last executing test programs: 21m11.882497752s ago: executing program 3 (id=3207): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r1, r0, 0x80000) ppoll(&(0x7f0000000040)=[{r0, 0x1010}], 0x1, &(0x7f0000000140), 0x0, 0x0) 21m10.330618586s ago: executing program 3 (id=3218): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000140), 0x1) 21m10.201722667s ago: executing program 3 (id=3220): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="e406247cce54f1bf1e68fde89a67b3dfea3060f92bb7f4243fda118f4f15", 0x1e}], 0x1) 21m10.155357126s ago: executing program 3 (id=3222): unshare(0x68040200) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000680)="e2", 0x1}], 0x1}}], 0x1, 0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 21m7.426471025s ago: executing program 1 (id=3243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 21m7.413145555s ago: executing program 3 (id=3244): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x4b02d000) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) 21m6.13510796s ago: executing program 3 (id=3247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7e6ac78dbd9b4b473e4c988cafbcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb8", 0x26}], 0x1) 21m5.089887042s ago: executing program 2 (id=3248): mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x5, {}, {0x77359400}, {}, 0x2, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd313bc00"}}, 0x48}, 0x300, 0x0, 0x0, 0xc800}, 0x0) setreuid(0x0, 0xee00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/171) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000140)={0x4}) 21m4.961588887s ago: executing program 1 (id=3249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 21m4.947123821s ago: executing program 1 (id=3250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x10}, 0x8001) read$alg(r1, &(0x7f0000000000)=""/50, 0x32) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 21m4.713631744s ago: executing program 1 (id=3252): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 21m3.663821061s ago: executing program 1 (id=3253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000910010073797a30000000000900020073797a300000000040000000160a01040000000000000000020000040900020073797a30000000000900010073797a3000000000140003800800014000f5ffff070002"], 0xa8}}, 0x0) 21m3.245568457s ago: executing program 1 (id=3256): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc2a0}, {0xffffffffffffffff, 0x3010}, {0xffffffffffffffff, 0x782}, {}, {0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x4002}, {0xffffffffffffffff, 0x2}], 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) 21m2.828112834s ago: executing program 2 (id=3257): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xdffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x12, @loopback, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 21m2.511935826s ago: executing program 2 (id=3258): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'batadv0\x00', 0x6, 0xffffa377}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 21m2.341940586s ago: executing program 2 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 21m1.009646419s ago: executing program 2 (id=3260): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x4, 0x0, 0x10, 0x0, 0x20, 0x1, 0x20, 0x7, &(0x7f00000000c0)=[0x8000004], 0x1, 0x0}) 21m0.950363343s ago: executing program 2 (id=3261): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x10) 20m50.769871019s ago: executing program 32 (id=3247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7e6ac78dbd9b4b473e4c988cafbcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb8", 0x26}], 0x1) 20m47.242286736s ago: executing program 33 (id=3256): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xc2a0}, {0xffffffffffffffff, 0x3010}, {0xffffffffffffffff, 0x782}, {}, {0xffffffffffffffff, 0x240}, {0xffffffffffffffff, 0x4002}, {0xffffffffffffffff, 0x2}], 0x7, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) 20m45.430579555s ago: executing program 34 (id=3261): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000, r3}, 0x10) 22.721849532s ago: executing program 0 (id=9293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) shmdt(0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) 21.689810979s ago: executing program 0 (id=9295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240c089d) 16.477249781s ago: executing program 0 (id=9307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 16.257192099s ago: executing program 0 (id=9310): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="400c0e"], 0x0, 0x0, 0x0, 0x0}) 16.125774261s ago: executing program 0 (id=9313): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) 15.905781871s ago: executing program 0 (id=9316): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x451, 0x8001008, r0, 0x0) 9.096912823s ago: executing program 5 (id=9363): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x82281, 0x0) mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x8) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0xfffffffffffff001, 0xffffffffffffffff}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x14, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 8.320697426s ago: executing program 5 (id=9368): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) 7.84403057s ago: executing program 6 (id=9372): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x801) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 7.327720952s ago: executing program 5 (id=9376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r2, 0x3, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 6.83758428s ago: executing program 6 (id=9380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 6.761724874s ago: executing program 5 (id=9381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 6.629315094s ago: executing program 6 (id=9382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x9) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20) socket$netlink(0x10, 0x3, 0x9) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) 5.272938374s ago: executing program 6 (id=9388): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.078529031s ago: executing program 6 (id=9409): syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1.609641218s ago: executing program 5 (id=9411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.521316398s ago: executing program 6 (id=9412): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) read$snapshot(r0, 0x0, 0x0) 1.175055513s ago: executing program 5 (id=9416): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 893.990256ms ago: executing program 4 (id=9418): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="10000000000000008400000006"], 0x10, 0x20040815}, 0x24000052) 795.502088ms ago: executing program 4 (id=9419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x40) 623.725746ms ago: executing program 4 (id=9420): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$dsp(r0, &(0x7f0000000100)='N', 0x1) 470.043185ms ago: executing program 4 (id=9421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f232e0f01ca66b80d0000000f23c00f21f8663502000b000f23f8660f38802466b82c0e2bea0f23c00f21f86635030001000f23f866b98a00000066b86c20213266ba31bead040f30f20f18f08148024ba00f0766b9c909000066b87025dab366ba83ae452a0f30", 0x68}], 0x1, 0x51, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ff"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 251.240687ms ago: executing program 4 (id=9422): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x60000, 0x100) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) 0s ago: executing program 4 (id=9423): socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0x0, 0xee00) keyctl$session_to_parent(0x12) kernel console output (not intermixed with test programs): scuous mode [ 1289.622582][T26533] hsr_slave_1: entered promiscuous mode [ 1289.625032][T26533] debugfs: 'hsr0' already exists in 'hsr' [ 1289.625059][T26533] Cannot create hsr debugfs directory [ 1291.363360][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1291.587833][T26698] binder: 26697:26698 unknown command 0 [ 1291.587850][T26698] binder: 26697:26698 ioctl c0306201 2000000001c0 returned -22 [ 1293.755258][T26533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1293.795680][T26533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1293.821969][T26533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1293.908799][T26533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1293.918977][T26533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1293.976790][T26533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1293.978104][T26533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1294.017674][T26533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.144122][T26533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.176426][T26533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.193941][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.194052][ T1541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.223152][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.223588][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.718073][T26764] binder: 26763:26764 unknown command 0 [ 1294.718100][T26764] binder: 26763:26764 ioctl c0306201 2000000001c0 returned -22 [ 1295.276100][T26533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.818342][T26533] veth0_vlan: entered promiscuous mode [ 1295.870846][T26533] veth1_vlan: entered promiscuous mode [ 1295.959219][T26533] veth0_macvtap: entered promiscuous mode [ 1295.982396][T26533] veth1_macvtap: entered promiscuous mode [ 1296.046179][T26533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.107898][T26533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.148955][ T1541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.153557][ T1541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.155768][ T1541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.157121][ T1541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.133420][T14836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.133444][T14836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.550603][T18277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.550637][T18277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.306370][T26816] binder: 26815:26816 unknown command 0 [ 1298.306387][T26816] binder: 26815:26816 ioctl c0306201 2000000001c0 returned -22 [ 1300.535706][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.535896][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.940602][T26859] binder: 26858:26859 unknown command 0 [ 1300.940627][T26859] binder: 26858:26859 ioctl c0306201 2000000001c0 returned -22 [ 1303.452084][T26898] binder: 26897:26898 unknown command 0 [ 1303.452101][T26898] binder: 26897:26898 ioctl c0306201 2000000001c0 returned -22 [ 1306.012576][T26940] binder: 26939:26940 unknown command 0 [ 1306.012610][T26940] binder: 26939:26940 ioctl c0306201 2000000001c0 returned -22 [ 1308.814382][T26989] binder: 26988:26989 unknown command 0 [ 1308.814408][T26989] binder: 26988:26989 ioctl c0306201 2000000001c0 returned -22 [ 1310.767658][T27023] binder: 27022:27023 unknown command 0 [ 1310.767676][T27023] binder: 27022:27023 ioctl c0306201 2000000001c0 returned -22 [ 1313.816728][T27069] binder: 27068:27069 unknown command 0 [ 1313.816756][T27069] binder: 27068:27069 ioctl c0306201 2000000001c0 returned -22 [ 1316.386264][T27112] binder: 27111:27112 unknown command 0 [ 1316.386293][T27112] binder: 27111:27112 ioctl c0306201 2000000001c0 returned -22 [ 1319.004569][T27153] binder: 27152:27153 unknown command 0 [ 1319.004594][T27153] binder: 27152:27153 ioctl c0306201 2000000001c0 returned -22 [ 1321.526033][T27194] binder: 27193:27194 unknown command 0 [ 1321.526050][T27194] binder: 27193:27194 ioctl c0306201 2000000001c0 returned -22 [ 1323.104355][T27221] binder: 27220:27221 unknown command 0 [ 1323.104373][T27221] binder: 27220:27221 ioctl c0306201 2000000001c0 returned -22 [ 1323.498807][T27229] input: syz1 as /devices/virtual/input/input46 [ 1325.945153][T27267] input: syz1 as /devices/virtual/input/input47 [ 1326.176517][T27269] binder: 27268:27269 unknown command 0 [ 1326.176534][T27269] binder: 27268:27269 ioctl c0306201 2000000001c0 returned -22 [ 1328.714203][T27316] binder: 27315:27316 unknown command 0 [ 1328.714221][T27316] binder: 27315:27316 ioctl c0306201 2000000001c0 returned -22 [ 1330.489072][T27347] binder: 27346:27347 unknown command 0 [ 1330.489098][T27347] binder: 27346:27347 ioctl c0306201 2000000001c0 returned -22 [ 1332.549102][T27384] binder: 27383:27384 unknown command 0 [ 1332.549120][T27384] binder: 27383:27384 ioctl c0306201 2000000001c0 returned -22 [ 1334.675909][T27426] binder: 27425:27426 unknown command 0 [ 1334.675934][T27426] binder: 27425:27426 ioctl c0306201 2000000001c0 returned -22 [ 1336.431593][T27460] binder: 27459:27460 unknown command 0 [ 1336.431617][T27460] binder: 27459:27460 ioctl c0306201 2000000001c0 returned -22 [ 1336.717931][T27460] binder: 27459:27460 ioctl c0306201 0 returned -14 [ 1338.574494][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ce8cc00: rx timeout, send abort [ 1338.738004][T27495] binder: 27494:27495 unknown command 0 [ 1338.738021][T27495] binder: 27494:27495 ioctl c0306201 2000000001c0 returned -22 [ 1339.074571][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ce8cc00: abort rx timeout. Force session deactivation [ 1339.079413][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ce8d400: rx timeout, send abort [ 1339.088239][T27495] binder: 27494:27495 ioctl c0306201 0 returned -14 [ 1339.579502][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ce8d400: abort rx timeout. Force session deactivation [ 1341.339087][T27537] binder: 27536:27537 unknown command 0 [ 1341.339103][T27537] binder: 27536:27537 ioctl c0306201 2000000001c0 returned -22 [ 1341.359844][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c013800: rx timeout, send abort [ 1341.768472][T27537] binder: 27536:27537 ioctl c0306201 0 returned -14 [ 1341.860618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c011000: rx timeout, send abort [ 1341.860671][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c013800: abort rx timeout. Force session deactivation [ 1342.360699][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c011000: abort rx timeout. Force session deactivation [ 1344.335521][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d64bc00: rx timeout, send abort [ 1344.835580][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d64bc00: abort rx timeout. Force session deactivation [ 1344.835742][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d649000: rx timeout, send abort [ 1345.335809][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d649000: abort rx timeout. Force session deactivation [ 1346.760995][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880388d2c00: rx timeout, send abort [ 1347.261153][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880388d2c00: abort rx timeout. Force session deactivation [ 1347.261350][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e40a400: rx timeout, send abort [ 1347.761452][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e40a400: abort rx timeout. Force session deactivation [ 1351.645357][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803592cc00: rx timeout, send abort [ 1352.145493][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803592cc00: abort rx timeout. Force session deactivation [ 1352.147761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803592c400: rx timeout, send abort [ 1352.647837][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803592c400: abort rx timeout. Force session deactivation [ 1353.758221][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b88e000: rx timeout, send abort [ 1354.258293][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b88e000: abort rx timeout. Force session deactivation [ 1354.258479][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b88d800: rx timeout, send abort [ 1354.758587][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803b88d800: abort rx timeout. Force session deactivation [ 1356.218393][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032046400: rx timeout, send abort [ 1356.718487][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032046400: abort rx timeout. Force session deactivation [ 1356.718603][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032046c00: rx timeout, send abort [ 1357.218716][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032046c00: abort rx timeout. Force session deactivation [ 1357.722623][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1359.001449][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c7edc00: rx timeout, send abort [ 1359.501544][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c7edc00: abort rx timeout. Force session deactivation [ 1359.501713][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c7ecc00: rx timeout, send abort [ 1359.598523][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1360.001825][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c7ecc00: abort rx timeout. Force session deactivation [ 1361.766327][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1361.983327][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.983443][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.938562][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1365.970987][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1367.065821][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1367.185647][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1367.290913][T27966] input: syz1 as /devices/virtual/input/input48 [ 1368.236713][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1369.300771][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1370.368492][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1371.612654][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1373.065796][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1374.078497][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1375.112613][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1376.059724][T15306] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1376.059941][T15306] Bluetooth: hci3: Injecting HCI hardware error event [ 1376.062570][T14434] Bluetooth: hci3: hardware error 0x00 [ 1376.162588][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1378.263550][T15306] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1378.289467][T14434] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1378.542351][T28158] input: syz1 as /devices/virtual/input/input49 [ 1379.269416][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1380.270096][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1381.289795][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1383.341216][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1384.297311][T14434] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1384.297452][T14434] Bluetooth: hci0: Injecting HCI hardware error event [ 1384.303524][T14434] Bluetooth: hci0: hardware error 0x00 [ 1385.578382][T15306] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1386.529537][T14434] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1395.295320][T28466] input: syz1 as /devices/virtual/input/input50 [ 1396.945513][T28497] input: syz1 as /devices/virtual/input/input51 [ 1398.739923][T28534] input: syz1 as /devices/virtual/input/input52 [ 1423.427433][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.427541][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.856753][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.856911][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.012622][T15306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1540.043305][T15306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1540.045948][T15306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1540.072948][T15306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1540.073785][T15306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1541.058871][ T1572] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.648605][ T1572] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.028968][ T1572] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.132629][T14434] Bluetooth: hci4: command tx timeout [ 1542.554103][ T1572] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.818492][T30969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.818766][T30969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.818973][T30969] bridge_slave_0: entered allmulticast mode [ 1542.847125][T30969] bridge_slave_0: entered promiscuous mode [ 1542.863178][T30969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.863597][T30969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.863949][T30969] bridge_slave_1: entered allmulticast mode [ 1542.868845][T30969] bridge_slave_1: entered promiscuous mode [ 1542.964472][T30969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.050694][T30969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.205310][T30969] team0: Port device team_slave_0 added [ 1543.232483][T30969] team0: Port device team_slave_1 added [ 1543.478114][T30969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.478133][T30969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.478162][T30969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.696712][T30969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.696733][T30969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.696765][T30969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.961153][ T1572] bridge_slave_1: left allmulticast mode [ 1543.961194][ T1572] bridge_slave_1: left promiscuous mode [ 1543.964542][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.040511][ T1572] bridge_slave_0: left allmulticast mode [ 1544.040548][ T1572] bridge_slave_0: left promiscuous mode [ 1544.040800][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.209805][T14434] Bluetooth: hci4: command tx timeout [ 1545.120580][ T1572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.180743][ T1572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.232630][ T1572] bond0 (unregistering): Released all slaves [ 1545.457150][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1545.768374][T30969] hsr_slave_0: entered promiscuous mode [ 1545.772230][T30969] hsr_slave_1: entered promiscuous mode [ 1545.774263][T30969] debugfs: 'hsr0' already exists in 'hsr' [ 1545.774289][T30969] Cannot create hsr debugfs directory [ 1546.289359][T14434] Bluetooth: hci4: command tx timeout [ 1546.311842][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.311973][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.219368][ T1572] hsr_slave_0: left promiscuous mode [ 1547.261810][ T1572] hsr_slave_1: left promiscuous mode [ 1547.295335][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1547.295357][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.352038][ T1572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1547.352070][ T1572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.506663][ T1572] veth1_macvtap: left promiscuous mode [ 1547.506938][ T1572] veth0_macvtap: left promiscuous mode [ 1547.507233][ T1572] veth1_vlan: left promiscuous mode [ 1547.507426][ T1572] veth0_vlan: left promiscuous mode [ 1548.369531][T14434] Bluetooth: hci4: command tx timeout [ 1548.561714][ T1572] team0 (unregistering): Port device team_slave_1 removed [ 1548.620350][ T1572] team0 (unregistering): Port device team_slave_0 removed [ 1548.954700][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1552.472364][T30969] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1552.508636][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1552.519895][T30969] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1552.610964][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1552.616224][T30969] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1552.662592][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1552.665239][T30969] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1552.718504][T30969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1553.222313][T30969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.316128][T30969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.362470][T18279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.364457][T18279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.448195][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.448397][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.993954][T30969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.328217][T30969] veth0_vlan: entered promiscuous mode [ 1555.372953][T30969] veth1_vlan: entered promiscuous mode [ 1555.666135][T30969] veth0_macvtap: entered promiscuous mode [ 1555.688122][T30969] veth1_macvtap: entered promiscuous mode [ 1555.740351][T30969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.777919][T30969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.881958][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.882665][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.885537][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.888208][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.633471][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.633496][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.014995][T18279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.015018][T18279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.489551][T14434] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1599.489829][T14434] Bluetooth: hci4: Injecting HCI hardware error event [ 1599.493961][T15306] Bluetooth: hci4: hardware error 0x00 [ 1599.711055][T14434] Bluetooth: hci4: unexpected event for opcode 0x0009 [ 1600.748365][T14434] Bluetooth: hci4: unexpected event for opcode 0x0009 [ 1601.729657][T15306] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1607.742003][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.742132][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.175355][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.175466][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.612819][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.612930][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.335148][T14434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1776.344223][T14434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1776.375641][T14434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1776.380764][T14434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1776.383187][T14434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1777.734577][T14836] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.435083][T14836] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.613272][T14434] Bluetooth: hci1: command tx timeout [ 1779.047805][T14836] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.331741][T14836] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.690298][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.691548][ T2602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.691803][ T2602] bridge_slave_0: entered allmulticast mode [ 1779.708601][ T2602] bridge_slave_0: entered promiscuous mode [ 1779.762295][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.762637][ T2602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.762883][ T2602] bridge_slave_1: entered allmulticast mode [ 1779.774936][ T2602] bridge_slave_1: entered promiscuous mode [ 1780.226376][ T2602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.256630][ T2602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.366806][ T2602] team0: Port device team_slave_0 added [ 1780.378532][ T2602] team0: Port device team_slave_1 added [ 1780.497633][ T2602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.497654][ T2602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1780.497684][ T2602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.506323][ T2602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.506341][ T2602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1780.506368][ T2602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1780.638832][T14836] bridge_slave_1: left allmulticast mode [ 1780.638873][T14836] bridge_slave_1: left promiscuous mode [ 1780.640841][T14836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.689374][T14434] Bluetooth: hci1: command tx timeout [ 1780.710680][T14836] bridge_slave_0: left allmulticast mode [ 1780.710707][T14836] bridge_slave_0: left promiscuous mode [ 1780.710928][T14836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.980522][T14836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.061541][T14836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.107041][T14836] bond0 (unregistering): Released all slaves [ 1782.383345][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1782.646912][ T2602] hsr_slave_0: entered promiscuous mode [ 1782.650863][ T2602] hsr_slave_1: entered promiscuous mode [ 1782.769785][T14434] Bluetooth: hci1: command tx timeout [ 1783.974761][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1784.199480][T14836] hsr_slave_0: left promiscuous mode [ 1784.239348][T14836] hsr_slave_1: left promiscuous mode [ 1784.240670][T14836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.240691][T14836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.280895][T14836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.280917][T14836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.427091][T14836] veth1_macvtap: left promiscuous mode [ 1784.427210][T14836] veth0_macvtap: left promiscuous mode [ 1784.427487][T14836] veth1_vlan: left promiscuous mode [ 1784.427903][T14836] veth0_vlan: left promiscuous mode [ 1784.858821][T14434] Bluetooth: hci1: command tx timeout [ 1785.331674][T14836] team0 (unregistering): Port device team_slave_1 removed [ 1785.370648][T14836] team0 (unregistering): Port device team_slave_0 removed [ 1789.242252][ T2602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1789.290832][ T2602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1789.293597][ T2602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1789.429011][ T2602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1789.457358][ T2602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1789.497659][ T2602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1789.508266][ T2602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1789.571895][ T2602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1790.068004][ T2602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.196993][ T2602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.245414][T18148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.245639][T18148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.327339][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.327568][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.855166][ T2602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.055136][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.055245][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.723516][ T2602] veth0_vlan: entered promiscuous mode [ 1792.950012][ T2602] veth1_vlan: entered promiscuous mode [ 1793.133548][ T2602] veth0_macvtap: entered promiscuous mode [ 1793.154272][ T2602] veth1_macvtap: entered promiscuous mode [ 1793.230953][ T2602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.288487][ T2602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.351415][T18148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.352739][T18148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.352794][T18148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.352834][T18148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.234326][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.234351][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.660783][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.660806][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.235902][T15306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1796.267989][T15306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1796.276738][T15306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1796.305343][T15306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1796.307984][T15306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1797.614718][ T1040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.346254][ T1040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.369412][T14434] Bluetooth: hci0: command tx timeout [ 1798.733028][ T1040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.138657][ T1040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.318505][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.325149][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.325514][ T3025] bridge_slave_0: entered allmulticast mode [ 1799.340402][ T3025] bridge_slave_0: entered promiscuous mode [ 1799.354446][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.356550][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.356923][ T3025] bridge_slave_1: entered allmulticast mode [ 1799.365116][ T3025] bridge_slave_1: entered promiscuous mode [ 1799.574639][ T3025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.608642][ T3025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.768784][ T3025] team0: Port device team_slave_0 added [ 1799.782185][ T3025] team0: Port device team_slave_1 added [ 1799.966024][ T3025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.966043][ T3025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.966354][ T3025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.974256][ T3025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.974274][ T3025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.974302][ T3025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.418839][ T3025] hsr_slave_0: entered promiscuous mode [ 1800.421943][ T3025] hsr_slave_1: entered promiscuous mode [ 1800.427525][ T3025] debugfs: 'hsr0' already exists in 'hsr' [ 1800.427556][ T3025] Cannot create hsr debugfs directory [ 1800.459310][T14434] Bluetooth: hci0: command tx timeout [ 1800.842965][ T1040] bridge_slave_1: left allmulticast mode [ 1800.842993][ T1040] bridge_slave_1: left promiscuous mode [ 1800.843226][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.925682][ T1040] bridge_slave_0: left allmulticast mode [ 1800.925724][ T1040] bridge_slave_0: left promiscuous mode [ 1800.926041][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.919999][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.003045][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1802.043969][ T1040] bond0 (unregistering): Released all slaves [ 1802.127476][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1802.566956][T14434] Bluetooth: hci0: command tx timeout [ 1803.962515][ T1040] hsr_slave_0: left promiscuous mode [ 1804.001809][ T1040] hsr_slave_1: left promiscuous mode [ 1804.043884][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.043916][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.090971][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.091219][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.203657][ T1040] veth1_macvtap: left promiscuous mode [ 1804.214619][ T1040] veth0_macvtap: left promiscuous mode [ 1804.214989][ T1040] veth1_vlan: left promiscuous mode [ 1804.215213][ T1040] veth0_vlan: left promiscuous mode [ 1804.649356][T14434] Bluetooth: hci0: command tx timeout [ 1805.496246][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 1805.571336][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 1805.796766][ T5276] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1809.245350][ T3025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1809.292529][ T3025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1809.298311][ T3025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1809.326105][ T3025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1809.328956][ T3025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1809.506715][ T3025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1809.508686][ T3025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1809.572367][ T3025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1809.950946][ T3025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.172655][ T3025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.187951][T31590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.188139][T31590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.214244][T31590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.214580][T31590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.573457][ T3025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1812.366470][ T3025] veth0_vlan: entered promiscuous mode [ 1812.396493][ T3025] veth1_vlan: entered promiscuous mode [ 1812.468731][ T3025] veth0_macvtap: entered promiscuous mode [ 1812.480708][ T3025] veth1_macvtap: entered promiscuous mode [ 1812.527274][ T3025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.542389][T14434] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1812.542583][T14434] Bluetooth: hci1: Injecting HCI hardware error event [ 1812.545486][T14434] Bluetooth: hci1: hardware error 0x00 [ 1812.602229][ T3025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1812.624351][ T1040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.624506][ T1040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.624580][ T1040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.624612][ T1040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.467288][T14836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.467311][T14836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.639930][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.639954][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.751626][T15306] Bluetooth: hci1: unexpected event for opcode 0x0009 [ 1814.736654][T15306] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1814.856646][T14434] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1820.380525][ T3467] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8176'. [ 1841.234243][T15306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1841.265922][T15306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1841.293276][T15306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1841.309257][T15306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1841.317853][T15306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1842.426911][ T1541] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.953659][ T1541] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.328797][ T1541] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.490874][T14434] Bluetooth: hci2: command tx timeout [ 1843.719898][ T1541] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.435905][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.436341][ T3804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.436678][ T3804] bridge_slave_0: entered allmulticast mode [ 1844.466054][ T3804] bridge_slave_0: entered promiscuous mode [ 1844.479909][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.480159][ T3804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.480446][ T3804] bridge_slave_1: entered allmulticast mode [ 1844.483138][ T3804] bridge_slave_1: entered promiscuous mode [ 1844.599792][ T3804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.622942][ T3804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.749981][ T1541] bridge_slave_1: left allmulticast mode [ 1844.750009][ T1541] bridge_slave_1: left promiscuous mode [ 1844.750214][ T1541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.830437][ T1541] bridge_slave_0: left allmulticast mode [ 1844.830464][ T1541] bridge_slave_0: left promiscuous mode [ 1844.830694][ T1541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.569289][T14434] Bluetooth: hci2: command tx timeout [ 1845.820399][ T1541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1845.900818][ T1541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1845.963344][ T1541] bond0 (unregistering): Released all slaves [ 1846.124112][ T3804] team0: Port device team_slave_0 added [ 1846.166195][ T3804] team0: Port device team_slave_1 added [ 1846.427622][ T3804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.427642][ T3804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.427672][ T3804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.503729][ T3804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.503748][ T3804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.503774][ T3804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.002567][ T3804] hsr_slave_0: entered promiscuous mode [ 1847.005287][ T3804] hsr_slave_1: entered promiscuous mode [ 1847.007451][ T3804] debugfs: 'hsr0' already exists in 'hsr' [ 1847.007481][ T3804] Cannot create hsr debugfs directory [ 1847.652424][T14434] Bluetooth: hci2: command tx timeout [ 1847.681221][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1848.059880][ T1541] hsr_slave_0: left promiscuous mode [ 1848.099277][ T1541] hsr_slave_1: left promiscuous mode [ 1848.100364][ T1541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.100385][ T1541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.126767][ T1541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.126829][ T1541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.183764][ T1541] veth1_macvtap: left promiscuous mode [ 1848.183950][ T1541] veth0_macvtap: left promiscuous mode [ 1848.184933][ T1541] veth1_vlan: left promiscuous mode [ 1848.185135][ T1541] veth0_vlan: left promiscuous mode [ 1849.220272][ T1541] team0 (unregistering): Port device team_slave_1 removed [ 1849.281293][ T1541] team0 (unregistering): Port device team_slave_0 removed [ 1849.730248][T14434] Bluetooth: hci2: command tx timeout [ 1852.322441][ T3804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1852.383705][ T3804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1852.385947][ T3804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1852.495494][ T3804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1852.505622][ T3804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1852.716918][ T3804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1852.728149][ T3804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1852.765837][ T3804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1853.221473][ T3804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.288153][ T3804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1853.348665][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.357562][ T1541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1853.394528][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.394746][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.494418][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.494527][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.466895][ T3804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.936973][ T3804] veth0_vlan: entered promiscuous mode [ 1855.002364][ T3804] veth1_vlan: entered promiscuous mode [ 1855.070810][ T3804] veth0_macvtap: entered promiscuous mode [ 1855.092500][ T3804] veth1_macvtap: entered promiscuous mode [ 1855.164046][ T3804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.203287][ T3804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1855.224166][ T167] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.224434][ T167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.224624][ T167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.224666][ T167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.102038][T31590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.102063][T31590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.344019][T31590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.344043][T31590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.504979][ T4087] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.8313'. [ 1859.585393][ T4123] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.8322'. [ 1877.585370][ T4436] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.8408'. [ 1879.196291][ T4468] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.8417'. [ 1880.953106][ T4498] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.8426'. [ 1903.969385][T14434] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1903.969684][T14434] Bluetooth: hci2: Injecting HCI hardware error event [ 1903.982061][T14434] Bluetooth: hci2: hardware error 0x00 [ 1905.012707][ T4904] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1906.209639][T14434] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1914.946975][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.947085][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.553459][ T4904] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1921.586587][ T4904] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1923.577676][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1924.571323][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1926.665275][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1927.694143][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1929.713091][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1930.705351][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1932.713296][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1934.695541][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1935.713211][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1936.728071][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1938.726858][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1939.738541][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1941.772509][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1943.782538][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1944.775814][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1945.768463][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1946.795270][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1947.782396][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1948.804836][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1949.801673][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1951.794957][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1952.833959][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1953.925462][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1955.041437][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1956.176640][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1957.196437][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1958.217670][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1959.250866][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1960.278477][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1961.292792][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1962.317003][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1963.314963][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1966.514478][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1967.598127][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1967.929895][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1968.958384][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1971.061979][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1972.087108][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1973.183899][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1974.402106][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1975.397493][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1976.383391][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.383502][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.996094][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1981.418000][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1982.670253][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1983.953025][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1985.026320][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1986.310306][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1987.284264][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1989.326423][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1990.384747][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1991.471437][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1992.488119][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1992.591440][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1993.568846][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1995.557996][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1996.543548][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1997.546838][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1998.570950][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1999.562469][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2000.654513][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2001.866918][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2002.896006][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2003.920516][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2005.922665][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2008.936219][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2009.962775][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2010.972836][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2011.992830][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2013.081605][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2014.125084][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2015.274951][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2016.304826][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2017.361425][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2018.363417][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2020.362686][T14434] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 2022.470649][T14434] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2024.576893][ T7025] input: syz1 as /devices/virtual/input/input53 [ 2024.789132][ T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2024.848892][ T7031] tls_set_device_offload: netdev not found [ 2025.504653][ T7032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2026.171534][ T37] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2026.171567][ T37] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2026.171590][ T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2026.171645][ T37] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2026.171676][ T37] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2026.176187][ T37] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2026.176219][ T37] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2026.176240][ T37] usb 6-1: Product: syz [ 