last executing test programs: 8.83146567s ago: executing program 0 (id=1541): unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x510, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 6.586157016s ago: executing program 0 (id=1548): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 5.58073399s ago: executing program 0 (id=1553): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)='\x00a', 0x2}], 0x1}, 0x80) 5.52214787s ago: executing program 0 (id=1555): syz_usbip_server_init(0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x76, 0x21c) 4.743882813s ago: executing program 1 (id=1562): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100), 0x0) 4.283524226s ago: executing program 1 (id=1565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.560063678s ago: executing program 3 (id=1568): r0 = eventfd2(0x0, 0x80000) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000940)="bb", 0x1}], 0x1) 3.420421351s ago: executing program 3 (id=1570): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000ac0)={{}, 0x0, 0x8, @unused=[0x3ff, 0x9, 0x3a, 0x39c], @subvolid=0x4}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000540), 0x1000000000000084, 0x8, 0x400000) 3.130094173s ago: executing program 3 (id=1571): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/25, 0x19}, 0x5}], 0x1, 0x12141, 0x0) 3.032920255s ago: executing program 3 (id=1572): r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 2.828080227s ago: executing program 3 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a320000000044000400200001"], 0x6c}}, 0x0) 2.727195368s ago: executing program 2 (id=1574): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x101040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000480)=0x9) 2.694784244s ago: executing program 3 (id=1575): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto(r0, &(0x7f00000000c0)='l', 0xffffffffffffff10, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 2.396319097s ago: executing program 2 (id=1576): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mlock(&(0x7f00000fc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x800000, 0x3, &(0x7f00007fd000/0x800000)=nil) 2.220245683s ago: executing program 1 (id=1577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="ec", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x1, 0x9, 0xe, 0x3, 0x3ff, 0xe, {0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x6, 0x2, 0x9, 0x7, 0x9}}, &(0x7f0000000080)=0xb0) 1.604295287s ago: executing program 1 (id=1578): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x7c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.520879579s ago: executing program 2 (id=1579): r0 = socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r2 = dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) 1.407280335s ago: executing program 0 (id=1580): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.370298362s ago: executing program 2 (id=1581): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffeac, r1, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x80200000000001, 0x88502) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x80, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x80000002, 0x2, 0x101], [0x3, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r6, 0x100000000) 1.235016584s ago: executing program 2 (id=1582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 649.690396ms ago: executing program 1 (id=1583): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x74, {"b9800000c00f3235000800000f3066baf80cb88819458fef66bafc0cb8fac90000ef672e0f1f00360f7821c7442400a9f80b95c7442402a400c0fec7442406000000000f0114240f07460f09b9e30200000f32b9780300000f32c4a1a25d921e6b5458"}}], 0x74}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)={0x1, 0x0, [{0x7, 0x140, 0x6, 0xffffc685, 0x8437}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 499.75198ms ago: executing program 1 (id=1584): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 43.447036ms ago: executing program 0 (id=1585): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x3, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x2, 0x80805, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800006, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=1586): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000010580)=[{{0x0, 0x0, &(0x7f0000008500)=[{&(0x7f0000008240)="ff3012a3c25146b3eb637d16c38c", 0xe}], 0x1, 0x0, 0x0, 0x20004010}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ce: batadv_slave_1 [ 80.436634][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.463143][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.475585][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.482628][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.509222][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.552963][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.559928][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.586746][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.611081][ T5825] Bluetooth: hci1: command tx timeout [ 80.615262][ T5819] hsr_slave_0: entered promiscuous mode [ 80.623406][ T5819] hsr_slave_1: entered promiscuous mode [ 80.642265][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.649347][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.676561][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.689248][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.696487][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.696515][ T5825] Bluetooth: hci3: command tx timeout [ 80.723176][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.730393][ T5822] Bluetooth: hci0: command tx timeout [ 80.745477][ T5830] Bluetooth: hci2: command tx timeout [ 80.779691][ T5818] hsr_slave_0: entered promiscuous mode [ 80.786656][ T5818] hsr_slave_1: entered promiscuous mode [ 80.793334][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 80.799222][ T5818] Cannot create hsr debugfs directory [ 80.895161][ T5820] hsr_slave_0: entered promiscuous mode [ 80.902607][ T5820] hsr_slave_1: entered promiscuous mode [ 80.909035][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 80.915337][ T5820] Cannot create hsr debugfs directory [ 80.952796][ T5821] hsr_slave_0: entered promiscuous mode [ 80.959454][ T5821] hsr_slave_1: entered promiscuous mode [ 80.965923][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 80.972011][ T5821] Cannot create hsr debugfs directory [ 81.420582][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.450233][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.462057][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.487615][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.552665][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.569775][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.603137][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.630916][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.700727][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.712036][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.729685][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.748323][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.881594][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.907257][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.925207][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.948712][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.998214][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.062613][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.088858][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.096278][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.121736][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.138849][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.154103][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.161447][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.222383][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.234545][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.256132][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.263368][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.275750][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.282881][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.303064][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.310303][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.334938][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.342462][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.374161][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.475270][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.601237][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.627831][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.635157][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.676957][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.684325][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.702467][ T5822] Bluetooth: hci1: command tx timeout [ 82.727920][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.770100][ T5822] Bluetooth: hci3: command tx timeout [ 82.780371][ T5830] Bluetooth: hci2: command tx timeout [ 82.785879][ T5822] Bluetooth: hci0: command tx timeout [ 82.966097][ T5819] veth0_vlan: entered promiscuous mode [ 83.006291][ T5819] veth1_vlan: entered promiscuous mode [ 83.029696][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.065306][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.151217][ T5819] veth0_macvtap: entered promiscuous mode [ 83.196446][ T5821] veth0_vlan: entered promiscuous mode [ 83.216826][ T5819] veth1_macvtap: entered promiscuous mode [ 83.254205][ T5820] veth0_vlan: entered promiscuous mode [ 83.268654][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.278009][ T5821] veth1_vlan: entered promiscuous mode [ 83.304933][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.324806][ T5820] veth1_vlan: entered promiscuous mode [ 83.347830][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.357294][ T1321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.368558][ T1321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.383337][ T1321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.396938][ T1321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.440727][ T5821] veth0_macvtap: entered promiscuous mode [ 83.474568][ T5821] veth1_macvtap: entered promiscuous mode [ 83.519652][ T5820] veth0_macvtap: entered promiscuous mode [ 83.573010][ T5820] veth1_macvtap: entered promiscuous mode [ 83.582028][ T5818] veth0_vlan: entered promiscuous mode [ 83.589902][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.598402][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.607767][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.658975][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.687846][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.697710][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.703743][ T5818] veth1_vlan: entered promiscuous mode [ 83.710463][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.726275][ T1321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.742050][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.764136][ T1321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.785526][ T1321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.799580][ T1321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.817872][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.847688][ T1321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.860775][ T1321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.874106][ T1321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.927467][ T1321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.955922][ T5818] veth0_macvtap: entered promiscuous mode [ 84.002754][ T5818] veth1_macvtap: entered promiscuous mode [ 84.063110][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.076978][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.108572][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.116662][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.126860][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.165600][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.196745][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.205802][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.220881][ T5824] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.229456][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.258818][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.275378][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289158][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.299348][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.315224][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.411601][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.461695][ T5824] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.500954][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.526372][ T5915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.542941][ T5824] usb 3-1: config 0 descriptor?? [ 84.619292][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.619315][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.658696][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.678451][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.703302][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.703327][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.774708][ T5822] Bluetooth: hci1: command tx timeout [ 84.850558][ T5830] Bluetooth: hci2: command tx timeout [ 84.856052][ T5830] Bluetooth: hci3: command tx timeout [ 84.863627][ T5822] Bluetooth: hci0: command tx timeout [ 84.978731][ T5824] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 85.011617][ T5824] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 85.212400][ T5824] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 85.351585][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.391412][ T5890] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 85.529399][ T5910] usb 3-1: USB disconnect, device number 2 [ 85.552815][ T5890] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 85.567764][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.584285][ T5890] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 85.599643][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 85.616958][ T5890] usb 4-1: config 8 has no interface number 0 [ 85.631473][ T10] usb 2-1: can't read configurations, error -71 [ 85.639430][ T5890] usb 4-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 85.662121][ T5890] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 85.674767][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.702501][ T5890] usb 4-1: NFC: intf ffff88814d404000 id ffffffff8ed30a00 [ 