last executing test programs: 27.612435151s ago: executing program 2 (id=696): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e0103000047"], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x82, 0x2) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r1, &(0x7f0000000f00)="5bfd", 0x2) 25.784813971s ago: executing program 0 (id=705): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @local, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x7}, 0x18, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) 25.783888631s ago: executing program 3 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="b1642c7e896bdc06a714bf34d277d19cfb35c745e2dc5d36d9993accb6410500238caa627a132fed20423e302ece1b1a5e4c9f1f963a1a224521e9cdec2d51b6c96e1bdba8f50121d377678f3b77b5f2c55d5e821a14a0c5b6fba5676c3c260af2f9c3131ddea76a2c4084530948ab49a6878c2a9cc010061490ff49117956b195b9baa312a895b54a69bafe88bd2e89b51a02462890795c0ee43d13000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfacafb122b851c3761852017b5a5f6cc3f976f82bb62941cc5e95b41c0060418131f747a52f3e63c96acab52ec1976fb", 0x58, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f00040000000800040002000000060002"], 0x70}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 24.743975354s ago: executing program 0 (id=709): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000010c0)={0x6, 0x2, 0x2, 0x87, 0xfffffffb, 0x5}) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x8b, &(0x7f0000001200)="6bb0af6f0df1a74628d28d7c144d63873448c1676f2d27762af56064448983ab333ea04f035147c87e32cfaa6f0b7478539c5d05012592d5b3fbe19f36f184475a8a8f958c6dfebd22310a08744f3c885bfe66e2d602b1037763ed0803d3fce18da3269c5c951fb1ba4a1a5b238569ddeb1578eed25af8c2a4c88ded88460aa4a8ddc782199183d29239fd"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x70) 24.611914439s ago: executing program 0 (id=710): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 24.58607181s ago: executing program 3 (id=711): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 24.531898391s ago: executing program 0 (id=712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 24.417548465s ago: executing program 3 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, 0x0}, 0x4) 23.829194124s ago: executing program 2 (id=716): syz_usb_connect(0x3, 0x24, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 23.177408315s ago: executing program 2 (id=718): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) close(r1) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 23.154845396s ago: executing program 1 (id=719): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0x4, 0x6, 0x0, 0x40, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000", 0x30}, 0x80, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000001c0)="bb801d2b6e", 0x5}], 0x2, 0x0, 0x0, 0x900}, 0x0) 22.944623943s ago: executing program 2 (id=720): syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff00000309050102"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000), 0x30234e23, 0x421c0) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x5, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0x7, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00012000100009045507010349020009058203000400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="f6ffd1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000140)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 22.933063493s ago: executing program 1 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="b1642c7e896bdc06a714bf34d277d19cfb35c745e2dc5d36d9993accb6410500238caa627a132fed20423e302ece1b1a5e4c9f1f963a1a224521e9cdec2d51b6c96e1bdba8f50121d377678f3b77b5f2c55d5e821a14a0c5b6fba5676c3c260af2f9c3131ddea76a2c4084530948ab49a6878c2a9cc010061490ff49117956b195b9baa312a895b54a69bafe88bd2e89b51a02462890795c0ee43d13000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffcd1, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, &(0x7f0000000300)="9e920a23254f1e8e10bc2525225d1be304e664460c7294865830d05532a786006f797def105426ddfacafb122b851c3761852017b5a5f6cc3f976f82bb62941cc5e95b41c0060418131f747a52f3e63c96acab52ec1976fb", 0x58, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000540)="dcc2938a0e1c2baf1362a0e787778391ca695d28b423c1557c9efa164efc748d5bec470bcdbea6d330324c85aaae14402bd2fc38b3e535a9ae59d34239c0b2878bfdefaca5a40b374270fe91a450d840834f7960c84e3ac28a17ec794ffd7e2205931ec946a72deb0f7c") sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100697036677265000040000280060003009e000000080005000000600006000f00040000000800040002000000060002"], 0x70}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 21.781483921s ago: executing program 4 (id=724): syz_usb_connect$midi(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xa0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x5, 0x3, 0xf7, {0x4}}}, {{0x9, 0x5, 0xa1da23038408f18f, 0x2, 0x400, 0x2, 0x2, 0x8, {0x5, 0x25, 0x1, 0x1, "a2"}}}]}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 21.404131363s ago: executing program 2 (id=725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c00"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 20.463068494s ago: executing program 0 (id=726): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x396, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023ee6f410b40402101b60010203010902840301090130"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000005c0)=0xfffffff1) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000040)={0x20, 0x16, 0x1, "0e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x2, &(0x7f0000000040)="51b9") syz_usb_connect$midi(0x92fe5f96430ae822, 0x43, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x1, 0x37, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x7, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x3, 0x1, [{0x5, 0x10}], 0x7}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x25, 0x5, 0x10, {0xd, 0x25, 0x1, 0x9, "8dc0e2b14516eb00cb"}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x10, 0x0, 0x4, 0xf, 0x40, 0xff}, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x70, 0xff, 0x0, 0x7d}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1009}}]}) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000000)=""/103) syz_usb_control_io$hid(r2, 0x0, 0x0) 20.283135309s ago: executing program 4 (id=727): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 19.740670307s ago: executing program 4 (id=728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 18.803279617s ago: executing program 4 (id=729): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401020301090212"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000840)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="80092f0000003ef4ead09c7e46afcf4cb56ab6754b2d024de5bf2f682689f7e6814f38eebcff623c1f7c1b1c9217880000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 17.993948164s ago: executing program 1 (id=730): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180003008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 17.908724337s ago: executing program 1 (id=731): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0xd001}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000080), 0x0}, 0x20) 17.756050242s ago: executing program 2 (id=732): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) r2 = syz_open_dev$evdev(0x0, 0x3a90, 0x8a000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/142) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x2, "42a0be50"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @global=@item_012={0x2, 0x1, 0x1, "ead8"}]}}, 0x0}, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f00000002c0)="28d36689fb2134111f63") syz_open_dev$hidraw(0x0, 0x82, 0x460001) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000040)=[0xfffffff7, 0xba0]) 17.639961306s ago: executing program 3 (id=733): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 17.638626126s ago: executing program 1 (id=734): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17.574432197s ago: executing program 3 (id=735): syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x97, &(0x7f00000001c0)={0x5, 0xf, 0x97, 0x5, [@generic={0x16, 0x10, 0xa, "ed17013ffee7660d47b7da50545e1fb2f765a9"}, @generic={0x48, 0x10, 0x2, "922f46c5af6ab87ac689a5e420ce7425f04a0dbfa851fd3b804718b2cffaae4df284ea84aa7d8ff64589e8558e1931a46e73989506951758e0b73dbd99a4152d37bcd42fbb"}, @ss_container_id={0x14, 0x10, 0x4, 0x22, "b3c62d30c545016e67f2188f778bf8a7"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2ede6cdf186eabf9b5dbd0492f83f3ac"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x6, 0xf01e, 0x1}]}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0xb, 0x6, "04000004", "02012000"}}, 0x0}, 0x0) r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 17.481463511s ago: executing program 1 (id=736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x187, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0}}]}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b12, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000200)="952bb3e006ae9a"}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 17.289998887s ago: executing program 0 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 17.004062566s ago: executing program 4 (id=738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x10000, 0x0, &(0x7f0000003000/0x1000)=nil}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) 16.840313811s ago: executing program 4 (id=739): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 15.275923083s ago: executing program 3 (id=740): madvise(&(0x7f0000338000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) close(r2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10104) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$btrfs_control(0xffffff9c, 0x0, 0x400000, 0x0) close$fd_v4l2_buffer(r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000818000001"], 0x48) 2.492003739s ago: executing program 32 (id=732): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/238, 0xee) r2 = syz_open_dev$evdev(0x0, 0x3a90, 0x8a000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/142) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x2, "42a0be50"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @global=@item_012={0x2, 0x1, 0x1, "ead8"}]}}, 0x0}, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f00000002c0)="28d36689fb2134111f63") syz_open_dev$hidraw(0x0, 0x82, 0x460001) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000040)=[0xfffffff7, 0xba0]) 1.999248544s ago: executing program 33 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.938182356s ago: executing program 34 (id=736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x187, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0}}]}}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b12, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000200)="952bb3e006ae9a"}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 1.460167882s ago: executing program 35 (id=739): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 0s ago: executing program 36 (id=740): madvise(&(0x7f0000338000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) close(r2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10104) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$btrfs_control(0xffffff9c, 0x0, 0x400000, 0x0) close$fd_v4l2_buffer(r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000818000001"], 0x48) kernel console output (not intermixed with test programs): 478476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.489297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.502396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.555472][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.577707][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.601546][ T4275] device veth1_macvtap entered promiscuous mode [ 81.614101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.630500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.656347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.667695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.677390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.686466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.695613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.708210][ T4282] device veth0_vlan entered promiscuous mode [ 81.734246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.743082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.753176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.776892][ T4282] device veth1_vlan entered promiscuous mode [ 81.796858][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.815893][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.848123][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.867260][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.888889][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.910693][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.930942][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.975674][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.008684][ T4282] device veth0_macvtap entered promiscuous mode [ 82.027958][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.046595][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.057005][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.068263][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.091043][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.101086][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.111523][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.126219][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.137012][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.146111][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.157429][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.180643][ T4282] device veth1_macvtap entered promiscuous mode [ 82.218313][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.227384][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.250889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.287020][ T4285] device veth0_vlan entered promiscuous mode [ 82.321208][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.333268][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.355156][ T4285] device veth1_vlan entered promiscuous mode [ 82.381431][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.405683][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.435703][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.469902][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 82.473774][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.476067][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 82.484607][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 82.491877][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 82.496392][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 82.517439][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.529810][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.541436][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.555113][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.567702][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.601876][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.616544][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.629233][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.652916][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.666250][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.676514][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.685841][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702538][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.731878][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.753062][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.788081][ T4285] device veth0_macvtap entered promiscuous mode [ 82.798217][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.807429][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.816225][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.843848][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.857343][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.867542][ T4285] device veth1_macvtap entered promiscuous mode [ 