ T5948] ? down_read+0x1ac/0x2e0 [ 91.554664][ T5948] genl_rcv+0x28/0x40 [ 91.558782][ T5948] netlink_unicast+0x7b1/0x930 [ 91.563618][ T5948] netlink_sendmsg+0x8d0/0xbf0 [ 91.568631][ T5948] ? netlink_getsockopt+0x590/0x590 [ 91.573873][ T5948] ? apparmor_socket_sendmsg+0x8e/0x330 [ 91.579539][ T5948] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 91.584847][ T5948] ? security_socket_sendmsg+0x80/0xa0 [ 91.590318][ T5948] ? netlink_getsockopt+0x590/0x590 [ 91.595569][ T5948] ____sys_sendmsg+0x61b/0x980 [ 91.600361][ T5948] ? __asan_memset+0x22/0x40 [ 91.604970][ T5948] ? __sys_sendmsg_sock+0x30/0x30 [ 91.610128][ T5948] ? __import_iovec+0x5f2/0x850 [ 91.615273][ T5948] ? import_iovec+0x73/0xa0 [ 91.617510][ T789] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 91.619793][ T5948] ___sys_sendmsg+0x2a6/0x360 [ 91.628532][ T789] usb 2-1: config 1 has no interface number 0 [ 91.633110][ T5948] ? __sys_sendmsg+0x2b0/0x2b0 [ 91.644324][ T5948] ? __sys_recvfrom+0x41b/0x530 [ 91.647762][ T789] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 91.649239][ T5948] __se_sys_sendmsg+0x1d0/0x2c0 [ 91.658557][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.663193][ T5948] ? __x64_sys_sendmsg+0x80/0x80 [ 91.663242][ T5948] ? lockdep_hardirqs_on+0x98/0x150 [ 91.663268][ T5948] do_syscall_64+0x55/0xb0 [ 91.663292][ T5948] ? clear_bhb_loop+0x40/0x90 [ 91.663319][ T5948] ? clear_bhb_loop+0x40/0x90 [ 91.663348][ T5948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.663376][ T5948] RIP: 0033:0x7f0844b9e159 [ 91.663399][ T5948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.663417][ T5948] RSP: 002b:00007f0845a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.663443][ T5948] RAX: ffffffffffffffda RBX: 00007f0844e25fa0 RCX: 00007f0844b9e159 [ 91.663459][ T5948] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000007 [ 91.663473][ T5948] RBP: 00007f0844c3506b R08: 0000000000000000 R09: 0000000000000000 [ 91.663487][ T5948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.663500][ T5948] R13: 00007f0844e26038 R14: 00007f0844e25fa0 R15: 00007ffd4f3fc898 [ 91.663530][ T5948] [ 91.667401][ T5839] usb 4-1: 3:0 : does not exist [ 91.675760][ T5948] block nbd0: shutting down sockets [ 91.677969][ T5839] usb 4-1: 3:0 : does not exist [ 91.716675][ T789] usb 2-1: Product: syz [ 91.834245][ T789] usb 2-1: Manufacturer: syz [ 91.835820][ T5839] usb 4-1: USB disconnect, device number 2 [ 91.841615][ T789] usb 2-1: SerialNumber: syz [ 92.058124][ T5955] syzkaller0: entered promiscuous mode [ 92.064186][ T5955] syzkaller0: entered allmulticast mode [ 92.107388][ T789] usb 2-1: 3:0 : does not exist [ 92.116301][ T789] usb 2-1: 3:0 : does not exist [ 92.150688][ T789] usb 2-1: USB disconnect, device number 2 [ 92.292318][ T27] cfg80211: failed to load regulatory.db [ 92.755664][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.755718][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 93.064741][ T5978] Zero length message leads to an empty skb [ 93.318677][ T5980] kvm: kvm [5979]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800 [ 93.336601][ T5980] kvm: kvm [5979]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 93.921393][ T5987] FAULT_INJECTION: forcing a failure. [ 93.921393][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 93.935755][ T5987] CPU: 0 PID: 5987 Comm: syz.0.40 Not tainted syzkaller #0 [ 93.943031][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.953151][ T5987] Call Trace: [ 93.956644][ T5987] [ 93.959609][ T5987] dump_stack_lvl+0x18c/0x250 [ 93.964327][ T5987] ? show_regs_print_info+0x20/0x20 [ 93.969562][ T5987] ? load_image+0x420/0x420 [ 93.974089][ T5987] ? __lock_acquire+0x7d80/0x7d80 [ 93.979207][ T5987] should_fail_ex+0x394/0x4c0 [ 93.983997][ T5987] should_failslab+0x9/0x20 [ 93.988543][ T5987] slab_pre_alloc_hook+0x59/0x300 [ 93.993609][ T5987] ? snd_seq_pool_new+0x51/0x1a0 [ 93.998753][ T5987] __kmem_cache_alloc_node+0x53/0x250 [ 94.004265][ T5987] ? snd_seq_pool_new+0x51/0x1a0 [ 94.009247][ T5987] kmalloc_trace+0x2a/0xe0 [ 94.013713][ T5987] snd_seq_pool_new+0x51/0x1a0 [ 94.018596][ T5987] seq_create_client1+0x6a/0x6a0 [ 94.023615][ T5987] snd_seq_open+0x54/0x500 [ 94.028180][ T5987] chrdev_open+0x58c/0x600 [ 94.032921][ T5987] ? cd_forget+0x160/0x160 [ 94.037475][ T5987] ? fsnotify_perm+0x3ed/0x5e0 [ 94.042450][ T5987] do_dentry_open+0x880/0x14b0 [ 94.047243][ T5987] ? cd_forget+0x160/0x160 [ 94.051765][ T5987] path_openat+0x284f/0x3270 [ 94.057086][ T5987] ? do_sys_openat2+0xda/0x1d0 [ 94.061954][ T5987] ? __x64_sys_openat+0x139/0x160 [ 94.066998][ T5987] ? verify_lock_unused+0x140/0x140 [ 94.072216][ T5987] ? do_filp_open+0x430/0x430 [ 94.076923][ T5987] do_filp_open+0x1f2/0x430 [ 94.081447][ T5987] ? vfs_tmpfile+0x620/0x620 [ 94.086075][ T5987] ? _raw_spin_unlock+0x28/0x40 [ 94.090947][ T5987] ? alloc_fd+0x590/0x640 [ 94.095307][ T5987] do_sys_openat2+0x134/0x1d0 [ 94.100093][ T5987] ? do_sys_open+0xe0/0xe0 [ 94.104630][ T5987] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 94.110631][ T5987] ? lock_chain_count+0x20/0x20 [ 94.115602][ T5987] __x64_sys_openat+0x139/0x160 [ 94.120572][ T5987] do_syscall_64+0x55/0xb0 [ 94.125016][ T5987] ? clear_bhb_loop+0x40/0x90 [ 94.129722][ T5987] ? clear_bhb_loop+0x40/0x90 [ 94.134511][ T5987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.140424][ T5987] RIP: 0033:0x7f3b5999e159 [ 94.144973][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.165475][ T5987] RSP: 002b:00007f3b5a79c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.174798][ T5987] RAX: ffffffffffffffda RBX: 00007f3b59c25fa0 RCX: 00007f3b5999e159 [ 94.183081][ T5987] RDX: 0000000000062981 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 94.191164][ T5987] RBP: 00007f3b59a3506b R08: 0000000000000000 R09: 0000000000000000 [ 94.199164][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.207252][ T5987] R13: 00007f3b59c26038 R14: 00007f3b59c25fa0 R15: 00007ffdf1d33098 [ 94.216031][ T5987] [ 94.665691][ T5780] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.860373][ T5780] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 94.869357][ T5780] usb 3-1: config 1 has no interface number 0 [ 94.874032][ T5993] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.884049][ T5780] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 94.889668][ T2924] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.900859][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.909710][ T5780] usb 3-1: Product: syz [ 94.913999][ T5780] usb 3-1: Manufacturer: syz [ 94.918869][ T5780] usb 3-1: SerialNumber: syz [ 95.144115][ T5780] usb 3-1: 3:0 : does not exist [ 95.151882][ T5780] usb 3-1: 3:0 : does not exist [ 95.176099][ T5780] usb 3-1: USB disconnect, device number 2 [ 95.387087][ T5959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.822345][ T6009] FAULT_INJECTION: forcing a failure. [ 95.822345][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 95.841357][ T6009] CPU: 1 PID: 6009 Comm: syz.1.48 Not tainted syzkaller #0 [ 95.849348][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.860680][ T6009] Call Trace: [ 95.864183][ T6009] [ 95.867258][ T6009] dump_stack_lvl+0x18c/0x250 [ 95.872622][ T6009] ? show_regs_print_info+0x20/0x20 [ 95.878170][ T6009] ? load_image+0x420/0x420 [ 95.882749][ T6009] ? __lock_acquire+0x7d80/0x7d80 [ 95.888105][ T6009] should_fail_ex+0x394/0x4c0 [ 95.892957][ T6009] should_failslab+0x9/0x20 [ 95.897520][ T6009] slab_pre_alloc_hook+0x59/0x300 [ 95.902700][ T6009] ? alloc_ucounts+0x159/0x4c0 [ 95.908417][ T6009] __kmem_cache_alloc_node+0x53/0x250 [ 95.913949][ T6009] ? alloc_ucounts+0x159/0x4c0 [ 95.918774][ T6009] kmalloc_trace+0x2a/0xe0 [ 95.923395][ T6009] alloc_ucounts+0x159/0x4c0 [ 95.928301][ T6009] ? safesetid_task_fix_setuid+0xc6/0x9e0 [ 95.934087][ T6009] set_cred_ucounts+0x10d/0x1b0 [ 95.939005][ T6009] __sys_setuid+0x2bc/0x580 [ 95.943584][ T6009] do_syscall_64+0x55/0xb0 [ 95.948050][ T6009] ? clear_bhb_loop+0x40/0x90 [ 95.952757][ T6009] ? clear_bhb_loop+0x40/0x90 [ 95.957639][ T6009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.963549][ T6009] RIP: 0033:0x7f5459f9e159 [ 95.967984][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.987695][ T6009] RSP: 002b:00007f545aeeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 95.996300][ T6009] RAX: ffffffffffffffda RBX: 00007f545a225fa0 RCX: 00007f5459f9e159 [ 96.004400][ T6009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 96.012391][ T6009] RBP: 00007f545a03506b R08: 0000000000000000 R09: 0000000000000000 [ 96.020553][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.028548][ T6009] R13: 00007f545a226038 R14: 00007f545a225fa0 R15: 00007ffdc99479c8 [ 96.036725][ T6009] [ 96.915727][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 96.922937][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.043163][ T6036] syzkaller0: entered promiscuous mode [ 97.051535][ T6036] syzkaller0: entered allmulticast mode [ 97.061632][ T2900] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.075610][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.075645][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 99.149908][ T6045] ima: policy update failed [ 99.155233][ T28] audit: type=1802 audit(1790885476.461:2): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.61" res=0 errno=0 [ 99.289759][ T6050] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 99.494806][ T6020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.686688][ T2900] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.722055][ T6055] Bluetooth: hci4: Frame reassembly failed (-84) [ 99.810822][ T6059] syzkaller0: entered promiscuous mode [ 99.820279][ T6059] syzkaller0: entered allmulticast mode [ 100.505855][ T5780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.706362][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 100.783361][ T5780] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 100.815487][ T6076] Set syz1 is full, maxelem 6117 reached [ 100.822992][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.850341][ T5780] usb 3-1: Product: syz [ 100.854587][ T5780] usb 3-1: Manufacturer: syz [ 100.865067][ T5780] usb 3-1: SerialNumber: syz [ 100.881030][ T5780] usb 3-1: config 0 descriptor?? [ 100.899381][ T5780] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 100.924657][ T5780] pctv452e: pctv452e_power_ctrl: 1 [ 100.924657][ T5780] [ 100.938314][ T5780] usb 3-1: selecting invalid altsetting 3 [ 100.959324][ T5780] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 100.959324][ T5780] [ 100.983463][ T5780] dvb-usb: bulk message failed: -22 (5/0) [ 101.043551][ T5780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.072938][ T5780] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 101.105831][ T5780] usb 3-1: media controller created [ 101.112173][ T5780] dvb-usb: bulk message failed: -22 (8/0) [ 101.119327][ T5780] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 101.139120][ T5780] dvb-usb: MAC address reading failed. [ 101.157085][ T6076] dvb-usb: bulk message failed: -22 (7/0) [ 101.163092][ T6076] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 101.222158][ T5780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.308220][ T6115] syzkaller0: entered promiscuous mode [ 101.314660][ T6115] syzkaller0: entered allmulticast mode [ 101.375345][ T5780] DVB: Unable to find symbol stb0899_attach() [ 101.385607][ T5780] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 101.506170][ T5780] rc_core: IR keymap rc-tt-1500 not found [ 101.521662][ T5780] Registered IR keymap rc-empty [ 101.535327][ T5780] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 101.548832][ T5780] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 101.582806][ T5780] dvb-usb: schedule remote query interval to 100 msecs. [ 101.590980][ T5780] pctv452e: pctv452e_power_ctrl: 0 [ 101.590980][ T5780] [ 101.600417][ T5780] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 101.615379][ T5780] usb 3-1: USB disconnect, device number 3 [ 101.725822][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 101.732750][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 101.830606][ T5780] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 101.894210][ T6129] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 101.932712][ T6129] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 