85.908030][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.926158][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.929219][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.936540][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.014031][ T5917] usb 4-1: USB disconnect, device number 2 [ 86.126878][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.385245][ T5830] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 86.503794][ T5962] loop6: detected capacity change from 0 to 7 [ 86.541347][ T5962] Dev loop6: unable to read RDB block 7 [ 86.549923][ T5962] loop6: AHDI p1 p2 p3 [ 86.554711][ T5962] loop6: partition table partially beyond EOD, truncated [ 86.564374][ T5962] loop6: p1 start 231046032 is beyond EOD, truncated [ 86.571447][ T5962] loop6: p2 size 108 extends beyond EOD, truncated [ 86.697574][ T5934] udevd[5934]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 86.870105][ T5830] Bluetooth: hci1: command tx timeout [ 86.931201][ T5830] Bluetooth: hci2: command tx timeout [ 86.941083][ T5830] Bluetooth: hci3: command tx timeout [ 86.946986][ T5830] Bluetooth: hci0: command tx timeout [ 87.491638][ T5972] faux_driver vkms: [drm] Unknown color mode 2054; guessing buffer size. [ 88.388905][ T5984] syz.0.19 uses old SIOCAX25GETINFO [ 91.981329][ T9] cfg80211: failed to load regulatory.db [ 93.018133][ T6047] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.144745][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 93.158415][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 93.705594][ T30] audit: type=1326 audit(1764303091.026:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.62" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd24278f749 code=0x0 [ 95.090352][ T5830] Bluetooth: hci4: command 0xfc11 tx timeout [ 95.097332][ T5822] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 96.096629][ T5907] kernel write not supported for file /61/gid_map (pid: 5907 comm: kworker/1:4) [ 96.836423][ T6172] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 99.487073][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.778275][ T5822] Bluetooth: Unexpected continuation frame (len 16) [ 99.996766][ T5822] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 100.004413][ T5822] Bluetooth: Wrong link type (-22) [ 100.505712][ T6245] loop8: detected capacity change from 0 to 8 [ 100.524591][ T6245] Dev loop8: unable to read RDB block 8 [ 100.535804][ T6245] loop8: unable to read partition table [ 100.548571][ T6245] loop8: partition table beyond EOD, truncated [ 100.565948][ T6245] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 101.562515][ T6275] ======================================================= [ 101.562515][ T6275] WARNING: The mand mount option has been deprecated and [ 101.562515][ T6275] and is ignored by this kernel. Remove the mand [ 101.562515][ T6275] option from the mount to silence this warning. [ 101.562515][ T6275] ======================================================= [ 106.590906][ T9] IPVS: starting estimator thread 0... [ 106.831013][ T6346] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.351723][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 108.858005][ T6393] netlink: 'syz.2.160': attribute type 28 has an invalid length. [ 109.060158][ T6402] tipc: Started in network mode [ 109.065268][ T6402] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 109.100294][ T6402] tipc: Enabled bearer , priority 0 [ 110.336855][ T5908] tipc: Node number set to 11578026 [ 111.130992][ T6430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.171002][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 116.544161][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.066739][ T6523] tmpfs: Bad value for 'mpol' [ 118.112243][ T6532] Bluetooth: MGMT ver 1.23 [ 121.240771][ T6592] block nbd0: NBD_DISCONNECT [ 121.246845][ T6592] block nbd0: Disconnected due to user request. [ 121.260436][ T6592] block nbd0: shutting down sockets [ 121.689464][ T6614] input: syz1 as /devices/virtual/input/input7 [ 121.975900][ T6619] netlink: 29 bytes leftover after parsing attributes in process `syz.1.244'. [ 122.680105][ T6623] syzkaller1: entered promiscuous mode [ 122.695906][ T6623] syzkaller1: entered allmulticast mode [ 123.107708][ T6632] process 'syz.1.246' launched './file1' with NULL argv: empty string added [ 124.482503][ T6660] syzkaller1: entered allmulticast mode [ 126.284172][ T6705] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.355320][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 129.123706][ T5822] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 131.779835][ T6784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.303'. [ 132.998414][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006372][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.629714][ T5917] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 133.641136][ T6807] input: syz1 as /devices/virtual/input/input8 [ 133.671904][ T5917] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.015039][ T6814] fido_id[6814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.997322][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 137.924505][ T6895] Zero length message leads to an empty skb [ 139.157928][ T6935] warning: `syz.2.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.809859][ T7023] overlayfs: failed to resolve './bus': -2 [ 146.485489][ T7063] ucma_write: process 294 (syz.2.415) changed security contexts after opening file descriptor, this is not allowed. [ 150.398756][ T7084] binder: BINDER_SET_CONTEXT_MGR already set [ 150.420195][ T7084] binder: 7083:7084 ioctl 4018620d 2000000002c0 returned -16 [ 153.312814][ T7127] mmap: syz.2.437 (7127) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.336282][ T30] audit: type=1326 audit(1764303150.656:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7fc00000 [ 153.386188][ T30] audit: type=1326 audit(1764303150.656:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.0.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5738f749 code=0x7fc00000 [ 153.531522][ T5822] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 153.538342][ T5822] Bluetooth: Wrong link type (-22) [ 153.544210][ T5822] Bluetooth: hci2: link tx timeout [ 153.550909][ T5822] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.792899][ T5822] Bluetooth: Unexpected continuation frame (len 4) [ 155.572035][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 156.540540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.642884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.745292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 157.231016][ T7181] binder: 7180:7181 ioctl c0306201 200000000680 returned -14 [ 158.749137][ T7209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 162.455656][ T7268] binder: 7267:7268 ioctl 4018620d 0 returned -22 [ 162.457926][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.487'. [ 162.614500][ T7273] binder: 7267:7273 ioctl c0306201 0 returned -14 [ 162.642932][ T7273] binder: 7267:7273 ioctl c0306201 0 returned -14 [ 162.835409][ T7279] tipc: Started in network mode [ 162.849520][ T7279] tipc: Node identity ac1414aa, cluster identity 4711 [ 162.868941][ T7279] tipc: Enabled bearer , priority 10 [ 164.003606][ T5985] tipc: Node number set to 2886997162 [ 164.326452][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 165.789201][ T7342] binder: 7336:7342 ioctl 40182103 0 returned -22 [ 165.832647][ T7342] binder: 7336:7342 ioctl c0306201 0 returned -14 [ 166.971564][ T7367] usb usb1: usbfs: process 7367 (syz.1.525) did not claim interface 0 before use [ 167.118568][ T7373] loop8: detected capacity change from 0 to 1 [ 167.136076][ T5934] Dev loop8: unable to read RDB block 1 [ 167.142314][ T5934] loop8: unable to read partition table [ 167.148237][ T5934] loop8: partition table beyond EOD, truncated [ 167.157185][ T7373] Dev loop8: unable to read RDB block 1 [ 167.166725][ T7373] loop8: unable to read partition table [ 167.173045][ T7373] loop8: partition table beyond EOD, truncated [ 167.184296][ T7373] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 167.308974][ T5830] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 167.319408][ T5830] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 167.402787][ T7384] tipc: Started in network mode [ 167.416530][ T7384] tipc: Node identity 7ff, cluster identity 4711 [ 167.423726][ T7384] tipc: Node number set to 2047 [ 171.725609][ T5830] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 171.725797][ T5830] Bluetooth: hci2: Injecting HCI hardware error event [ 171.727331][ T5830] Bluetooth: hci2: hardware error 0x00 [ 173.530020][ T5909] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 173.692354][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.703043][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 173.714992][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 173.726395][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 141, setting to 64 [ 173.749972][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.782460][ T5909] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 173.800638][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 173.808762][ T5909] usb 4-1: Product: syz [ 173.820979][ T5909] usb 4-1: Manufacturer: syz [ 173.825618][ T5909] usb 4-1: SerialNumber: syz [ 173.856514][ T5909] usb 4-1: config 0 descriptor?? [ 173.863231][ T7432] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.975235][ T5830] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 174.085135][ T5909] radio-si470x 4-1:0.0: DeviceID=0xa78c ChipID=0x46e0 [ 174.292714][ T5909] radio-si470x 4-1:0.0: software version 247, hardware version 189 [ 174.503092][ T5909] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 174.596871][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.603758][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.610501][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.617173][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.623856][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.630505][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.637141][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.643842][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.650469][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.657155][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.663808][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.672276][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.679857][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.686530][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.693284][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.699921][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.706647][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.713274][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.720004][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.726629][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.733283][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.739921][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.746589][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.753239][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.759872][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.766532][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.774848][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.782223][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.788865][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.795511][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.802524][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.809159][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.815866][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.822509][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.829135][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.835780][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.842435][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.849055][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.855726][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.862359][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.869046][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.877000][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.884588][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.891260][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.897917][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.904740][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.911380][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.918019][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.924653][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.931367][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.938007][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.944673][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.951593][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.958261][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.964938][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.971568][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.979720][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.986388][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.993011][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 