2026.176255][ T37] usb 6-1: Manufacturer: syz [ 2026.285295][ T37] cdc_wdm 6-1:1.0: skipping garbage [ 2026.285317][ T37] cdc_wdm 6-1:1.0: skipping garbage [ 2026.314979][ T37] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2026.315022][ T37] cdc_wdm 6-1:1.0: Unknown control protocol [ 2026.475888][ T7037] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 2026.874519][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -EPIPE [ 2027.053114][ T3353] usb 6-1: USB disconnect, device number 2 [ 2027.422081][ T37] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 2027.576752][ T37] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 2027.576789][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.621548][ T37] usb 7-1: config 0 descriptor?? [ 2027.673154][ T37] pwc: Samsung MPC-C10 USB webcam detected. [ 2027.848571][ T37] pwc: send_video_command error -71 [ 2027.848741][ T37] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2027.848887][ T37] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 2027.968877][ T37] usb 7-1: USB disconnect, device number 2 [ 2028.179937][ T3353] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 2028.484621][ T3353] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 2028.484654][ T3353] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2028.484675][ T3353] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2028.484736][ T3353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2028.484760][ T3353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2028.484781][ T3353] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2028.484837][ T3353] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2028.484861][ T3353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.412150][ T3353] usb 5-1: config 0 descriptor?? [ 2029.492194][ T37] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2029.717008][ T37] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 2029.717051][ T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.813240][ T37] usb 7-1: config 0 descriptor?? [ 2029.829349][ T37] pwc: Samsung MPC-C10 USB webcam detected. [ 2029.829597][ T3353] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2030.000543][ T3353] usb 5-1: USB disconnect, device number 2 [ 2030.121102][ T3353] usblp0: removed [ 2030.221716][ T37] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2030.223933][ T37] pwc: recv_control_msg error -32 req 02 val 2700 [ 2030.436120][ T37] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2030.436775][ T37] pwc: recv_control_msg error -71 req 04 val 1000 [ 2030.437272][ T37] pwc: recv_control_msg error -71 req 04 val 1300 [ 2030.473827][ T37] pwc: recv_control_msg error -71 req 04 val 1400 [ 2030.474420][ T37] pwc: recv_control_msg error -71 req 02 val 2000 [ 2030.474916][ T37] pwc: recv_control_msg error -71 req 02 val 2100 [ 2030.475417][ T37] pwc: recv_control_msg error -71 req 02 val 2200 [ 2030.476041][ T37] pwc: recv_control_msg error -71 req 06 val 0600 [ 2030.476546][ T37] pwc: recv_control_msg error -71 req 04 val 1500 [ 2030.477017][ T37] pwc: recv_control_msg error -71 req 02 val 2500 [ 2030.477507][ T37] pwc: recv_control_msg error -71 req 02 val 2400 [ 2030.477986][ T37] pwc: recv_control_msg error -71 req 02 val 2600 [ 2030.478604][ T37] pwc: recv_control_msg error -71 req 02 val 2900 [ 2030.507575][ T37] pwc: recv_control_msg error -71 req 02 val 2800 [ 2030.535973][ T37] pwc: recv_control_msg error -71 req 04 val 1100 [ 2030.562713][ T37] pwc: recv_control_msg error -71 req 04 val 1200 [ 2030.579957][ T37] pwc: Registered as video103. [ 2030.585497][ T37] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 2030.613705][ T37] usb 7-1: USB disconnect, device number 3 [ 2033.407444][ T38] audit: type=1326 audit(1778492974.416:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2033.478032][ T38] audit: type=1326 audit(1778492974.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2033.509091][ T38] audit: type=1326 audit(1778492974.516:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2033.509155][ T38] audit: type=1326 audit(1778492974.516:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2033.516425][ T38] audit: type=1326 audit(1778492974.526:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2033.797488][ T38] audit: type=1326 audit(1778492974.806:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2033.802408][ T38] audit: type=1326 audit(1778492974.816:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.6.9135" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2034.171503][ T37] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2034.319234][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 2034.406891][ T37] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2034.406916][ T37] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2034.406933][ T37] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2034.406949][ T37] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2034.406962][ T37] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2034.429149][ T37] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2034.429181][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.429201][ T37] usb 6-1: Product: syz [ 2034.429215][ T37] usb 6-1: Manufacturer: syz [ 2034.429230][ T37] usb 6-1: SerialNumber: syz [ 2034.533982][ T7108] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2034.602927][ T37] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2034.606658][ T37] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 2034.606719][ T37] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 2034.750298][ T37] usb 6-1: USB disconnect, device number 3 [ 2035.499322][ T37] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2035.999257][T14719] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 2036.186914][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2036.186952][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2036.186992][ T37] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2036.187027][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.193653][T14719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.196299][T14719] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 2036.196328][T14719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.196348][T14719] usb 1-1: Product: syz [ 2036.196362][T14719] usb 1-1: Manufacturer: syz [ 2036.196376][T14719] usb 1-1: SerialNumber: syz [ 2036.224325][ T37] usb 5-1: config 0 descriptor?? [ 2036.313810][T14719] usb 1-1: config 0 descriptor?? [ 2036.508620][T14719] kobil_sct 1-1:0.0: required endpoints missing [ 2036.644781][T26337] usb 1-1: USB disconnect, device number 14 [ 2037.131119][ T37] usb 5-1: string descriptor 0 read error: -71 [ 2037.136360][ T37] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 2037.136435][ T37] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 2037.136456][ T37] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 2037.136513][ T37] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 2037.136635][ T37] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 2037.222257][ T37] usb 5-1: USB disconnect, device number 3 [ 2038.136349][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.136447][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.481317][T31285] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 2038.508519][T31285] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2038.710304][T14719] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2038.875928][T14719] usb 5-1: config 0 has no interfaces? [ 2038.878196][T14719] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2038.878229][T14719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2038.878252][T14719] usb 5-1: SerialNumber: syz [ 2038.910744][T14719] usb 5-1: config 0 descriptor?? [ 2039.275592][T31285] usb 5-1: USB disconnect, device number 4 [ 2040.832174][ T7166] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 2040.832174][ T7166] program syz.6.9158 not setting count and/or reply_len properly [ 2041.039124][ T5347] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2041.243242][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2041.243282][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2041.243324][ T5347] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2041.243351][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.296410][ T5347] usb 1-1: config 0 descriptor?? [ 2041.591969][ T5347] usbhid 1-1:0.0: can't add hid device: -71 [ 2041.592086][ T5347] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2041.651483][ T5347] usb 1-1: USB disconnect, device number 15 [ 2043.099545][ T5347] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2043.199361][ T3353] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2043.264226][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2043.264263][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.264305][ T5347] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2043.264330][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.312377][ T5347] usb 1-1: config 0 descriptor?? [ 2043.383671][ T3353] usb 6-1: Using ep0 maxpacket: 32 [ 2043.395864][ T3353] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2043.395899][ T3353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.395922][ T3353] usb 6-1: Product: syz [ 2043.395939][ T3353] usb 6-1: Manufacturer: syz [ 2043.395956][ T3353] usb 6-1: SerialNumber: syz [ 2043.436160][ T3353] usb 6-1: config 0 descriptor?? [ 2043.459297][ T3353] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2043.459793][ T3353] dvb-usb: bulk message failed: -22 (4/0) [ 2043.459816][ T3353] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2043.459961][ T3353] dvb-usb: bulk message failed: -22 (5/0) [ 2043.459977][ T3353] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2043.732122][ T5347] steelseries 0003:1038:12B6.0019: unknown main item tag 0x3 [ 2043.845698][ T5347] steelseries 0003:1038:12B6.0019: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 2043.882796][ T3353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2043.907161][ T5723] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2043.912426][ T3353] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2043.912607][ T3353] usb 6-1: media controller created [ 2044.048534][ T3353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2044.090450][ T5723] usb 7-1: Using ep0 maxpacket: 16 [ 2044.114730][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2044.136101][ T5723] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2044.136136][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.136159][ T5723] usb 7-1: Product: syz [ 2044.136175][ T5723] usb 7-1: Manufacturer: syz [ 2044.136191][ T5723] usb 7-1: SerialNumber: syz [ 2044.294944][ T5723] usb 7-1: config 0 descriptor?? [ 2044.315977][ T5723] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2044.316018][ T5723] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2044.471804][T26337] usb 1-1: USB disconnect, device number 16 [ 2044.698661][ T3353] usb 6-1: selecting invalid altsetting 3 [ 2044.698687][ T3353] ttusb2: set interface to alts=3 failed [ 2044.893119][ T3353] DVB: Unable to find symbol tda10086_attach() [ 2044.893206][ T3353] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2044.897673][ T3353] dvb-usb: bulk message failed: -22 (4/0) [ 2044.948516][ T3353] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2044.948681][ T3353] dvb-usb: bulk message failed: -22 (5/0) [ 2044.948700][ T3353] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2044.948791][ T3353] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2044.968267][ T5723] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2045.062209][ T3353] usb 6-1: USB disconnect, device number 4 [ 2045.247578][ T3353] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2045.512406][ T5723] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2045.512452][ T5723] em28xx 7-1:0.0: board has no eeprom [ 2045.599170][ T5347] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2045.800786][ T5347] usb 5-1: Using ep0 maxpacket: 32 [ 2045.803020][ T5347] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2045.803109][ T5347] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2045.803126][ T5347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2045.808484][ T5347] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2045.808515][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.808529][ T5347] usb 5-1: Product: syz [ 2045.808538][ T5347] usb 5-1: Manufacturer: syz [ 2045.808589][ T5347] usb 5-1: SerialNumber: syz [ 2045.878618][ T5347] usb 5-1: config 0 descriptor?? [ 2046.239112][ T3353] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2046.295883][ T5347] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 2046.389076][ T3353] usb 1-1: Using ep0 maxpacket: 32 [ 2046.392219][ T3353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2046.392248][ T3353] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2046.396748][ T3353] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 2046.396781][ T3353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.396804][ T3353] usb 1-1: Product: syz [ 2046.396819][ T3353] usb 1-1: Manufacturer: syz [ 2046.396834][ T3353] usb 1-1: SerialNumber: syz [ 2046.412085][ T3353] usb 1-1: config 0 descriptor?? [ 2046.680364][ T5723] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2046.680436][ T5723] em28xx 7-1:0.0: dvb set to bulk mode. [ 2046.690221][ T3353] snd-usb-6fire 1-1:0.0: unable to receive device firmware state. [ 2046.690309][ T3353] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 2046.701734][ T3353] usb 1-1: USB disconnect, device number 17 [ 2046.713995][ T7200] em28xx 7-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 2046.746326][T26337] em28xx 7-1:0.0: Binding DVB extension [ 2046.874420][ T5723] usb 7-1: USB disconnect, device number 4 [ 2046.899238][ T5723] em28xx 7-1:0.0: Disconnecting em28xx [ 2046.988996][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 2046.999596][ T5633] usb 5-1: USB disconnect, device number 5 [ 2047.053097][T26337] em28xx 7-1:0.0: Registering input extension [ 2047.062197][ T5723] em28xx 7-1:0.0: Closing input extension [ 2047.468747][ T5723] em28xx 7-1:0.0: Freeing device [ 2048.334435][ T7231] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 2048.575694][ T7235] binder: BINDER_SET_CONTEXT_MGR already set [ 2048.575712][ T7235] binder: 7233:7235 ioctl 4018620d 200000004a80 returned -16 [ 2048.850033][ T5347] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 2049.002468][ T5347] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2049.003891][ T5347] usb 7-1: not running at top speed; connect to a high speed hub [ 2049.053212][ T5347] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 2049.053246][ T5347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.053265][ T5347] usb 7-1: Product: syz [ 2049.053280][ T5347] usb 7-1: Manufacturer: syz [ 2049.053293][ T5347] usb 7-1: SerialNumber: syz [ 2049.326687][ T5347] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2049.923829][ T5347] gp8psk: usb out operation failed. [ 2049.923851][ T5347] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2049.923906][ T5347] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 2049.972437][ T5347] usb 7-1: USB disconnect, device number 5 [ 2052.479170][T26341] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2052.652611][T26341] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2052.652642][T26341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.652661][T26341] usb 7-1: Product: syz [ 2052.652671][T26341] usb 7-1: Manufacturer: syz [ 2052.652680][T26341] usb 7-1: SerialNumber: syz [ 2052.795624][T26341] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2053.269506][T26337] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2055.055661][T26337] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2055.093587][T26337] ath9k_htc: Failed to initialize the device [ 2055.128542][ T7298] comedi comedi3: rti800: I/O port conflict (0x100,16) [ 2055.266948][T14719] usb 7-1: USB disconnect, device number 6 [ 2055.437650][T14719] usb 7-1: ath9k_htc: USB layer deinitialized [ 2055.526584][ T7302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9206'. [ 2056.597397][ T38] audit: type=1326 audit(1778492997.606:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.0.9208" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179ffacdd9 code=0x0 [ 2057.363174][T26341] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2057.561978][T26341] usb 7-1: Using ep0 maxpacket: 32 [ 2057.575448][T26341] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 2057.575480][T26341] usb 7-1: config 0 has no interface number 0 [ 2057.575529][T26341] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2057.575560][T26341] usb 7-1: config 0 interface 85 has no altsetting 0 [ 2057.588341][T26341] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2057.588374][T26341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.588396][T26341] usb 