102.085766][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.286074][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 102.304791][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.335946][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.355577][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.385517][ T23] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 102.394774][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.417754][ T23] usb 1-1: config 0 descriptor?? [ 102.906784][ T23] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input6 [ 103.041726][ T23] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input7 [ 103.112957][ T23] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 103.198559][ T23] usb 1-1: USB disconnect, device number 2 [ 103.226165][ T5780] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.340340][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 103.427706][ T5780] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.460280][ T5780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.485511][ T5780] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.508205][ T5780] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.529515][ T5780] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 103.540398][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.557979][ T5780] usb 3-1: Product: syz [ 103.562328][ T5780] usb 3-1: Manufacturer: syz [ 103.583491][ T5780] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 103.614189][ T5780] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 103.651852][ T5780] garmin_gps: probe of ttyUSB0 failed with error -90 [ 103.794186][ T5780] usb 3-1: USB disconnect, device number 4 [ 103.819679][ T5780] garmin_gps 3-1:1.0: device disconnected [ 105.222599][ T6140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.476795][ T6242] 9pnet_virtio: no channels available for device syz [ 105.826610][ T2196] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.019032][ T2196] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.054741][ T2196] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.075066][ T2196] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.096647][ T2196] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.128408][ T2196] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 106.140280][ T2196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.148612][ T2196] usb 4-1: Product: syz [ 106.152832][ T2196] usb 4-1: Manufacturer: syz [ 106.166937][ T2196] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 106.175287][ T2196] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 106.187752][ T2196] garmin_gps: probe of ttyUSB0 failed with error -90 [ 106.378721][ T2196] usb 4-1: USB disconnect, device number 3 [ 106.391119][ T2196] garmin_gps 4-1:1.0: device disconnected [ 106.469334][ T6283] loop0: detected capacity change from 0 to 32768 [ 106.600729][ T6283] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 107.055842][ T2196] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.258000][ T2196] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.266940][ T2196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.277361][ T2196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.286676][ T2196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.299831][ T2196] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.309240][ T2196] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.318527][ T2196] usb 1-1: Product: syz [ 107.323988][ T2196] usb 1-1: Manufacturer: syz [ 107.339169][ T2196] cdc_wdm 1-1:1.0: skipping garbage [ 107.344678][ T2196] cdc_wdm 1-1:1.0: skipping garbage [ 107.356032][ T2196] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 107.362007][ T2196] cdc_wdm 1-1:1.0: Unknown control protocol [ 107.601212][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.608064][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.614461][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.621186][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.627623][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.634257][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.641471][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.648102][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.654948][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.661676][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.668057][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.674787][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.681795][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.688486][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.694932][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.701585][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.708768][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.715512][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.721909][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 107.728543][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 107.734894][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 107.744075][ T2196] usb 1-1: USB disconnect, device number 3 [ 108.565618][ T5780] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.745598][ T5780] usb 1-1: Using ep0 maxpacket: 8 [ 108.752958][ T5780] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.761700][ T5780] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 108.772255][ T5780] usb 1-1: config 179 has no interface number 0 [ 108.778721][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 108.790219][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 108.801866][ T5780] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 108.815478][ T5780] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.824570][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.836248][ T6309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.922604][ T6262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.065528][ T2196] usb 1-1: USB disconnect, device number 4 [ 109.187359][ T5792] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 109.305212][ T6321] syz.3.127[6321]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 109.425746][ T5780] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.620619][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.645979][ T5780] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 109.673642][ T5780] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.692412][ T5780] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 109.711490][ T6331] syzkaller0: entered promiscuous mode [ 109.717225][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 109.725268][ T5780] usb 2-1: Product: syz [ 109.725349][ T6331] syzkaller0: entered allmulticast mode [ 109.736205][ T5780] usb 2-1: Manufacturer: syz [ 109.752526][ T6317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.764281][ T5780] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 109.791977][ T5780] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 109.987628][ T23] usb 2-1: USB disconnect, device number 3 [ 110.014585][ T23] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 110.025374][ T23] garmin_gps 2-1:1.0: device disconnected [ 111.461969][ T6361] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 111.517099][ T6361] device-mapper: ioctl: device has been removed from the dev hash table. [ 112.118756][ T5839] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.311569][ T5839] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.325065][ T5839] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 112.335332][ T5839] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.351873][ T5839] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 112.361709][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.370240][ T5839] usb 2-1: Product: syz [ 112.374452][ T5839] usb 2-1: Manufacturer: syz [ 112.382303][ T6369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.393459][ T5839] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 112.405013][ T5839] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 112.600504][ T5839] usb 2-1: USB disconnect, device number 4 [ 112.612028][ T5839] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 112.626406][ T5839] garmin_gps 2-1:1.0: device disconnected [ 112.669869][ T6330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.129469][ T6384] syzkaller0: entered promiscuous mode [ 113.145702][ T6384] syzkaller0: entered allmulticast mode [ 114.075822][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 114.251103][ T8] usb 1-1: device descriptor read/64, error -71 [ 114.535589][ T8] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 114.585904][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.713084][ T8] usb 1-1: device descriptor read/64, error -71 [ 114.815795][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.833714][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 114.839922][ T8] usb usb1-port1: attempt power cycle [ 114.850895][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.866852][ T27] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 114.876316][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 114.884364][ T27] usb 3-1: Product: syz [ 114.888726][ T27] usb 3-1: Manufacturer: syz [ 114.908440][ T6434] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.919242][ T27] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 114.939215][ T27] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 115.149159][ T27] usb 3-1: USB disconnect, device number 5 [ 115.165000][ T27] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 115.217895][ T27] garmin_gps 3-1:1.0: device disconnected [ 115.267236][ T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 115.328660][ T8] usb 1-1: device descriptor read/8, error -71 [ 115.595775][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 115.636274][ T8] usb 1-1: device descriptor read/8, error -71 [ 115.756034][ T8] usb usb1-port1: unable to enumerate USB device [ 116.066083][ T2196] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.162069][ T6444] syzkaller0: entered promiscuous mode [ 116.174857][ T6444] syzkaller0: entered allmulticast mode [ 116.191434][ T6447] Bluetooth: MGMT ver 1.22 [ 116.256053][ T2196] usb 3-1: Using ep0 maxpacket: 8 [ 116.267603][ T2196] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 116.279643][ T2196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.301198][ T2196] usb 3-1: Product: syz [ 116.306942][ T2196] usb 3-1: Manufacturer: syz [ 116.311681][ T2196] usb 3-1: SerialNumber: syz [ 116.322643][ T2196] usb 3-1: config 0 descriptor?? [ 116.336912][ T2196] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 116.346912][ T2196] pctv452e: pctv452e_power_ctrl: 1 [ 116.346912][ T2196] [ 116.354287][ T2196] usb 3-1: selecting invalid altsetting 3 [ 116.367872][ T2196] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 116.367872][ T2196] [ 116.381120][ T2196] dvb-usb: bulk message failed: -22 (5/0) [ 116.396428][ T2196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.411609][ T2196] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 116.422893][ T2196] usb 3-1: media controller created [ 116.434747][ T2196] dvb-usb: bulk message failed: -22 (8/0) [ 116.443856][ T2196] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 116.455160][ T2196] dvb-usb: MAC address reading failed. [ 116.484215][ T2196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.541787][ T2196] DVB: Unable to find symbol stb0899_attach() [ 116.551917][ T2196] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 116.676208][ T2196] rc_core: IR keymap rc-tt-1500 not found [ 116.689932][ T2196] Registered IR keymap rc-empty [ 116.716912][ T2196] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 116.737497][ T2196] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 116.788555][ T2196] dvb-usb: schedule remote query interval to 100 msecs. [ 116.802972][ T2196] pctv452e: pctv452e_power_ctrl: 0 [ 116.802972][ T2196] [ 116.821714][ T2196] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 116.907777][ T2196] dvb-usb: bulk message failed: -22 (4/0) [ 116.913938][ T2196] dvb-usb: error -22 while querying for an remote control event. [ 117.065580][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 117.081972][ T23] dvb-usb: error -22 while querying for an remote control event. [ 117.211562][ T23] usb 3-1: USB disconnect, device number 6 [ 117.215641][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.339749][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 117.384105][ T6474] syzkaller0: entered promiscuous mode [ 117.400480][ T6474] syzkaller0: entered allmulticast mode [ 117.455573][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 117.489437][ T8] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 117.511944][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.527985][ T6465] Set syz1 is full, maxelem 6117 reached [ 117.536142][ T8] usb 4-1: Product: syz [ 117.540480][ T8] usb 4-1: Manufacturer: syz [ 117.545216][ T8] usb 4-1: SerialNumber: syz [ 117.575128][ T8] usb 4-1: config 0 descriptor?? [ 117.596727][ T8] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 117.605739][ T8] pctv452e: pctv452e_power_ctrl: 1 [ 117.605739][ T8] [ 117.615352][ T6469] kvm: kvm [6468]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 117.623557][ T8] usb 4-1: selecting invalid altsetting 3 [ 117.643563][ T6469] kvm: kvm [6468]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 117.643995][ T8] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 117.643995][ T8] [ 117.665855][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 117.706619][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.729359][ T8] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 117.743668][ T8] usb 4-1: media controller created [ 117.765736][ T8] dvb-usb: bulk message failed: -22 (8/0) [ 117.778840][ T8] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 117.818073][ T8] dvb-usb: MAC address reading failed. [ 117.836530][ T6465] dvb-usb: bulk message failed: -22 (7/0) [ 117.842450][ T6465] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 117.907139][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.115289][ T8] DVB: Unable to find symbol stb0899_attach() [ 118.141421][ T8] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 118.337040][ T8] rc_core: IR keymap rc-tt-1500 not found [ 118.342965][ T8] Registered IR keymap rc-empty [ 118.371846][ T8] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 118.408362][ T8] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 118.455547][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 118.480107][ T8] pctv452e: pctv452e_power_ctrl: 0 [ 118.480107][ T8] [ 118.506840][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 118.577606][ T8] usb 4-1: USB disconnect, device number 4 [ 118.760563][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 119.370693][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 119.530989][ T8] usb 4-1: device descriptor read/64, error -71 [ 119.816845][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 119.975804][ T8] usb 4-1: device descriptor read/64, error -71 [ 120.106953][ T8] usb usb4-port1: attempt power cycle [ 120.505726][ T2196] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.527415][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 120.567449][ T8] usb 4-1: device descriptor read/8, error -71 [ 120.686783][ T2196] usb 3-1: Using ep0 maxpacket: 8 [ 120.727816][ T2196] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 120.737423][ T2196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.747425][ T2196] usb 3-1: Product: syz [ 120.751695][ T2196] usb 3-1: Manufacturer: syz [ 120.756953][ T2196] usb 3-1: SerialNumber: syz [ 120.773014][ T2196] usb 3-1: config 0 descriptor?? [ 120.790454][ T2196] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 120.811489][ T2196] pctv452e: pctv452e_power_ctrl: 1 [ 120.811489][ T2196] [ 120.825552][ T2196] usb 3-1: selecting invalid altsetting 3 [ 120.831386][ T2196] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 120.831386][ T2196] [ 120.835969][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 120.864654][ T2196] dvb-usb: bulk message failed: -22 (5/0) [ 120.877605][ T2196] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.897610][ T8] usb 4-1: device descriptor read/8, error -71 [ 120.913008][ T2196] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 120.932359][ T2196] usb 3-1: media controller created [ 120.938878][ T2196] dvb-usb: bulk message failed: -22 (8/0) [ 120.944816][ T2196] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 120.959239][ T2196] dvb-usb: MAC address reading failed. [ 120.989030][ T6519] dvb-usb: bulk message failed: -22 (7/0) [ 121.006147][ T6519] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 121.017911][ T2196] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.031691][ T8] usb usb4-port1: unable to enumerate USB device [ 121.183254][ T2196] DVB: Unable to find symbol stb0899_attach() [ 121.206174][ T2196] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 121.349149][ T2196] rc_core: IR keymap rc-tt-1500 not found [ 121.356243][ T2196] Registered IR keymap rc-empty [ 121.362978][ T2196] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 121.376536][ T2196] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input10 [ 121.393779][ T2196] dvb-usb: schedule remote query interval to 100 msecs. [ 121.402680][ T2196] pctv452e: pctv452e_power_ctrl: 0 [ 121.402680][ T2196] [ 121.410788][ T2196] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 121.431704][ T2196] usb 3-1: USB disconnect, device number 7 [ 121.480949][ T2196] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 121.560416][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.755597][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 121.763056][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.773608][ T23] usb 2-1: config 179 has no interface number 0 [ 121.781832][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 121.793460][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 121.805892][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.819487][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.831000][ T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.848881][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.860223][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.874140][ T6536] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 121.908404][ T23] xpad: probe of 2-1:179.65 failed with error -5 [ 122.154480][ T23] usb 2-1: USB disconnect, device number 5 [ 122.332244][ T6567] loop0: detected capacity change from 0 to 32768 [ 122.404183][ T6567] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 123.109103][ T2196] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 123.276136][ T2196] usb 3-1: device descriptor read/64, error -71 [ 123.559065][ T2196] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 123.735017][ T2196] usb 3-1: device descriptor read/64, error -71 [ 123.870104][ T2196] usb usb3-port1: attempt power cycle [ 124.314528][ T2196] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 124.372035][ T2196] usb 3-1: device descriptor read/8, error -71 [ 124.406908][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.610156][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 124.618466][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.632478][ T9] usb 2-1: config 179 has no interface number 0 [ 124.640035][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.665557][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 124.678955][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.690621][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.700106][ T2196] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 124.701328][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.724207][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.733585][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.746908][ T6601] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 124.750537][ T2196] usb 3-1: device descriptor read/8, error -71 [ 124.757282][ T9] xpad: probe of 2-1:179.65 failed with error -5 [ 124.814537][ T6610] Set syz1 is full, maxelem 6117 reached [ 124.876082][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.896303][ T2196] usb usb3-port1: unable to enumerate USB device [ 124.965335][ T2196] usb 2-1: USB disconnect, device number 6 [ 125.065627][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 125.075370][ T23] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 125.085054][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.093140][ T23] usb 1-1: Product: syz [ 125.098112][ T23] usb 1-1: Manufacturer: syz [ 125.102835][ T23] usb 1-1: SerialNumber: syz [ 125.110412][ T23] usb 1-1: config 0 descriptor?? [ 125.119414][ T23] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 125.128038][ T23] pctv452e: pctv452e_power_ctrl: 1 [ 125.128038][ T23] [ 125.135536][ T23] usb 1-1: selecting invalid altsetting 3 [ 125.141295][ T23] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 125.141295][ T23] [ 125.152939][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 125.163100][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.173348][ T23] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 125.181996][ T23] usb 1-1: media controller created [ 125.187609][ T23] dvb-usb: bulk message failed: -22 (8/0) [ 125.193539][ T23] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 125.202277][ T23] dvb-usb: MAC address reading failed. [ 125.220531][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.269213][ T23] DVB: Unable to find symbol stb0899_attach() [ 125.275564][ T23] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 125.355812][ T23] rc_core: IR keymap rc-tt-1500 not found [ 125.362417][ T23] Registered IR keymap rc-empty [ 125.369272][ T23] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 125.382322][ T23] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 125.398230][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 125.409650][ T23] pctv452e: pctv452e_power_ctrl: 0 [ 125.409650][ T23] [ 125.425403][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 125.515644][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 125.531751][ T23] dvb-usb: error -22 while querying for an remote control event. [ 125.656416][ T2196] dvb-usb: bulk message failed: -22 (4/0) [ 125.662307][ T2196] dvb-usb: error -22 while querying for an remote control event. [ 125.678858][ T2196] usb 1-1: USB disconnect, device number 9 [ 125.744995][ T2196] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 126.605948][ T2196] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.757609][ T5780] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.817625][ T2196] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.827216][ T2196] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.849714][ T2196] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.859122][ T2196] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.873611][ T2196] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.875614][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.883049][ T2196] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.900263][ T2196] usb 1-1: Product: syz [ 126.904560][ T2196] usb 1-1: Manufacturer: syz [ 126.914839][ T2196] cdc_wdm 1-1:1.0: skipping garbage [ 126.920481][ T2196] cdc_wdm 1-1:1.0: skipping garbage [ 126.929092][ T2196] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 126.935067][ T2196] cdc_wdm 1-1:1.0: Unknown control protocol [ 126.946022][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 126.962163][ T5780] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.970960][ T5780] usb 3-1: config 179 has no interface number 0 [ 126.980787][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.993137][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 127.005094][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.017658][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 127.028676][ T5780] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.042618][ T5780] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.051949][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.063167][ T6639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.073392][ T5780] xpad: probe of 3-1:179.65 failed with error -5 [ 127.085634][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 127.094947][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.107689][ T8] usb 2-1: string descriptor 0 read error: -22 [ 127.114176][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 127.123866][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.140589][ T8] dw2102: su3000_identify_state [ 127.143922][ T2196] usb 1-1: USB disconnect, device number 10 [ 127.145874][ T8] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 127.165134][ T8] dw2102: su3000_power_ctrl: 1, initialized 0 [ 127.172310][ T8] dvb-usb: bulk message failed: -22 (2/0) [ 127.194882][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.207411][ T8] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 127.216986][ T8] usb 2-1: media controller created [ 127.222473][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 127.229471][ T8] dw2102: i2c transfer failed. [ 127.234583][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 127.240592][ T8] dw2102: i2c transfer failed. [ 127.245399][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 127.251489][ T8] dw2102: i2c transfer failed. [ 127.257554][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 127.263533][ T8] dw2102: i2c transfer failed. [ 127.268532][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 127.274506][ T8] dw2102: i2c transfer failed. [ 127.279708][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 127.285718][ T8] dw2102: i2c transfer failed. [ 127.290548][ T8] dvb-usb: MAC address: 02:02:02:02:02:02 [ 127.290632][ T23] usb 3-1: USB disconnect, device number 12 [ 127.324822][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.371127][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 127.385568][ T8] dw2102: command 0x0e transfer failed. [ 127.392631][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 127.398999][ T8] dw2102: command 0x0e transfer failed. [ 127.424126][ T6655] 9pnet_virtio: no channels available for device syz [ 127.716395][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 127.722951][ T8] dw2102: command 0x0e transfer failed. [ 127.729066][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 127.736001][ T8] dw2102: command 0x0e transfer failed. [ 127.741698][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 127.748204][ T8] dw2102: command 0x51 transfer failed. [ 127.790342][ T8] DVB: Unable to find symbol ds3000_attach() [ 127.815566][ T8] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 127.935593][ T8] rc_core: IR keymap rc-su3000 not found [ 127.944743][ T8] Registered IR keymap rc-empty [ 127.963545][ T8] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 127.993184][ T8] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 128.024706][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 128.046446][ T8] dw2102: su3000_power_ctrl: 0, initialized 1 [ 128.052780][ T8] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 128.085398][ T8] usb 2-1: USB disconnect, device number 7 [ 128.140019][ T8] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 128.705569][ T2196] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 128.908126][ T2196] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.927595][ T2196] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 128.938688][ T2196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.946794][ T2196] usb 3-1: Product: syz [ 128.951614][ T2196] usb 3-1: Manufacturer: syz [ 128.956554][ T2196] usb 3-1: SerialNumber: syz [ 128.966683][ T2196] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 128.974257][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 128.983692][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 128.991632][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 129.000732][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 129.008648][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 129.018776][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 129.026692][ T2196] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 129.038971][ T2196] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 129.301072][ T27] usb 3-1: USB disconnect, device number 13 [ 129.310781][ T27] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 129.322149][ T27] keyspan 3-1:1.0: device disconnected [ 130.115725][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 130.295643][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 130.303532][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.312354][ T8] usb 3-1: config 179 has no interface number 0 [ 130.319012][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.331061][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.343292][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.354632][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.366747][ T8] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.380569][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.390003][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.401031][ T6691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.482624][ T6657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.685594][ T2196] usb 3-1: USB disconnect, device number 14 [ 130.685699][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.700281][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.836762][ T6700] syzkaller0: entered promiscuous mode [ 130.842406][ T6700] syzkaller0: entered allmulticast mode [ 131.155073][ T6712] batman_adv: batadv0: Adding interface: veth0 [ 131.161990][ T6712] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.197178][ T6712] batman_adv: batadv0: Interface activated: veth0 [ 131.510803][ T6725] syzkaller0: entered promiscuous mode [ 131.516670][ T6725] syzkaller0: entered allmulticast mode [ 132.450012][ T6756] syzkaller0: entered promiscuous mode [ 132.459786][ T6756] syzkaller0: entered allmulticast mode [ 133.149256][ T6778] kvm: emulating exchange as write [ 133.241895][ T5839] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.246114][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.257019][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.435710][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 133.453374][ T5839] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 133.466635][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.475354][ T5839] usb 1-1: Product: syz [ 133.480084][ T5839] usb 1-1: Manufacturer: syz [ 133.484995][ T5839] usb 1-1: SerialNumber: syz [ 133.515820][ T5839] usb 1-1: config 0 descriptor?? [ 133.531196][ T5839] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 133.540919][ T5839] pctv452e: pctv452e_power_ctrl: 1 [ 133.540919][ T5839] [ 133.555804][ T5839] usb 1-1: selecting invalid altsetting 3 [ 133.561998][ T5839] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 133.561998][ T5839] [ 133.590978][ T5839] dvb-usb: bulk message failed: -22 (5/0) [ 133.609163][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.641200][ T5839] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 133.659747][ T5839] usb 1-1: media controller created [ 133.665368][ T5839] dvb-usb: bulk message failed: -22 (8/0) [ 133.671928][ T5839] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 133.683100][ T5839] dvb-usb: MAC address reading failed. [ 133.718948][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.737883][ T6775] dvb-usb: bulk message failed: -22 (7/0) [ 133.755991][ T6775] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 133.902446][ T5839] DVB: Unable to find symbol stb0899_attach() [ 133.918519][ T5839] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 134.125678][ T5839] rc_core: IR keymap rc-tt-1500 not found [ 134.131512][ T5839] Registered IR keymap rc-empty [ 134.163674][ T5839] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 134.182362][ T5839] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input13 [ 134.231435][ T5839] dvb-usb: schedule remote query interval to 100 msecs. [ 134.256044][ T5839] pctv452e: pctv452e_power_ctrl: 0 [ 134.256044][ T5839] [ 134.264924][ T5839] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 134.287327][ T5839] usb 1-1: USB disconnect, device number 11 [ 134.422794][ T5839] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 135.572931][ T5788] Bluetooth: to_multiplier 8192 > 3200 [ 135.649207][ T6839] Set syz1 is full, maxelem 6117 reached [ 135.725856][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.946633][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 135.958111][ T8] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 135.967283][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.975330][ T8] usb 2-1: Product: syz [ 135.987680][ T8] usb 2-1: Manufacturer: syz [ 135.992708][ T8] usb 2-1: SerialNumber: syz [ 136.008136][ T8] usb 2-1: config 0 descriptor?? [ 136.027207][ T8] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 136.035282][ T8] pctv452e: pctv452e_power_ctrl: 1 [ 136.035282][ T8] [ 136.043099][ T8] usb 2-1: selecting invalid altsetting 3 [ 136.049583][ T8] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 136.049583][ T8] [ 136.061366][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 136.087329][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.110760][ T8] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 136.120099][ T8] usb 2-1: media controller created [ 136.126077][ T8] dvb-usb: bulk message failed: -22 (8/0) [ 136.131993][ T8] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 136.141044][ T8] dvb-usb: MAC address reading failed. [ 136.169983][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.243888][ T6839] dvb-usb: bulk message failed: -22 (7/0) [ 136.256653][ T6839] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 136.299560][ T8] DVB: Unable to find symbol stb0899_attach() [ 136.322872][ T8] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 136.525911][ T8] rc_core: IR keymap rc-tt-1500 not found [ 136.542077][ T8] Registered IR keymap rc-empty [ 136.552856][ T8] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 136.582692][ T8] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 136.596607][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 136.604166][ T8] pctv452e: pctv452e_power_ctrl: 0 [ 136.604166][ T8] [ 136.612205][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 136.698353][ T2196] usb 2-1: USB disconnect, device number 8 [ 136.804445][ T2196] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 137.020437][ T6870] syzkaller0: entered promiscuous mode [ 137.037183][ T6870] syzkaller0: entered allmulticast mode [ 137.646780][ T5788] Bluetooth: hci2: command tx timeout [ 138.267771][ T6891] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.530573][ T5839] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.741463][ T5839] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.750360][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.760852][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.770329][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.784601][ T5839] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.794025][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.802177][ T5839] usb 4-1: Product: syz [ 138.806479][ T5839] usb 4-1: Manufacturer: syz [ 138.825155][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 138.834973][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 138.846930][ T5839] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 138.852922][ T5839] cdc_wdm 4-1:1.0: Unknown control protocol [ 139.118451][ C0] wdm_int_callback: 1 callbacks suppressed [ 139.118473][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 139.119590][ T27] usb 4-1: USB disconnect, device number 9 [ 139.124429][ C0] wdm_int_callback: 1 callbacks suppressed [ 139.124448][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 139.149028][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 139.158097][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.377023][ T6899] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 139.402167][ T6899] device-mapper: ioctl: device has been removed from the dev hash table. [ 140.205673][ T5839] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.295563][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.395653][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 140.406576][ T5839] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 140.416173][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.424357][ T5839] usb 2-1: Product: syz [ 140.429934][ T5839] usb 2-1: Manufacturer: syz [ 140.434560][ T5839] usb 2-1: SerialNumber: syz [ 140.442252][ T5839] usb 2-1: config 0 descriptor?? [ 140.455172][ T5839] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 140.463651][ T5839] pctv452e: pctv452e_power_ctrl: 1 [ 140.463651][ T5839] [ 140.471150][ T5839] usb 2-1: selecting invalid altsetting 3 [ 140.477067][ T5839] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 140.477067][ T5839] [ 140.487381][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 140.489738][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.492862][ T5839] dvb-usb: bulk message failed: -22 (5/0) [ 140.507636][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 140.509606][ T27] usb 4-1: config 179 has no interface number 0 [ 140.522982][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.526162][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.535795][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.549127][ T5839] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 140.555651][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.569469][ T5839] usb 2-1: media controller created [ 140.576756][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.586489][ T5839] dvb-usb: bulk message failed: -22 (8/0) [ 140.592537][ T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.601863][ T5839] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 140.620302][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.623147][ T5839] dvb-usb: MAC address reading failed. [ 140.629914][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.647420][ T6914] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.672260][ T6909] dvb-usb: bulk message failed: -22 (7/0) [ 140.692377][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.706713][ T6909] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 140.717610][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.730781][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.756161][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.802492][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.842619][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.865567][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.873790][ T8] usb 1-1: Product: syz [ 140.895548][ T8] usb 1-1: Manufacturer: syz [ 140.919127][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 140.924432][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 140.949208][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 140.959286][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 141.005902][ T5839] DVB: Unable to find symbol stb0899_attach() [ 141.023159][ T5839] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 141.126250][ T5839] rc_core: IR keymap rc-tt-1500 not found [ 141.132195][ T5839] Registered IR keymap rc-empty [ 141.148133][ T5839] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 141.164889][ T5839] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 141.176481][ T27] usb 4-1: USB disconnect, device number 10 [ 141.176542][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.192686][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 141.215952][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 141.223023][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 141.230160][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 141.236989][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 141.244731][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 141.251386][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 141.258750][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 141.259188][ T6928] mount: server 127.0.0.1 not responding, timed out [ 141.265550][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 141.266055][ T8] usb 1-1: USB disconnect, device number 12 [ 141.278862][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 141.278886][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 141.278899][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 141.311193][ T5839] dvb-usb: schedule remote query interval to 100 msecs. [ 141.318962][ T5839] pctv452e: pctv452e_power_ctrl: 0 [ 141.318962][ T5839] [ 141.327219][ T5839] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 141.368021][ T5839] usb 2-1: USB disconnect, device number 9 [ 141.443785][ T5839] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 141.718997][ T6933] loop0: detected capacity change from 0 to 32768 [ 141.961487][ T6933] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 142.447223][ T5780] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 142.647218][ T5780] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 142.657462][ T5780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 142.665210][ T5780] usb 3-1: can't read configurations, error -61 [ 142.815623][ T5780] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 143.016225][ T5780] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 143.026788][ T5780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.034492][ T5780] usb 3-1: can't read configurations, error -61 [ 143.041226][ T5780] usb usb3-port1: attempt power cycle [ 143.055804][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 143.135640][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.255665][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 143.269864][ T8] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 143.279337][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.288146][ T8] usb 1-1: Product: syz [ 143.292333][ T8] usb 1-1: Manufacturer: syz [ 143.297128][ T8] usb 1-1: SerialNumber: syz [ 143.304442][ T8] usb 1-1: config 0 descriptor?? [ 143.315885][ T8] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 143.317441][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 143.324152][ T8] pctv452e: pctv452e_power_ctrl: 1 [ 143.324152][ T8] [ 143.324201][ T8] usb 1-1: selecting invalid altsetting 3 [ 143.336086][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.338497][ T8] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 143.338497][ T8] [ 143.342984][ T27] usb 4-1: config 179 has no interface number 0 [ 143.351409][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 143.361629][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.362834][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.374741][ T8] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 143.374796][ T8] usb 1-1: media controller created [ 143.374840][ T8] dvb-usb: bulk message failed: -22 (8/0) [ 143.374856][ T8] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 143.374906][ T8] dvb-usb: MAC address reading failed. [ 143.394556][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.399401][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.450525][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.462430][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.477988][ T5780] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 143.495810][ T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.509625][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.511182][ T8] DVB: Unable to find symbol stb0899_attach() [ 143.527489][ T5839] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.529130][ T6960] dvb-usb: bulk message failed: -22 (7/0) [ 143.538680][ T5780] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 143.542995][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.555595][ T8] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 143.566172][ T6960] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 143.589751][ T5780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.597048][ T6962] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 143.611914][ T5780] usb 3-1: can't read configurations, error -61 [ 143.695849][ T8] rc_core: IR keymap rc-tt-1500 not found [ 143.701821][ T8] Registered IR keymap rc-empty [ 143.715491][ T8] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 143.731781][ T8] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 143.750220][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 143.761421][ T8] pctv452e: pctv452e_power_ctrl: 0 [ 143.761421][ T8] [ 143.769519][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 143.780301][ T5780] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 143.789989][ T5839] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.799275][ T5839] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.836279][ T5839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.859948][ T5780] usb 3-1: too many configurations: 109, using maximum allowed: 8 [ 143.868184][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 143.874165][ T8] dvb-usb: error -22 while querying for an remote control event. [ 143.890780][ T5839] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.913023][ T5780] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 143.921918][ T5780] usb 3-1: can't read configurations, error -61 [ 143.937523][ T5839] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.950433][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.958889][ T5780] usb usb3-port1: unable to enumerate USB device [ 143.968697][ T5839] usb 2-1: Product: syz [ 143.972932][ T5839] usb 2-1: Manufacturer: syz [ 144.015526][ T5780] dvb-usb: bulk message failed: -22 (4/0) [ 144.021547][ T5780] dvb-usb: error -22 while querying for an remote control event. [ 144.030044][ T5839] cdc_wdm 2-1:1.0: skipping garbage [ 144.035304][ T5839] cdc_wdm 2-1:1.0: skipping garbage [ 144.049580][ T5839] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 144.056586][ T5839] cdc_wdm 2-1:1.0: Unknown control protocol [ 144.131335][ T5839] usb 4-1: USB disconnect, device number 11 [ 144.131448][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.146417][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.156612][ T5780] dvb-usb: bulk message failed: -22 (4/0) [ 144.162431][ T5780] dvb-usb: error -22 while querying for an remote control event. [ 144.177760][ T5780] usb 1-1: USB disconnect, device number 13 [ 144.238389][ T5780] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 144.268326][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.268702][ T8] usb 2-1: USB disconnect, device number 10 [ 144.275010][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.275033][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 145.715678][ T5780] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 145.815514][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.925650][ T5780] usb 1-1: Using ep0 maxpacket: 8 [ 145.938072][ T5780] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.952682][ T5780] usb 1-1: config 179 has no interface number 0 [ 145.960905][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.978360][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.993563][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.011115][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 146.023055][ T5780] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 146.029157][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 146.041976][ T5780] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 146.052318][ T27] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 146.054691][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.074058][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.084936][ T27] usb 2-1: Product: syz [ 146.090389][ T6998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.096636][ T27] usb 2-1: Manufacturer: syz [ 146.102213][ T27] usb 2-1: SerialNumber: syz [ 146.116817][ T27] usb 2-1: config 0 descriptor?? [ 146.130916][ T27] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 146.151656][ T27] pctv452e: pctv452e_power_ctrl: 1 [ 146.151656][ T27] [ 146.160411][ T27] usb 2-1: selecting invalid altsetting 3 [ 146.168548][ T27] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 146.168548][ T27] [ 146.179371][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 146.190316][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.201245][ T27] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 146.210306][ T27] usb 2-1: media controller created [ 146.216209][ T27] dvb-usb: bulk message failed: -22 (8/0) [ 146.221987][ T27] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 146.230880][ T27] dvb-usb: MAC address reading failed. [ 146.262667][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.344796][ T7002] dvb-usb: bulk message failed: -22 (7/0) [ 146.375843][ T7002] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 146.420836][ T27] DVB: Unable to find symbol stb0899_attach() [ 146.445293][ T27] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 146.583850][ T5780] usb 1-1: USB disconnect, device number 14 [ 146.583913][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 146.598797][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 146.619269][ T27] rc_core: IR keymap rc-tt-1500 not found [ 146.625077][ T27] Registered IR keymap rc-empty [ 146.661111][ T27] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 146.683714][ T27] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input17 [ 146.712187][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 146.726536][ T27] pctv452e: pctv452e_power_ctrl: 0 [ 146.726536][ T27] [ 146.734145][ T27] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 146.779940][ T173] usb 2-1: USB disconnect, device number 11 [ 146.877428][ T173] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 146.925951][ T2196] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 147.127806][ T2196] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 147.143237][ T2196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.155012][ T2196] usb 4-1: can't read configurations, error -61 [ 147.265753][ T7021] mount: server 127.0.0.1 not responding, timed out [ 147.327453][ T2196] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 147.538665][ T2196] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 147.548606][ T2196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 147.556463][ T2196] usb 4-1: can't read configurations, error -61 [ 147.562939][ T2196] usb usb4-port1: attempt power cycle [ 147.986280][ T2196] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 148.038081][ T2196] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 148.056040][ T2196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 148.064036][ T2196] usb 4-1: can't read configurations, error -61 [ 148.235881][ T2196] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 148.288401][ T2196] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 148.308073][ T2196] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 148.323149][ T2196] usb 4-1: can't read configurations, error -61 [ 148.329829][ T5792] Bluetooth: to_multiplier 8192 > 3200 [ 148.342247][ T2196] usb usb4-port1: unable to enumerate USB device [ 149.166204][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 149.166600][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.345187][ T5788] Bluetooth: to_multiplier 8192 > 3200 [ 149.365623][ T5839] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 149.558460][ T5839] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 149.567292][ T5839] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 149.578628][ T5839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.590580][ T5839] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 149.600915][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.609888][ T5839] usb 3-1: Product: syz [ 149.614115][ T5839] usb 3-1: Manufacturer: syz [ 149.619938][ T5839] usb 3-1: SerialNumber: syz [ 149.627582][ T5839] usb 3-1: config 0 descriptor?? [ 149.637527][ T5839] hub 3-1:0.0: bad descriptor, ignoring hub [ 149.644310][ T5839] hub: probe of 3-1:0.0 failed with error -5 [ 149.681071][ T5839] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 149.709587][ T6178] udevd[6178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.969673][ T5780] usb 3-1: USB disconnect, device number 19 [ 150.046961][ T5839] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.235612][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 150.244603][ T5839] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 150.254144][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.265372][ T5839] usb 4-1: Product: syz [ 150.269791][ T5839] usb 4-1: Manufacturer: syz [ 150.274411][ T5839] usb 4-1: SerialNumber: syz [ 150.283775][ T5839] usb 4-1: config 0 descriptor?? [ 150.292791][ T5839] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 150.301511][ T5839] pctv452e: pctv452e_power_ctrl: 1 [ 150.301511][ T5839] [ 150.309443][ T5839] usb 4-1: selecting invalid altsetting 3 [ 150.315291][ T5839] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 150.315291][ T5839] [ 150.325829][ T5839] dvb-usb: bulk message failed: -22 (5/0) [ 150.335809][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.346050][ T2196] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 150.346474][ T5839] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 150.362664][ T5839] usb 4-1: media controller created [ 150.366221][ T5792] Bluetooth: hci3: command tx timeout [ 150.368207][ T5839] dvb-usb: bulk message failed: -22 (8/0) [ 150.379964][ T5839] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 150.388333][ T5839] dvb-usb: MAC address reading failed. [ 150.407880][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.454305][ T5839] DVB: Unable to find symbol stb0899_attach() [ 150.460600][ T5839] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 150.493286][ T7078] dvb-usb: bulk message failed: -22 (7/0) [ 150.499513][ T7078] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 150.545592][ T5839] rc_core: IR keymap rc-tt-1500 not found [ 150.554433][ T2196] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 150.556047][ T5839] Registered IR keymap rc-empty [ 150.576167][ T2196] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 150.590266][ T5839] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 150.600570][ T2196] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.618056][ T5839] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 150.627760][ T2196] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.631811][ T5839] dvb-usb: schedule remote query interval to 100 msecs. [ 150.646143][ T5839] pctv452e: pctv452e_power_ctrl: 0 [ 150.646143][ T5839] [ 150.653497][ T5839] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 150.655563][ T2196] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.709524][ T2196] usb 3-1: Product: syz [ 150.714083][ T2196] usb 3-1: Manufacturer: syz [ 150.735516][ T2196] usb 3-1: SerialNumber: syz [ 150.756639][ T2196] usb 3-1: config 0 descriptor?? [ 150.759640][ T5839] dvb-usb: bulk message failed: -22 (4/0) [ 150.770467][ T2196] hub 3-1:0.0: bad descriptor, ignoring hub [ 150.785094][ T2196] hub: probe of 3-1:0.0 failed with error -5 [ 150.788566][ T5839] dvb-usb: error -22 while querying for an remote control event. [ 150.849818][ T2196] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 150.901663][ T6178] udevd[6178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.940850][ T5839] dvb-usb: bulk message failed: -22 (4/0) [ 150.954722][ T5839] dvb-usb: error -22 while querying for an remote control event. [ 151.030935][ T5839] usb 4-1: USB disconnect, device number 16 [ 151.068411][ T5839] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 151.107221][ T27] usb 3-1: USB disconnect, device number 20 [ 151.285634][ T23] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 151.395678][ T5792] Bluetooth: hci1: command tx timeout [ 151.490696][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 151.509216][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 151.517206][ T23] usb 1-1: can't read configurations, error -61 [ 151.666560][ T23] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 151.800512][ T5792] Bluetooth: to_multiplier 8192 > 3200 [ 151.866680][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 151.878838][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 151.886553][ T23] usb 1-1: can't read configurations, error -61 [ 151.893548][ T23] usb usb1-port1: attempt power cycle [ 152.035741][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.041665][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 152.335558][ T23] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 152.386985][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 152.401812][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 152.410530][ T23] usb 1-1: can't read configurations, error -61 [ 152.575743][ T23] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 152.625829][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 152.637444][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 152.650558][ T23] usb 1-1: can't read configurations, error -61 [ 152.655540][ T5780] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 152.657841][ T23] usb usb1-port1: unable to enumerate USB device [ 152.795765][ T27] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 152.845628][ T5780] usb 4-1: Using ep0 maxpacket: 8 [ 152.854205][ T5780] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.872308][ T5780] usb 4-1: config 179 has no interface number 0 [ 152.879630][ T5780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.894471][ T5780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.908029][ T5780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.921638][ T5780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.933295][ T5780] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.953725][ T5780] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.964095][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.985585][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 152.988073][ T7116] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.001713][ T27] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 153.019461][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.051276][ T27] usb 3-1: Product: syz [ 153.056172][ T27] usb 3-1: Manufacturer: syz [ 153.062141][ T27] usb 3-1: SerialNumber: syz [ 153.074598][ T27] usb 3-1: config 0 descriptor?? [ 153.094812][ T27] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 153.125776][ T27] pctv452e: pctv452e_power_ctrl: 1 [ 153.125776][ T27] [ 153.133186][ T27] usb 3-1: selecting invalid altsetting 3 [ 153.146683][ T27] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 153.146683][ T27] [ 153.161206][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 153.173828][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.188413][ T27] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 153.197081][ T27] usb 3-1: media controller created [ 153.203691][ T27] dvb-usb: bulk message failed: -22 (8/0) [ 153.210159][ T27] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 153.218209][ T27] dvb-usb: MAC address reading failed. [ 153.243164][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.295313][ T7121] dvb-usb: bulk message failed: -22 (7/0) [ 153.307597][ T7121] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 153.323491][ T27] DVB: Unable to find symbol stb0899_attach() [ 153.333552][ T27] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 153.465641][ T27] rc_core: IR keymap rc-tt-1500 not found [ 153.473875][ T27] Registered IR keymap rc-empty [ 153.485474][ T27] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 153.503936][ T27] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input19 [ 153.521893][ T789] usb 4-1: USB disconnect, device number 17 [ 153.522010][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.536810][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 153.559312][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 153.574955][ T27] pctv452e: pctv452e_power_ctrl: 0 [ 153.574955][ T27] [ 153.584877][ T27] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 153.675721][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 153.681717][ T27] dvb-usb: error -22 while querying for an remote control event. [ 153.723253][ T23] usb 3-1: USB disconnect, device number 21 [ 153.793306][ T23] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 153.885596][ T5788] Bluetooth: hci3: command tx timeout [ 154.578757][ T7159] mount: server 127.0.0.1 not responding, timed out [ 154.745854][ T173] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 154.929261][ T173] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 154.937464][ T5780] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 154.948340][ T173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 154.957223][ T173] usb 1-1: can't read configurations, error -61 [ 155.107165][ T173] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 155.145811][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 155.163245][ T5780] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.180857][ T5780] usb 3-1: config 179 has no interface number 0 [ 155.190505][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 155.204090][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 155.226308][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.254674][ T5780] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 155.275627][ T5780] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 155.305636][ T173] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 155.314622][ T5780] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 155.339065][ T173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 155.351907][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.363599][ T173] usb 1-1: can't read configurations, error -61 [ 155.375868][ T173] usb usb1-port1: attempt power cycle [ 155.383441][ T7176] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.503886][ T7181] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 155.524363][ T7181] device-mapper: ioctl: device has been removed from the dev hash table. [ 155.565643][ T789] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.755651][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 155.773150][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.803112][ T789] usb 2-1: string descriptor 0 read error: -22 [ 155.812675][ T789] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 155.834134][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.845862][ T173] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 155.860673][ T23] usb 3-1: USB disconnect, device number 22 [ 155.860863][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.878823][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.906813][ T789] dw2102: su3000_identify_state [ 155.916779][ T173] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 155.935221][ T789] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 155.936704][ T173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 155.947737][ T789] dw2102: su3000_power_ctrl: 1, initialized 0 [ 155.964695][ T789] dvb-usb: bulk message failed: -22 (2/0) [ 155.965787][ T173] usb 1-1: can't read configurations, error -61 [ 155.994551][ T789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.014681][ T789] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 156.027809][ T789] usb 2-1: media controller created [ 156.033983][ T789] dvb-usb: bulk message failed: -22 (6/0) [ 156.041538][ T789] dw2102: i2c transfer failed. [ 156.047468][ T789] dvb-usb: bulk message failed: -22 (6/0) [ 156.053915][ T789] dw2102: i2c transfer failed. [ 156.060056][ T789] dvb-usb: bulk message failed: -22 (6/0) [ 156.066769][ T789] dw2102: i2c transfer failed. [ 156.073580][ T789] dvb-usb: bulk message failed: -22 (6/0) [ 156.080228][ T789] dw2102: i2c transfer failed. [ 156.085584][ T789] dvb-usb: bulk message failed: -22 (6/0) [ 156.101689][ T789] dw2102: i2c transfer failed. [ 156.115235][ T789] dvb-usb: bulk message failed: -22 (6/0) [ 156.129132][ T789] dw2102: i2c transfer failed. [ 156.134204][ T789] dvb-usb: MAC address: 02:02:02:02:02:02 [ 156.146253][ T173] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 156.170378][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.202394][ T173] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 156.214858][ T173] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 156.225152][ T789] dvb-usb: bulk message failed: -22 (3/0) [ 156.231663][ T789] dw2102: command 0x0e transfer failed. [ 156.231996][ T173] usb 1-1: can't read configurations, error -61 [ 156.245530][ T789] dvb-usb: bulk message failed: -22 (3/0) [ 156.249973][ T173] usb usb1-port1: unable to enumerate USB device [ 156.255951][ T789] dw2102: command 0x0e transfer failed. [ 156.585614][ T789] dvb-usb: bulk message failed: -22 (3/0) [ 156.591638][ T789] dw2102: command 0x0e transfer failed. [ 156.600733][ T789] dvb-usb: bulk message failed: -22 (3/0) [ 156.625584][ T789] dw2102: command 0x0e transfer failed. [ 156.631240][ T789] dvb-usb: bulk message failed: -22 (1/0) [ 156.645492][ T789] dw2102: command 0x51 transfer failed. [ 156.734728][ T789] DVB: Unable to find symbol ds3000_attach() [ 156.744741][ T789] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 156.855791][ T789] rc_core: IR keymap rc-su3000 not found [ 156.870590][ T789] Registered IR keymap rc-empty [ 156.887304][ T789] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 156.920606][ T789] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input20 [ 156.935061][ T789] dvb-usb: schedule remote query interval to 150 msecs. [ 156.942701][ T789] dw2102: su3000_power_ctrl: 0, initialized 1 [ 156.953820][ T789] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 156.989092][ T789] usb 2-1: USB disconnect, device number 12 [ 157.072325][ T7215] Set syz1 is full, maxelem 6117 reached [ 157.082799][ T789] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 157.469182][ T789] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 157.635715][ T2196] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 157.665684][ T789] usb 2-1: Using ep0 maxpacket: 8 [ 157.677378][ T789] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 157.688748][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.701877][ T789] usb 2-1: Product: syz [ 157.706193][ T789] usb 2-1: Manufacturer: syz [ 157.711946][ T789] usb 2-1: SerialNumber: syz [ 157.728543][ T789] usb 2-1: config 0 descriptor?? [ 157.741316][ T789] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 157.750632][ T789] pctv452e: pctv452e_power_ctrl: 1 [ 157.750632][ T789] [ 157.760854][ T789] usb 2-1: selecting invalid altsetting 3 [ 157.766776][ T789] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 157.766776][ T789] [ 157.777269][ T789] dvb-usb: bulk message failed: -22 (5/0) [ 157.786929][ T789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.802539][ T789] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 157.812784][ T789] usb 2-1: media controller created [ 157.818291][ T2196] usb 3-1: Using ep0 maxpacket: 8 [ 157.823554][ T789] dvb-usb: bulk message failed: -22 (8/0) [ 157.840590][ T2196] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.849259][ T789] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 157.859031][ T2196] usb 3-1: config 179 has no interface number 0 [ 157.866057][ T789] dvb-usb: MAC address reading failed. [ 157.875758][ T2196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.895510][ T2196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.909243][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.919187][ T2196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.943512][ T2196] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 157.956281][ T2196] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.969965][ T2196] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.996849][ T2196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.013262][ T7215] dvb-usb: bulk message failed: -22 (7/0) [ 158.018861][ T7230] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 158.046992][ T7215] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 158.108217][ T789] DVB: Unable to find symbol stb0899_attach() [ 158.114799][ T789] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 158.355645][ T789] rc_core: IR keymap rc-tt-1500 not found [ 158.361555][ T789] Registered IR keymap rc-empty [ 158.378237][ T789] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 158.395151][ T789] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 158.412327][ T789] dvb-usb: schedule remote query interval to 100 msecs. [ 158.419999][ T789] pctv452e: pctv452e_power_ctrl: 0 [ 158.419999][ T789] [ 158.430966][ T789] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 158.470316][ T789] usb 2-1: USB disconnect, device number 13 [ 158.600752][ T23] usb 3-1: USB disconnect, device number 23 [ 158.600817][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.615476][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.670780][ T789] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 159.916876][ T5780] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 160.145612][ T5780] usb 1-1: Using ep0 maxpacket: 8 [ 160.157400][ T5780] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 160.175463][ T5780] usb 1-1: config 179 has no interface number 0 [ 160.181891][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 160.212909][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 160.244120][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.280300][ T5780] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 160.310449][ T5780] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.365560][ T5780] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 160.374928][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.411015][ T7297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.856597][ T7342] ======================================================= [ 160.856597][ T7342] WARNING: The mand mount option has been deprecated and [ 160.856597][ T7342] and is ignored by this kernel. Remove the mand [ 160.856597][ T7342] option from the mount to silence this warning. [ 160.856597][ T7342] ======================================================= [ 160.928615][ T7342] overlayfs: failed to resolve './file1': -2 [ 160.977475][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.977485][ T2196] usb 1-1: USB disconnect, device number 23 [ 162.254840][ T5788] Bluetooth: to_multiplier 8192 > 3200 [ 163.325380][ T5788] Bluetooth: to_multiplier 8192 > 3200 [ 163.863957][ T7467] syz.1.521: attempt to access beyond end of device [ 163.863957][ T7467] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 163.932827][ T7467] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 163.952069][ T7467] device-mapper: ioctl: error adding target to table [ 164.069406][ T7474] binder_alloc: 7472: binder_alloc_buf, no vma [ 164.275686][ T5788] Bluetooth: hci0: command tx timeout [ 164.435695][ T5788] Bluetooth: to_multiplier 8192 > 3200 [ 164.495559][ T5839] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 164.672242][ T5788] [ 164.674658][ T5788] ====================================================== [ 164.681878][ T5788] WARNING: possible circular locking dependency detected [ 164.689179][ T5788] syzkaller #0 Not tainted [ 164.693791][ T5788] ------------------------------------------------------ [ 164.700812][ T5788] kworker/u5:6/5788 is trying to acquire lock: [ 164.707236][ T5788] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 164.716580][ T5788] [ 164.716580][ T5788] but task is already holding lock: [ 164.724057][ T5788] ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 164.733854][ T5788] [ 164.733854][ T5788] which lock already depends on the new lock. [ 164.733854][ T5788] [ 164.744364][ T5788] [ 164.744364][ T5788] the existing dependency chain (in reverse order) is: [ 164.753394][ T5788] [ 164.753394][ T5788] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 164.761240][ T5788] __mutex_lock+0x135/0xc80 [ 164.766316][ T5788] hci_remote_features_evt+0x535/0x900 [ 164.772340][ T5788] hci_event_packet+0x807/0x1280 [ 164.777949][ T5788] hci_rx_work+0x43a/0xd60 [ 164.782901][ T5788] process_scheduled_works+0xa60/0x1600 [ 164.789172][ T5788] worker_thread+0xa5e/0xfe0 [ 164.794591][ T5788] kthread+0x2fa/0x390 [ 164.799201][ T5788] ret_from_fork+0x48/0x80 [ 164.804264][ T5788] ret_from_fork_asm+0x11/0x20 [ 164.809767][ T5788] [ 164.809767][ T5788] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 164.817090][ T5788] __mutex_lock+0x135/0xc80 [ 164.822184][ T5788] l2cap_chan_connect+0xfc/0xe30 [ 164.828488][ T5788] l2cap_sock_connect+0x586/0x760 [ 164.834245][ T5788] kernel_connect+0x142/0x1c0 [ 164.839777][ T5788] rfcomm_dlc_open+0xa1f/0xec0 [ 164.845078][ T5788] rfcomm_sock_connect+0x2ed/0x600 [ 164.852128][ T5788] __sys_connect+0x3da/0x470 [ 164.857629][ T5788] __x64_sys_connect+0x7a/0x90 [ 164.863114][ T5788] do_syscall_64+0x55/0xb0 [ 164.868202][ T5788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.875267][ T5788] [ 164.875267][ T5788] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 164.882789][ T5788] __lock_acquire+0x37ef/0x7d80 [ 164.888266][ T5788] lock_acquire+0x19e/0x420 [ 164.893478][ T5788] __mutex_lock+0x135/0xc80 [ 164.898613][ T5788] rfcomm_security_cfm+0x41/0x550 [ 164.904346][ T5788] hci_encrypt_cfm+0x363/0x4d0 [ 164.910021][ T5788] hci_encrypt_change_evt+0x5c3/0xe30 [ 164.916293][ T5788] hci_event_packet+0x807/0x1280 [ 164.921978][ T5788] hci_rx_work+0x43a/0xd60 [ 164.927917][ T5788] process_scheduled_works+0xa60/0x1600 [ 164.934561][ T5788] worker_thread+0xa5e/0xfe0 [ 164.939792][ T5788] kthread+0x2fa/0x390 [ 164.944398][ T5788] ret_from_fork+0x48/0x80 [ 164.949719][ T5788] ret_from_fork_asm+0x11/0x20 [ 164.955045][ T5788] [ 164.955045][ T5788] other info that might help us debug this: [ 164.955045][ T5788] [ 164.965651][ T5788] Chain exists of: [ 164.965651][ T5788] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 164.965651][ T5788] [ 164.979624][ T5788] Possible unsafe locking scenario: [ 164.979624][ T5788] [ 164.987637][ T5788] CPU0 CPU1 [ 164.993277][ T5788] ---- ---- [ 164.998752][ T5788] lock(hci_cb_list_lock); [ 165.003783][ T5788] lock(&hdev->lock); [ 165.010696][ T5788] lock(hci_cb_list_lock); [ 165.018086][ T5788] lock(rfcomm_mutex); [ 165.022708][ T5788] [ 165.022708][ T5788] *** DEADLOCK *** [ 165.022708][ T5788] [ 165.031150][ T5788] 4 locks held by kworker/u5:6/5788: [ 165.036454][ T5788] #0: ffff88802f7f3938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 165.047979][ T5788] #1: ffffc900045bfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 165.060531][ T5788] #2: ffff88802e8d00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0x93/0xe30 [ 165.070603][ T5788] #3: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 165.080397][ T5788] [ 165.080397][ T5788] stack backtrace: [ 165.086482][ T5788] CPU: 0 PID: 5788 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 165.094043][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.104830][ T5788] Workqueue: hci1 hci_rx_work [ 165.109650][ T5788] Call Trace: [ 165.113147][ T5788] [ 165.117452][ T5788] dump_stack_lvl+0x18c/0x250 [ 165.122525][ T5788] ? load_image+0x420/0x420 [ 165.127174][ T5788] ? show_regs_print_info+0x20/0x20 [ 165.132414][ T5788] ? print_circular_bug+0x12b/0x1a0 [ 165.137652][ T5788] check_noncircular+0x2fc/0x400 [ 165.143257][ T5788] ? print_deadlock_bug+0x5d0/0x5d0 [ 165.148844][ T5788] ? lockdep_lock+0xf5/0x230 [ 165.153652][ T5788] ? _find_first_zero_bit+0xd6/0x100 [ 165.159214][ T5788] __lock_acquire+0x37ef/0x7d80 [ 165.164114][ T5788] ? verify_lock_unused+0x140/0x140 [ 165.169352][ T5788] ? l2cap_security_cfm+0x1277/0x1300 [ 165.174923][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 165.180062][ T5788] lock_acquire+0x19e/0x420 [ 165.184580][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 165.189978][ T5788] ? __might_sleep+0xe0/0xe0 [ 165.194857][ T5788] ? read_lock_is_recursive+0x20/0x20 [ 165.200254][ T5788] ? __mutex_trylock_common+0x160/0x270 [ 165.205934][ T5788] __mutex_lock+0x135/0xc80 [ 165.211051][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 165.216672][ T5788] ? trace_contention_end+0x39/0xe0 [ 165.222078][ T5788] ? __mutex_lock+0x30d/0xc80 [ 165.227396][ T5788] ? rfcomm_security_cfm+0x41/0x550 [ 165.232616][ T5788] ? mutex_lock_nested+0x20/0x20 [ 165.237745][ T5788] ? hci_encrypt_cfm+0x2fe/0x4d0 [ 165.242695][ T5788] ? mutex_lock_nested+0x20/0x20 [ 165.247643][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 165.253060][ T5788] rfcomm_security_cfm+0x41/0x550 [ 165.258098][ T5788] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 165.264009][ T5788] ? rfcomm_send_msc+0x360/0x360 [ 165.269000][ T5788] hci_encrypt_cfm+0x363/0x4d0 [ 165.274051][ T5788] hci_encrypt_change_evt+0x5c3/0xe30 [ 165.280386][ T5788] ? __skb_clone+0x446/0x6c0 [ 165.284997][ T5788] ? hci_remote_name_evt+0x610/0x610 [ 165.290548][ T5788] ? skb_pull_data+0xf0/0x1f0 [ 165.295652][ T5788] ? hci_remote_name_evt+0x610/0x610 [ 165.301668][ T5788] hci_event_packet+0x807/0x1280 [ 165.307326][ T5788] ? __lock_acquire+0x7d80/0x7d80 [ 165.312647][ T5788] ? lock_chain_count+0x20/0x20 [ 165.317966][ T5788] ? bis_list+0x290/0x290 [ 165.322616][ T5788] ? kcov_remote_start+0x513/0x810 [ 165.328002][ T5788] ? lockdep_hardirqs_on+0x98/0x150 [ 165.333298][ T5788] ? hci_send_to_monitor+0xd7/0x4f0 [ 165.338630][ T5788] hci_rx_work+0x43a/0xd60 [ 165.343250][ T5788] ? process_scheduled_works+0x975/0x1600 [ 165.348982][ T5788] process_scheduled_works+0xa60/0x1600 [ 165.355697][ T5788] ? worker_attach_to_pool+0x370/0x370 [ 165.361278][ T5788] ? assign_work+0x3cc/0x5d0 [ 165.365984][ T5788] worker_thread+0xa5e/0xfe0 [ 165.370595][ T5788] ? _raw_spin_unlock+0x40/0x40 [ 165.375673][ T5788] ? __kthread_parkme+0x71/0x1c0 [ 165.380621][ T5788] kthread+0x2fa/0x390 [ 165.384805][ T5788] ? pr_cont_work+0x550/0x550 [ 165.389867][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 165.394601][ T5788] ret_from_fork+0x48/0x80 [ 165.399039][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 165.403650][ T5788] ret_from_fork_asm+0x11/0x20 [ 165.408473][ T5788] SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 165.427527][ T5792] Bluetooth: hci3: command tx timeout [ 165.433656][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 165.463098][ T5839] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 165.482009][ T5839] usb 1-1: config 179 has no interface number 0 [ 165.488963][ T5839] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 165.501395][ T5839] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 165.513263][ T5839] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.550403][ T5839] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 165.585643][ T5839] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 165.625575][ T5839] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 165.634690][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.127878][ T2924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.192111][ T2924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.312268][ T2924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.390179][ T2924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.423802][ T5839] usb 1-1: can't set config #179, error -71 [ 166.485368][ T5839] usb 1-1: USB disconnect, device number 24 [ 167.113041][ T2924] hsr_slave_0: left promiscuous mode [ 167.119238][ T2924] hsr_slave_1: left promiscuous mode [ 167.125116][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.134996][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.143459][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.151017][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.158918][ T2924] bridge_slave_1: left allmulticast mode [ 167.164675][ T2924] bridge_slave_1: left promiscuous mode [ 167.170598][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.180451][ T2924] bridge_slave_0: left allmulticast mode [ 167.186303][ T2924] bridge_slave_0: left promiscuous mode [ 167.192002][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.203350][ T2924] veth1_macvtap: left promiscuous mode [ 167.209059][ T2924] veth0_macvtap: left promiscuous mode [ 167.214731][ T2924] veth1_vlan: left promiscuous mode [ 167.220872][ T2924] veth0_vlan: left promiscuous mode [ 167.411460][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 167.438763][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 167.465021][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.475877][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 167.521926][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.594736][ T2924] bond0 (unregistering): Released all slaves [ 168.089991][ T2924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.154382][ T2924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.234984][ T2924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.301315][ T2924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.433083][ T2924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.500005][ T2924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.541315][ T2924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.640507][ T2924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.758988][ T2924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.823086][ T2924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.875336][ T2924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.923795][ T2924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.139180][ T2924] hsr_slave_0: left promiscuous mode [ 170.145026][ T2924] hsr_slave_1: left promiscuous mode [ 170.152421][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.160930][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.169642][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.177236][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.185004][ T2924] bridge_slave_1: left allmulticast mode [ 170.191142][ T2924] bridge_slave_1: left promiscuous mode [ 170.196971][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.205354][ T2924] bridge_slave_0: left allmulticast mode [ 170.211286][ T2924] bridge_slave_0: left promiscuous mode [ 170.217588][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.229538][ T2924] hsr_slave_0: left promiscuous mode [ 170.235645][ T2924] hsr_slave_1: left promiscuous mode [ 170.241808][ T2924] batman_adv: batadv0: Interface deactivated: veth0 [ 170.248789][ T2924] batman_adv: batadv0: Removing interface: veth0 [ 170.256731][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.264310][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.273414][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.281150][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.289235][ T2924] bridge_slave_1: left allmulticast mode [ 170.295087][ T2924] bridge_slave_1: left promiscuous mode [ 170.301318][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.310274][ T2924] bridge_slave_0: left allmulticast mode [ 170.316603][ T2924] bridge_slave_0: left promiscuous mode [ 170.322837][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.336848][ T2924] hsr_slave_0: left promiscuous mode [ 170.342810][ T2924] hsr_slave_1: left promiscuous mode [ 170.348953][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.357743][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.366191][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.373985][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.381953][ T2924] bridge_slave_1: left allmulticast mode [ 170.387907][ T2924] bridge_slave_1: left promiscuous mode [ 170.393639][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.402478][ T2924] bridge_slave_0: left allmulticast mode [ 170.408187][ T2924] bridge_slave_0: left promiscuous mode [ 170.413849][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.426772][ T2924] veth1_macvtap: left promiscuous mode [ 170.432613][ T2924] veth0_macvtap: left promiscuous mode [ 170.438681][ T2924] veth1_vlan: left promiscuous mode [ 170.444272][ T2924] veth0_vlan: left promiscuous mode [ 170.451500][ T2924] veth1_macvtap: left promiscuous mode [ 170.457145][ T2924] veth0_macvtap: left promiscuous mode [ 170.462982][ T2924] veth1_vlan: left promiscuous mode [ 170.469930][ T2924] veth0_vlan: left promiscuous mode [ 170.476348][ T2924] veth1_macvtap: left promiscuous mode [ 170.481876][ T2924] veth0_macvtap: left promiscuous mode [ 170.488010][ T2924] veth1_vlan: left promiscuous mode [ 170.494302][ T2924] veth0_vlan: left promiscuous mode [ 170.800518][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 170.826976][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 170.852092][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.882560][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.953035][ T2924] bond0 (unregistering): Released all slaves [ 171.109722][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 171.127551][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 171.154703][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.181747][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.250670][ T2924] bond0 (unregistering): Released all slaves [ 171.421106][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 171.446804][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 171.474955][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.503539][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.564370][ T2924] bond0 (unregistering): Released all slaves