174.999634][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.006286][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.012961][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.019586][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.026235][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.032888][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.039530][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.046165][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.052791][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.059527][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.066269][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.072927][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.091006][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.097695][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.104382][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.111026][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.117681][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.124353][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.131020][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.137699][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.144322][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.151033][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.157806][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.164534][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.171663][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.179611][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.186247][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.192870][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.199500][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.206246][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.212894][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.219522][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.226151][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.232845][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.239487][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.246118][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.252772][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.259374][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.266058][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.272666][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.280539][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.290903][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.297675][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.304419][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.311083][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.317734][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.324393][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.331234][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.337927][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.344561][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.351206][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.357842][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.364484][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.371155][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.377796][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.390946][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.398397][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.405123][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.412171][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.418821][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.425504][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.432159][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.438779][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.445402][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.452100][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.458763][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.465398][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.472066][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.478706][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.490982][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.498442][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.505143][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.512962][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.520584][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.527271][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.533954][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.540620][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.547266][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.553935][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.560579][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.567220][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.574102][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.580826][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.588946][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.595636][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.602309][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.608987][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.615763][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.622443][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.629031][ T5909] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 175.629110][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.637609][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.644182][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.650816][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.657366][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.663944][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.670542][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.677083][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.683666][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.690261][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.705871][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.712487][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.719035][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.725708][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.732453][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.739003][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.745619][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.752203][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.758733][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.765327][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.771912][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.778442][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.785026][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.791617][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.800944][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.807689][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.814357][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.821042][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.827703][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.834369][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.841028][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.847777][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.854464][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.861194][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.867873][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.874553][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.881381][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.888024][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.901011][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.908423][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.915108][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.921797][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.928972][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.935698][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.942301][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.948976][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.955566][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.962156][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.968733][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.975425][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.982046][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.988688][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 175.995352][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.010951][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.018439][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.025109][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.031781][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.038420][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.045128][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.051879][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.058533][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.065178][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.071842][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.078481][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.085111][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.091755][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.098406][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.106573][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.114160][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.120833][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.127738][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.134391][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.141028][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.147669][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.154332][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.160983][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.167644][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.174327][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.181064][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.187725][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.194380][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.202713][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.209686][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.216497][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.223142][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.229784][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.236655][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.243297][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.249926][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.256585][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.263301][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.269980][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.276609][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.283235][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.289922][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.296617][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.303336][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.321066][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.327729][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.334378][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.341041][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.347675][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.354373][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.361021][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.367650][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.374533][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.381303][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.387969][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.394623][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.401278][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.409486][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.416151][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.422818][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.429447][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.436080][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.442772][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.449403][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.456126][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.462861][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.469577][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.476210][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.482881][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.489522][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.496169][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.502808][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.520857][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.527672][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.534331][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.540970][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.547590][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.554227][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.561051][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.567691][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.574316][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.581129][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.587806][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.594529][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.601316][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.608027][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.621005][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.628476][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.635150][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.641828][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.648479][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.655195][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.661965][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.668615][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.675314][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.682089][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.688823][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.695537][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.702285][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.709125][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.721108][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.728612][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.735257][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.741945][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.748643][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.755305][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.761981][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.768621][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.775308][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.781959][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.788605][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.795221][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.801856][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.808560][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.815214][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.823909][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.831850][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.838573][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.845550][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.852298][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.858987][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.865609][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.872230][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.878850][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.885601][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.892332][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.899056][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.905689][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.912376][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.920899][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.928541][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.935330][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.942084][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.948731][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.955408][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.962061][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.968889][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.975517][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.982167][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.988809][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 