82.885771][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.901475][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.910224][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.920128][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.991797][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.006139][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.018620][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.036791][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.051446][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.059625][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.069159][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.078423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.087735][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.116216][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.131392][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.142780][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.150408][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.161477][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.176771][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.188593][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.208322][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.218909][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.228945][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.238073][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.247241][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.257060][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.266148][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.289998][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.305672][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.328784][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.338919][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.350956][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.361823][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.373713][ T4280] device veth0_vlan entered promiscuous mode [ 83.383009][ T4274] device veth0_vlan entered promiscuous mode [ 83.399493][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.408118][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.452105][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.466483][ T4280] device veth1_vlan entered promiscuous mode [ 83.474532][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.506943][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.534986][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.558109][ T4274] device veth1_vlan entered promiscuous mode [ 83.647038][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.678910][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.696731][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.715824][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.719884][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.732798][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.745480][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.759783][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.772599][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.792472][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.806837][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.851497][ T4280] device veth0_macvtap entered promiscuous mode [ 83.898684][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.909326][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.940876][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.965138][ T4280] device veth1_macvtap entered promiscuous mode [ 84.002132][ T4274] device veth0_macvtap entered promiscuous mode [ 84.028904][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.045585][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.053720][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.064969][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.078479][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.100054][ T4274] device veth1_macvtap entered promiscuous mode [ 84.141509][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.173817][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.188320][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.207384][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.223052][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.234703][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.268611][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.288700][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.307313][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.337294][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.362454][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.374690][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.387335][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.399593][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.410343][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.441899][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.470044][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.507374][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.550139][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 84.550159][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 84.550190][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 84.556430][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 84.593149][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.621175][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.647015][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.662431][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.677263][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.711491][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.726656][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.737477][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.775031][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.798422][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.840231][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.855736][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.892017][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.919499][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.928835][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 84.979424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 84.989422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 84.999398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 85.009390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 85.019391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.029392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.039397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.049393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.059396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 85.149797][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.168936][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.179598][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.194723][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.206480][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.237675][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.258261][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.278461][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.292527][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.309084][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.327300][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.352676][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.424586][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.425972][ T4384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 85.483354][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.502077][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.714199][ T4389] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 85.928240][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.953803][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.024768][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.067003][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.283037][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.312388][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.327538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.349155][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.360832][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.424977][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.433388][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.475998][ T1074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.518556][ T4371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.952117][ T124] cfg80211: failed to load regulatory.db [ 87.882156][ T4404] overlayfs: failed to resolve './file1': -2 [ 89.035932][ T4410] netlink: 52 bytes leftover after parsing attributes in process `syz.1.16'. [ 89.551335][ T4418] process 'syz.1.18' launched './file0' with NULL argv: empty string added [ 89.659917][ T4419] device syzkaller0 entered promiscuous mode [ 90.249265][ T27] audit: type=1800 audit(1778949864.959:2): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18" name="/" dev="fuse" ino=4 res=0 errno=0 [ 90.359743][ T4326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.579307][ T4326] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 90.579520][ T4326] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.582111][ T4326] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.582144][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.582166][ T4326] usb 3-1: Product: syz [ 90.582181][ T4326] usb 3-1: Manufacturer: syz [ 90.582197][ T4326] usb 3-1: SerialNumber: syz [ 90.600106][ T4326] usb 3-1: config 0 descriptor?? [ 90.602041][ T4413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.646839][ T4326] usb 3-1: selecting invalid altsetting 0 [ 93.318281][ T4447] usb 3-1: USB disconnect, device number 2 [ 93.711796][ T4468] Zero length message leads to an empty skb [ 93.920704][ T4468] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.019493][ T4321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.278362][ T4321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.335499][ T4321] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.425110][ T4321] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.533974][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.725188][ T4321] usb 4-1: config 0 descriptor?? [ 95.296403][ T4494] ======================================================= [ 95.296403][ T4494] WARNING: The mand mount option has been deprecated and [ 95.296403][ T4494] and is ignored by this kernel. Remove the mand [ 95.296403][ T4494] option from the mount to silence this warning. [ 95.296403][ T4494] ======================================================= [ 95.424734][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 95.489566][ T4496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.41'. [ 95.501994][ T4496] device syzkaller1 entered promiscuous mode [ 97.392732][ T22] usb 4-1: USB disconnect, device number 2 [ 100.906256][ T4585] capability: warning: `syz.1.67' uses deprecated v2 capabilities in a way that may be insecure [ 101.021636][ T4584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 101.473827][ T4578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.497440][ T4578] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.552840][ T4578] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 101.563505][ T4578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.572664][ T4578] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.588018][ T4578] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 101.613143][ T4578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.620447][ T4578] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.628418][ T4578] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 101.637155][ T4578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.643776][ T4578] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.658058][ T4578] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 101.670356][ T4578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.683883][ T4578] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.714229][ T4578] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 102.949867][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.589491][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.669592][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.669600][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.749628][ T4291] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.489508][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.029669][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 105.447680][ T22] usb 1-1: config 0 has no interfaces? [ 105.453368][ T22] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.498459][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.541637][ T22] usb 1-1: config 0 descriptor?? [ 105.669527][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 105.749730][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 105.755934][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 105.806337][ T22] usb 1-1: USB disconnect, device number 2 [ 105.830107][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 106.019568][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.040940][ T4671] ptrace attach of ""[4672] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4671] [ 106.274264][ T7] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 106.295112][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.315656][ T7] usb 3-1: config 1 has no interfaces? [ 106.330253][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.353383][ T7] usb 3-1: config 1 has no interfaces? [ 106.365525][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.385501][ T7] usb 3-1: config 1 has no interfaces? [ 106.416140][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.438140][ T7] usb 3-1: config 1 has no interfaces? [ 106.442098][ T27] audit: type=1800 audit(1778949881.149:3): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.86" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 106.642041][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.750978][ T7] usb 3-1: config 1 has no interfaces? [ 106.865593][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.892774][ T7] usb 3-1: config 1 has no interfaces? [ 106.920219][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.954745][ T4682] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 106.962854][ T7] usb 3-1: config 1 has no interfaces? [ 106.969254][ T4682] netlink: 'syz.0.96': attribute type 2 has an invalid length. [ 106.981452][ T4682] netlink: 'syz.0.96': attribute type 8 has an invalid length. [ 106.989482][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.006559][ T7] usb 3-1: config 1 has no interfaces? [ 107.038425][ T7] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 107.056104][ T7] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 107.073230][ T7] usb 3-1: Product: syz [ 107.081903][ T7] usb 3-1: Manufacturer: syz [ 107.087934][ T7] usb 3-1: SerialNumber: syz [ 107.279564][ T4322] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.321200][ T7] usb 3-1: USB disconnect, device number 3 [ 107.481386][ T4322] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.481421][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.483348][ T4322] usb 1-1: config 0 descriptor?? [ 107.722828][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.722905][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.769934][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.769970][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.772943][ T4683] syz.0.96: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 107.774083][ T4683] CPU: 1 PID: 4683 Comm: syz.0.96 Not tainted syzkaller #0 [ 107.774107][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.774119][ T4683] Call Trace: [ 107.774127][ T4683] [ 107.774136][ T4683] dump_stack_lvl+0x188/0x24e [ 107.774172][ T4683] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 107.774203][ T4683] ? show_regs_print_info+0x12/0x12 [ 107.774233][ T4683] ? load_image+0x400/0x400 [ 107.774263][ T4683] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 107.774288][ T4683] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 107.774315][ T4683] warn_alloc+0x242/0x330 [ 107.774374][ T4683] ? zone_watermark_ok_safe+0x270/0x270 [ 107.774429][ T4683] __vmalloc_node_range+0x11e/0x13b0 [ 107.774457][ T4683] ? __mutex_trylock_common+0x155/0x260 [ 107.774487][ T4683] ? trace_raw_output_contention_end+0xd0/0xd0 [ 107.774517][ T4683] ? rcu_is_watching+0x11/0xa0 [ 107.774553][ T4683] ? __mutex_lock+0x1ab/0xaf0 [ 107.774591][ T4683] ? free_vm_area+0x50/0x50 [ 107.774617][ T4683] ? dvb_demux_do_ioctl+0x313/0x530 [ 107.774647][ T4683] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 107.774675][ T4683] ? mutex_lock_nested+0x10/0x10 [ 107.774708][ T4683] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 107.774744][ T4683] vmalloc+0x75/0x80 [ 107.774769][ T4683] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 107.774801][ T4683] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 107.774947][ T4683] dvb_demux_do_ioctl+0x450/0x530 [ 107.774996][ T4683] dvb_usercopy+0x191/0x2b0 [ 107.775026][ T4683] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 107.775056][ T4683] ? dvb_generic_ioctl+0xb0/0xb0 [ 107.775106][ T4683] ? dvb_demux_poll+0x210/0x210 [ 107.775137][ T4683] dvb_demux_ioctl+0x25/0x30 [ 107.775167][ T4683] __se_sys_ioctl+0xfa/0x170 [ 107.775200][ T4683] do_syscall_64+0x4c/0xa0 [ 107.775227][ T4683] ? clear_bhb_loop+0x60/0xb0 [ 107.775253][ T4683] ? clear_bhb_loop+0x60/0xb0 [ 107.775281][ T4683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.775307][ T4683] RIP: 0033:0x7f15ecb9ce59 [ 107.775328][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.775346][ T4683] RSP: 002b:00007f15eda98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.775372][ T4683] RAX: ffffffffffffffda RBX: 00007f15ece16090 RCX: 00007f15ecb9ce59 [ 107.775389][ T4683] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000009 [ 107.775404][ T4683] RBP: 00007f15ecc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 107.775418][ T4683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.775432][ T4683] R13: 00007f15ece16128 R14: 00007f15ece16090 R15: 00007ffde9651528 [ 107.775467][ T4683] [ 107.775620][ T4683] Mem-Info: [ 107.775632][ T4683] active_anon:16202 inactive_anon:0 isolated_anon:0 [ 107.775632][ T4683] active_file:5158 inactive_file:39952 isolated_file:0 [ 107.775632][ T4683] unevictable:768 dirty:39 writeback:0 [ 107.775632][ T4683] slab_reclaimable:20716 slab_unreclaimable:94978 [ 107.775632][ T4683] mapped:39840 shmem:11431 pagetables:713 [ 107.775632][ T4683] sec_pagetables:0 bounce:0 [ 107.775632][ T4683] kernel_misc_reclaimable:0 [ 107.775632][ T4683] free:1326402 free_pcp:8875 free_cma:0 [ 107.775738][ T4683] Node 0 active_anon:64808kB inactive_anon:0kB active_file:20632kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159360kB dirty:156kB writeback:0kB shmem:44188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10796kB pagetables:2852kB sec_pagetables:0kB all_unreclaimable? no [ 107.775798][ T4683] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 107.775949][ T4683] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.776016][ T4683] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 107.776101][ T4683] Node 0 DMA32 free:1399348kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:64808kB inactive_anon:0kB active_file:20632kB inactive_file:159604kB unevictable:1536kB writepending:156kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:12036kB local_pcp:10204kB free_cma:0kB [ 107.776160][ T4683] lowmem_reserve[]: 0 0 1 1 1 [ 107.776207][ T4683] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.776298][ T4683] lowmem_reserve[]: 0 0 0 0 0 [ 107.776346][ T4683] Node 1 Normal free:3890900kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:23464kB local_pcp:10628kB free_cma:0kB [ 107.776440][ T4683] lowmem_reserve[]: 0 0 0 0 0 [ 107.776487][ T4683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.776821][ T4683] Node 0 DMA32: 17*4kB (UME) 812*8kB (U) 767*16kB (UME) 147*32kB (U) 45*64kB (UE) 12*128kB (UE) 3*256kB (UME) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 333*4096kB (M) = 1399348kB [ 107.777111][ T4683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.777268][ T4683] Node 1 Normal: 289*4kB (UME) 60*8kB (UME) 39*16kB (UME) 30*32kB (UME) 25*64kB (UE) 8*128kB (UME) 2*256kB (ME) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890900kB [ 107.777538][ T4683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.777555][ T4683] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 107.777573][ T4683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.777589][ T4683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.777637][ T4683] 56566 total pagecache pages [ 107.777647][ T4683] 0 pages in swap cache [ 107.777655][ T4683] Free swap = 124996kB [ 107.777663][ T4683] Total swap = 124996kB [ 107.777672][ T4683] 2097051 pages RAM [ 107.777679][ T4683] 0 pages HighMem/MovableOnly [ 107.777687][ T4683] 415209 pages reserved [ 107.777695][ T4683] 0 pages cma reserved [ 108.103085][ T4322] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 108.103147][ T4322] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 108.103501][ T4322] [drm:udl_init] *ERROR* Selecting channel failed [ 108.126096][ T4322] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 108.307008][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.409178][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.442380][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.474390][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.503517][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.541965][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.574730][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.609943][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.777442][ T4735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 113.657364][ T4322] [drm] Initialized udl on minor 2 [ 113.683242][ T4715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.696121][ T4743] netlink: 'syz.3.111': attribute type 72 has an invalid length. [ 113.697222][ T4322] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.709828][ T4715] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 113.724130][ T4322] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 113.741752][ T4322] usb 1-1: USB disconnect, device number 3 [ 113.762377][ T4447] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 113.783553][ T4715] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 113.813698][ T4715] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.824762][ T4715] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 113.906430][ T4715] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 113.946046][ T4715] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.964597][ T4715] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.996392][ T4715] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 114.016377][ T4715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.038053][ T4715] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.080839][ T4715] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 114.108608][ T4715] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.129577][ T4715] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.157850][ T4715] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 114.482136][ T4291] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.611377][ T4291] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 115.829540][ T4291] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.989864][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.069559][ T4291] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.149556][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.550557][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 117.779031][ T4792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.779297][ T4792] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.827533][ T4792] netlink: 'syz.1.122': attribute type 21 has an invalid length. [ 117.827560][ T4792] netlink: 128 bytes leftover after parsing attributes in process `syz.1.122'. [ 117.827637][ T4792] netlink: 'syz.1.122': attribute type 5 has an invalid length. [ 117.827651][ T4792] netlink: 'syz.1.122': attribute type 6 has an invalid length. [ 117.827664][ T4792] netlink: 3 bytes leftover after parsing attributes in process `syz.1.122'. [ 117.869705][ T124] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.923020][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 118.069833][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 118.160258][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 118.189602][ T4804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 118.230501][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 119.132308][ T124] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 119.132345][ T124] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.134948][ T124] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.134981][ T124] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.135002][ T124] usb 3-1: Product: syz [ 119.135017][ T124] usb 3-1: Manufacturer: syz [ 119.135031][ T124] usb 3-1: SerialNumber: syz [ 119.137045][ T124] usb 3-1: config 0 descriptor?? [ 119.139165][ T4780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.143116][ T124] usb 3-1: selecting invalid altsetting 0 [ 119.234726][ T4813] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.127'. [ 120.478267][ T4814] Process accounting resumed [ 120.560134][ T4320] usb 3-1: USB disconnect, device number 4 [ 120.631236][ T4289] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 122.556575][ T4841] netlink: 'syz.0.135': attribute type 8 has an invalid length. [ 122.839739][ T4854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.138'. [ 122.955240][ T4850] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.139'. [ 123.703235][ T4289] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 123.872702][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 123.875027][ T4866] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 125.679485][ T4289] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 126.219514][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.227661][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 127.769744][ T26] usb 4-1: device descriptor read/64, error -32 [ 128.049559][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.911599][ T4897] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.154'. [ 130.076999][ T26] usb 4-1: device descriptor read/all, error -71 [ 130.110568][ T26] usb usb4-port1: attempt power cycle [ 133.032990][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033121][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.456304][ T4931] netlink: 5000 bytes leftover after parsing attributes in process `syz.4.163'. [ 133.516067][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 133.516582][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 133.622300][ T4931] ceph: No mds server is up or the cluster is laggy [ 134.293294][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 134.293420][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 135.325319][ T124] libceph: connect (1)[c::]:6789 error -101 [ 135.325535][ T124] libceph: mon0 (1)[c::]:6789 connect error [ 137.277917][ T4954] binder: 4952:4954 ioctl 4018620d 0 returned -22 [ 139.550510][ T4989] Bluetooth: MGMT ver 1.22 [ 141.553708][ T4289] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 145.597474][ T5100] device syzkaller0 entered promiscuous mode [ 146.831692][ T5116] fuse: Bad value for 'fd' [ 150.722551][ T5196] overlayfs: failed to resolve './file1': -2 [ 155.354563][ T5240] netlink: 64 bytes leftover after parsing attributes in process `syz.3.221'. [ 155.377858][ T5240] device syzkaller1 entered promiscuous mode [ 155.603433][ T5243] overlayfs: failed to resolve './file1': -2 [ 156.349682][ T5252] syz.4.223 uses obsolete (PF_INET,SOCK_PACKET) [ 159.708312][ T5279] overlayfs: failed to resolve './file1': -2 [ 160.725864][ T5282] overlayfs: failed to resolve './file1': -2 [ 162.601964][ T5295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.237'. [ 162.616575][ T5295] device syzkaller1 entered promiscuous mode [ 163.623267][ T5318] fuse: Bad value for 'fd' [ 164.570243][ T5326] overlayfs: failed to resolve './file1': -2 [ 166.104816][ T5342] overlayfs: failed to resolve './file1': -2 [ 167.282334][ T4289] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 168.559984][ T5371] fuse: Unknown parameter '0x0000000000000004' [ 168.565452][ T5372] binder: BINDER_SET_CONTEXT_MGR already set [ 168.565531][ T5372] binder: 5367:5372 ioctl 4018620d 200000000240 returned -16 [ 169.782065][ T5385] overlayfs: failed to resolve './file1': -2 [ 171.569451][ T5394] fuse: Bad value for 'fd' [ 172.652690][ T5397] overlayfs: failed to resolve './file1': -2 [ 174.561665][ T5428] lo speed is unknown, defaulting to 1000 [ 174.567812][ T5428] lo speed is unknown, defaulting to 1000 [ 174.586177][ T5428] lo speed is unknown, defaulting to 1000 [ 174.597897][ T5428] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.612155][ T5428] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 174.633949][ T5428] lo speed is unknown, defaulting to 1000 [ 174.642176][ T5428] lo speed is unknown, defaulting to 1000 [ 174.649190][ T5428] lo speed is unknown, defaulting to 1000 [ 174.687374][ T5428] lo speed is unknown, defaulting to 1000 [ 174.708740][ T5428] lo speed is unknown, defaulting to 1000 [ 174.749014][ T5428] lo speed is unknown, defaulting to 1000 [ 180.932113][ T5534] lo speed is unknown, defaulting to 1000 [ 180.938880][ T5534] lo speed is unknown, defaulting to 1000 [ 180.954938][ T5534] lo speed is unknown, defaulting to 1000 [ 181.014791][ T5534] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 181.087218][ T5534] lo speed is unknown, defaulting to 1000 [ 181.100922][ T5534] lo speed is unknown, defaulting to 1000 [ 181.112926][ T5534] lo speed is unknown, defaulting to 1000 [ 181.127078][ T5534] lo speed is unknown, defaulting to 1000 [ 181.139016][ T5534] lo speed is unknown, defaulting to 1000 [ 183.384301][ T5541] 9pnet_fd: Insufficient options for proto=fd [ 184.149401][ T4320] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 184.217595][ T5563] fuse: Unknown parameter 'fd0x0000000000000004' [ 184.344124][ T4320] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 184.358219][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.433354][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.493192][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 184.530432][ T5567] lo speed is unknown, defaulting to 1000 [ 184.546256][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.568990][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.604219][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.404972][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.415011][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.433492][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.445711][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.488062][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.522427][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.551067][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.589943][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.629439][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.704465][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.746631][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.779968][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.839165][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 185.870180][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.886953][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.904972][ T5591] 9pnet_fd: Insufficient options for proto=fd [ 185.906834][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.943075][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 186.000947][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.048608][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.077302][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.107550][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 186.138054][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.156510][ T5601] fuse: Bad value for 'fd' [ 186.162351][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.184847][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.219983][ T4320] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 186.251859][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.298176][ T4320] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 186.334703][ T4320] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 186.369422][ T4320] usb 1-1: Product: syz [ 186.387836][ T4320] usb 1-1: Manufacturer: syz [ 186.395403][ T4320] usb 1-1: SerialNumber: syz [ 186.414715][ T4320] usb 1-1: config 0 descriptor?? [ 186.427543][ T4320] yurex 1-1:0.0: Could not submitting URB [ 186.445569][ T4320] yurex: probe of 1-1:0.0 failed with error -5 [ 187.286659][ T5614] fuse: Unknown parameter 