7-1: Product: syz [ 2057.588410][T26341] usb 7-1: Manufacturer: syz [ 2057.588424][T26341] usb 7-1: SerialNumber: syz [ 2057.607496][T26341] usb 7-1: config 0 descriptor?? [ 2058.430172][T26341] appletouch 7-1:0.85: Geyser mode initialized. [ 2058.436014][T26341] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input56 [ 2058.516693][ C1] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 2058.731972][ T5633] usb 7-1: USB disconnect, device number 7 [ 2059.026271][ T5633] appletouch 7-1:0.85: input: appletouch disconnected [ 2059.164020][ T7292] syz.4.9201 (7292): drop_caches: 2 [ 2059.334554][ T7289] syz.4.9201 (7289): drop_caches: 2 [ 2061.746474][ T7360] program syz.4.9228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2062.240272][ T7365] kvm: emulating exchange as write [ 2062.240546][ T7365] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2063.519164][T26341] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2064.049756][T26341] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 2064.049797][T26341] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.049817][T26341] usb 7-1: config 0 has no interface number 0 [ 2064.679923][T26341] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 2064.679955][T26341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.679975][T26341] usb 7-1: Product: syz [ 2064.679990][T26341] usb 7-1: Manufacturer: syz [ 2064.680005][T26341] usb 7-1: SerialNumber: syz [ 2064.725013][T26341] usb 7-1: config 0 descriptor?? [ 2064.738863][T26341] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 2064.741216][T26341] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 2064.953636][ T5633] usb 7-1: USB disconnect, device number 8 [ 2066.575597][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9242'. [ 2067.009440][T26341] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2067.187576][T26341] usb 6-1: Using ep0 maxpacket: 8 [ 2067.195156][T26341] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2067.195217][T26341] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2067.195231][T26341] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2067.195247][T26341] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2067.195279][T26341] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2067.195294][T26341] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2067.195322][T26341] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2067.195336][T26341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.343768][T26337] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 2067.517870][T26337] usb 1-1: config 5 has an invalid interface number: 247 but max is 0 [ 2067.517908][T26337] usb 1-1: config 5 has no interface number 0 [ 2067.518070][T26337] usb 1-1: config 5 interface 247 altsetting 15 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2067.518170][T26337] usb 1-1: config 5 interface 247 has no altsetting 0 [ 2067.560448][T26337] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0117, bcdDevice=ad.71 [ 2067.560617][T26337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.560642][T26337] usb 1-1: Product: syz [ 2067.560731][T26337] usb 1-1: Manufacturer: syz [ 2067.560750][T26337] usb 1-1: SerialNumber: syz [ 2067.602016][ T5633] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2067.625532][T26341] usb 6-1: usb_control_msg returned -32 [ 2067.625591][T26341] usbtmc 6-1:16.0: can't read capabilities [ 2067.929663][ T5633] usb 7-1: Using ep0 maxpacket: 16 [ 2068.323580][ T5633] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2068.323621][ T5633] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2068.353575][ T5633] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2068.353610][ T5633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.353634][ T5633] usb 7-1: Product: syz [ 2068.353650][ T5633] usb 7-1: Manufacturer: syz [ 2068.353666][ T5633] usb 7-1: SerialNumber: syz [ 2068.631571][ T5633] usb 7-1: config 0 descriptor?? [ 2068.649528][T26337] kvaser_usb 1-1:5.247: error -ENODEV: Cannot get usb endpoint(s) [ 2068.755126][T26337] usb 1-1: USB disconnect, device number 18 [ 2068.979938][ T5633] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input57 [ 2069.039458][ T37] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2069.189466][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 2069.196658][ T37] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2069.196760][ T37] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2069.196796][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2069.222003][ T37] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2069.227611][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.227642][ T37] usb 5-1: Product: syz [ 2069.227660][ T37] usb 5-1: Manufacturer: syz [ 2069.227676][ T37] usb 5-1: SerialNumber: syz [ 2069.303825][ T37] usb 5-1: config 0 descriptor?? [ 2069.397529][ T5633] rc_core: IR keymap rc-imon-pad not found [ 2069.397634][ T5633] Registered IR keymap rc-empty [ 2069.438351][ T5633] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 2069.438382][ T5633] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2069.482918][ T5633] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2069.524371][ T5633] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input58 [ 2069.567160][ T5633] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:9> initialized [ 2069.722567][ T37] gs_usb 5-1:0.0: Configuring for 112 interfaces [ 2069.850908][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 2069.862576][ T5633] usb 7-1: USB disconnect, device number 9 [ 2070.061208][T26337] usb 6-1: USB disconnect, device number 5 [ 2070.135981][ T37] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 2070.136500][ T37] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 2070.137244][ T37] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 2070.285019][ T37] usb 5-1: USB disconnect, device number 6 [ 2070.341660][ T5723] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2070.511881][ T5723] usb 1-1: config 118 interface 0 has no altsetting 0 [ 2070.516855][ T5723] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 2070.516890][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.516914][ T5723] usb 1-1: Product: syz [ 2070.516930][ T5723] usb 1-1: Manufacturer: syz [ 2070.516947][ T5723] usb 1-1: SerialNumber: syz [ 2072.140561][ T5723] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 2072.167355][ T5723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2072.168617][ T5723] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 2072.168683][ T5723] usb 1-1: media controller created [ 2072.245243][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2072.464262][ T5723] DVB: Unable to find symbol mt352_attach() [ 2072.464282][ T5723] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 2072.494536][ T5723] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 2073.732585][ T5723] dvb-usb: schedule remote query interval to 100 msecs. [ 2073.732611][ T5723] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 2073.802567][ T5723] dvb_usb_m920x 1-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 2073.822733][ T5723] usb 1-1: USB disconnect, device number 19 [ 2073.862837][T26341] m920x_read = error: -19 [ 2073.862869][T26341] dvb-usb: error while querying for an remote control event. [ 2073.973262][T26341] m920x_read = error: -19 [ 2073.973292][T26341] dvb-usb: error while querying for an remote control event. [ 2074.089502][T26341] m920x_read = error: -19 [ 2074.089535][T26341] dvb-usb: error while querying for an remote control event. [ 2074.199195][T26341] m920x_read = error: -19 [ 2074.199223][T26341] dvb-usb: error while querying for an remote control event. [ 2074.221933][ T5723] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2074.309212][T26341] m920x_read = error: -19 [ 2074.309241][T26341] dvb-usb: error while querying for an remote control event. [ 2074.381511][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 2074.401927][ T5723] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2074.401961][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.505038][T26337] m920x_read = error: -19 [ 2074.505071][T26337] dvb-usb: error while querying for an remote control event. [ 2074.539966][ T5723] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2074.540006][ T5723] pvrusb2: ********** [ 2074.540014][ T5723] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2074.540027][ T5723] pvrusb2: Important functionality might not be entirely working. [ 2074.540036][ T5723] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2074.540050][ T5723] pvrusb2: ********** [ 2074.639216][T26337] m920x_read = error: -19 [ 2074.639249][T26337] dvb-usb: error while querying for an remote control event. [ 2074.641321][ T5633] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 2074.777125][T26337] m920x_read = error: -19 [ 2074.777155][T26337] dvb-usb: error while querying for an remote control event. [ 2074.793304][ T5633] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2074.793333][ T5633] usb 5-1: config 0 has no interface number 0 [ 2074.803561][ T5633] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2074.803594][ T5633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.803614][ T5633] usb 5-1: Product: syz [ 2074.803629][ T5633] usb 5-1: Manufacturer: syz [ 2074.803645][ T5633] usb 5-1: SerialNumber: syz [ 2074.854718][ T2358] pvrusb2: Invalid write control endpoint [ 2074.868846][ T5633] usb 5-1: config 0 descriptor?? [ 2074.889156][ T5723] m920x_read = error: -19 [ 2074.889183][ T5723] dvb-usb: error while querying for an remote control event. [ 2074.958389][ T5723] usb 1-1: USB disconnect, device number 20 [ 2074.998530][ T5633] usb 5-1: selecting invalid altsetting 1 [ 2075.011536][T26337] m920x_read = error: -19 [ 2075.011567][T26337] dvb-usb: error while querying for an remote control event. [ 2075.042722][ T5633] dvb_ttusb_budget: ttusb_init_controller: error [ 2075.042744][ T5633] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2075.119843][T26337] m920x_read = error: -19 [ 2075.119863][T26337] dvb-usb: error while querying for an remote control event. [ 2075.230432][T26337] m920x_read = error: -19 [ 2075.230462][T26337] dvb-usb: error while querying for an remote control event. [ 2075.343984][T26337] m920x_read = error: -19 [ 2075.344015][T26337] dvb-usb: error while querying for an remote control event. [ 2075.449360][ T5347] m920x_read = error: -19 [ 2075.449392][ T5347] dvb-usb: error while querying for an remote control event. [ 2075.569850][ T5347] m920x_read = error: -19 [ 2075.569882][ T5347] dvb-usb: error while querying for an remote control event. [ 2075.664116][ T5633] DVB: Unable to find symbol stv0299_attach() [ 2075.669217][T26337] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2075.682995][ T5347] m920x_read = error: -19 [ 2075.683027][ T5347] dvb-usb: error while querying for an remote control event. [ 2075.789446][ T5347] m920x_read = error: -19 [ 2075.789466][ T5347] dvb-usb: error while querying for an remote control event. [ 2075.798466][ T2358] pvrusb2: Invalid write control endpoint [ 2075.798478][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2075.798485][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2075.798489][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2075.798517][ T2358] pvrusb2: Device being rendered inoperable [ 2075.829072][T26337] usb 6-1: Using ep0 maxpacket: 8 [ 2075.842438][ T5633] DVB: Unable to find symbol tda8083_attach() [ 2075.842454][ T5633] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2075.843855][ T2358] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 2075.843965][ T2358] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2075.861946][ T5633] usb 5-1: USB disconnect, device number 7 [ 2075.890691][T26337] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.932986][T26337] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2075.933021][T26337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.939504][ T5347] m920x_read = error: -19 [ 2075.939536][ T5347] dvb-usb: error while querying for an remote control event. [ 2076.050788][T26341] m920x_read = error: -19 [ 2076.050820][T26341] dvb-usb: error while querying for an remote control event. [ 2076.170628][T26341] m920x_read = error: -19 [ 2076.170660][T26341] dvb-usb: error while querying for an remote control event. [ 2076.279119][T26341] m920x_read = error: -19 [ 2076.279152][T26341] dvb-usb: error while querying for an remote control event. [ 2076.362786][ T2358] pvrusb2: Attached sub-driver cx25840 [ 2076.362824][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2076.362831][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2076.525191][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2077.245871][T26341] m920x_read = error: -19 [ 2077.245900][T26341] dvb-usb: error while querying for an remote control event. [ 2077.300050][T26337] usb 6-1: config 0 descriptor?? [ 2077.363804][T26337] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2077.380003][ T5347] m920x_read = error: -19 [ 2077.380034][ T5347] dvb-usb: error while querying for an remote control event. [ 2077.489372][ T5347] m920x_read = error: -19 [ 2077.489540][ T5347] dvb-usb: error while querying for an remote control event. [ 2077.602874][ T5347] m920x_read = error: -19 [ 2077.603837][ T5347] dvb-usb: error while querying for an remote control event. [ 2077.709486][ T5347] m920x_read = error: -19 [ 2077.709517][ T5347] dvb-usb: error while querying for an remote control event. [ 2077.819350][ T5347] m920x_read = error: -19 [ 2077.819454][ T5347] dvb-usb: error while querying for an remote control event. [ 2077.929688][ T5347] m920x_read = error: -19 [ 2077.929708][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.054304][ T5347] m920x_read = error: -19 [ 2078.054325][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.160066][ T5347] m920x_read = error: -19 [ 2078.160136][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.280219][ T5347] m920x_read = error: -19 [ 2078.280290][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.447576][ T5347] m920x_read = error: -19 [ 2078.447598][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.559171][ T5347] m920x_read = error: -19 [ 2078.559455][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.578491][T26337] gspca_vc032x: reg_w err -71 [ 2078.578592][T26337] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 2078.598614][T26337] usb 6-1: USB disconnect, device number 6 [ 2078.669855][T26341] m920x_read = error: -19 [ 2078.669888][T26341] dvb-usb: error while querying for an remote control event. [ 2078.743028][ T5723] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2078.779210][ T5347] m920x_read = error: -19 [ 2078.779242][ T5347] dvb-usb: error while querying for an remote control event. [ 2078.889121][T26337] m920x_read = error: -19 [ 2078.889150][T26337] dvb-usb: error while querying for an remote control event. [ 2078.999080][ T3353] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2078.999238][T26337] m920x_read = error: -19 [ 2078.999264][T26337] dvb-usb: error while querying for an remote control event. [ 2079.109133][T26337] m920x_read = error: -19 [ 2079.109167][T26337] dvb-usb: error while querying for an remote control event. [ 2079.149084][ T3353] usb 5-1: Using ep0 maxpacket: 16 [ 2079.154151][ T3353] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 2079.154183][ T3353] usb 5-1: config 0 has no interface number 0 [ 2079.154230][ T3353] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2079.154259][ T3353] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2079.156589][ T3353] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2079.156620][ T3353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.156644][ T3353] usb 5-1: Product: syz [ 2079.156660][ T3353] usb 5-1: Manufacturer: syz [ 2079.156675][ T3353] usb 5-1: SerialNumber: syz [ 2079.164327][ T3353] usb 5-1: config 0 descriptor?? [ 2079.171335][ T7494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2079.171710][ T7494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2079.232934][T26337] m920x_read = error: -19 [ 2079.232962][T26337] dvb-usb: error while querying for an remote control event. [ 2079.339621][T26337] m920x_read = error: -19 [ 2079.339659][T26337] dvb-usb: error while querying for an remote control event. [ 2079.379386][ T7494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2079.379508][ T7494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2079.449783][T26337] m920x_read = error: -19 [ 2079.449814][T26337] dvb-usb: error while querying for an remote control event. [ 2079.568664][T26337] m920x_read = error: -19 [ 2079.568693][T26337] dvb-usb: error while querying for an remote control event. [ 2079.672280][T26337] m920x_read = error: -19 [ 2079.672311][T26337] dvb-usb: error while querying for an remote control event. [ 2079.779561][T26337] m920x_read = error: -19 [ 2079.779590][T26337] dvb-usb: error while querying for