176.995557][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.002266][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.008928][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.015609][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.031013][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.038417][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.045064][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.051717][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.058502][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.065160][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.071835][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.078472][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.085105][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.091750][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.098380][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.105045][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.111795][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.118409][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.126248][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.133468][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.140098][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.146730][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.153376][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.159995][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.166652][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.173303][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.179958][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.186582][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.193229][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.199858][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.206506][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.213154][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.219801][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.227381][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.234758][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.241503][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.248210][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.254860][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.261506][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.268170][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.274864][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.281481][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.288116][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.294763][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.301438][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.308052][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.314704][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.321336][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.328884][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.336326][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.342993][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.349636][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.356360][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.362996][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.369634][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.376283][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.383064][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.389684][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.396482][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.403105][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.409866][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.416595][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.423229][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.431254][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.438126][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.444769][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.451525][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.458157][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.464805][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.471498][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.478131][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.484755][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.491488][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.498115][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.504790][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.511523][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.518203][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.524823][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.531473][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.539886][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.546567][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.553238][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.560018][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.566665][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.573350][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.579990][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.586636][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.593343][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.599981][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.606714][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.613374][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.620014][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.626635][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.633292][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.650940][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.657616][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.664264][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.671002][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.677639][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.684255][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.690912][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.697547][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.704174][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.710968][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.717593][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.724216][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.730965][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.739043][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.745680][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.752326][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.758937][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.765735][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.772361][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.779000][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.785709][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.792365][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.799011][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.805654][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.812440][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.819070][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.825706][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.832365][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.838996][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.846399][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.853928][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.860743][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.867411][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.874070][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.880687][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.887368][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.894224][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.900856][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.907598][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.914801][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.921544][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.928298][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.934920][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.941533][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.949562][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.956211][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.962845][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 177.969856][ T5909] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 177.985595][ T5909] usb 4-1: USB disconnect, device number 3 [ 178.341514][ T7492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.352672][ T7492] block device autoloading is deprecated and will be removed. [ 181.627842][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'. [ 181.650007][ T7573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.601'. [ 182.488699][ T7588] syzkaller1: entered allmulticast mode [ 184.671518][ T5830] Bluetooth: hci1: link tx timeout [ 184.678953][ T5830] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 184.693298][ T5830] Bluetooth: hci1: link tx timeout [ 184.698491][ T5830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.271510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 185.280334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 185.289193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 185.315279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 185.324541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 185.391065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 185.401415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 185.710006][ T7480] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.817233][ T5822] Bluetooth: hci3: link tx timeout [ 185.822728][ T5822] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.869969][ T7480] usb 3-1: Using ep0 maxpacket: 32 [ 185.897530][ T7480] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.927351][ T7480] usb 3-1: config 0 has no interface number 0 [ 185.937593][ T7480] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 185.979592][ T7480] usb 3-1: config 0 interface 1 has no altsetting 0 [ 186.013906][ T7480] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 186.039379][ T7480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.069327][ T7480] usb 3-1: Product: syz [ 186.081244][ T7480] usb 3-1: Manufacturer: syz [ 186.085888][ T7480] usb 3-1: SerialNumber: syz [ 186.113148][ T7480] usb 3-1: config 0 descriptor?? [ 186.296491][ T7665] block nbd1: NBD_DISCONNECT [ 186.379586][ T7665] block nbd1: Disconnected due to user request. [ 186.572803][ T7665] block nbd1: shutting down sockets [ 186.836141][ T7480] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 186.854508][ T7480] cx231xx 3-1:0.1: Failed to read PCB config [ 186.860743][ T7480] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 186.879417][ T7480] usb 3-1: USB disconnect, device number 3 [ 186.899961][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 187.226142][ T7480] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.390252][ T7480] usb 3-1: Using ep0 maxpacket: 32 [ 187.398951][ T7480] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.420070][ T7480] usb 3-1: config 0 has no interface number 0 [ 187.443203][ T7480] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 187.464361][ T7480] usb 3-1: config 0 interface 1 has no altsetting 0 [ 187.477261][ T7480] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 187.490462][ T7480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.623269][ T7480] usb 3-1: Product: syz [ 187.627616][ T7480] usb 3-1: Manufacturer: syz [ 187.633856][ T7480] usb 3-1: SerialNumber: syz [ 188.912033][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 188.930133][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 188.964827][ T7480] usb 3-1: config 0 descriptor?? [ 189.005613][ T7480] usb 3-1: can't set config #0, error -71 [ 189.035442][ T7480] usb 3-1: USB disconnect, device number 4 [ 189.824038][ T7733] block nbd3: NBD_DISCONNECT [ 189.828770][ T7733] block nbd3: Disconnected due to user request. [ 189.868588][ T7733] block nbd3: shutting down sockets [ 190.124506][ T7746] zonefs (nullb0) ERROR: Not a zoned block device [ 190.308484][ T7749] fuse: root generation should be zero [ 192.007530][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 194.219783][ T7840] binder: 7839:7840 ioctl c0306201 200000000080 returned -14 [ 194.378447][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391344][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.810030][ T7867] kvm: pic: level sensitive irq not supported [ 195.812574][ T7867] kvm: pic: non byte read [ 195.845750][ T7867] kvm: pic: level sensitive irq not supported [ 195.845804][ T7867] kvm: pic: non byte read [ 195.892515][ T7869] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 195.899360][ T7869] binder: 7868:7869 ioctl 4018620d 2000000002c0 returned -1 [ 196.133013][ T7875] netlink: 104 bytes leftover after parsing attributes in process `syz.3.725'. [ 196.656555][ T7886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.730'. [ 196.884757][ T7896] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 196.884757][ T7896] program syz.2.733 not setting count and/or reply_len properly [ 197.704290][ T7910] pimreg: entered allmulticast mode [ 197.733210][ T7913] pimreg: left allmulticast mode [ 198.021162][ T7925] overlayfs: overlapping lowerdir path [ 198.194342][ T30] audit: type=1326 audit(1764303195.516:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.270387][ T30] audit: type=1326 audit(1764303195.516:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.305975][ T30] audit: type=1326 audit(1764303195.516:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.360859][ T30] audit: type=1326 audit(1764303195.516:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.444920][ T30] audit: type=1326 audit(1764303195.516:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.468738][ T30] audit: type=1326 audit(1764303195.516:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.540584][ T30] audit: type=1326 audit(1764303195.516:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.564859][ T30] audit: type=1326 audit(1764303195.516:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.596374][ T30] audit: type=1326 audit(1764303195.516:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 198.650620][ T30] audit: type=1326 audit(1764303195.516:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 199.845339][ T7984] fuse: Bad value for 'fd' [ 200.048765][ T7993] netlink: 'syz.3.772': attribute type 4 has an invalid length. [ 200.102380][ T7996] netlink: 'syz.3.772': attribute type 4 has an invalid length. [ 201.232500][ T8014] fuse: Bad value for 'fd' [ 201.589996][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 202.622844][ T8043] fuse: Bad value for 'fd' [ 202.760143][ T7480] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 202.910030][ T7480] usb 3-1: Using ep0 maxpacket: 8 [ 202.917278][ T7480] usb 3-1: config 0 has no interfaces? [ 202.924884][ T7480] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 202.935482][ T7480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.943780][ T7480] usb 3-1: Product: syz [ 202.948008][ T7480] usb 3-1: Manufacturer: syz [ 202.952703][ T7480] usb 3-1: SerialNumber: syz [ 202.960114][ T7480] usb 3-1: config 0 descriptor?? [ 203.175468][ T9] usb 3-1: USB disconnect, device number 5 [ 205.120384][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 205.120400][ T30] audit: type=1326 audit(1764303202.446:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 205.191607][ T30] audit: type=1326 audit(1764303202.446:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 205.232440][ T30] audit: type=1326 audit(1764303202.446:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 205.394606][ T30] audit: type=1326 audit(1764303202.476:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 205.475649][ T30] audit: type=1326 audit(1764303202.476:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 206.865444][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 206.925631][ T8119] netlink: 'syz.0.819': attribute type 12 has an invalid length. [ 210.249988][ T5869] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 210.555360][ T5869] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 210.643784][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.723184][ T5869] usb 3-1: Product: syz [ 210.785622][ T5869] usb 3-1: Manufacturer: syz [ 210.840036][ T5869] usb 3-1: SerialNumber: syz [ 210.866644][ T5869] usb 3-1: config 0 descriptor?? [ 211.000341][ T5869] hub 3-1:0.0: bad descriptor, ignoring hub [ 211.006391][ T5869] hub 3-1:0.0: probe with driver hub failed with error -5 [ 211.086566][ T5869] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 211.367731][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.453519][ T5869] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 211.608311][ T5869] usb 3-1: media controller created [ 211.641247][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.777490][ T5869] DVB: Unable to find symbol dib7000p_attach() [ 211.793141][ T5869] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 212.070475][ T5869] rc_core: IR keymap rc-dib0700-rc5 not found [ 212.080077][ T5869] Registered IR keymap rc-empty [ 212.135510][ T5869] dvb-usb: could not initialize remote control. [ 212.206615][ T5869] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 212.409290][ T5869] usb 3-1: USB disconnect, device number 6 [ 212.535538][ T5869] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 213.306001][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 214.472225][ T8209] input: syz0 as /devices/virtual/input/input10 [ 215.530019][ T7406] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.680030][ T7406] usb 3-1: Using ep0 maxpacket: 8 [ 215.686607][ T7406] usb 3-1: config 0 has no interfaces? [ 215.694698][ T7406] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 215.711542][ T7406] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.743396][ T7406] usb 3-1: Product: syz [ 215.755373][ T7406] usb 3-1: Manufacturer: syz [ 215.784582][ T7406] usb 3-1: SerialNumber: syz [ 215.809455][ T7406] usb 3-1: config 0 descriptor?? [ 216.033383][ T9] usb 3-1: USB disconnect, device number 7 [ 220.148872][ T1009] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.421196][ T7406] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 221.602163][ T7406] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.612300][ T8288] netlink: 'syz.3.876': attribute type 10 has an invalid length. [ 221.629719][ T7406] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.639078][ T7406] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 221.648288][ T7406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.660921][ T7406] usb 2-1: config 0 descriptor?? [ 221.675230][ T5830] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 222.214385][ T5830] Bluetooth: hci4: command 0x1003 tx timeout [ 222.221158][ T5825] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.291153][ T8301] sock: sock_timestamping_bind_phc: sock not bind to device [ 224.540426][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 224.646581][ T7480] usb 2-1: USB disconnect, device number 4 [ 228.303079][ T8361] tipc: New replicast peer: 255.255.255.255 [ 228.309788][ T8361] tipc: Enabled bearer , priority 10 [ 229.229818][ T8394] netlink: 68 bytes leftover after parsing attributes in process `syz.1.912'. [ 229.466111][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 229.975320][ T8414] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.403987][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 230.971218][ T30] audit: type=1326 audit(1764303228.286:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.2.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x0 [ 232.680180][ T8452] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 232.680180][ T8452] The task syz.1.932 (8452) triggered the difference, watch for misbehavior. [ 232.948077][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 233.490103][ T5869] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 233.660925][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.669737][ T5869] usb 4-1: not running at top speed; connect to a high speed hub [ 233.679749][ T5869] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.694533][ T5869] usb 4-1: config 1 interface 0 has no altsetting 0 [ 233.702605][ T5869] usb 4-1: language id specifier not provided by device, defaulting to English [ 233.720700][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.731261][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.739426][ T5869] usb 4-1: Product: à ’ [ 233.996425][ T5869] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 234.016721][ T5869] usb 4-1: USB disconnect, device number 4 [ 235.127708][ T8484] overlay: ./file1 is not a directory [ 235.187683][ T8485] kernel profiling enabled (shift: 8) [ 235.667320][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 238.991076][ T30] audit: type=1326 audit(1764303236.316:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 239.050002][ T30] audit: type=1326 audit(1764303236.336:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 239.106592][ T30] audit: type=1326 audit(1764303236.356:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 239.170111][ T30] audit: type=1326 audit(1764303236.356:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 239.265771][ T30] audit: type=1326 audit(1764303236.356:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8511 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5738f749 code=0x7ffc0000 [ 239.304839][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 241.359983][ T5890] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 241.367939][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 241.539997][ T5890] usb 1-1: device descriptor read/64, error -32 [ 241.810174][ T5890] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 241.855415][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 242.208674][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.225023][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 242.274147][ T5890] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 242.310524][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.351135][ T5890] usb 1-1: config 0 descriptor?? [ 242.396819][ T8563] kAFS: unable to lookup cell 'Þ({FúA' [ 242.414940][ T8566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.970'. [ 242.470100][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 242.490041][ T5890] dvb-usb: bulk message failed: -22 (3/0) [ 242.537696][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 242.578418][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 242.615340][ T5890] usb 1-1: media controller created [ 242.651123][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.668761][ T8549] dvb-usb: bulk message failed: -22 (2/0) [ 242.716168][ T5890] dvb-usb: bulk message failed: -22 (6/0) [ 242.811098][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 242.847473][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 242.908824][ T5890] dvb-usb: schedule remote query interval to 150 msecs. [ 242.934856][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 243.102212][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 243.151231][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 243.157203][ T5890] dvb-usb: error while querying for an remote control event. [ 243.355403][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 243.379566][ T5910] dvb-usb: error while querying for an remote control event. [ 243.560890][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 243.567353][ T5910] dvb-usb: error while querying for an remote control event. [ 243.730052][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 243.749203][ T5910] dvb-usb: error while querying for an remote control event. [ 243.970338][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 243.989533][ T5910] dvb-usb: error while querying for an remote control event. [ 244.089502][ T8595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.980'. [ 244.111123][ T5824] usb 1-1: USB disconnect, device number 3 [ 244.226302][ T5824] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 244.455220][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 244.772333][ T8608] bridge0: port 3(syz_tun) entered blocking state [ 244.780779][ T8608] bridge0: port 3(syz_tun) entered disabled state [ 244.788168][ T8608] syz_tun: entered allmulticast mode [ 244.801138][ T8608] syz_tun: entered promiscuous mode [ 244.807421][ T8608] bridge0: port 3(syz_tun) entered blocking state [ 244.814209][ T8608] bridge0: port 3(syz_tun) entered forwarding state [ 245.613208][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 248.268654][ T30] audit: type=1326 audit(1764303245.586:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 248.314146][ T30] audit: type=1326 audit(1764303245.586:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 248.341190][ T30] audit: type=1326 audit(1764303245.616:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 248.364547][ T30] audit: type=1326 audit(1764303245.616:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.3.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 250.222150][ T8719] sctp: [Deprecated]: syz.3.1026 (pid 8719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.222150][ T8719] Use struct sctp_sack_info instead [ 250.725171][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 251.233315][ T8729] fuse: Bad value for 'group_id' [ 251.238455][ T8729] fuse: Bad value for 'group_id' [ 252.280172][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 252.442188][ T8755] fuse: Bad value for 'group_id' [ 252.447279][ T8755] fuse: Bad value for 'group_id' [ 252.524041][ T5907] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.543102][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.569560][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.618809][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.641721][ T5907] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.659973][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.668090][ T5907] usb 1-1: Product: syz [ 252.672294][ T5907] usb 1-1: Manufacturer: syz [ 252.692600][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 252.709142][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 252.751417][ T5907] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 252.757348][ T5907] cdc_wdm 1-1:1.0: Unknown control protocol [ 252.860102][ T5825] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 252.902385][ T5907] usb 1-1: USB disconnect, device number 4 [ 253.395993][ T5907] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 253.623748][ T5907] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.638247][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.648806][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.657958][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.697386][ T5907] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.722835][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.745548][ T5907] usb 1-1: Product: syz [ 253.751158][ T5907] usb 1-1: Manufacturer: syz [ 253.776927][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 253.782962][ T5907] cdc_wdm 1-1:1.0: skipping garbage [ 253.792171][ T5907] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 253.798505][ T5907] cdc_wdm 1-1:1.0: Unknown control protocol [ 253.991732][ T8779] fuse: Bad value for 'group_id' [ 253.996862][ T8779] fuse: Bad value for 'group_id' [ 255.172312][ T5907] usb 1-1: USB disconnect, device number 5 [ 255.820040][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.826739][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.206551][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'. [ 258.960924][ T5890] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 259.139946][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 259.151323][ T5890] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 