'fd0x0000000000000004' [ 187.453138][ T4322] usb 1-1: USB disconnect, device number 4 [ 190.171255][ T5708] fuse: Unknown parameter 'fd0x0000000000000004' [ 190.173743][ T5703] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 190.220731][ T5711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.336'. [ 190.584005][ T5716] fuse: Bad value for 'fd' [ 192.325862][ T5760] 9pnet_virtio: no channels available for device syz [ 192.354439][ T5760] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 192.392631][ T5760] sch_tbf: burst 21994 is lower than device lo mtu (65550) ! [ 192.552245][ T5765] fuse: Bad value for 'fd' [ 192.884354][ T5775] overlayfs: failed to resolve './file1': -2 [ 193.026123][ T5784] lo speed is unknown, defaulting to 1000 [ 194.483673][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.490512][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.715743][ T5813] fuse: Bad value for 'fd' [ 194.879577][ T5815] device syzkaller0 entered promiscuous mode [ 195.062140][ T5824] siw: device registration error -23 [ 196.243730][ T5836] overlayfs: failed to resolve './file1': -2 [ 198.419746][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.633983][ T127] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 198.671304][ T127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.727905][ T127] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 198.737285][ T127] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 198.745648][ T127] usb 5-1: Product: syz [ 198.750418][ T127] usb 5-1: Manufacturer: syz [ 198.755083][ T127] usb 5-1: SerialNumber: syz [ 198.773288][ T127] usb 5-1: config 0 descriptor?? [ 198.779614][ T5848] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.797663][ T127] usb 5-1: selecting invalid altsetting 0 [ 200.175792][ T5840] lo speed is unknown, defaulting to 1000 [ 201.305402][ T26] usb 5-1: USB disconnect, device number 2 [ 203.983472][ T5892] 9pnet_virtio: no channels available for device syz [ 204.527776][ T5905] overlayfs: failed to resolve './file1': -2 [ 207.345584][ T5936] device syzkaller0 entered promiscuous mode [ 209.946193][ T6007] overlayfs: failed to resolve './file1': -2 [ 210.229462][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.449356][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 212.914081][ T7] usb 5-1: device descriptor read/all, error -71 [ 213.141383][ T6019] device syzkaller0 entered promiscuous mode [ 216.807891][ T6088] 9pnet_virtio: no channels available for device syz [ 217.193716][ T6099] overlayfs: failed to resolve './file1': -2 [ 217.906344][ T6106] overlayfs: failed to resolve './file1': -2 [ 219.032577][ T6115] overlayfs: failed to resolve './file1': -2 [ 219.126395][ T6121] device syzkaller0 entered promiscuous mode [ 219.145837][ T6115] lo speed is unknown, defaulting to 1000 [ 221.535358][ T6141] fuse: Bad value for 'fd' [ 221.617746][ T6142] overlayfs: failed to resolve './file1': -2 [ 221.629743][ T4328] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 221.775657][ T6148] fuse: Bad value for 'fd' [ 221.820092][ T4328] usb 2-1: Using ep0 maxpacket: 8 [ 221.834104][ T4328] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 221.858499][ T4328] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 221.895899][ T4328] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 221.938153][ T4328] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 221.984572][ T4328] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 222.024933][ T4328] usb 2-1: config 168 interface 0 has no altsetting 0 [ 222.086323][ T4328] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 222.165480][ T6154] 9pnet_virtio: no channels available for device syz [ 222.194804][ T4328] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 222.209443][ T4947] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 222.372047][ T4328] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 222.419453][ T4947] usb 1-1: Using ep0 maxpacket: 16 [ 222.432129][ T4947] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 222.561323][ T4947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.574045][ T4328] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 222.716471][ T4947] usb 1-1: config 0 has no interface number 0 [ 222.733444][ T4328] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 222.848701][ T4947] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 222.914008][ T4328] usb 2-1: config 168 interface 0 has no altsetting 0 [ 222.929520][ T4947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.965735][ T4328] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 223.427030][ T4947] usb 1-1: Product: syz [ 223.819426][ T4947] usb 1-1: Manufacturer: syz [ 223.824283][ T4947] usb 1-1: SerialNumber: syz [ 223.829851][ T4328] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 223.893692][ T4947] usb 1-1: config 0 descriptor?? [ 225.703187][ T4328] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.981181][ T4947] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 225.987594][ T4947] usb 1-1: No valid video chain found. [ 225.993584][ T4328] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 226.006544][ T4328] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 226.021058][ T4328] usb 2-1: config 168 interface 0 has no altsetting 0 [ 226.036547][ T4322] usb 1-1: USB disconnect, device number 5 [ 226.238779][ T4328] usb 2-1: string descriptor 0 read error: -71 [ 226.328108][ T4328] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.451871][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.639491][ T4328] usb 2-1: can't set config #168, error -71 [ 226.708705][ T4328] usb 2-1: USB disconnect, device number 2 [ 227.214402][ T6219] fuse: Bad value for 'fd' [ 227.561041][ T6234] overlayfs: failed to resolve './file1': -2 [ 227.575209][ T6233] overlayfs: failed to resolve './file0': -2 [ 227.640854][ T6238] fuse: Bad value for 'fd' [ 227.766813][ T6239] 9pnet_virtio: no channels available for device syz [ 228.859507][ T4322] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 229.109446][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 229.121920][ T4322] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 229.318694][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.516648][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 229.654972][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 229.752315][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.835986][ T4322] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.880652][ T4322] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.889145][ T4322] usb 1-1: Manufacturer: syz [ 229.943862][ T4322] usb 1-1: config 0 descriptor?? [ 229.945043][ T6264] fuse: Bad value for 'fd' [ 229.969513][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.160780][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 230.168651][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.204156][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 230.230255][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 230.251590][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.275569][ T4320] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 230.287510][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.308887][ T4320] usb 3-1: Product: syz [ 230.314187][ T4320] usb 3-1: Manufacturer: syz [ 230.329438][ T4320] usb 3-1: SerialNumber: syz [ 230.343065][ T4320] usb 3-1: config 0 descriptor?? [ 230.352650][ T6257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.372525][ T4320] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 230.429436][ T4319] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 230.536760][ T6277] 9pnet_virtio: no channels available for device syz [ 230.549417][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 230.578733][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.718019][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.287107][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.312283][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.390531][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.400028][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.419629][ T4322] rc_core: IR keymap rc-hauppauge not found [ 231.439390][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 231.440520][ T4322] Registered IR keymap rc-empty [ 231.447610][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 231.461208][ T4319] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.469074][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.475959][ T4320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 231.488185][ T4319] usb 4-1: config 0 has no interface number 0 [ 231.501306][ T4319] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.514999][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 231.532017][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.535213][ T4319] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.549949][ T4320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 231.578391][ T4320] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 231.580692][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 231.590942][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.620179][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.646045][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 231.646788][ T4319] usb 4-1: config 0 descriptor?? [ 231.667946][ T4320] usb 5-1: config 0 descriptor?? [ 231.691491][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.715615][ T4319] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 231.728704][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.761309][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.812268][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.813111][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.839245][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.869954][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.886609][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.899745][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.941061][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 231.941545][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.996626][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 232.039689][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 232.041310][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.070674][ T4322] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 232.121246][ T4322] mceusb 1-1:0.0: Registered 㠁 with mce emulator interface version 1 [ 232.130309][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.141422][ T4322] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 232.184937][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.195418][ T4322] usb 1-1: USB disconnect, device number 6 [ 232.202154][ T4320] hdpvr 5-1:0.0: firmware version 0xf4 dated М~FLjuK-M/h&O8b<| [ 232.212800][ T4320] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 232.221683][ T6302] overlayfs: failed to resolve './file1': -2 [ 232.237795][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.293385][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.342945][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.684146][ T4320] hdpvr 5-1:0.0: Could not setup controls [ 232.708475][ T4320] hdpvr 5-1:0.0: registering videodev failed [ 232.937348][ T4320] hdpvr: probe of 5-1:0.0 failed with error -71 [ 233.134076][ T4320] usb 5-1: USB disconnect, device number 5 [ 233.623734][ T7] usb 4-1: USB disconnect, device number 6 [ 233.933518][ T7] usb 3-1: USB disconnect, device number 5 [ 234.144085][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 234.339438][ T4322] usb 1-1: Using ep0 maxpacket: 16 [ 234.350561][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.392600][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.409741][ T4322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.451920][ T4322] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.479588][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.525761][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.565982][ T4322] usb 1-1: config 0 descriptor?? [ 234.705097][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.731004][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.766466][ T7] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 234.806171][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.830159][ T7] usb 3-1: config 0 descriptor?? [ 235.014598][ T6338] 9pnet_virtio: no channels available for device syz [ 235.055716][ T6338] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 235.096451][ T4322] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input8 [ 235.104834][ T6338] sch_tbf: burst 21994 is lower than device lo mtu (65550) ! [ 235.117752][ T4323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 235.243487][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.246962][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.279240][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.284250][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.302491][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.328790][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.336623][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 235.348911][ T4323] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 235.367843][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.387924][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.389736][ T4322] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 235.394967][ T4323] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.428499][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.437398][ T7] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 235.465290][ T7] arvo 0003:1E7D:30D4.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 235.479623][ T4323] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.498809][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.521966][ T4323] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 235.536940][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.574338][ T4323] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.594266][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.622504][ T4323] usb 2-1: config 168 interface 0 has no altsetting 0 [ 235.639604][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.656564][ T4323] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 235.709597][ T4323] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.738864][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.798431][ T4323] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.862560][ T4323] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 235.924288][ T4323] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.973567][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.983664][ T4323] usb 2-1: config 168 interface 0 has no altsetting 0 [ 235.998572][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.034663][ T7] usb 3-1: USB disconnect, device number 6 [ 236.051277][ T4323] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 236.096320][ T4323] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 236.103584][ T6339] fido_id[6339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 236.117231][ T4323] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 236.305433][ T4328] usb 1-1: USB disconnect, device number 7 [ 236.980617][ T4323] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 236.991877][ T4323] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 237.009453][ T4323] usb 2-1: config 168 interface 0 has no altsetting 0 [ 237.021336][ T4323] usb 2-1: string descriptor 0 read error: -22 [ 237.037244][ T4323] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.052335][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.109793][ T4323] adutux 2-1:168.0: interrupt endpoints not found [ 237.525582][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.586096][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.658065][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.727495][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.890796][ T4323] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.968214][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.074831][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.089870][ T4323] usb 1-1: Using ep0 maxpacket: 32 [ 238.124711][ T4323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.770969][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.784213][ T4323] usb 1-1: config 6 has an invalid interface number: 191 but max is 1 [ 