an remote control event. [ 2079.889254][ T5723] m920x_read = error: -19 [ 2079.889285][ T5723] dvb-usb: error while querying for an remote control event. [ 2080.000626][ T5723] m920x_read = error: -19 [ 2080.000656][ T5723] dvb-usb: error while querying for an remote control event. [ 2080.109176][T26337] m920x_read = error: -19 [ 2080.109208][T26337] dvb-usb: error while querying for an remote control event. [ 2080.185649][ T3353] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2080.185686][ T3353] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 2080.199440][ T3353] asix 5-1:0.34: probe with driver asix failed with error -71 [ 2080.224329][T26337] m920x_read = error: -19 [ 2080.224357][T26337] dvb-usb: error while querying for an remote control event. [ 2080.277616][ T3353] usb 5-1: USB disconnect, device number 8 [ 2080.339324][T26337] m920x_read = error: -19 [ 2080.339357][T26337] dvb-usb: error while querying for an remote control event. [ 2080.461852][ T5723] m920x_read = error: -19 [ 2080.461884][ T5723] dvb-usb: error while querying for an remote control event. [ 2080.569317][ T5723] m920x_read = error: -19 [ 2080.569367][ T5723] dvb-usb: error while querying for an remote control event. [ 2080.679115][ T5723] m920x_read = error: -19 [ 2080.680377][ T5723] dvb-usb: error while querying for an remote control event. [ 2080.789128][ T5723] m920x_read = error: -19 [ 2080.789162][ T5723] dvb-usb: error while querying for an remote control event. [ 2080.899281][ T5723] m920x_read = error: -19 [ 2080.899313][ T5723] dvb-usb: error while querying for an remote control event. [ 2081.051224][ T5723] m920x_read = error: -19 [ 2081.051257][ T5723] dvb-usb: error while querying for an remote control event. [ 2081.221917][ T5723] m920x_read = error: -19 [ 2081.221947][ T5723] dvb-usb: error while querying for an remote control event. [ 2081.329730][ T5723] m920x_read = error: -19 [ 2081.329765][ T5723] dvb-usb: error while querying for an remote control event. [ 2081.440301][ T5723] m920x_read = error: -19 [ 2081.440335][ T5723] dvb-usb: error while querying for an remote control event. [ 2081.772507][ T5723] m920x_read = error: -19 [ 2081.772541][ T5723] dvb-usb: error while querying for an remote control event. [ 2082.026563][ T5347] m920x_read = error: -19 [ 2082.026764][ T5347] dvb-usb: error while querying for an remote control event. [ 2082.133761][ T5347] m920x_read = error: -19 [ 2082.133904][ T5347] dvb-usb: error while querying for an remote control event. [ 2082.241592][ T5347] m920x_read = error: -19 [ 2082.241720][ T5347] dvb-usb: error while querying for an remote control event. [ 2082.360869][ T5347] m920x_read = error: -19 [ 2082.360900][ T5347] dvb-usb: error while querying for an remote control event. [ 2082.469144][ T5347] m920x_read = error: -19 [ 2082.469176][ T5347] dvb-usb: error while querying for an remote control event. [ 2082.706410][ T5347] m920x_read = error: -19 [ 2082.706440][ T5347] dvb-usb: error while querying for an remote control event. [ 2082.809110][ T5723] m920x_read = error: -19 [ 2082.809149][ T5723] dvb-usb: error while querying for an remote control event. [ 2082.919212][ T5723] m920x_read = error: -19 [ 2082.919246][ T5723] dvb-usb: error while querying for an remote control event. [ 2083.031190][ T5723] m920x_read = error: -19 [ 2083.031221][ T5723] dvb-usb: error while querying for an remote control event. [ 2083.139801][ T5723] m920x_read = error: -19 [ 2083.139834][ T5723] dvb-usb: error while querying for an remote control event. [ 2083.253086][ T5723] m920x_read = error: -19 [ 2083.253121][ T5723] dvb-usb: error while querying for an remote control event. [ 2083.360028][ T5347] m920x_read = error: -19 [ 2083.360079][ T5347] dvb-usb: error while querying for an remote control event. [ 2083.470426][ T5347] m920x_read = error: -19 [ 2083.471654][ T5347] dvb-usb: error while querying for an remote control event. [ 2083.581591][ T5347] m920x_read = error: -19 [ 2083.581643][ T5347] dvb-usb: error while querying for an remote control event. [ 2083.690178][ T5347] m920x_read = error: -19 [ 2083.690211][ T5347] dvb-usb: error while querying for an remote control event. [ 2083.799331][ T5347] m920x_read = error: -19 [ 2083.799363][ T5347] dvb-usb: error while querying for an remote control event. [ 2083.912768][ T5347] m920x_read = error: -19 [ 2083.912798][ T5347] dvb-usb: error while querying for an remote control event. [ 2084.021976][ T5723] m920x_read = error: -19 [ 2084.022007][ T5723] dvb-usb: error while querying for an remote control event. [ 2084.129842][ T5723] m920x_read = error: -19 [ 2084.129874][ T5723] dvb-usb: error while querying for an remote control event. [ 2084.243481][ T5723] m920x_read = error: -19 [ 2084.243515][ T5723] dvb-usb: error while querying for an remote control event. [ 2084.445240][ T5723] m920x_read = error: -19 [ 2084.445352][ T5723] dvb-usb: error while querying for an remote control event. [ 2084.577040][ T5723] m920x_read = error: -19 [ 2084.577298][ T5723] dvb-usb: error while querying for an remote control event. [ 2084.679679][ T5723] m920x_read = error: -19 [ 2084.679710][ T5723] dvb-usb: error while querying for an remote control event. [ 2084.789360][ T5723] m920x_read = error: -19 [ 2084.789392][ T5723] dvb-usb: error while querying for an remote control event. [ 2085.064323][ T5723] m920x_read = error: -19 [ 2085.064346][ T5723] dvb-usb: error while querying for an remote control event. [ 2085.194319][ T5347] m920x_read = error: -19 [ 2085.194352][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.299189][ T5347] m920x_read = error: -19 [ 2085.299220][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.420717][ T5347] m920x_read = error: -19 [ 2085.420746][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.529119][ T5347] m920x_read = error: -19 [ 2085.529148][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.639236][ T5347] m920x_read = error: -19 [ 2085.639264][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.749317][ T5347] m920x_read = error: -19 [ 2085.749348][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.859153][ T5347] m920x_read = error: -19 [ 2085.859184][ T5347] dvb-usb: error while querying for an remote control event. [ 2085.929094][ T3353] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2085.969189][ T5347] m920x_read = error: -19 [ 2085.969220][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.079143][ T5347] m920x_read = error: -19 [ 2086.079175][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.079205][ T3353] usb 5-1: Using ep0 maxpacket: 16 [ 2086.082534][ T3353] usb 5-1: config 86 has an invalid interface number: 155 but max is 1 [ 2086.082564][ T3353] usb 5-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.082585][ T3353] usb 5-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 2086.082609][ T3353] usb 5-1: config 86 has no interface number 0 [ 2086.087573][ T3353] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=be.7c [ 2086.087606][ T3353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.087629][ T3353] usb 5-1: Product: syz [ 2086.087644][ T3353] usb 5-1: Manufacturer: syz [ 2086.087661][ T3353] usb 5-1: SerialNumber: syz [ 2086.189266][ T5347] m920x_read = error: -19 [ 2086.189296][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.309143][ T5723] m920x_read = error: -19 [ 2086.309175][ T5723] dvb-usb: error while querying for an remote control event. [ 2086.375937][ T3353] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 2086.378005][ T3353] sonixb 5-1:86.155: Error reading register 00: -71 [ 2086.402319][ T3353] usb 5-1: USB disconnect, device number 9 [ 2086.419228][ T5347] m920x_read = error: -19 [ 2086.419269][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.529139][ T5347] m920x_read = error: -19 [ 2086.529169][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.639096][ T5347] m920x_read = error: -19 [ 2086.639122][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.706888][ T7570] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9295'. [ 2086.749170][ T5347] m920x_read = error: -19 [ 2086.749201][ T5347] dvb-usb: error while querying for an remote control event. [ 2086.859198][ T5723] m920x_read = error: -19 [ 2086.859232][ T5723] dvb-usb: error while querying for an remote control event. [ 2086.969231][ T5723] m920x_read = error: -19 [ 2086.969263][ T5723] dvb-usb: error while querying for an remote control event. [ 2087.079981][T26337] m920x_read = error: -19 [ 2087.080010][T26337] dvb-usb: error while querying for an remote control event. [ 2087.752893][T26337] m920x_read = error: -19 [ 2087.752925][T26337] dvb-usb: error while querying for an remote control event. [ 2088.061865][ T5347] m920x_read = error: -19 [ 2088.061896][ T5347] dvb-usb: error while querying for an remote control event. [ 2088.180681][T26337] m920x_read = error: -19 [ 2088.180711][T26337] dvb-usb: error while querying for an remote control event. [ 2088.299203][T26337] m920x_read = error: -19 [ 2088.299223][T26337] dvb-usb: error while querying for an remote control event. [ 2088.419250][T26337] m920x_read = error: -19 [ 2088.419278][T26337] dvb-usb: error while querying for an remote control event. [ 2088.512127][ T3353] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2088.539138][ T5347] m920x_read = error: -19 [ 2088.539166][ T5347] dvb-usb: error while querying for an remote control event. [ 2088.639167][ T5347] m920x_read = error: -19 [ 2088.639198][ T5347] dvb-usb: error while querying for an remote control event. [ 2088.667566][ T3353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.667605][ T3353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.667659][ T3353] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2088.667683][ T3353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.721030][ T3353] usb 7-1: config 0 descriptor?? [ 2088.756943][ T5347] m920x_read = error: -19 [ 2088.756977][ T5347] dvb-usb: error while querying for an remote control event. [ 2088.809178][T26337] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2088.859278][ T5347] m920x_read = error: -19 [ 2088.859309][ T5347] dvb-usb: error while querying for an remote control event. [ 2088.972417][ T5347] m920x_read = error: -19 [ 2088.972448][ T5347] dvb-usb: error while querying for an remote control event. [ 2088.976314][T26337] usb 5-1: Using ep0 maxpacket: 16 [ 2088.979147][T26337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.979182][T26337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.979206][T26337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2088.979251][T26337] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2088.979273][T26337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.005401][T26337] usb 5-1: config 0 descriptor?? [ 2089.082889][ T5723] m920x_read = error: -19 [ 2089.082912][ T5723] dvb-usb: error while querying for an remote control event. [ 2089.187039][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.187079][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.187108][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.187135][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.187162][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.187189][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.187216][ T3353] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2089.201263][T26341] m920x_read = error: -19 [ 2089.201363][T26341] dvb-usb: error while querying for an remote control event. [ 2089.294379][ T3353] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 2089.313888][ T5723] m920x_read = error: -19 [ 2089.313907][ T5723] dvb-usb: error while querying for an remote control event. [ 2089.384694][ T3353] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00 [ 2089.429332][ T5723] m920x_read = error: -19 [ 2089.429359][ T5723] dvb-usb: error while querying for an remote control event. [ 2089.521523][T26337] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 2089.522258][T26337] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 2089.522290][T26337] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 2089.561724][ T5723] m920x_read = error: -19 [ 2089.561746][ T5723] dvb-usb: error while querying for an remote control event. [ 2089.669541][T26337] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001B/input/input60 [ 2089.723536][ T5723] m920x_read = error: -19 [ 2089.723568][ T5723] dvb-usb: error while querying for an remote control event. [ 2089.840150][ T5347] m920x_read = error: -19 [ 2089.840180][ T5347] dvb-usb: error while querying for an remote control event. [ 2089.959539][ T5347] m920x_read = error: -19 [ 2089.959567][ T5347] dvb-usb: error while querying for an remote control event. [ 2090.020531][ T3353] cp2112 0003:10C4:EA90.001A: error reading lock byte: -71 [ 2090.079292][ T5347] m920x_read = error: -19 [ 2090.079317][ T5347] dvb-usb: error while querying for an remote control event. [ 2090.115388][ T3353] usb 7-1: USB disconnect, device number 10 [ 2090.199182][ T5723] m920x_read = error: -19 [ 2090.199209][ T5723] dvb-usb: error while querying for an remote control event. [ 2090.320528][ T5347] m920x_read = error: -19 [ 2090.320557][ T5347] dvb-usb: error while querying for an remote control event. [ 2090.451175][ T5723] m920x_read = error: -19 [ 2090.451202][ T5723] dvb-usb: error while querying for an remote control event. [ 2090.452970][T26337] microsoft 0003:045E:07DA.001B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2090.571308][ T5347] m920x_read = error: -19 [ 2090.571336][ T5347] dvb-usb: error while querying for an remote control event. [ 2090.679102][ T5347] m920x_read = error: -19 [ 2090.679130][ T5347] dvb-usb: error while querying for an remote control event. [ 2090.792728][ T5347] m920x_read = error: -19 [ 2090.792755][ T5347] dvb-usb: error while querying for an remote control event. [ 2090.917761][ T5347] m920x_read = error: -19 [ 2090.917788][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.019178][ T5347] m920x_read = error: -19 [ 2091.019208][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.139160][ T5347] m920x_read = error: -19 [ 2091.139188][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.249158][ T5347] m920x_read = error: -19 [ 2091.249187][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.369248][ T5347] m920x_read = error: -19 [ 2091.369278][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.492456][ T5347] m920x_read = error: -19 [ 2091.492486][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.616872][ T5347] m920x_read = error: -19 [ 2091.616901][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.719238][ T5347] m920x_read = error: -19 [ 2091.719268][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.831520][ T5347] m920x_read = error: -19 [ 2091.831550][ T5347] dvb-usb: error while querying for an remote control event. [ 2091.940299][ T5723] m920x_read = error: -19 [ 2091.940330][ T5723] dvb-usb: error while querying for an remote control event. [ 2092.059267][ T5723] m920x_read = error: -19 [ 2092.059293][ T5723] dvb-usb: error while querying for an remote control event. [ 2092.169327][T26341] m920x_read = error: -19 [ 2092.169359][T26341] dvb-usb: error while querying for an remote control event. [ 2092.209318][ T5347] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2092.279267][ T5723] m920x_read = error: -19 [ 2092.279308][ T5723] dvb-usb: error while querying for an remote control event. [ 2092.437433][ T5723] m920x_read = error: -19 [ 2092.437463][ T5723] dvb-usb: error while querying for an remote control event. [ 2092.509087][ T5347] usb 6-1: Using ep0 maxpacket: 16 [ 2092.514604][ T5347] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2092.514872][ T38] audit: type=1326 audit(1778493033.526:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.514933][ T38] audit: type=1326 audit(1778493033.526:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.514982][ T38] audit: type=1326 audit(1778493033.526:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.515031][ T38] audit: type=1326 audit(1778493033.526:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.550963][ T38] audit: type=1326 audit(1778493033.526:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.551027][ T38] audit: type=1326 audit(1778493033.566:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.552866][ T38] audit: type=1326 audit(1778493033.566:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.552922][ T38] audit: type=1326 audit(1778493033.566:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.555335][ T38] audit: type=1326 audit(1778493033.566:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.565482][ T38] audit: type=1326 audit(1778493033.576:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.6.9314" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e2503cdd9 code=0x7ffc0000 [ 2092.607965][ T5347] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 2092.607988][ T5347] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 2092.615681][T26337] usb 