259.169985][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.185806][ T5890] usb 2-1: Product: syz [ 259.200406][ T5890] usb 2-1: Manufacturer: syz [ 259.205142][ T5890] usb 2-1: SerialNumber: syz [ 259.221257][ T5890] usb 2-1: config 0 descriptor?? [ 259.243468][ T5890] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 259.260309][ T5890] dvb-usb: bulk message failed: -22 (2/0) [ 259.279018][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.311316][ T5890] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 259.319386][ T5890] usb 2-1: media controller created [ 259.390707][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.431670][ T5890] usb 2-1: selecting invalid altsetting 7 [ 259.440985][ T5890] cxusb: set interface failed [ 259.445825][ T5890] dvb-usb: bulk message failed: -22 (1/0) [ 260.163299][ T5890] DVB: Unable to find symbol lgdt330x_attach() [ 260.179746][ T5890] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 260.220855][ T30] audit: type=1326 audit(1764303257.546:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.293440][ T30] audit: type=1326 audit(1764303257.546:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.339955][ T5890] rc_core: IR keymap rc-dvico-portable not found [ 260.346360][ T5890] Registered IR keymap rc-empty [ 260.350970][ T30] audit: type=1326 audit(1764303257.576:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.385027][ T30] audit: type=1326 audit(1764303257.576:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.400929][ T5890] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 260.443382][ T5890] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13 [ 260.445674][ T30] audit: type=1326 audit(1764303257.576:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.487433][ T5890] dvb-usb: schedule remote query interval to 100 msecs. [ 260.489279][ T30] audit: type=1326 audit(1764303257.576:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.625268][ T30] audit: type=1326 audit(1764303257.576:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 260.660844][ T5890] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 260.706897][ T5890] usb 2-1: USB disconnect, device number 5 [ 261.277854][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 261.974598][ T5890] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 263.947025][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1094'. [ 265.237765][ T8919] 9p: Bad value for 'rfdno' [ 270.439635][ T9026] netlink: 'syz.3.1139': attribute type 12 has an invalid length. [ 276.062674][ T9103] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 277.309968][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 277.469985][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 277.500680][ T5890] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 277.512359][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.524389][ T5890] usb 4-1: Product: syz [ 277.530485][ T5890] usb 4-1: Manufacturer: syz [ 277.537203][ T5890] usb 4-1: SerialNumber: syz [ 277.547963][ T5890] usb 4-1: config 0 descriptor?? [ 277.868819][ T5890] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 280.705061][ T5890] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.719098][ T5890] dvbdev: DVB: registering new adapter (Terratec H7) [ 280.731523][ T5890] usb 4-1: media controller created [ 280.899455][ T5890] usb read operation failed. (-71) [ 280.927957][ T5890] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 280.998013][ T5890] usb 4-1: USB disconnect, device number 5 [ 283.216214][ T9198] kvm: user requested TSC rate below hardware speed [ 283.470341][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 283.659954][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 283.668014][ T5890] usb 1-1: config 0 has no interfaces? [ 283.678937][ T5890] usb 1-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 283.696952][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.707083][ T5890] usb 1-1: Product: syz [ 283.715435][ T5890] usb 1-1: Manufacturer: syz [ 283.730109][ T5890] usb 1-1: SerialNumber: syz [ 283.741302][ T5890] usb 1-1: config 0 descriptor?? [ 283.971704][ T9215] kvm: kvm [9214]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 283.981955][ T9215] kvm: kvm [9214]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 283.992209][ T9198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (67109412 ns). Using initial count to start timer. [ 284.021297][ T5890] usb 1-1: USB disconnect, device number 6 [ 284.042112][ T9215] kvm: kvm [9214]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 284.089536][ T9215] kvm: kvm [9214]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 284.098927][ T9215] kvm: kvm [9214]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 284.628299][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 284.637829][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'. [ 285.376033][ T5825] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 286.629419][ T9268] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 286.670392][ T9268] team0: Port device netdevsim0 added [ 286.680815][ T9268] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 286.741897][ T9268] team0: Port device netdevsim0 removed [ 286.763405][ T9268] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 286.983970][ T30] audit: type=1326 audit(1764303284.306:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 287.037927][ T30] audit: type=1326 audit(1764303284.306:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 287.071729][ T30] audit: type=1326 audit(1764303284.306:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 287.119596][ T30] audit: type=1326 audit(1764303284.306:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 287.273765][ T30] audit: type=1326 audit(1764303284.306:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 287.297192][ T30] audit: type=1326 audit(1764303284.306:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 287.777723][ T30] audit: type=1326 audit(1764303284.306:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 288.100708][ T30] audit: type=1326 audit(1764303284.306:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 288.170211][ T30] audit: type=1326 audit(1764303284.306:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 288.294043][ T30] audit: type=1326 audit(1764303284.306:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9275 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fe851f8f749 code=0x7ffc0000 [ 291.517733][ T9340] netlink: 'syz.0.1252': attribute type 3 has an invalid length. [ 292.349340][ T48] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 292.601710][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.641911][ T48] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 292.670364][ T48] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 292.679454][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.701691][ T48] usb 1-1: config 0 descriptor?? [ 292.712740][ T48] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 292.719394][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 292.728651][ T48] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 292.747979][ T48] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 292.760941][ T48] usb 1-1: media controller created [ 292.795285][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.920057][ T9340] dvb-usb: bulk message failed: -22 (2/0) [ 293.210941][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 293.216788][ T48] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 293.257624][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 293.297009][ T48] dvb-usb: schedule remote query interval to 150 msecs. [ 293.329962][ T48] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 293.490383][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 293.496302][ T976] dvb-usb: error while querying for an remote control event. [ 293.660003][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 293.665925][ T48] dvb-usb: error while querying for an remote control event. [ 293.830074][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 293.835968][ T48] dvb-usb: error while querying for an remote control event. [ 294.000508][ T5985] dvb-usb: bulk message failed: -22 (1/0) [ 294.006409][ T5985] dvb-usb: error while querying for an remote control event. [ 294.171976][ T5985] dvb-usb: bulk message failed: -22 (1/0) [ 294.177773][ T5985] dvb-usb: error while querying for an remote control event. [ 294.352268][ T5985] dvb-usb: bulk message failed: -22 (1/0) [ 294.365259][ T5985] dvb-usb: error while querying for an remote control event. [ 294.435372][ T5985] usb 1-1: USB disconnect, device number 7 [ 294.500561][ T5985] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 294.580255][ T5910] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 294.740909][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 294.748027][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 294.763639][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 294.787626][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.797823][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.811185][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.820765][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.939051][ T9409] pimreg: entered allmulticast mode [ 294.947170][ T9409] pimreg: left allmulticast mode [ 294.976987][ T9413] tipc: Can't bind to reserved service type 0 [ 295.044557][ T5910] usb 4-1: usb_control_msg returned -32 [ 295.067065][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 297.361320][ T5910] usb 4-1: USB disconnect, device number 6 [ 298.388071][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.720142][ T5917] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 298.880970][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 298.901870][ T5917] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 298.919552][ T5917] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.936365][ T5917] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.950683][ T5917] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.962810][ T5917] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.981140][ T5917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 299.000226][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.224023][ T5917] usb 4-1: GET_CAPABILITIES returned 0 [ 299.229560][ T5917] usbtmc 4-1:16.0: can't read capabilities [ 299.310023][ T5910] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 299.462647][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 299.480280][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.491781][ T5910] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 299.501065][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.514150][ T5910] usb 2-1: config 0 descriptor?? [ 299.529051][ T5910] dvb-usb: found a 'TeVii S662' in warm state. [ 299.533000][ T48] usb 4-1: USB disconnect, device number 7 [ 299.541257][ T9473] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 299.556966][ T5910] dw2102: su3000_power_ctrl: 1, initialized 0 [ 299.560248][ T9507] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 299.592764][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 299.632598][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.646651][ T5910] dvbdev: DVB: registering new adapter (TeVii S662) [ 299.654385][ T5910] usb 2-1: media controller created [ 299.661310][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 299.668185][ T5910] dw2102: i2c transfer failed. [ 299.674735][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 299.681398][ T5910] dw2102: i2c transfer failed. [ 299.687016][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 299.694633][ T5910] dw2102: i2c transfer failed. [ 299.700798][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 299.706717][ T5910] dw2102: i2c transfer failed. [ 299.711981][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 299.717901][ T5910] dw2102: i2c transfer failed. [ 299.723199][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 299.729278][ T5910] dw2102: i2c transfer failed. [ 299.735344][ T5910] dvb-usb: MAC address: 02:02:02:02:02:02 [ 299.735909][ T9493] dvb-usb: bulk message failed: -22 (27/0) [ 299.748257][ T9493] dw2102: i2c transfer failed. [ 299.819265][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.848789][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 299.855974][ T5910] dw2102: command 0x0e transfer failed. [ 299.863021][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 299.868899][ T5910] dw2102: command 0x0e transfer failed. [ 300.266924][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 300.273408][ T5910] dw2102: command 0x0e transfer failed. [ 300.279019][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 300.285349][ T5910] dw2102: command 0x0e transfer failed. [ 300.293906][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 300.300603][ T5910] dw2102: command 0x51 transfer failed. [ 300.306186][ T5910] dvb-usb: bulk message failed: -22 (5/0) [ 300.313797][ T5910] dw2102: i2c probe for address 0x68 failed. [ 300.319799][ T5910] dvb-usb: bulk message failed: -22 (5/0) [ 300.327429][ T5910] dw2102: i2c probe for address 0x69 failed. [ 300.333831][ T5910] dvb-usb: bulk message failed: -22 (5/0) [ 300.885576][ T5910] dw2102: i2c probe for address 0x6a failed. [ 300.891716][ T5910] dw2102: probing for demodulator failed. Is the external power switched on? [ 300.900601][ T5910] dvb-usb: no frontend was attached by 'TeVii S662' [ 301.069289][ T5910] rc_core: IR keymap rc-tt-1500 not found [ 301.094319][ T5910] Registered IR keymap rc-empty [ 301.108036][ T5910] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 301.134325][ T5910] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 301.158537][ T5910] dvb-usb: schedule remote query interval to 250 msecs. [ 301.172760][ T5910] dw2102: su3000_power_ctrl: 0, initialized 1 [ 301.185684][ T5910] dvb-usb: TeVii S662 successfully initialized and connected. [ 301.203930][ T5910] usb 2-1: USB disconnect, device number 6 [ 301.277101][ T5910] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 302.269946][ T5910] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 302.427583][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.449940][ T5910] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.459070][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.512950][ T5910] usb 4-1: config 0 descriptor?? [ 303.531288][ T5910] usbhid 4-1:0.0: can't add hid device: -71 [ 303.537346][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 303.565394][ T5910] usb 4-1: USB disconnect, device number 8 [ 304.190894][ T5910] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 304.300228][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 304.373279][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.385303][ T5910] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 304.397353][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.414561][ T5910] usb 4-1: config 0 descriptor?? [ 304.450626][ T5910] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 304.464217][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.489004][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.519935][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.538763][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.548122][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.567333][ T9] usb 2-1: config 0 descriptor?? [ 304.625942][ C0] usb 4-1: unknown answer from device [ 304.631636][ C0] input input16: Pen battery low [ 304.838837][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.846312][ T5178] usb 4-1: control msg error: -71 [ 304.851729][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.859027][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.866474][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.873727][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.880989][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.888199][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.895528][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.902779][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.910035][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.917249][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.924500][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.932418][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.939633][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.946898][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.954111][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.961350][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.968554][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.975813][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.983087][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.990318][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 304.997539][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.004886][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.012133][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.019288][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.026530][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.029968][ T48] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 305.034489][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.049022][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.056238][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 305.069122][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.077962][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 305.078572][ T5910] usb 4-1: USB disconnect, device number 9 [ 305.085098][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19 [ 305.087044][ T5178] usb 4-1: control msg error: -71 [ 305.094487][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 305.204470][ T48] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.216033][ T48] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.229404][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.239501][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.251082][ T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.264130][ T48] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.273678][ T48] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.276667][ T9] usb 2-1: USB disconnect, device number 7 [ 305.281771][ T48] usb 1-1: Product: syz [ 305.281790][ T48] usb 1-1: Manufacturer: syz [ 305.310328][ T48] cdc_wdm 1-1:1.0: skipping garbage [ 305.329549][ T48] cdc_wdm 1-1:1.0: skipping garbage [ 305.354729][ T48] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 305.372405][ T48] cdc_wdm 1-1:1.0: Unknown control protocol [ 305.531872][ T9] usb 1-1: USB disconnect, device number 8 [ 307.320049][ T976] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 308.087397][ T976] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 308.098557][ T976] usb 1-1: config 0 has no interface number 0 [ 308.107738][ T976] usb 1-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 308.117952][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.140053][ T976] usb 1-1: config 0 descriptor?? [ 308.176145][ T976] usb 1-1: unknown interface protocol 0x1c, assuming v1 [ 308.244970][ T976] usb 1-1: cannot find UAC_HEADER [ 308.432978][ T976] snd-usb-audio 1-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 308.768589][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1374'. [ 308.800324][ T9670] futex_wake_op: syz.3.1373 tries to shift op by -1; fix this program [ 308.950030][ T5910] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 309.111952][ T5910] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 309.122663][ T5910] usb 2-1: config 0 has no interface number 0 [ 309.130725][ T5910] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 309.140706][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.148734][ T5910] usb 2-1: Product: syz [ 309.153220][ T5910] usb 2-1: Manufacturer: syz [ 309.157831][ T5910] usb 2-1: SerialNumber: syz [ 309.166615][ T5910] usb 2-1: config 0 descriptor?? [ 309.175023][ T5910] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 309.186027][ T5910] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 309.340097][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 309.489979][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 309.497417][ T5910] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 309.506011][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.516158][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.526774][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.536906][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.550081][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.559206][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.594005][ T976] usb 2-1: USB disconnect, device number 8 [ 310.014046][ T5910] usb 1-1: USB disconnect, device number 9 [ 310.339291][ T9699] usbtmc 4-1:16.0: simple control status returned d [ 310.540055][ T5910] usb 4-1: USB disconnect, device number 10 [ 312.225362][ T9739] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1400'. [ 312.452474][ T9750] nbd: must specify a size in bytes for the device [ 312.776250][ T9762] overlayfs: failed to clone upperpath [ 313.297684][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 313.297732][ T30] audit: type=1326 audit(1764303310.616:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 313.944123][ T30] audit: type=1326 audit(1764303310.616:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.011841][ T30] audit: type=1326 audit(1764303310.616:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.309972][ T30] audit: type=1326 audit(1764303310.616:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.349397][ T30] audit: type=1326 audit(1764303310.616:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.413974][ T30] audit: type=1326 audit(1764303310.616:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.444004][ T30] audit: type=1326 audit(1764303310.616:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.468974][ T30] audit: type=1326 audit(1764303310.616:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.530115][ T30] audit: type=1326 audit(1764303310.616:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 314.587926][ T30] audit: type=1326 audit(1764303310.626:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.1.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 317.255967][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.267222][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.003591][ T9887] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 320.210765][ T9903] input: syz1 as /devices/virtual/input/input17 [ 321.537039][ T9917] binder: 9907:9917 ioctl c0306201 0 returned -14 [ 322.568579][ T9928] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1466'. [ 323.229218][ T9945] kvm: pic: non byte write [ 323.871097][ C1] vcan0: j1939_tp_txtimer: 0xffff88802ab2ac00: tx aborted with unknown reason: -2 [ 324.037630][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 324.037647][ T30] audit: type=1326 audit(1764303321.356:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.3.1474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe851f8f749 code=0x0 [ 324.065792][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 324.178019][ T9959] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 324.184842][ T9959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 324.194268][ T9959] vhci_hcd vhci_hcd.0: Device attached [ 324.228267][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.255532][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 324.295975][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.323998][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 324.369925][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 324.381602][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab2ac00: abort rx timeout. Force session deactivation [ 324.481351][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.490646][ T5910] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 324.518881][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.551327][ T9] usb 2-1: Product: syz [ 324.569326][ T9] usb 2-1: Manufacturer: syz [ 324.655165][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 324.672125][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 324.762010][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 324.777060][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 324.943395][ T9960] vhci_hcd: connection reset by peer [ 324.999447][ T1009] vhci_hcd vhci_hcd.3: stop threads [ 325.038360][ T1009] vhci_hcd vhci_hcd.3: release socket [ 325.102005][ T1009] vhci_hcd vhci_hcd.3: disconnect device [ 325.118585][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cb1d400: rx timeout, send abort [ 325.627292][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cb1d400: abort rx timeout. Force session deactivation [ 326.801549][ T5869] usb 2-1: USB disconnect, device number 9 [ 327.112853][ T9999] netlink: 'syz.3.1488': attribute type 7 has an invalid length. [ 329.639971][ T5910] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 330.658894][T10028] pim6reg: entered allmulticast mode [ 330.692920][T10029] pim6reg: left allmulticast mode [ 331.244082][T10045] input: syz0 as /devices/virtual/input/input18 [ 334.834896][ T5825] Bluetooth: hci1: Dropping invalid advertising data [ 334.844936][ T5825] Bluetooth: hci1: Malformed LE Event: 0x02 [ 335.889821][ T30] audit: type=1326 audit(1764303333.206:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 335.945837][ T30] audit: type=1326 audit(1764303333.216:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.069688][ T30] audit: type=1326 audit(1764303333.216:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.151956][ T30] audit: type=1326 audit(1764303333.216:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.199913][ T30] audit: type=1326 audit(1764303333.236:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.239991][ T30] audit: type=1326 audit(1764303333.236:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.286702][ T30] audit: type=1326 audit(1764303333.236:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.333345][ T30] audit: type=1326 audit(1764303333.356:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 336.381823][ T30] audit: type=1326 audit(1764303333.356:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd24278f749 code=0x7ffc0000 [ 338.080105][ T5920] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 338.272044][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.291369][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 338.320036][ T5920] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 338.329151][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.344530][ T5920] usb 4-1: config 0 descriptor?? [ 338.367174][ T5920] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 338.390118][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 338.415080][ T5920] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 338.429799][ T5920] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 338.437454][ T5920] usb 4-1: media controller created [ 338.445698][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.475614][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 338.483285][ T5920] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 338.500129][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 338.535329][ T5920] dvb-usb: schedule remote query interval to 150 msecs. [ 338.553858][ T5920] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 338.667218][ T5920] usb 4-1: USB disconnect, device number 11 [ 338.706029][ T5920] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 339.600402][T10146] serio: Serial port ptm0 [ 341.411700][T10161] No control pipe specified [ 341.730071][ T48] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 341.890333][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 341.899170][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.911001][ T48] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 341.920438][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.947081][ T48] usb 4-1: config 0 descriptor?? [ 341.969171][ T48] dvb-usb: found a 'TeVii S662' in warm state. [ 341.976551][ T48] dw2102: su3000_power_ctrl: 1, initialized 0 [ 342.009238][ T48] dvb-usb: bulk message failed: -22 (2/0) [ 342.022832][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.044577][ T48] dvbdev: DVB: registering new adapter (TeVii S662) [ 342.051727][ T48] usb 4-1: media controller created [ 342.057197][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 342.063734][ T48] dw2102: i2c transfer failed. [ 342.068763][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 342.085942][ T48] dw2102: i2c transfer failed. [ 342.099214][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 342.114771][ T48] dw2102: i2c transfer failed. [ 342.125329][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 342.139158][ T48] dw2102: i2c transfer failed. [ 342.149716][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 342.162625][ T48] dw2102: i2c transfer failed. [ 342.179710][T10164] dvb-usb: bulk message failed: -22 (37/0) [ 342.190194][T10164] dw2102: i2c transfer failed. [ 342.203644][T10164] i2c i2c-1: Invalid block size returned: 33 [ 342.228421][ T48] dvb-usb: bulk message failed: -22 (6/0) [ 342.251106][ T48] dw2102: i2c transfer failed. [ 342.261585][ T48] dvb-usb: MAC address: 02:02:02:02:02:02 [ 342.308246][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.356470][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 