238.820001][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.852096][ T6366] 9pnet_virtio: no channels available for device syz [ 238.885323][ T4323] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 238.998897][ T4323] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 239.072339][ T4323] usb 1-1: config 6 has no interface number 0 [ 239.078524][ T4323] usb 1-1: config 6 interface 191 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 239.119222][ T4323] usb 1-1: config 6 interface 191 has no altsetting 0 [ 239.145073][ T7] usb 2-1: USB disconnect, device number 3 [ 239.300080][ T4328] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 239.519373][ T4328] usb 5-1: Using ep0 maxpacket: 16 [ 239.541110][ T4328] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.594407][ T4328] usb 5-1: config 159 has an invalid interface number: 195 but max is 0 [ 239.642653][ T6375] overlayfs: failed to resolve './file1': -2 [ 239.654491][ T4328] usb 5-1: config 159 has no interface number 0 [ 239.678234][ T4328] usb 5-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.752598][ T4328] usb 5-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.869737][ T4328] usb 5-1: config 159 interface 195 has no altsetting 0 [ 239.959149][ T4323] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 239.990038][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.990335][ T4328] usb 5-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 239.999170][ T4323] usb 1-1: Product: syz [ 240.011731][ T4323] usb 1-1: Manufacturer: syz [ 240.016634][ T4323] usb 1-1: SerialNumber: syz [ 240.089446][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.099130][ T4328] usb 5-1: Product: syz [ 240.107575][ T4328] usb 5-1: Manufacturer: syz [ 240.114366][ T4328] usb 5-1: SerialNumber: syz [ 240.206578][ T6378] siw: device registration error -23 [ 241.800960][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.835848][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.872867][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.885710][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.931035][ T4328] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 241.949456][ T4328] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 241.968834][ T6384] fuse: Bad value for 'fd' [ 241.973505][ T4328] [drm:udl_init] *ERROR* Selecting channel failed [ 242.017096][ T4323] ums-jumpshot 1-1:6.191: USB Mass Storage device detected [ 242.034246][ T4328] [drm] Initialized udl 0.0.1 20120220 for 5-1:159.195 on minor 2 [ 242.063262][ T4328] [drm] Initialized udl on minor 2 [ 242.075294][ T4323] ums-jumpshot 1-1:6.191: Quirks match for vid 05dc pid 0001: 2 [ 242.082511][ T4328] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 242.092165][ T4328] udl 5-1:159.195: [drm] Cannot find any crtc or sizes [ 242.104862][ T4328] usb 5-1: USB disconnect, device number 6 [ 242.111776][ T26] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 242.122858][ T26] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 242.132968][ T26] udl 5-1:159.195: [drm] Cannot find any crtc or sizes [ 242.255869][ T4323] usb 1-1: USB disconnect, device number 8 [ 243.149384][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 243.393207][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.407972][ T7] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 243.476764][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.496654][ T7] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 243.540706][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.645277][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.746600][ T7] usb 2-1: Product: syz [ 243.791654][ T7] usb 2-1: Manufacturer: syz [ 243.885899][ T6389] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.922863][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 243.978154][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 244.013182][ T7] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 244.379437][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.442984][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.526518][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.569052][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.715907][ T6413] 9pnet_virtio: no channels available for device syz [ 244.725743][ T6413] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 244.752926][ T6413] sch_tbf: burst 21994 is lower than device lo mtu (65550) ! [ 244.796505][ T4320] usb 2-1: USB disconnect, device number 4 [ 244.820972][ T6414] 9pnet_virtio: no channels available for device syz [ 244.829503][ T4323] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 244.847877][ T6414] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 244.860756][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 244.888850][ T6414] sch_tbf: burst 21994 is lower than device lo mtu (65550) ! [ 245.022077][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 245.052466][ T4323] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 245.065581][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 245.081856][ T7] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 245.092665][ T4323] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 245.109644][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.124141][ T4323] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 245.134271][ T7] usb 4-1: Product: syz [ 245.149373][ T7] usb 4-1: Manufacturer: syz [ 245.154502][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.171187][ T7] usb 4-1: SerialNumber: syz [ 245.194739][ T4323] usb 3-1: config 0 descriptor?? [ 245.380883][ T4320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 245.421871][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.466981][ T7] rtl8150 4-1:1.0: couldn't reset the device [ 245.474419][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.485517][ T7] rtl8150: probe of 4-1:1.0 failed with error -5 [ 245.514459][ T7] usb 4-1: USB disconnect, device number 7 [ 245.522502][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.546631][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.555852][ T4323] hdpvr 3-1:0.0: firmware version 0xf4 dated М~FLjuK-M/h&O8b<| [ 245.565959][ T4323] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 245.624085][ T4320] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.638555][ T4320] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 245.690926][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.710991][ T4320] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 245.751505][ T4320] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.766765][ T4323] hdpvr 3-1:0.0: device init failed [ 245.777102][ T4323] hdpvr: probe of 3-1:0.0 failed with error -12 [ 245.790618][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.849617][ T4323] usb 3-1: USB disconnect, device number 7 [ 245.862555][ T4320] usb 2-1: Product: syz [ 245.869358][ T4320] usb 2-1: Manufacturer: syz [ 245.898646][ T6389] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.921637][ T4320] cdc_wdm 2-1:1.0: skipping garbage [ 245.931776][ T4320] cdc_wdm 2-1:1.0: skipping garbage [ 245.943346][ T4320] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 246.097425][ T5543] usb 2-1: USB disconnect, device number 5 [ 246.202148][ T6421] fuse: Bad value for 'fd' [ 247.919463][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 248.300653][ T6442] device syzkaller1 entered promiscuous mode [ 248.447155][ T6448] fuse: Bad value for 'fd' [ 248.469484][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 248.477236][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.502122][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.526636][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.539101][ T6451] overlayfs: failed to resolve './file1/file0': -2 [ 248.559715][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.577906][ T26] usb 5-1: config 0 descriptor?? [ 248.593918][ T26] hub 5-1:0.0: USB hub found [ 248.749453][ T4320] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 248.796183][ T26] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 248.941619][ T4320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.957668][ T4320] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 248.975997][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.004559][ T4320] usb 1-1: Product: syz [ 249.008862][ T6462] lo speed is unknown, defaulting to 1000 [ 249.014829][ T4320] usb 1-1: Manufacturer: syz [ 249.019581][ T4320] usb 1-1: SerialNumber: syz [ 249.206958][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 249.219869][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 249.257846][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.310382][ T26] usb 5-1: USB disconnect, device number 7 [ 249.318148][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.545477][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.559571][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.583168][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.604333][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.652721][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.684660][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.800037][ T26] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 249.845176][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.900193][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.009613][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 250.053579][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.088178][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.118730][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.154779][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.225987][ T26] usb 5-1: config 0 descriptor?? [ 250.259257][ T26] hub 5-1:0.0: USB hub found [ 251.371119][ T26] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 251.405304][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 251.467302][ T6489] fuse: Bad value for 'fd' [ 251.480094][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 251.497317][ T6489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.566'. [ 251.520015][ T26] usb 5-1: USB disconnect, device number 8 [ 251.813116][ T4320] usb 1-1: MIDIStreaming interface descriptor not found [ 251.971856][ T4320] usb 1-1: USB disconnect, device number 9 [ 252.066912][ T6500] overlayfs: overlapping lowerdir path [ 252.085990][ T6502] overlayfs: failed to resolve './file1': -2 [ 252.749391][ T4328] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 252.939368][ T4328] usb 3-1: Using ep0 maxpacket: 16 [ 252.947654][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.966664][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.976993][ T4328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.990183][ T4328] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 252.999440][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.009905][ T4328] usb 3-1: config 0 descriptor?? [ 253.425902][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.169254][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.278877][ T6525] fuse: Bad value for 'fd' [ 254.279602][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.286182][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.579'. [ 254.300637][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.309946][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.317363][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.367457][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.469753][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.477338][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.488178][ T6531] fuse: Bad value for 'fd' [ 254.553989][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.574355][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.589659][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.596811][ T6533] overlayfs: overlapping lowerdir path [ 254.596927][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.664305][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.669535][ T4320] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.699226][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.706830][ T4328] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 254.782446][ T4328] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input9 [ 254.880718][ T4320] usb 1-1: config 0 has no interfaces? [ 254.886416][ T4320] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 254.917316][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.964979][ T4320] usb 1-1: config 0 descriptor?? [ 254.978705][ T4328] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 255.098621][ T4328] usb 3-1: USB disconnect, device number 8 [ 255.912129][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.921406][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.044227][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.169111][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.308887][ T26] usb 1-1: USB disconnect, device number 10 [ 256.354226][ T6548] fido_id[6548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 256.442552][ T6571] 9pnet_virtio: no channels available for device syz [ 257.289426][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 257.408614][ T6571] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 257.558404][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 257.687368][ T26] usb 1-1: device descriptor read/all, error -71 [ 257.720482][ T6597] sch_tbf: burst 21994 is lower than device lo mtu (65550) ! [ 257.800811][ T6602] fuse: Bad value for 'fd' [ 258.449381][ T4320] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 259.770847][ T6602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.591'. [ 260.029598][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 260.036546][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.049806][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.072279][ T4320] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.101122][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.126523][ T4320] usb 2-1: config 0 descriptor?? [ 260.141965][ T4320] hub 2-1:0.0: bad descriptor, ignoring hub [ 260.152827][ T4320] hub: probe of 2-1:0.0 failed with error -5 [ 260.161927][ T4320] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 260.164710][ T127] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 260.292101][ T6613] overlayfs: overlapping lowerdir path [ 260.360245][ T6615] fuse: Bad value for 'fd' [ 260.374591][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 260.378983][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.383526][ T127] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 260.391223][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.439368][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.447443][ T127] usb 5-1: Product: syz [ 260.538589][ T127] usb 5-1: Manufacturer: syz [ 260.543786][ T127] usb 5-1: SerialNumber: syz [ 260.570965][ T127] usb 5-1: config 0 descriptor?? [ 260.595559][ T127] asix: probe of 5-1:0.0 failed with error -22 [ 260.784873][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.821962][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.844153][ T4323] usb 5-1: USB disconnect, device number 9 [ 261.399384][ T127] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 261.450425][ T4323] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.667546][ T4323] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 261.699089][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.831021][ T4323] usb 5-1: config 0 descriptor?? [ 261.943697][ T4323] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 262.169978][ T4323] gp8psk: usb in 128 operation failed. [ 262.179881][ T4320] usb 2-1: USB disconnect, device number 6 [ 262.203945][ T4323] gp8psk: usb in 137 operation failed. [ 262.208373][ T6639] device syzkaller0 entered promiscuous mode [ 262.217793][ T127] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 262.219928][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.234348][ T127] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 262.258042][ T127] usb 1-1: config 246 has no interface number 0 [ 262.275748][ T127] usb 1-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 262.282172][ T4323] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 262.296562][ T127] usb 1-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.305771][ T6645] fuse: Bad value for 'fd' [ 262.318185][ T4323] usb 5-1: media controller created [ 262.356689][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.464719][ T4323] gp8psk_fe: Frontend attached [ 