5-1: USB disconnect, device number 10 [ 2092.708687][ T5347] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2092.708711][ T5347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.708724][ T5347] usb 6-1: Product: syz [ 2092.708733][ T5347] usb 6-1: Manufacturer: syz [ 2092.708742][ T5347] usb 6-1: SerialNumber: syz [ 2092.905959][T31285] m920x_read = error: -19 [ 2092.905985][T31285] dvb-usb: error while querying for an remote control event. [ 2093.009340][T31285] m920x_read = error: -19 [ 2093.009369][T31285] dvb-usb: error while querying for an remote control event. [ 2093.120628][T31285] m920x_read = error: -19 [ 2093.120730][T31285] dvb-usb: error while querying for an remote control event. [ 2093.245186][ T5723] m920x_read = error: -19 [ 2093.245217][ T5723] dvb-usb: error while querying for an remote control event. [ 2093.335088][ T5347] cdc_ncm 6-1:1.0: bind() failure [ 2093.357661][ T5723] m920x_read = error: -19 [ 2093.357692][ T5723] dvb-usb: error while querying for an remote control event. [ 2093.384401][ T5347] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2093.384460][ T5347] cdc_ncm 6-1:1.1: bind() failure [ 2093.421003][ T5347] usb 6-1: USB disconnect, device number 7 [ 2093.469193][ T5723] m920x_read = error: -19 [ 2093.469222][ T5723] dvb-usb: error while querying for an remote control event. [ 2093.579450][T26337] m920x_read = error: -19 [ 2093.579481][T26337] dvb-usb: error while querying for an remote control event. [ 2093.654883][ T4904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2093.691875][ T5347] m920x_read = error: -19 [ 2093.691904][ T5347] dvb-usb: error while querying for an remote control event. [ 2093.696808][ T4904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2093.720856][ T4904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2093.769726][ T4904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2093.770635][ T4904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2093.815209][T26337] m920x_read = error: -19 [ 2093.815239][T26337] dvb-usb: error while querying for an remote control event. [ 2093.919236][T26337] m920x_read = error: -19 [ 2093.919268][T26337] dvb-usb: error while querying for an remote control event. [ 2094.029446][T26337] m920x_read = error: -19 [ 2094.029478][T26337] dvb-usb: error while querying for an remote control event. [ 2094.139200][T26337] m920x_read = error: -19 [ 2094.139231][T26337] dvb-usb: error while querying for an remote control event. [ 2094.249142][T26337] m920x_read = error: -19 [ 2094.249172][T26337] dvb-usb: error while querying for an remote control event. [ 2094.359172][T26337] m920x_read = error: -19 [ 2094.359202][T26337] dvb-usb: error while querying for an remote control event. [ 2094.474183][T26337] m920x_read = error: -19 [ 2094.474215][T26337] dvb-usb: error while querying for an remote control event. [ 2094.579441][T26337] m920x_read = error: -19 [ 2094.579471][T26337] dvb-usb: error while querying for an remote control event. [ 2094.689223][T26337] m920x_read = error: -19 [ 2094.689253][T26337] dvb-usb: error while querying for an remote control event. [ 2094.799236][T26337] m920x_read = error: -19 [ 2094.799314][T26337] dvb-usb: error while querying for an remote control event. [ 2094.845842][ T7656] binder: 7655:7656 ioctl c0306201 2000000003c0 returned -14 [ 2094.846324][ T7656] binder_alloc: 7655: binder_alloc_buf, no vma [ 2094.909642][T26337] m920x_read = error: -19 [ 2094.909674][T26337] dvb-usb: error while querying for an remote control event. [ 2095.020378][T26337] m920x_read = error: -19 [ 2095.020434][T26337] dvb-usb: error while querying for an remote control event. [ 2095.131770][T26337] m920x_read = error: -19 [ 2095.131801][T26337] dvb-usb: error while querying for an remote control event. [ 2095.250762][T26337] m920x_read = error: -19 [ 2095.250791][T26337] dvb-usb: error while querying for an remote control event. [ 2095.269115][T14719] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2095.359162][ T5347] m920x_read = error: -19 [ 2095.359194][ T5347] dvb-usb: error while querying for an remote control event. [ 2095.459235][T14719] usb 7-1: Using ep0 maxpacket: 32 [ 2095.461764][T14719] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2095.461797][T14719] usb 7-1: config 0 has no interface number 0 [ 2095.461849][T14719] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2095.464417][T14719] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2095.464445][T14719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.464465][T14719] usb 7-1: Product: syz [ 2095.464480][T14719] usb 7-1: Manufacturer: syz [ 2095.464496][T14719] usb 7-1: SerialNumber: syz [ 2095.469188][ T5347] m920x_read = error: -19 [ 2095.469217][ T5347] dvb-usb: error while querying for an remote control event. [ 2095.484800][T14719] usb 7-1: config 0 descriptor?? [ 2095.579151][ T5347] m920x_read = error: -19 [ 2095.579180][ T5347] dvb-usb: error while querying for an remote control event. [ 2095.689154][T26337] m920x_read = error: -19 [ 2095.689183][T26337] dvb-usb: error while querying for an remote control event. [ 2095.802665][T26337] m920x_read = error: -19 [ 2095.802711][T26337] dvb-usb: error while querying for an remote control event. [ 2095.909185][T26337] m920x_read = error: -19 [ 2095.909215][T26337] dvb-usb: error while querying for an remote control event. [ 2096.019238][T26337] m920x_read = error: -19 [ 2096.019270][T26337] dvb-usb: error while querying for an remote control event. [ 2096.129129][T14434] Bluetooth: hci3: command tx timeout [ 2096.133331][T26337] m920x_read = error: -19 [ 2096.133360][T26337] dvb-usb: error while querying for an remote control event. [ 2096.200365][T14719] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2096.200428][T14719] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 2096.200447][T14719] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2096.200551][T14719] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 2096.329284][ T5347] m920x_read = error: -19 [ 2096.329315][ T5347] dvb-usb: error while querying for an remote control event. [ 2096.340318][T14719] usb 7-1: USB disconnect, device number 11 [ 2096.449300][T26337] m920x_read = error: -19 [ 2096.449398][T26337] dvb-usb: error while querying for an remote control event. [ 2096.486876][ T5476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2096.564031][T26341] m920x_read = error: -19 [ 2096.564064][T26341] dvb-usb: error while querying for an remote control event. [ 2096.679027][T26341] m920x_read = error: -19 [ 2096.679056][T26341] dvb-usb: error while querying for an remote control event. [ 2096.789192][ T5347] m920x_read = error: -19 [ 2096.789242][ T5347] dvb-usb: error while querying for an remote control event. [ 2096.909102][ T5347] m920x_read = error: -19 [ 2096.909129][ T5347] dvb-usb: error while querying for an remote control event. [ 2097.009227][ T5347] m920x_read = error: -19 [ 2097.009258][ T5347] dvb-usb: error while querying for an remote control event. [ 2097.117848][ T7691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2097.119253][ T5347] m920x_read = error: -19 [ 2097.119282][ T5347] dvb-usb: error while querying for an remote control event. [ 2097.239225][T26337] m920x_read = error: -19 [ 2097.239269][T26337] dvb-usb: error while querying for an remote control event. [ 2097.342367][T26337] m920x_read = error: -19 [ 2097.342395][T26337] dvb-usb: error while querying for an remote control event. [ 2097.479162][ T5347] m920x_read = error: -19 [ 2097.479194][ T5347] dvb-usb: error while querying for an remote control event. [ 2097.588817][ T5476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2097.599967][T26337] m920x_read = error: -19 [ 2097.599995][T26337] dvb-usb: error while querying for an remote control event. [ 2097.719185][T26337] m920x_read = error: -19 [ 2097.719212][T26337] dvb-usb: error while querying for an remote control event. [ 2097.820115][T26337] m920x_read = error: -19 [ 2097.820145][T26337] dvb-usb: error while querying for an remote control event. [ 2097.943237][T26337] m920x_read = error: -19 [ 2097.943267][T26337] dvb-usb: error while querying for an remote control event. [ 2098.053631][T26337] m920x_read = error: -19 [ 2098.053662][T26337] dvb-usb: error while querying for an remote control event. [ 2098.169117][T26337] m920x_read = error: -19 [ 2098.169145][T26337] dvb-usb: error while querying for an remote control event. [ 2098.209241][T14434] Bluetooth: hci3: command tx timeout [ 2098.279985][T26337] m920x_read = error: -19 [ 2098.280017][T26337] dvb-usb: error while querying for an remote control event. [ 2098.389188][ T5347] m920x_read = error: -19 [ 2098.389217][ T5347] dvb-usb: error while querying for an remote control event. [ 2098.499451][ T5347] m920x_read = error: -19 [ 2098.499479][ T5347] dvb-usb: error while querying for an remote control event. [ 2098.610598][ T5347] m920x_read = error: -19 [ 2098.610628][ T5347] dvb-usb: error while querying for an remote control event. [ 2098.719202][ T5347] m920x_read = error: -19 [ 2098.719230][ T5347] dvb-usb: error while querying for an remote control event. [ 2098.829860][T26337] m920x_read = error: -19 [ 2098.829888][T26337] dvb-usb: error while querying for an remote control event. [ 2098.939852][T26337] m920x_read = error: -19 [ 2098.939884][T26337] dvb-usb: error while querying for an remote control event. [ 2098.994178][ T5476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2099.051513][T26337] m920x_read = error: -19 [ 2099.051542][T26337] dvb-usb: error while querying for an remote control event. [ 2099.167041][T26337] m920x_read = error: -19 [ 2099.167069][T26337] dvb-usb: error while querying for an remote control event. [ 2099.253556][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.253664][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.271865][ T7749] kAFS: No cell specified [ 2099.288821][T26337] m920x_read = error: -19 [ 2099.288851][T26337] dvb-usb: error while querying for an remote control event. [ 2099.389195][T26337] m920x_read = error: -19 [ 2099.389226][T26337] dvb-usb: error while querying for an remote control event. [ 2099.499127][T26337] m920x_read = error: -19 [ 2099.499154][T26337] dvb-usb: error while querying for an remote control event. [ 2099.649121][T26341] m920x_read = error: -19 [ 2099.649150][T26341] dvb-usb: error while querying for an remote control event. [ 2099.769226][T26337] m920x_read = error: -19 [ 2099.769267][T26337] dvb-usb: error while querying for an remote control event. [ 2099.879144][T26337] m920x_read = error: -19 [ 2099.879176][T26337] dvb-usb: error while querying for an remote control event. [ 2100.002697][T26337] m920x_read = error: -19 [ 2100.002729][T26337] dvb-usb: error while querying for an remote control event. [ 2100.119354][T26337] m920x_read = error: -19 [ 2100.119384][T26337] dvb-usb: error while querying for an remote control event. [ 2100.240305][T26337] m920x_read = error: -19 [ 2100.240334][T26337] dvb-usb: error while querying for an remote control event. [ 2100.277986][ T5476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.289207][T14434] Bluetooth: hci3: command tx timeout [ 2100.349273][T26337] m920x_read = error: -19 [ 2100.349303][T26337] dvb-usb: error while querying for an remote control event. [ 2100.459259][T26337] m920x_read = error: -19 [ 2100.459290][T26337] dvb-usb: error while querying for an remote control event. [ 2100.569291][T26337] m920x_read = error: -19 [ 2100.569322][T26337] dvb-usb: error while querying for an remote control event. [ 2100.680678][T26337] m920x_read = error: -19 [ 2100.680710][T26337] dvb-usb: error while querying for an remote control event. [ 2100.807170][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.823304][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 2100.823732][ T7636] bridge_slave_0: entered allmulticast mode [ 2100.855263][ T7636] bridge_slave_0: entered promiscuous mode [ 2100.875855][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 2100.876207][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.876530][ T7636] bridge_slave_1: entered allmulticast mode [ 2100.879197][T26341] m920x_read = error: -19 [ 2100.879219][T26341] dvb-usb: error while querying for an remote control event. [ 2100.888494][ T7636] bridge_slave_1: entered promiscuous mode [ 2100.989157][T26337] m920x_read = error: -19 [ 2100.989187][T26337] dvb-usb: error while querying for an remote control event. [ 2101.106904][T26337] m920x_read = error: -19 [ 2101.106935][T26337] dvb-usb: error while querying for an remote control event. [ 2101.127038][ T7636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2101.163912][ T7636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2101.175875][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9376'. [ 2101.211211][ T5347] m920x_read = error: -19 [ 2101.211242][ T5347] dvb-usb: error while querying for an remote control event. [ 2101.319232][ T5347] m920x_read = error: -19 [ 2101.319261][ T5347] dvb-usb: error while querying for an remote control event. [ 2101.381941][ T7636] team0: Port device team_slave_0 added [ 2101.429175][T26341] m920x_read = error: -19 [ 2101.429204][T26341] dvb-usb: error while querying for an remote control event. [ 2101.538995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 2101.558958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 2101.568946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 2101.580234][T26341] m920x_read = error: -19 [ 2101.580265][T26341] dvb-usb: error while querying for an remote control event. [ 2101.676259][ T7636] team0: Port device team_slave_1 added [ 2101.689356][T26341] m920x_read = error: -19 [ 2101.689383][T26341] dvb-usb: error while querying for an remote control event. [ 2101.799253][T26341] m920x_read = error: -19 [ 2101.799284][T26341] dvb-usb: error while querying for an remote control event. [ 2102.063782][T26341] m920x_read = error: -19 [ 2102.063812][T26341] dvb-usb: error while querying for an remote control event. [ 2102.198162][T26341] m920x_read = error: -19 [ 2102.198253][T26341] dvb-usb: error while querying for an remote control event. [ 2102.991313][T14434] Bluetooth: hci3: command tx timeout [ 2103.022190][ T5723] m920x_read = error: -19 [ 2103.022218][ T5723] dvb-usb: error while querying for an remote control event. [ 2103.129181][T26341] m920x_read = error: -19 [ 2103.129213][T26341] dvb-usb: error while querying for an remote control event. [ 2103.239221][T26337] m920x_read = error: -19 [ 2103.239251][T26337] dvb-usb: error while querying for an remote control event. [ 2103.349211][T26341] m920x_read = error: -19 [ 2103.349238][T26341] dvb-usb: error while querying for an remote control event. [ 2105.059932][T26341] m920x_read = error: -19 [ 2105.059965][T26341] dvb-usb: error while querying for an remote control event. [ 2106.055864][ T5347] m920x_read = error: -19 [ 2106.055897][ T5347] dvb-usb: error while querying for an remote control event. [ 2106.159170][ T5347] m920x_read = error: -19 [ 2106.159202][ T5347] dvb-usb: error while querying for an remote control event. [ 2106.214126][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2106.214146][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2106.214176][ T7636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2106.269177][T26341] m920x_read = error: -19 [ 2106.269205][T26341] dvb-usb: error while querying for an remote control event. [ 2106.272808][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2106.272826][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2106.272858][ T7636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2106.388834][T26341] m920x_read = error: -19 [ 2106.388864][T26341] dvb-usb: error while querying for an remote control event. [ 2106.490706][T26341] m920x_read = error: -19 [ 2106.490734][T26341] dvb-usb: error while querying for an remote control event. [ 2106.599177][T26341] m920x_read = error: -19 [ 2106.599207][T26341] dvb-usb: error while querying for an remote control event. [ 2106.709238][T26341] m920x_read = error: -19 [ 2106.709269][T26341] dvb-usb: error while querying for an remote control event. [ 2106.819145][T26341] m920x_read = error: -19 [ 2106.819172][T26341] dvb-usb: error while querying for an remote control event. [ 2106.931325][T26341] m920x_read = error: -19 [ 2106.931356][T26341] dvb-usb: error while querying for an remote control event. [ 2107.040031][T26341] m920x_read = error: -19 [ 2107.040060][T26341] dvb-usb: error while querying for an remote control event. [ 2107.151609][T26341] m920x_read = error: -19 [ 2107.151640][T26341] dvb-usb: error while querying for an remote control event. [ 2107.263200][T26341] m920x_read = error: -19 [ 2107.263231][T26341] dvb-usb: error while querying for an remote control event. [ 2107.371893][ T5347] m920x_read = error: -19 [ 2107.371927][ T5347] dvb-usb: error while querying for an remote control event. [ 2107.479420][T26341] m920x_read = error: -19 [ 2107.479449][T26341] dvb-usb: error