342.370062][ T48] dw2102: command 0x0e transfer failed. [ 342.385950][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 342.397405][ T48] dw2102: command 0x0e transfer failed. [ 342.719924][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 342.726768][ T48] dw2102: command 0x0e transfer failed. [ 342.738850][ T48] dvb-usb: bulk message failed: -22 (3/0) [ 342.759945][ T48] dw2102: command 0x0e transfer failed. [ 342.765540][ T48] dvb-usb: bulk message failed: -22 (1/0) [ 342.792222][ T48] dw2102: command 0x51 transfer failed. [ 342.809961][ T48] dvb-usb: bulk message failed: -22 (5/0) [ 342.829883][ T48] dw2102: i2c probe for address 0x68 failed. [ 342.835924][ T48] dvb-usb: bulk message failed: -22 (5/0) [ 342.858000][T10188] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 342.864556][T10188] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 342.883099][ T48] dw2102: i2c probe for address 0x69 failed. [ 342.890991][T10188] vhci_hcd vhci_hcd.0: Device attached [ 342.897822][ T48] dvb-usb: bulk message failed: -22 (5/0) [ 342.909195][ T48] dw2102: i2c probe for address 0x6a failed. [ 342.925536][ T48] dw2102: probing for demodulator failed. Is the external power switched on? [ 342.946856][ T48] dvb-usb: no frontend was attached by 'TeVii S662' [ 342.985784][T10195] ªªªªªª: renamed from vlan0 (while UP) [ 343.122205][ T48] rc_core: IR keymap rc-tt-1500 not found [ 343.168182][ T48] Registered IR keymap rc-empty [ 343.182521][ T48] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 343.228728][ T48] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 343.240265][ T5869] usb 34-1: SetAddress Request (2) to port 0 [ 343.261504][ T5869] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 343.272868][ T48] dvb-usb: schedule remote query interval to 250 msecs. [ 343.304484][ T48] dw2102: su3000_power_ctrl: 0, initialized 1 [ 343.325083][ T48] dvb-usb: TeVii S662 successfully initialized and connected. [ 343.363757][ T48] usb 4-1: USB disconnect, device number 12 [ 343.495380][ T48] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 343.638113][ T30] audit: type=1326 audit(1764303340.956:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 343.711423][ T30] audit: type=1326 audit(1764303340.956:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 343.711642][T10190] vhci_hcd: connection reset by peer [ 343.779381][T10211] kvm: kvm [10210]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 343.822491][ T12] vhci_hcd vhci_hcd.0: stop threads [ 343.830624][ T12] vhci_hcd vhci_hcd.0: release socket [ 343.836369][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 343.841014][ T30] audit: type=1326 audit(1764303341.066:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 343.870095][ T30] audit: type=1326 audit(1764303341.066:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 343.918582][ T30] audit: type=1326 audit(1764303341.066:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 343.950481][ T30] audit: type=1326 audit(1764303341.076:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 344.000091][ T30] audit: type=1326 audit(1764303341.076:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10208 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e278f749 code=0x7ffc0000 [ 345.480566][T10239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1573'. [ 345.489640][T10239] tipc: Invalid UDP bearer configuration [ 345.489696][T10239] tipc: Enabling of bearer rejected, failed to enable media [ 346.819187][T10197] syz.0.1555 (10197): drop_caches: 1 [ 348.283817][T10268] ================================================================== [ 348.291913][T10268] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 348.299374][T10268] Read of size 1 at addr ffff88807ba41b18 by task syz.1.1584/10268 [ 348.307257][T10268] [ 348.309588][T10268] CPU: 0 UID: 0 PID: 10268 Comm: syz.1.1584 Not tainted syzkaller #0 PREEMPT(full) [ 348.309607][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.309624][T10268] Call Trace: [ 348.309635][T10268] [ 348.309642][T10268] dump_stack_lvl+0x189/0x250 [ 348.309665][T10268] ? __virt_addr_valid+0x1c8/0x5c0 [ 348.309688][T10268] ? rcu_is_watching+0x15/0xb0 [ 348.309707][T10268] ? __kasan_check_byte+0x12/0x40 [ 348.309727][T10268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.309751][T10268] ? rcu_is_watching+0x15/0xb0 [ 348.309770][T10268] ? lock_release+0x4b/0x3b0 [ 348.309788][T10268] ? __virt_addr_valid+0x1c8/0x5c0 [ 348.309809][T10268] ? __virt_addr_valid+0x4a5/0x5c0 [ 348.309832][T10268] print_report+0xca/0x240 [ 348.309856][T10268] ? _raw_spin_lock+0x2e/0x40 [ 348.309877][T10268] kasan_report+0x118/0x150 [ 348.309897][T10268] ? _raw_spin_lock+0x2e/0x40 [ 348.309920][T10268] ? mqueue_flush_file+0x49/0x270 [ 348.309940][T10268] __kasan_check_byte+0x2a/0x40 [ 348.309958][T10268] lock_acquire+0x84/0x340 [ 348.309977][T10268] ? __pfx_mqueue_flush_file+0x10/0x10 [ 348.309997][T10268] _raw_spin_lock+0x2e/0x40 [ 348.310017][T10268] ? mqueue_flush_file+0x49/0x270 [ 348.310036][T10268] mqueue_flush_file+0x49/0x270 [ 348.310055][T10268] ? filp_flush+0xae/0x190 [ 348.310081][T10268] ? __pfx_mqueue_flush_file+0x10/0x10 [ 348.310100][T10268] filp_flush+0xbd/0x190 [ 348.310121][T10268] filp_close+0x1d/0x40 [ 348.310142][T10268] __se_sys_close_range+0x359/0x650 [ 348.310165][T10268] ? __pfx___se_sys_close_range+0x10/0x10 [ 348.310187][T10268] ? do_syscall_64+0xbe/0xf80 [ 348.310204][T10268] do_syscall_64+0xfa/0xf80 [ 348.310219][T10268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.310235][T10268] ? clear_bhb_loop+0x60/0xb0 [ 348.310252][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.310268][T10268] RIP: 0033:0x7fb4e278f749 [ 348.310290][T10268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.310304][T10268] RSP: 002b:00007ffff6408b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 348.310326][T10268] RAX: ffffffffffffffda RBX: 00007fb4e29e7da0 RCX: 00007fb4e278f749 [ 348.310338][T10268] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 348.310349][T10268] RBP: 00007fb4e29e7da0 R08: 000000000000009c R09: 00000008f6408e0f [ 348.310360][T10268] R10: 00000000003ffd40 R11: 0000000000000246 R12: 000000000005519f [ 348.310370][T10268] R13: 00007fb4e29e6090 R14: ffffffffffffffff R15: 00007ffff6408c30 [ 348.310388][T10268] [ 348.310394][T10268] [ 348.564278][T10268] Allocated by task 10270: [ 348.568678][T10268] kasan_save_track+0x3e/0x80 [ 348.573433][T10268] __kasan_slab_alloc+0x6c/0x80 [ 348.578274][T10268] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 348.584069][T10268] mqueue_alloc_inode+0x28/0x40 [ 348.588912][T10268] alloc_inode+0x6a/0x1b0 [ 348.593231][T10268] new_inode+0x22/0x170 [ 348.597375][T10268] mqueue_get_inode+0x27/0xb50 [ 348.602128][T10268] mqueue_create_attr+0x1ac/0x2e0 [ 348.607144][T10268] vfs_mkobj+0xcf/0x290 [ 348.611286][T10268] do_mq_open+0x60d/0x7c0 [ 348.615606][T10268] __x64_sys_mq_open+0x16a/0x1c0 [ 348.620533][T10268] do_syscall_64+0xfa/0xf80 [ 348.625023][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.630908][T10268] [ 348.633216][T10268] Freed by task 10268: [ 348.637262][T10268] kasan_save_track+0x3e/0x80 [ 348.641926][T10268] kasan_save_free_info+0x46/0x50 [ 348.646948][T10268] __kasan_slab_free+0x5c/0x80 [ 348.651701][T10268] kmem_cache_free+0x197/0x620 [ 348.656455][T10268] rcu_core+0xd70/0x1870 [ 348.660691][T10268] handle_softirqs+0x27d/0x850 [ 348.665443][T10268] __irq_exit_rcu+0xca/0x1f0 [ 348.670020][T10268] irq_exit_rcu+0x9/0x30 [ 348.674262][T10268] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 348.679903][T10268] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.685871][T10268] [ 348.688190][T10268] Last potentially related work creation: [ 348.693887][T10268] kasan_save_stack+0x3e/0x60 [ 348.698559][T10268] kasan_record_aux_stack+0xbd/0xd0 [ 348.703751][T10268] call_rcu+0x157/0x9c0 [ 348.707901][T10268] evict+0x931/0xae0 [ 348.711782][T10268] __se_sys_mq_unlink+0x2c5/0x360 [ 348.716796][T10268] do_syscall_64+0xfa/0xf80 [ 348.721289][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.727168][T10268] [ 348.729472][T10268] The buggy address belongs to the object at ffff88807ba41b00 [ 348.729472][T10268] which belongs to the cache mqueue_inode_cache of size 1576 [ 348.744206][T10268] The buggy address is located 24 bytes inside of [ 348.744206][T10268] freed 1576-byte region [ffff88807ba41b00, ffff88807ba42128) [ 348.757995][T10268] [ 348.760311][T10268] The buggy address belongs to the physical page: [ 348.766719][T10268] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ba41440 pfn:0x7ba40 [ 348.776779][T10268] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.785268][T10268] memcg:ffff88802ea95f01 [ 348.789493][T10268] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 348.797027][T10268] page_type: f5(slab) [ 348.801005][T10268] raw: 00fff00000000040 ffff88801e340280 dead000000000122 0000000000000000 [ 348.809582][T10268] raw: ffff88807ba41440 0000000080120010 00000000f5000000 ffff88802ea95f01 [ 348.818154][T10268] head: 00fff00000000040 ffff88801e340280 dead000000000122 0000000000000000 [ 348.826810][T10268] head: ffff88807ba41440 0000000080120010 00000000f5000000 ffff88802ea95f01 [ 348.835465][T10268] head: 00fff00000000003 ffffea0001ee9001 00000000ffffffff 00000000ffffffff [ 348.844124][T10268] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 348.852791][T10268] page dumped because: kasan: bad access detected [ 348.859197][T10268] page_owner tracks the page as allocated [ 348.864913][T10268] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5819, tgid 5819 (syz-executor), ts 78611663960, free_ts 75232667860 [ 348.886303][T10268] post_alloc_hook+0x234/0x290 [ 348.891070][T10268] get_page_from_freelist+0x2365/0x2440 [ 348.896658][T10268] __alloc_frozen_pages_noprof+0x181/0x370 [ 348.902466][T10268] alloc_pages_mpol+0x232/0x4a0 [ 348.907309][T10268] allocate_slab+0x86/0x3b0 [ 348.911869][T10268] ___slab_alloc+0xf2b/0x1960 [ 348.916536][T10268] __slab_alloc+0x65/0x100 [ 348.920940][T10268] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 348.926730][T10268] mqueue_alloc_inode+0x28/0x40 [ 348.931573][T10268] alloc_inode+0x6a/0x1b0 [ 348.935893][T10268] new_inode+0x22/0x170 [ 348.940040][T10268] mqueue_fill_super+0xdc/0x380 [ 348.944887][T10268] get_tree_nodev+0xbb/0x150 [ 348.949473][T10268] vfs_get_tree+0x92/0x2a0 [ 348.953877][T10268] fc_mount_longterm+0x1c/0x100 [ 348.958716][T10268] mq_init_ns+0x275/0x360 [ 348.963034][T10268] page last free pid 0 tgid 0 stack trace: [ 348.968833][T10268] __free_frozen_pages+0xbc8/0xd30 [ 348.973941][T10268] __folio_put+0x21b/0x2c0 [ 348.978357][T10268] skb_release_data+0x49a/0x7c0 [ 348.983196][T10268] __kfree_skb+0x55/0x70 [ 348.987432][T10268] tcp_ack+0x2320/0x69f0 [ 348.991671][T10268] tcp_rcv_established+0x13de/0x2580 [ 348.996943][T10268] tcp_v4_do_rcv+0xa90/0x1430 [ 349.001614][T10268] tcp_v4_rcv+0x2675/0x2f20 [ 349.006108][T10268] ip_protocol_deliver_rcu+0x221/0x440 [ 349.011559][T10268] ip_local_deliver_finish+0x3bb/0x6f0 [ 349.017039][T10268] NF_HOOK+0x30c/0x3a0 [ 349.021118][T10268] ip_sublist_rcv_finish+0x221/0x2a0 [ 349.026411][T10268] ip_sublist_rcv+0x74c/0xa10 [ 349.031088][T10268] ip_list_rcv+0x3e2/0x430 [ 349.035510][T10268] __netif_receive_skb_list_core+0x7d2/0x800 [ 349.041503][T10268] netif_receive_skb_list_internal+0x96f/0xcb0 [ 349.047677][T10268] [ 349.050012][T10268] Memory state around the buggy address: [ 349.055630][T10268] ffff88807ba41a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 349.063687][T10268] ffff88807ba41a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 349.071825][T10268] >ffff88807ba41b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.080059][T10268] ^ [ 349.084909][T10268] ffff88807ba41b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.092976][T10268] ffff88807ba41c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.101050][T10268] ================================================================== [ 349.109878][T10268] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 349.117102][T10268] CPU: 0 UID: 0 PID: 10268 Comm: syz.1.1584 Not tainted syzkaller #0 PREEMPT(full) [ 349.126476][T10268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.136521][T10268] Call Trace: [ 349.139810][T10268] [ 349.142768][T10268] dump_stack_lvl+0x99/0x250 [ 349.147343][T10268] ? __asan_memcpy+0x40/0x70 [ 349.151922][T10268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.157129][T10268] ? __pfx__printk+0x10/0x10 [ 349.161742][T10268] vpanic+0x237/0x6d0 [ 349.165731][T10268] ? __pfx_vpanic+0x10/0x10 [ 349.170228][T10268] ? irqentry_exit+0x5dd/0x660 [ 349.174986][T10268] ? trace_irq_disable+0x37/0x100 [ 349.180014][T10268] panic+0xb9/0xc0 [ 349.183726][T10268] ? __pfx_panic+0x10/0x10 [ 349.188237][T10268] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 349.194147][T10268] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.200486][T10268] ? _raw_spin_lock+0x2e/0x40 [ 349.205170][T10268] check_panic_on_warn+0x89/0xb0 [ 349.210113][T10268] ? _raw_spin_lock+0x2e/0x40 [ 349.214786][T10268] end_report+0x6f/0x140 [ 349.219281][T10268] kasan_report+0x129/0x150 [ 349.223780][T10268] ? _raw_spin_lock+0x2e/0x40 [ 349.228457][T10268] ? mqueue_flush_file+0x49/0x270 [ 349.233473][T10268] __kasan_check_byte+0x2a/0x40 [ 349.238315][T10268] lock_acquire+0x84/0x340 [ 349.242728][T10268] ? __pfx_mqueue_flush_file+0x10/0x10 [ 349.248191][T10268] _raw_spin_lock+0x2e/0x40 [ 349.252691][T10268] ? mqueue_flush_file+0x49/0x270 [ 349.257905][T10268] mqueue_flush_file+0x49/0x270 [ 349.262785][T10268] ? filp_flush+0xae/0x190 [ 349.267290][T10268] ? __pfx_mqueue_flush_file+0x10/0x10 [ 349.272742][T10268] filp_flush+0xbd/0x190 [ 349.276984][T10268] filp_close+0x1d/0x40 [ 349.281142][T10268] __se_sys_close_range+0x359/0x650 [ 349.286339][T10268] ? __pfx___se_sys_close_range+0x10/0x10 [ 349.292141][T10268] ? do_syscall_64+0xbe/0xf80 [ 349.296813][T10268] do_syscall_64+0xfa/0xf80 [ 349.301311][T10268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.307368][T10268] ? clear_bhb_loop+0x60/0xb0 [ 349.312035][T10268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.317920][T10268] RIP: 0033:0x7fb4e278f749 [ 349.322325][T10268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.341920][T10268] RSP: 002b:00007ffff6408b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 349.350328][T10268] RAX: ffffffffffffffda RBX: 00007fb4e29e7da0 RCX: 00007fb4e278f749 [ 349.358296][T10268] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 349.366257][T10268] RBP: 00007fb4e29e7da0 R08: 000000000000009c R09: 00000008f6408e0f [ 349.374310][T10268] R10: 00000000003ffd40 R11: 0000000000000246 R12: 000000000005519f [ 349.382272][T10268] R13: 00007fb4e29e6090 R14: ffffffffffffffff R15: 00007ffff6408c30 [ 349.390245][T10268] [ 349.393599][T10268] Kernel Offset: disabled [ 349.397911][T10268] Rebooting in 86400 seconds..