while querying for an remote control event. [ 2107.541250][ T5476] bridge_slave_1: left allmulticast mode [ 2107.541289][ T5476] bridge_slave_1: left promiscuous mode [ 2107.588011][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.590028][T26341] m920x_read = error: -19 [ 2107.590056][T26341] dvb-usb: error while querying for an remote control event. [ 2107.612995][ T7862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2107.615440][ T7862] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2107.710633][T26341] m920x_read = error: -19 [ 2107.710663][T26341] dvb-usb: error while querying for an remote control event. [ 2107.714892][ T5476] bridge_slave_0: left allmulticast mode [ 2107.714930][ T5476] bridge_slave_0: left promiscuous mode [ 2107.715256][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.819152][T26341] m920x_read = error: -19 [ 2107.819183][T26341] dvb-usb: error while querying for an remote control event. [ 2107.920282][ T7862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2107.920426][ T7862] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2107.939138][T26341] m920x_read = error: -19 [ 2107.939163][T26341] dvb-usb: error while querying for an remote control event. [ 2108.039125][T26341] m920x_read = error: -19 [ 2108.039157][T26341] dvb-usb: error while querying for an remote control event. [ 2108.151205][ T7862] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2108.168099][T26337] m920x_read = error: -19 [ 2108.168129][T26337] dvb-usb: error while querying for an remote control event. [ 2108.235121][ T7862] ================================================================== [ 2108.235142][ T7862] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 2108.235178][ T7862] Read of size 8 at addr ffff88805daaf780 by task syz.6.9412/7862 [ 2108.235196][ T7862] [ 2108.235209][ T7862] CPU: 1 UID: 0 PID: 7862 Comm: syz.6.9412 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2108.235235][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2108.235249][ T7862] Call Trace: [ 2108.235257][ T7862] [ 2108.235267][ T7862] dump_stack_lvl+0xe8/0x150 [ 2108.235294][ T7862] print_address_description+0x55/0x1e0 [ 2108.235325][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.235349][ T7862] print_report+0x58/0x70 [ 2108.235378][ T7862] kasan_report+0x117/0x150 [ 2108.235416][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.235445][ T7862] __list_del_entry_valid_or_report+0x92/0x190 [ 2108.235474][ T7862] bt_accept_unlink+0x39/0x260 [ 2108.235501][ T7862] l2cap_sock_teardown_cb+0x17e/0x490 [ 2108.235547][ T7862] l2cap_chan_del+0xb5/0x610 [ 2108.235580][ T7862] ? l2cap_conn_del+0x331/0x570 [ 2108.235608][ T7862] l2cap_conn_del+0x33d/0x570 [ 2108.235638][ T7862] l2cap_connect_cfm+0x12b/0x1560 [ 2108.235672][ T7862] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2108.235700][ T7862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.235736][ T7862] ? lockdep_hardirqs_on+0x7a/0x110 [ 2108.235768][ T7862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.235802][ T7862] ? mutex_lock_nested+0x152/0x1d0 [ 2108.235827][ T7862] ? hci_conn_failed+0x165/0x340 [ 2108.235852][ T7862] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2108.235882][ T7862] hci_conn_failed+0x1ce/0x340 [ 2108.235910][ T7862] ? hci_abort_conn_sync+0xa7b/0x1190 [ 2108.235938][ T7862] hci_abort_conn_sync+0xdd0/0x1190 [ 2108.235969][ T7862] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 2108.235996][ T7862] ? hci_disconnect_all_sync+0x2e/0x350 [ 2108.236029][ T7862] ? hci_disconnect_all_sync+0x2e/0x350 [ 2108.236057][ T7862] ? hci_disconnect_all_sync+0x2e/0x350 [ 2108.236087][ T7862] hci_disconnect_all_sync+0x1b5/0x350 [ 2108.236119][ T7862] hci_suspend_sync+0x417/0xd20 [ 2108.236149][ T7862] ? __pfx_hci_suspend_sync+0x10/0x10 [ 2108.236178][ T7862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.236214][ T7862] ? lockdep_hardirqs_on+0x7a/0x110 [ 2108.236249][ T7862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.236283][ T7862] ? mutex_lock_nested+0x152/0x1d0 [ 2108.236310][ T7862] ? hci_suspend_dev+0x285/0x540 [ 2108.236334][ T7862] hci_suspend_dev+0x28d/0x540 [ 2108.236355][ T7862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.236391][ T7862] ? __pfx_hci_suspend_dev+0x10/0x10 [ 2108.236418][ T7862] hci_suspend_notifier+0xf2/0x2f0 [ 2108.236442][ T7862] notifier_call_chain+0x1ad/0x3d0 [ 2108.236483][ T7862] blocking_notifier_call_chain_robust+0x85/0x100 [ 2108.236510][ T7862] pm_notifier_call_chain_robust+0x2c/0x60 [ 2108.236558][ T7862] snapshot_open+0x1a2/0x290 [ 2108.236582][ T7862] ? __pfx_snapshot_open+0x10/0x10 [ 2108.236603][ T7862] misc_open+0x2de/0x350 [ 2108.236631][ T7862] chrdev_open+0x4d0/0x5f0 [ 2108.236652][ T7862] ? __pfx_chrdev_open+0x10/0x10 [ 2108.236672][ T7862] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 2108.236705][ T7862] ? __pfx_chrdev_open+0x10/0x10 [ 2108.236725][ T7862] do_dentry_open+0x83d/0x13e0 [ 2108.236752][ T7862] vfs_open+0x3b/0x350 [ 2108.236772][ T7862] ? path_openat+0x2e2b/0x38a0 [ 2108.236804][ T7862] path_openat+0x2e43/0x38a0 [ 2108.236850][ T7862] ? __pfx_path_openat+0x10/0x10 [ 2108.236916][ T7862] ? kasan_save_track+0x4f/0x80 [ 2108.236946][ T7862] ? kasan_save_track+0x3e/0x80 [ 2108.236972][ T7862] ? __kasan_slab_alloc+0x6c/0x80 [ 2108.237003][ T7862] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 2108.237037][ T7862] ? do_raw_spin_lock+0x12b/0x2f0 [ 2108.237073][ T7862] do_file_open+0x23e/0x4a0 [ 2108.237104][ T7862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.237140][ T7862] ? __pfx_do_file_open+0x10/0x10 [ 2108.237170][ T7862] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2108.237210][ T7862] ? alloc_fd+0x64e/0x6c0 [ 2108.237237][ T7862] do_sys_openat2+0x113/0x200 [ 2108.237265][ T7862] ? __pfx_do_sys_openat2+0x10/0x10 [ 2108.237295][ T7862] __x64_sys_openat+0x138/0x170 [ 2108.237323][ T7862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.237347][ T7862] do_syscall_64+0x15f/0xf80 [ 2108.237368][ T7862] ? trace_irq_disable+0x3b/0x140 [ 2108.237400][ T7862] ? clear_bhb_loop+0x40/0x90 [ 2108.237426][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.237449][ T7862] RIP: 0033:0x7f9e2503cdd9 [ 2108.237472][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2108.237493][ T7862] RSP: 002b:00007f9e23296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2108.237519][ T7862] RAX: ffffffffffffffda RBX: 00007f9e252b5fa0 RCX: 00007f9e2503cdd9 [ 2108.237546][ T7862] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 2108.237562][ T7862] RBP: 00007f9e250d2d69 R08: 0000000000000000 R09: 0000000000000000 [ 2108.237579][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2108.237594][ T7862] R13: 00007f9e252b6038 R14: 00007f9e252b5fa0 R15: 00007ffc186906d8 [ 2108.237619][ T7862] [ 2108.237628][ T7862] [ 2108.237633][ T7862] Allocated by task 7623: [ 2108.237644][ T7862] kasan_save_track+0x3e/0x80 [ 2108.237671][ T7862] __kasan_kmalloc+0x93/0xb0 [ 2108.237699][ T7862] __kmalloc_noprof+0x3e7/0x7b0 [ 2108.237728][ T7862] sk_prot_alloc+0xe7/0x210 [ 2108.237757][ T7862] sk_alloc+0x3a/0x390 [ 2108.237782][ T7862] bt_sock_alloc+0x3b/0x310 [ 2108.237800][ T7862] l2cap_sock_create+0x147/0x330 [ 2108.237826][ T7862] bt_sock_create+0x163/0x240 [ 2108.237845][ T7862] __sock_create+0x4e3/0x960 [ 2108.237866][ T7862] __sys_socket+0xd9/0x330 [ 2108.237885][ T7862] __x64_sys_socket+0x7a/0x90 [ 2108.237904][ T7862] do_syscall_64+0x15f/0xf80 [ 2108.237921][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.237940][ T7862] [ 2108.237945][ T7862] Freed by task 7628: [ 2108.237955][ T7862] kasan_save_track+0x3e/0x80 [ 2108.237981][ T7862] kasan_save_free_info+0x46/0x50 [ 2108.238001][ T7862] __kasan_slab_free+0x5c/0x80 [ 2108.238027][ T7862] kfree+0x1c5/0x6c0 [ 2108.238052][ T7862] __sk_destruct+0x74b/0x9d0 [ 2108.238082][ T7862] l2cap_sock_release+0x1c1/0x270 [ 2108.238109][ T7862] __sock_release+0xb9/0x250 [ 2108.238130][ T7862] sock_close+0x1c/0x30 [ 2108.238147][ T7862] __fput+0x461/0xa70 [ 2108.238169][ T7862] task_work_run+0x1d9/0x270 [ 2108.238192][ T7862] get_signal+0x11eb/0x1330 [ 2108.238217][ T7862] arch_do_signal_or_restart+0xbc/0x840 [ 2108.238238][ T7862] exit_to_user_mode_loop+0x8c/0x4d0 [ 2108.238265][ T7862] do_syscall_64+0x33e/0xf80 [ 2108.238282][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.238300][ T7862] [ 2108.238305][ T7862] The buggy address belongs to the object at ffff88805daaf000 [ 2108.238305][ T7862] which belongs to the cache kmalloc-2k of size 2048 [ 2108.238323][ T7862] The buggy address is located 1920 bytes inside of [ 2108.238323][ T7862] freed 2048-byte region [ffff88805daaf000, ffff88805daaf800) [ 2108.238346][ T7862] [ 2108.238352][ T7862] The buggy address belongs to the physical page: [ 2108.238364][ T7862] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805daab000 pfn:0x5daa8 [ 2108.238386][ T7862] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2108.238403][ T7862] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 2108.238422][ T7862] page_type: f5(slab) [ 2108.238443][ T7862] raw: 0080000000000240 ffff88813fea2000 ffffea00009bd810 ffffea0000fc4410 [ 2108.238464][ T7862] raw: ffff88805daab000 0000000800080006 00000000f5000000 0000000000000000 [ 2108.238485][ T7862] head: 0080000000000240 ffff88813fea2000 ffffea00009bd810 ffffea0000fc4410 [ 2108.238505][ T7862] head: ffff88805daab000 0000000800080006 00000000f5000000 0000000000000000 [ 2108.238534][ T7862] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2108.238554][ T7862] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2108.238566][ T7862] page dumped because: kasan: bad access detected [ 2108.238578][ T7862] page_owner tracks the page as allocated [ 2108.238586][ T7862] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, tgid 9 (kworker/0:0), ts 105362255790, free_ts 0 [ 2108.238624][ T7862] post_alloc_hook+0x1f9/0x250 [ 2108.238653][ T7862] get_page_from_freelist+0x27d6/0x2850 [ 2108.238686][ T7862] __alloc_frozen_pages_noprof+0x18d/0x380 [ 2108.238719][ T7862] allocate_slab+0x74/0x5e0 [ 2108.238740][ T7862] refill_objects+0x33c/0x3d0 [ 2108.238760][ T7862] __pcs_replace_empty_main+0x373/0x720 [ 2108.238783][ T7862] __kmalloc_noprof+0x530/0x7b0 [ 2108.238809][ T7862] ___neigh_create+0x724/0x2360 [ 2108.238833][ T7862] ip6_finish_output2+0x729/0x1430 [ 2108.238858][ T7862] ip6_output+0x340/0x550 [ 2108.238875][ T7862] NF_HOOK+0x177/0x4f0 [ 2108.238892][ T7862] mld_sendpack+0x8b4/0xe40 [ 2108.238909][ T7862] mld_ifc_work+0x835/0xe70 [ 2108.238927][ T7862] process_one_work+0x98b/0x1630 [ 2108.238950][ T7862] worker_thread+0xb49/0x1140 [ 2108.238975][ T7862] kthread+0x388/0x470 [ 2108.238994][ T7862] page_owner free stack trace missing [ 2108.239002][ T7862] [ 2108.239007][ T7862] Memory state around the buggy address: [ 2108.239018][ T7862] ffff88805daaf680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2108.239032][ T7862] ffff88805daaf700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2108.239046][ T7862] >ffff88805daaf780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2108.239058][ T7862] ^ [ 2108.239068][ T7862] ffff88805daaf800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2108.239084][ T7862] ffff88805daaf880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2108.239094][ T7862] ================================================================== [ 2108.289209][ T5723] m920x_read = error: -19 [ 2108.289236][ T5723] dvb-usb: error while querying for an remote control event. [ 2108.304198][ T7862] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2108.304221][ T7862] CPU: 1 UID: 0 PID: 7862 Comm: syz.6.9412 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2108.304246][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2108.304258][ T7862] Call Trace: [ 2108.304266][ T7862] [ 2108.304274][ T7862] vpanic+0x56c/0xa60 [ 2108.304308][ T7862] ? __pfx_vpanic+0x10/0x10 [ 2108.304340][ T7862] panic+0xc5/0xd0 [ 2108.304366][ T7862] ? __pfx_panic+0x10/0x10 [ 2108.304394][ T7862] ? preempt_schedule_thunk+0x16/0x40 [ 2108.304425][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.304450][ T7862] ? preempt_schedule_thunk+0x16/0x40 [ 2108.304479][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.304502][ T7862] check_panic_on_warn+0x89/0xb0 [ 2108.304532][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.304556][ T7862] end_report+0x73/0x170 [ 2108.304583][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.304610][ T7862] kasan_report+0x128/0x150 [ 2108.304638][ T7862] ? __list_del_entry_valid_or_report+0x92/0x190 [ 2108.304664][ T7862] __list_del_entry_valid_or_report+0x92/0x190 [ 2108.304688][ T7862] bt_accept_unlink+0x39/0x260 [ 2108.304712][ T7862] l2cap_sock_teardown_cb+0x17e/0x490 [ 2108.304743][ T7862] l2cap_chan_del+0xb5/0x610 [ 2108.304771][ T7862] ? l2cap_conn_del+0x331/0x570 [ 2108.304797][ T7862] l2cap_conn_del+0x33d/0x570 [ 2108.304824][ T7862] l2cap_connect_cfm+0x12b/0x1560 [ 2108.304851][ T7862] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2108.304875][ T7862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.304907][ T7862] ? lockdep_hardirqs_on+0x7a/0x110 [ 2108.304935][ T7862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.304965][ T7862] ? mutex_lock_nested+0x152/0x1d0 [ 2108.304990][ T7862] ? hci_conn_failed+0x165/0x340 [ 2108.305014][ T7862] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 2108.305039][ T7862] hci_conn_failed+0x1ce/0x340 [ 2108.305064][ T7862] ? hci_abort_conn_sync+0xa7b/0x1190 [ 2108.305086][ T7862] hci_abort_conn_sync+0xdd0/0x1190 [ 2108.305112][ T7862] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 2108.305135][ T7862] ? hci_disconnect_all_sync+0x2e/0x350 [ 2108.305162][ T7862] ? hci_disconnect_all_sync+0x2e/0x350 [ 2108.305187][ T7862] ? hci_disconnect_all_sync+0x2e/0x350 [ 2108.305212][ T7862] hci_disconnect_all_sync+0x1b5/0x350 [ 2108.305238][ T7862] hci_suspend_sync+0x417/0xd20 [ 2108.305264][ T7862] ? __pfx_hci_suspend_sync+0x10/0x10 [ 2108.305289][ T7862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.305316][ T7862] ? lockdep_hardirqs_on+0x7a/0x110 [ 2108.305343][ T7862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.305372][ T7862] ? mutex_lock_nested+0x152/0x1d0 [ 2108.305393][ T7862] ? hci_suspend_dev+0x285/0x540 [ 2108.305414][ T7862] hci_suspend_dev+0x28d/0x540 [ 2108.305433][ T7862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2108.305465][ T7862] ? __pfx_hci_suspend_dev+0x10/0x10 [ 2108.305490][ T7862] hci_suspend_notifier+0xf2/0x2f0 [ 2108.305512][ T7862] notifier_call_chain+0x1ad/0x3d0 [ 2108.305563][ T7862] blocking_notifier_call_chain_robust+0x85/0x100 [ 2108.305588][ T7862] pm_notifier_call_chain_robust+0x2c/0x60 [ 2108.305625][ T7862] snapshot_open+0x1a2/0x290 [ 2108.305648][ T7862] ? __pfx_snapshot_open+0x10/0x10 [ 2108.305667][ T7862] misc_open+0x2de/0x350 [ 2108.305690][ T7862] chrdev_open+0x4d0/0x5f0 [ 2108.305707][ T7862] ? __pfx_chrdev_open+0x10/0x10 [ 2108.305724][ T7862] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 2108.305750][ T7862] ? __pfx_chrdev_open+0x10/0x10 [ 2108.305766][ T7862] do_dentry_open+0x83d/0x13e0 [ 2108.305789][ T7862] vfs_open+0x3b/0x350 [ 2108.305805][ T7862] ? path_openat+0x2e2b/0x38a0 [ 2108.305829][ T7862] path_openat+0x2e43/0x38a0 [ 2108.305864][ T7862] ? __pfx_path_openat+0x10/0x10 [ 2108.305889][ T7862] ? kasan_save_track+0x4f/0x80 [ 2108.305909][ T7862] ? kasan_save_track+0x3e/0x80 [ 2108.305929][ T7862] ? __kasan_slab_alloc+0x6c/0x80 [ 2108.305950][ T7862] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 2108.305975][ T7862] ? do_raw_spin_lock+0x12b/0x2f0 [ 2108.306002][ T7862] do_file_open+0x23e/0x4a0 [ 2108.306024][ T7862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2108.306050][ T7862] ? __pfx_do_file_open+0x10/0x10 [ 2108.306072][ T7862] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2108.306101][ T7862] ? alloc_fd+0x64e/0x6c0 [ 2108.306123][ T7862] do_sys_openat2+0x113/0x200 [ 2108.306143][ T7862] ? __pfx_do_sys_openat2+0x10/0x10 [ 2108.306166][ T7862] __x64_sys_openat+0x138/0x170 [ 2108.306186][ T7862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.306204][ T7862] do_syscall_64+0x15f/0xf80 [ 2108.306219][ T7862] ? trace_irq_disable+0x3b/0x140 [ 2108.306243][ T7862] ? clear_bhb_loop+0x40/0x90 [ 2108.306262][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.306280][ T7862] RIP: 0033:0x7f9e2503cdd9 [ 2108.306297][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2108.306314][ T7862] RSP: 002b:00007f9e23296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2108.306335][ T7862] RAX: ffffffffffffffda RBX: 00007f9e252b5fa0 RCX: 00007f9e2503cdd9 [ 2108.306349][ T7862] RDX: 0000000000000400 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 2108.306362][ T7862] RBP: 00007f9e250d2d69 R08: 0000000000000000 R09: 0000000000000000 [ 2108.306374][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2108.306385][ T7862] R13: 00007f9e252b6038 R14: 00007f9e252b5fa0 R15: 00007ffc186906d8 [ 2108.306403][ T7862] [ 2108.307165][ T7862] Kernel Offset: disabled