262.493677][ T4323] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 262.538086][ T4323] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 262.725132][ T4323] gp8psk: usb in 138 operation failed. [ 262.756931][ T4323] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 262.798539][ T4323] gp8psk: found Genpix USB device pID = 203 (hex) [ 262.865103][ T4323] usb 5-1: USB disconnect, device number 10 [ 263.023173][ T4323] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 263.058705][ T127] usb 1-1: config 246 interface 166 has no altsetting 0 [ 263.094730][ T127] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 263.139779][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.149485][ T127] usb 1-1: Product: syz [ 263.153731][ T127] usb 1-1: Manufacturer: syz [ 263.158577][ T127] usb 1-1: SerialNumber: syz [ 264.010707][ T127] usb 1-1: Limiting number of CPorts to U8_MAX [ 264.532482][ T127] usb 1-1: Unknown endpoint type found, address 0x0b [ 264.626541][ T127] usb 1-1: Not enough endpoints found in device, aborting! [ 265.469811][ T127] usb 1-1: USB disconnect, device number 13 [ 265.782637][ T6656] 9pnet_virtio: no channels available for device syz [ 265.948016][ T6656] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 265.974748][ T6656] sch_tbf: burst 21994 is lower than device lo mtu (65550) ! [ 266.298392][ T6694] overlayfs: overlapping lowerdir path [ 266.472991][ T6685] lo speed is unknown, defaulting to 1000 [ 269.029500][ T4289] Bluetooth: hci4: command 0x0405 tx timeout [ 269.656909][ T6721] overlayfs: overlapping lowerdir path [ 269.939497][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 269.969400][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.141536][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.161281][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 270.179504][ T7] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.188730][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 270.209185][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.217707][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 270.230358][ T7] usb 4-1: config 0 descriptor?? [ 270.241825][ T4320] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 270.255492][ T4320] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 270.267308][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.287846][ T4320] usb 2-1: config 0 descriptor?? [ 270.464315][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 270.474640][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 270.598975][ T7] usb 4-1: USB disconnect, device number 8 [ 270.687048][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.006952][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.342937][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.415348][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.480441][ T4320] hdpvr 2-1:0.0: firmware version 0xf4 dated М~FLjuK-M/h&O8b<| [ 271.521836][ T4320] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 271.619615][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 271.824770][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 271.837073][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.914018][ T14] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 271.924029][ T4320] hdpvr 2-1:0.0: Could not setup controls [ 271.931044][ T4320] hdpvr 2-1:0.0: registering videodev failed [ 271.937288][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.968976][ T4320] hdpvr: probe of 2-1:0.0 failed with error -71 [ 271.969444][ T4766] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.983705][ T14] usb 4-1: config 0 descriptor?? [ 272.010441][ T14] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 272.029508][ T4320] usb 2-1: USB disconnect, device number 7 [ 272.066189][ T14] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 272.227520][ T4766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.240355][ T4766] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.249983][ T4766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.292194][ T4766] usb 3-1: config 0 descriptor?? [ 272.553832][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.569946][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.631312][ T4328] usb 4-1: USB disconnect, device number 9 [ 272.651312][ T4328] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 272.728866][ T6765] 9pnet_fd: Insufficient options for proto=fd [ 272.766933][ T4766] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 272.790976][ T4766] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input10 [ 272.826932][ T6763] lo speed is unknown, defaulting to 1000 [ 272.879056][ T4766] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 273.019758][ T5543] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 273.064545][ C1] Mem-Info: [ 273.068102][ C1] active_anon:6289 inactive_anon:0 isolated_anon:0 [ 273.068102][ C1] active_file:5350 inactive_file:40039 isolated_file:0 [ 273.068102][ C1] unevictable:768 dirty:187 writeback:0 [ 273.068102][ C1] slab_reclaimable:20626 slab_unreclaimable:95703 [ 273.068102][ C1] mapped:30145 shmem:1364 pagetables:718 [ 273.068102][ C1] sec_pagetables:0 bounce:0 [ 273.068102][ C1] kernel_misc_reclaimable:0 [ 273.068102][ C1] free:1330851 free_pcp:12532 free_cma:0 [ 273.113402][ C1] Node 0 active_anon:25256kB inactive_anon:0kB active_file:21400kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120580kB dirty:748kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11908kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 273.146779][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 273.177302][ C1] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.204590][ C1] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 273.210423][ C1] Node 0 DMA32 free:1416628kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:25256kB inactive_anon:0kB active_file:21400kB inactive_file:159952kB unevictable:1536kB writepending:748kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:26604kB local_pcp:6892kB free_cma:0kB [ 273.241182][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 273.245883][ C1] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.272831][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 273.277619][ C1] Node 1 Normal free:3891416kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:23240kB local_pcp:10208kB free_cma:0kB [ 273.307223][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 273.311937][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.324587][ C1] Node 0 DMA32: 1267*4kB (UME) 837*8kB (UM) 772*16kB (UM) 252*32kB (UME) 170*64kB (UME) 33*128kB (UME) 25*256kB (UME) 16*512kB (UME) 11*1024kB (UM) 4*2048kB (UM) 326*4096kB (M) = 1416628kB [ 273.343399][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 273.354840][ C1] Node 1 Normal: 290*4kB (UME) 60*8kB (UME) 39*16kB (UME) 30*32kB (UME) 25*64kB (UE) 8*128kB (UME) 2*256kB (ME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3891416kB [ 273.373142][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.382677][ C1] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 273.391955][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.401522][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.410904][ C1] 46755 total pagecache pages [ 273.415682][ C1] 0 pages in swap cache [ 273.419965][ C1] Free swap = 124996kB [ 273.424120][ C1] Total swap = 124996kB [ 273.428285][ C1] 2097051 pages RAM [ 273.432183][ C1] 0 pages HighMem/MovableOnly [ 273.436858][ C1] 415209 pages reserved [ 273.441019][ C1] 0 pages cma reserved [ 273.639393][ T5543] usb 1-1: Using ep0 maxpacket: 16 [ 273.647744][ T5543] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.657506][ T5543] usb 1-1: config 159 has an invalid interface number: 195 but max is 0 [ 273.666599][ T5543] usb 1-1: config 159 has no interface number 0 [ 273.673193][ T5543] usb 1-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.683576][ T5543] usb 1-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.694250][ T5543] usb 1-1: config 159 interface 195 has no altsetting 0 [ 273.705334][ T5543] usb 1-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 273.714956][ T5543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.723252][ T5543] usb 1-1: Product: syz [ 273.727645][ T5543] usb 1-1: Manufacturer: syz [ 273.732597][ T5543] usb 1-1: SerialNumber: syz [ 273.807792][ T14] usb 3-1: USB disconnect, device number 9 [ 273.953001][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.000050][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.016397][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.051189][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.123562][ T5543] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 274.134855][ T5543] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 274.161035][ T5543] [drm:udl_init] *ERROR* Selecting channel failed [ 274.178460][ T5543] [drm] Initialized udl 0.0.1 20120220 for 1-1:159.195 on minor 2 [ 274.186955][ T5543] [drm] Initialized udl on minor 2 [ 274.196604][ T5543] udl 1-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.209016][ T5543] udl 1-1:159.195: [drm] Cannot find any crtc or sizes [ 274.243090][ T5543] usb 1-1: USB disconnect, device number 14 [ 274.275693][ T4328] udl 1-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 274.294083][ T4328] udl 1-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 274.305395][ T4328] udl 1-1:159.195: [drm] Cannot find any crtc or sizes [ 275.543505][ T6805] 9pnet_fd: Insufficient options for proto=fd [ 276.010054][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 276.192942][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.238052][ T7] usb 2-1: config 0 has no interface number 0 [ 276.245540][ T7] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.257560][ T7] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.279242][ T7] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.383804][ T7] usb 2-1: config 0 interface 1 has no altsetting 0 [ 276.431938][ T7] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 276.589434][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.630693][ T7] usb 2-1: config 0 descriptor?? [ 277.087451][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.235710][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.637442][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.659830][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.811521][ T6837] 9pnet_fd: Insufficient options for proto=fd [ 277.990132][ T7] uclogic 0003:145F:0212.0005: pen parameters not found [ 277.997199][ T7] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 278.191098][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.258172][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.482352][ T5543] usb 2-1: USB disconnect, device number 8 [ 278.919099][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 280.095050][ T6909] device syzkaller1 entered promiscuous mode [ 280.239473][ T5543] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 280.317111][ T4328] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 280.349179][ T6915] device syzkaller0 entered promiscuous mode [ 280.435855][ T5543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.435893][ T5543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.435929][ T5543] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 280.435956][ T5543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.437816][ T5543] usb 3-1: config 0 descriptor?? [ 280.509398][ T4328] usb 5-1: Using ep0 maxpacket: 8 [ 280.512025][ T4328] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 280.512089][ T4328] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 280.512126][ T4328] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.512165][ T4328] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 280.512191][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.517692][ T4328] usbtmc 5-1:16.0: bulk endpoints not found [ 280.748374][ T6922] 9pnet_virtio: no channels available for device syz [ 281.102622][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.102736][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.102836][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.102895][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.102955][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.103015][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.103073][ T5543] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 281.159789][ T5543] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 281.161656][ T5543] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 281.534211][ C1] hid-thrustmaster 0003:044F:B65D.0006: Wheel with model id 0x200 is a Thrustmaster T300RS (Missing Attachment) [ 282.099444][ T6933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.706'. [ 283.054164][ T5543] usb 5-1: USB disconnect, device number 11 [ 283.097768][ C1] hid-thrustmaster 0003:044F:B65D.0006: URB to change wheel mode seems to have failed with error -108 [ 283.180697][ T6946] device syzkaller0 entered promiscuous mode [ 283.260782][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 283.459636][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 283.475667][ T7] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 283.485215][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.493699][ T7] usb 2-1: Product: syz [ 283.498233][ T7] usb 2-1: Manufacturer: syz [ 283.503307][ T7] usb 2-1: SerialNumber: syz [ 283.740522][ T7] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 283.758910][ T7] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 283.836128][ T7] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 283.875268][ T7] usb 2-1: USB disconnect, device number 9 [ 283.895398][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.961174][ T4947] usb 3-1: USB disconnect, device number 10 [ 284.860426][ T4328] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 285.049460][ T4328] usb 3-1: Using ep0 maxpacket: 16 [ 285.054606][ T4328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.055871][ T4328] usb 3-1: config 159 has an invalid interface number: 195 but max is 0 [ 285.055898][ T4328] usb 3-1: config 159 has no interface number 0 [ 285.055935][ T4328] usb 3-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.055960][ T4328] usb 3-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.055986][ T4328] usb 3-1: config 159 interface 195 has no altsetting 0 [ 285.058295][ T4328] usb 3-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 285.058324][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.058346][ T4328] usb 3-1: Product: syz [ 285.058362][ T4328] usb 3-1: Manufacturer: syz [ 285.058377][ T4328] usb 3-1: SerialNumber: syz [ 285.364148][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.377215][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.401828][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.418265][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.488201][ T4328] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 285.506025][ T4328] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 285.517592][ T4328] [drm:udl_init] *ERROR* Selecting channel failed [ 285.531512][ T4328] [drm] Initialized udl 0.0.1 20120220 for 3-1:159.195 on minor 2 [ 285.548249][ T4328] [drm] Initialized udl on minor 2 [ 285.571750][ T4328] udl 3-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 285.588187][ T4328] udl 3-1:159.195: [drm] Cannot find any crtc or sizes [ 285.616479][ T4328] usb 3-1: USB disconnect, device number 11 [ 285.631965][ T5543] udl 3-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 285.654799][ T5543] udl 3-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 285.668466][ T5543] udl 3-1:159.195: [drm] Cannot find any crtc or sizes [ 286.024173][ T5543] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.237280][ T5543] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.274842][ T5543] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 286.325860][ T5543] usb 5-1: string descriptor 0 read error: -22 [ 286.341901][ T5543] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 286.351186][ T5543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.361983][ T6981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.383193][ T5543] usb 5-1: MIDIStreaming interface descriptor not found [ 286.604386][ T5543] usb 5-1: USB disconnect, device number 12 [ 286.955162][ T6958] device syzkaller0 entered promiscuous mode [ 287.339394][ T4947] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 287.540725][ T4947] usb 1-1: Using ep0 maxpacket: 32 [ 287.548739][ T4947] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.556911][ T4947] usb 1-1: config 0 has no interface number 0 [ 287.564085][ T4947] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 287.574756][ T4947] usb 1-1: config 0 interface 1 has no altsetting 0 [ 287.584033][ T4947] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 287.594441][ T4947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.602759][ T4947] usb 1-1: Product: syz [ 287.607084][ T4947] usb 1-1: Manufacturer: syz [ 287.611976][ T4947] usb 1-1: SerialNumber: syz [ 287.618876][ T4947] usb 1-1: config 0 descriptor?? [ 287.839534][ T4947] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 287.860223][ T4947] cx231xx 1-1:0.1: Failed to read PCB config [ 287.866532][ T4947] cx231xx: probe of 1-1:0.1 failed with error -71 [ 287.892569][ T4947] usb 1-1: USB disconnect, device number 15 [ 288.479491][ T4947] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 288.707946][ T4947] usb 1-1: Using ep0 maxpacket: 32 [ 288.722201][ T4947] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.734844][ T4947] usb 1-1: config 0 has no interface number 0 [ 288.742413][ T4947] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 288.762177][ T4947] usb 1-1: config 0 interface 1 has no altsetting 0 [ 288.772223][ T4947] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 288.781478][ T4947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.795372][ T4947] usb 1-1: Product: syz [ 288.799801][ T4947] usb 1-1: Manufacturer: syz [ 288.804627][ T4947] usb 1-1: SerialNumber: syz [ 288.813095][ T4947] usb 1-1: config 0 descriptor?? [ 288.983663][ T4320] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.036210][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.053394][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.076327][ T4947] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 289.088865][ T4947] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 289.171305][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 289.181406][ T4320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 289.192278][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 289.204446][ T4320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 289.213843][ T4947] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 289.214594][ T4320] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 289.228150][ T4947] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 289.231896][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.258485][ T4320] usb 5-1: config 0 descriptor?? [ 289.273804][ T4947] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 289.290226][ T4947] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 289.332810][ T4947] i2c i2c-2: Added multiplexed i2c bus 4 [ 289.351048][ T4947] i2c i2c-2: Added multiplexed i2c bus 5 [ 289.365168][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'. [ 289.459728][ T4947] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-110]! [ 289.468421][ T4947] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-110]! [ 289.473585][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.489899][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.502648][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.508556][ T4320] hdpvr 5-1:0.0: firmware version 0xf4 dated М~FLjuK-M/h&O8b<| [ 289.526665][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.531993][ T4320] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 289.574040][ T4947] cx231xx: probe of 1-1:0.1 failed with error -110 [ 289.650542][ T4947] usb 1-1: USB disconnect, device number 16 [ 289.955816][ T4320] hdpvr 5-1:0.0: Could not setup controls [ 289.962131][ T4320] hdpvr 5-1:0.0: registering videodev failed [ 289.987852][ T4320] hdpvr: probe of 5-1:0.0 failed with error -71 [ 290.038483][ T4320] usb 5-1: USB disconnect, device number 13 [ 290.049424][ T4328] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 290.242738][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.254042][ T4947] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 290.261330][ T7014] device syzkaller0 entered promiscuous mode [ 290.262072][ T4328] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.277498][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.293514][ T4328] usb 3-1: config 0 descriptor?? [ 290.329573][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 290.479562][ T4947] usb 4-1: Using ep0 maxpacket: 16 [ 290.500079][ T4947] usb 4-1: unable to get BOS descriptor or descriptor too short [ 290.513934][ T4328] usbhid 3-1:0.0: can't add hid device: -71 [ 290.521241][ T4328] usbhid: probe of 3-1:0.0 failed with error -71 [ 290.521462][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.557929][ T4947] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 290.571792][ T4328] usb 3-1: USB disconnect, device number 12 [ 290.593649][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.610407][ T14] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.640200][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.657008][ T4947] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 290.678552][ T14] usb 2-1: config 0 descriptor?? [ 290.691271][ T4947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.698398][ T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 290.724799][ T4947] usb 4-1: Product: syz [ 290.744838][ T4947] usb 4-1: Manufacturer: syz [ 290.749892][ T4947] usb 4-1: SerialNumber: syz [ 290.985232][ T4947] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 291.004228][ T4947] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 291.159447][ T4328] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 291.308889][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.320670][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.337898][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.348284][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.379487][ T4328] usb 3-1: Using ep0 maxpacket: 32 [ 291.388656][ T4328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.419187][ T4328] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 291.437067][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.463187][ T4328] usb 3-1: config 0 descriptor?? [ 291.481797][ T4328] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 291.535687][ T4328] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 292.026825][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.045565][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.067388][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.091885][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.305333][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.317308][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.326013][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.335353][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.343220][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 305.351785][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.053069][ T4289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.070762][ T4289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.079209][ T4289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.088428][ T4289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.097468][ T4289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 306.104915][ T4289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.235867][ T4289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.245884][ T4289] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.254878][ T4289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.263833][ T4289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.271897][ T4289] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 306.280600][ T4289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.420339][ T4289] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 306.430125][ T4289] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 306.438460][ T4289] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 306.446865][ T4289] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 306.454667][ T4289] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 306.461977][ T4289] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 307.429476][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 307.824547][ T4291] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 307.834606][ T4291] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 307.843928][ T4291] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 307.866037][ T4291] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 307.873835][ T4291] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 307.882975][ T4291] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 308.149676][ T4289] Bluetooth: hci6: command 0x0409 tx timeout [ 308.309419][ T4289] Bluetooth: hci7: command 0x0409 tx timeout [ 308.549416][ T4289] Bluetooth: hci8: command 0x0409 tx timeout [ 309.509531][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 310.229483][ T4289] Bluetooth: hci6: command 0x041b tx timeout [ 310.389386][ T4289] Bluetooth: hci7: command 0x041b tx timeout [ 310.629366][ T4289] Bluetooth: hci8: command 0x041b tx timeout [ 311.589442][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 312.309437][ T4289] Bluetooth: hci6: command 0x040f tx timeout [ 312.469344][ T4289] Bluetooth: hci7: command 0x040f tx timeout [ 312.709454][ T4289] Bluetooth: hci8: command 0x040f tx timeout [ 313.669412][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 314.399483][ T4289] Bluetooth: hci6: command 0x0419 tx timeout [ 314.549384][ T4289] Bluetooth: hci7: command 0x0419 tx timeout [ 314.789471][ T4289] Bluetooth: hci8: command 0x0419 tx timeout [ 317.354059][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.360539][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.100664][ T3637] udevd[3637]: worker [4266] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 365.460415][ T4281] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 365.474426][ T4281] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 365.484979][ T4281] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 365.497536][ T4281] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 365.507007][ T4281] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 365.514772][ T4281] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 366.842730][ T4290] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 366.859953][ T4290] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 366.868362][ T4290] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 366.876788][ T4290] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 366.885049][ T4290] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 366.930650][ T4290] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 366.932817][ T48] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 366.950980][ T48] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 366.960684][ T48] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 366.980317][ T48] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 366.988455][ T48] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 366.995447][ T4279] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 366.997635][ T48] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 367.017697][ T4288] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 367.028029][ T48] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 367.037790][ T48] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 367.052967][ T48] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 367.061529][ T48] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 367.936820][ T4288] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 367.949120][ T4288] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 367.958132][ T4288] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 367.966489][ T4288] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 367.974626][ T4288] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 367.982291][ T4288] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.792491][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.798986][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 426.054220][ T4289] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 426.065682][ T4289] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 426.074904][ T4289] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 426.083220][ T4289] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 426.092645][ T4289] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 426.103306][ T4276] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 427.427010][ T4276] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 427.439316][ T4276] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 427.448329][ T4276] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 427.457421][ T4276] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 427.465556][ T4276] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 427.473332][ T4276] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 427.563057][ T7077] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 427.572441][ T7077] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 427.583683][ T7077] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 427.591871][ T7077] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 427.635269][ T7076] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 427.648645][ T7077] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 427.657978][ T7077] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 427.665554][ T7076] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 427.675520][ T7076] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 427.675520][ T7077] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 427.687278][ T7076] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 427.690562][ T7077] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 428.219152][ T7071] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 428.228524][ T7071] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 428.237128][ T7071] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 428.247029][ T7071] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 428.256583][ T7071] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 428.264566][ T7071] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 432.069517][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 432.075866][ T4287] Bluetooth: hci7: command 0x0406 tx timeout [ 432.085853][ T4287] Bluetooth: hci6: command 0x0406 tx timeout [ 432.092269][ T4287] Bluetooth: hci8: command 0x0406 tx timeout [ 440.232040][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.239110][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.511730][ T28] INFO: task khugepaged:34 blocked for more than 143 seconds. [ 441.539662][ T28] Not tainted syzkaller #0 [ 441.544754][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.558295][ T28] task:khugepaged state:D stack:27728 pid:34 ppid:2 flags:0x00004000 [ 441.584882][ T28] Call Trace: [ 441.588246][ T28] [ 441.610228][ T28] __schedule+0x11d1/0x40e0 [ 441.615045][ T28] ? __sched_text_start+0x8/0x8 [ 441.626039][ T28] schedule+0xb9/0x180 [ 441.630632][ T28] schedule_timeout+0xbd/0x2d0 [ 441.636184][ T28] ? console_conditional_schedule+0x40/0x40 [ 441.715551][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 441.738198][ T28] ? lock_chain_count+0x20/0x20 [ 441.761690][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 441.767249][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 441.789260][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 441.794569][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 441.809311][ T28] ? wait_for_completion+0x276/0x5a0 [ 441.814807][ T28] wait_for_completion+0x2c7/0x5a0 [ 441.839377][ T28] ? io_schedule+0xd0/0xd0 [ 441.844026][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 441.859298][ T28] ? __flush_work+0x10d/0xae0 [ 441.864288][ T28] __flush_work+0x952/0xae0 [ 441.868813][ T28] ? __flush_work+0x10d/0xae0 [ 441.889246][ T28] ? flush_work+0x20/0x20 [ 441.893787][ T28] ? move_linked_works+0x250/0x250 [ 441.899170][ T28] ? wq_worker_last_func+0x40/0x40 [ 441.914761][ T28] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 441.939289][ T28] ? _raw_spin_unlock+0x40/0x40 [ 441.944332][ T28] ? _find_next_bit+0x87/0x130 [ 441.949187][ T28] __lru_add_drain_all+0x6a0/0x800 [ 441.964797][ T28] khugepaged+0x183/0x19a0 [ 441.979933][ T28] ? start_stop_khugepaged+0x160/0x160 [ 441.985788][ T28] ? wake_bit_function+0x200/0x200 [ 441.999276][ T28] ? wake_bit_function+0x200/0x200 [ 442.004826][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 442.029285][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 442.034825][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 442.049310][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 442.055409][ T28] ? __kthread_parkme+0x162/0x1c0 [ 442.079290][ T28] kthread+0x29d/0x330 [ 442.084052][ T28] ? start_stop_khugepaged+0x160/0x160 [ 442.099292][ T28] ? kthread_blkcg+0xd0/0xd0 [ 442.104068][ T28] ret_from_fork+0x1f/0x30 [ 442.108521][ T28] [ 442.129372][ T28] INFO: task udevd:4266 blocked for more than 143 seconds. [ 442.136785][ T28] Not tainted syzkaller #0 [ 442.149295][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.158166][ T28] task:udevd state:D stack:26064 pid:4266 ppid:3637 flags:0x00004002 [ 442.199257][ T28] Call Trace: [ 442.202630][ T28] [ 442.205583][ T28] __schedule+0x11d1/0x40e0 [ 442.219305][ T28] ? __sched_text_start+0x8/0x8 [ 442.224314][ T28] ? __mutex_trylock_common+0x86/0x260 [ 442.239358][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 442.245634][ T28] schedule+0xb9/0x180 [ 442.259340][ T28] schedule_preempt_disabled+0xf/0x20 [ 442.264855][ T28] __mutex_lock+0x562/0xaf0 [ 442.289357][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 442.294225][ T28] ? uevent_show+0x16c/0x320 [ 442.309283][ T28] ? mutex_lock_nested+0x10/0x10 [ 442.314448][ T28] uevent_show+0x16c/0x320 [ 442.319023][ T28] dev_attr_show+0x50/0xb0 [ 442.339293][ T28] sysfs_kf_seq_show+0x349/0x4b0 [ 442.344441][ T28] ? device_get_ownership+0xa0/0xa0 [ 442.359326][ T28] seq_read_iter+0x49b/0xd50 [ 442.364336][ T28] ? common_file_perm+0x171/0x1c0 [ 442.379315][ T28] vfs_read+0x4a7/0xa00 [ 442.383670][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 442.399314][ T28] ? kernel_read+0x1e0/0x1e0 [ 442.404045][ T28] ? __x64_sys_newfstat+0x19a/0x220 [ 442.429336][ T28] ? __fdget_pos+0x2b5/0x360 [ 442.434059][ T28] ksys_read+0x14c/0x250 [ 442.438344][ T28] ? vfs_write+0xa30/0xa30 [ 442.459327][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 442.464900][ T28] do_syscall_64+0x4c/0xa0 [ 442.479281][ T28] ? clear_bhb_loop+0x60/0xb0 [ 442.484207][ T28] ? clear_bhb_loop+0x60/0xb0 [ 442.499313][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.505369][ T28] RIP: 0033:0x7fd64a8a7407 [ 442.519280][ T28] RSP: 002b:00007fff906a5d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 442.528243][ T28] RAX: ffffffffffffffda RBX: 00007fd64af87880 RCX: 00007fd64a8a7407 [ 442.559330][ T28] RDX: 0000000000001000 RSI: 00005621e30eda00 RDI: 0000000000000008 [ 442.567578][ T28] RBP: 00007fd64a9efff0 R08: 0000000000000000 R09: 0000000000000000 [ 442.599348][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 442.607642][ T28] R13: 00007fd64a9efea0 R14: 0000000000000000 R15: 00005621e31183c0 [ 442.629303][ T28] [ 442.632615][ T28] INFO: task kworker/u4:6:4336 blocked for more than 144 seconds. [ 442.659281][ T28] Not tainted syzkaller #0 [ 442.664501][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.689283][ T28] task:kworker/u4:6 state:D stack:25520 pid:4336 ppid:2 flags:0x00004000 [ 442.709374][ T28] Workqueue: events_unbound linkwatch_event [ 442.715525][ T28] Call Trace: [ 442.719123][ T28] [ 442.739297][ T28] __schedule+0x11d1/0x40e0 [ 442.743964][ T28] ? __sched_text_start+0x8/0x8 [ 442.748898][ T28] ? __mutex_trylock_common+0x86/0x260 [ 442.769277][ T28] ? wq_worker_sleeping+0x60/0x280 [ 442.774458][ T28] schedule+0xb9/0x180 [ 442.778762][ T28] schedule_preempt_disabled+0xf/0x20 [ 442.809360][ T28] __mutex_lock+0x562/0xaf0 [ 442.814096][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 442.819028][ T28] ? linkwatch_event+0xa/0x50 [ 442.839319][ T28] ? mutex_lock_nested+0x10/0x10 [ 442.844637][ T28] ? _raw_spin_unlock+0x40/0x40 [ 442.859327][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 442.864964][ T28] ? process_one_work+0x7b0/0x1160 [ 442.889300][ T28] linkwatch_event+0xa/0x50 [ 442.893992][ T28] process_one_work+0x8a2/0x1160 [ 442.899152][ T28] ? worker_detach_from_pool+0x240/0x240 [ 442.912338][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 442.918766][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 442.927483][ T28] ? kthread_data+0x4b/0xc0 [ 442.935774][ T28] worker_thread+0xaa2/0x1270 [ 442.942111][ T28] kthread+0x29d/0x330 [ 442.946224][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 442.955065][ T28] ? kthread_blkcg+0xd0/0xd0 [ 442.961727][ T28] ret_from_fork+0x1f/0x30 [ 442.966262][ T28] [ 442.975426][ T28] INFO: task syz.2.732:7003 blocked for more than 144 seconds. [ 442.988897][ T28] Not tainted syzkaller #0 [ 442.998019][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.013276][ T28] task:syz.2.732 state:D stack:25424 pid:7003 ppid:4275 flags:0x00004004 [ 443.023117][ T28] Call Trace: [ 443.026430][ T28] [ 443.035304][ T28] __schedule+0x11d1/0x40e0 [ 443.039937][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 443.046226][ T28] ? queue_work_on+0x196/0x1f0 [ 443.055843][ T28] ? __sched_text_start+0x8/0x8 [ 443.060967][ T28] ? wq_worker_last_func+0x40/0x40 [ 443.066289][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 443.076784][ T28] ? prepare_to_wait_event+0x430/0x470 [ 443.084759][ T28] schedule+0xb9/0x180 [ 443.088993][ T28] synchronize_rcu_expedited+0x6e6/0x890 [ 443.099396][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 443.104430][ T28] ? mark_lock+0x94/0x320 [ 443.110746][ T28] ? __lock_acquire+0x13cf/0x7d10 [ 443.115880][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 443.122032][ T28] ? verify_lock_unused+0x140/0x140 [ 443.127518][ T28] ? wake_bit_function+0x200/0x200 [ 443.133803][ T28] synchronize_rcu+0x128/0x3f0 [ 443.138817][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 443.145139][ T28] ? evdev_release+0x1ee/0x800 [ 443.150147][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 443.155401][ T28] ? __rwlock_init+0x140/0x140 [ 443.160457][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 443.165821][ T28] evdev_release+0x1f3/0x800 [ 443.170493][ T28] ? evdev_open+0x5b0/0x5b0 [ 443.175255][ T28] __fput+0x22c/0x920 [ 443.179361][ T28] task_work_run+0x1d0/0x260 [ 443.184661][ T28] ? task_work_cancel+0x220/0x220 [ 443.195538][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 443.201353][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 443.206684][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 443.214279][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 443.220017][ T28] do_syscall_64+0x58/0xa0 [ 443.224474][ T28] ? clear_bhb_loop+0x60/0xb0 [ 443.229891][ T28] ? clear_bhb_loop+0x60/0xb0 [ 443.234606][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.241180][ T28] RIP: 0033:0x7f150e79ce59 [ 443.245732][ T28] RSP: 002b:00007ffd04e21848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 443.254746][ T28] RAX: 0000000000000000 RBX: 00007ffd04e21930 RCX: 00007f150e79ce59 [ 443.263118][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 443.271635][ T28] RBP: 0000000000046bbc R08: 0000000000000001 R09: 0000000000000000 [ 443.279960][ T28] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007ffd04e21970 [ 443.288141][ T28] R13: 00007f150ea15fac R14: 0000000000047513 R15: 00007f150ea15fa0 [ 443.296491][ T28] [ 443.301014][ T28] INFO: task syz.1.736:7011 blocked for more than 145 seconds. [ 443.308608][ T28] Not tainted syzkaller #0 [ 443.315040][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.324372][ T28] task:syz.1.736 state:D stack:25936 pid:7011 ppid:4274 flags:0x00004006 [ 443.338778][ T28] Call Trace: [ 443.343329][ T28] [ 443.346400][ T28] __schedule+0x11d1/0x40e0 [ 443.352223][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 443.358177][ T28] ? __sched_text_start+0x8/0x8 [ 443.363531][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 443.368771][ T28] ? prepare_to_wait_event+0x430/0x470 [ 443.379491][ T28] schedule+0xb9/0x180 [ 443.383608][ T28] synchronize_rcu_expedited+0x7ad/0x890 [ 443.394417][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 443.399655][ T28] ? mark_lock+0x94/0x320 [ 443.404406][ T28] ? wake_bit_function+0x200/0x200 [ 443.411564][ T28] ? __lock_acquire+0x13cf/0x7d10 [ 443.418558][ T28] ? verify_lock_unused+0x140/0x140 [ 443.424286][ T28] ? verify_lock_unused+0x140/0x140 [ 443.430473][ T28] synchronize_rcu+0x128/0x3f0 [ 443.435444][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 443.442104][ T28] ? evdev_release+0x1ee/0x800 [ 443.446906][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 443.452768][ T28] ? __rwlock_init+0x140/0x140 [ 443.457668][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 443.463529][ T28] evdev_release+0x1f3/0x800 [ 443.468507][ T28] ? evdev_open+0x5b0/0x5b0 [ 443.474951][ T28] __fput+0x22c/0x920 [ 443.479126][ T28] task_work_run+0x1d0/0x260 [ 443.484547][ T28] ? task_work_cancel+0x220/0x220 [ 443.490105][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 443.495624][ T28] do_exit+0x982/0x2480 [ 443.500467][ T28] ? put_task_struct+0x80/0x80 [ 443.505282][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.511701][ T28] ? lock_chain_count+0x20/0x20 [ 443.517973][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 443.524403][ T28] do_group_exit+0x217/0x2d0 [ 443.529052][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 443.540123][ T28] get_signal+0x1272/0x1350 [ 443.544745][ T28] arch_do_signal_or_restart+0xc4/0x1350 [ 443.555236][ T28] ? debug_object_free+0x2c2/0x470 [ 443.561004][ T28] ? hrtimer_nanosleep+0x2ae/0x370 [ 443.566601][ T28] ? __might_fault+0xc2/0x120 [ 443.572263][ T28] ? __might_fault+0xa6/0x120 [ 443.576981][ T28] ? get_sigframe_size+0x10/0x10 [ 443.582934][ T28] ? __remove_hrtimer+0x470/0x470 [ 443.588113][ T28] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 443.608405][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 443.620240][ T28] exit_to_user_mode_loop+0x70/0x110 [ 443.625952][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 443.636507][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 443.643685][ T28] do_syscall_64+0x58/0xa0 [ 443.648848][ T28] ? clear_bhb_loop+0x60/0xb0 [ 443.657440][ T28] ? clear_bhb_loop+0x60/0xb0 [ 443.663715][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.678862][ T28] RIP: 0033:0x7f2f7335d68e [ 443.684918][ T28] RSP: 002b:00007ffe6fba35d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 443.698452][ T28] RAX: 0000000000000000 RBX: 0000555572ef3500 RCX: 00007f2f7335d68e [ 443.707984][ T28] RDX: 00007ffe6fba3630 RSI: 0000000000000000 RDI: 0000000000000000 [ 443.722287][ T28] RBP: 00007f2f73617da0 R08: 0000000000000000 R09: 0000000000000000 [ 443.733050][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000047de2 [ 443.744539][ T28] R13: 00007f2f7361609c R14: 0000000000047229 R15: 00007ffe6fba3760 [ 443.756383][ T28] [ 443.762084][ T28] INFO: task syz.0.737:7013 blocked for more than 145 seconds. [ 443.772400][ T28] Not tainted syzkaller #0 [ 443.777368][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.788799][ T28] task:syz.0.737 state:D stack:26064 pid:7013 ppid:4282 flags:0x00004006 [ 443.803788][ T28] Call Trace: [ 443.807147][ T28] [ 443.810542][ T28] __schedule+0x11d1/0x40e0 [ 443.815701][ T28] ? __sched_text_start+0x8/0x8 [ 443.823731][ T28] ? __mutex_trylock_common+0x86/0x260 [ 443.829610][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 443.835989][ T28] schedule+0xb9/0x180 [ 443.840528][ T28] schedule_preempt_disabled+0xf/0x20 [ 443.846038][ T28] __mutex_lock+0x562/0xaf0 [ 443.851351][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 443.856166][ T28] ? synchronize_rcu_expedited+0x3c0/0x890 [ 443.862870][ T28] ? mutex_lock_nested+0x10/0x10 [ 443.868638][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 443.874065][ T28] ? __rwlock_init+0x140/0x140 [ 443.878864][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 443.884613][ T28] synchronize_rcu_expedited+0x3c0/0x890 [ 443.890802][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 443.895891][ T28] ? finish_task_switch+0x265/0x8f0 [ 443.901745][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 443.908604][ T28] ? finish_task_switch+0x265/0x8f0 [ 443.915669][ T28] ? stack_depot_print+0x31/0x80 [ 443.922091][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.930128][ T28] ? __sched_text_start+0x8/0x8 [ 443.935147][ T28] synchronize_rcu+0x128/0x3f0 [ 443.940514][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 443.947100][ T28] ? lock_chain_count+0x20/0x20 [ 443.952683][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 443.958893][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 443.965421][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 443.972122][ T28] lockdep_unregister_key+0x4d2/0x550 [ 443.977543][ T28] ? lockdep_reset_lock+0x300/0x300 [ 443.983123][ T28] ? slab_free_freelist_hook+0x131/0x1a0 [ 443.988901][ T28] ? __kmem_cache_free+0xb6/0x1f0 [ 443.994576][ T28] ? pfifo_fast_reset+0xef0/0xef0 [ 444.000165][ T28] __qdisc_destroy+0x128/0x430 [ 444.004986][ T28] dev_shutdown+0x92/0x440 [ 444.009794][ T28] unregister_netdevice_many_notify+0xa76/0x19c0 [ 444.016163][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 444.022924][ T28] ? mark_lock+0x94/0x320 [ 444.028646][ T28] ? unregister_netdevice_many+0x20/0x20 [ 444.034813][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 444.041241][ T28] ? lock_chain_count+0x20/0x20 [ 444.046151][ T28] ? queue_delayed_work_on+0x110/0x1f0 [ 444.052305][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 444.057664][ T28] unregister_netdevice_queue+0x328/0x370 [ 444.063765][ T28] ? delayed_work_timer_fn+0x80/0x80 [ 444.069108][ T28] ? list_netdevice+0x6c0/0x6c0 [ 444.078068][ T28] __tun_detach+0xd4a/0x1500 [ 444.083122][ T28] tun_chr_close+0x109/0x1b0 [ 444.087764][ T28] ? tun_chr_open+0x4d0/0x4d0 [ 444.093218][ T28] __fput+0x22c/0x920 [ 444.097448][ T28] task_work_run+0x1d0/0x260 [ 444.102760][ T28] ? task_work_cancel+0x220/0x220 [ 444.108021][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 444.114489][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 444.120169][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 444.125864][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 444.133216][ T28] do_syscall_64+0x58/0xa0 [ 444.137701][ T28] ? clear_bhb_loop+0x60/0xb0 [ 444.142936][ T28] ? clear_bhb_loop+0x60/0xb0 [ 444.147707][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.154432][ T28] RIP: 0033:0x7f15ecb9ce59 [ 444.159090][ T28] RSP: 002b:00007ffde9651688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 444.169493][ T28] RAX: 0000000000000000 RBX: 00007ffde9651770 RCX: 00007f15ecb9ce59 [ 444.177621][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 444.186102][ T28] RBP: 0000000000046d76 R08: 0000000000000001 R09: 0000000000000000 [ 444.194752][ T28] R10: 0000001b2ed20000 R11: 0000000000000246 R12: 00007ffde96517b0 [ 444.203052][ T28] R13: 00007f15ece15fac R14: 0000000000046de8 R15: 00007f15ece15fa0 [ 444.211520][ T28] [ 444.214685][ T28] INFO: task syz.4.739:7020 blocked for more than 146 seconds. [ 444.223637][ T28] Not tainted syzkaller #0 [ 444.229658][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.241665][ T28] task:syz.4.739 state:D stack:26832 pid:7020 ppid:4280 flags:0x00004004 [ 444.251497][ T28] Call Trace: [ 444.254995][ T28] [ 444.257960][ T28] __schedule+0x11d1/0x40e0 [ 444.263035][ T28] ? __sched_text_start+0x8/0x8 [ 444.268039][ T28] ? __mutex_trylock_common+0x86/0x260 [ 444.274044][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 444.280663][ T28] schedule+0xb9/0x180 [ 444.285684][ T28] schedule_preempt_disabled+0xf/0x20 [ 444.294011][ T28] __mutex_lock+0x562/0xaf0 [ 444.298923][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 444.304129][ T28] ? ethnl_default_dumpit+0x95/0xed0 [ 444.310544][ T28] ? mutex_lock_nested+0x10/0x10 [ 444.315645][ T28] ethnl_default_dumpit+0x95/0xed0 [ 444.321450][ T28] ? __kmem_cache_alloc_node+0x140/0x260 [ 444.327418][ T28] ? netlink_dump+0x1ee/0xd00 [ 444.332467][ T28] ? rcu_is_watching+0x11/0xa0 [ 444.337987][ T28] ? netlink_dump+0x1ee/0xd00 [ 444.343773][ T28] netlink_dump+0x6a3/0xd00 [ 444.348343][ T28] ? netlink_lookup+0x200/0x200 [ 444.353638][ T28] ? genl_start+0x3fd/0x4a0 [ 444.358192][ T28] __netlink_dump_start+0x537/0x6f0 [ 444.363769][ T28] genl_family_rcv_msg_dumpit+0x323/0x3c0 [ 444.370137][ T28] ? genl_rcv_msg+0x790/0x790 [ 444.374970][ T28] ? genl_family_rcv_msg_doit+0x330/0x330 [ 444.381027][ T28] ? ethnl_default_start+0x5a0/0x5a0 [ 444.386711][ T28] ? genl_lock_done+0xd0/0xd0 [ 444.391948][ T28] ? memcpy+0x3c/0x60 [ 444.395988][ T28] ? genl_get_cmd+0x4cf/0x8b0 [ 444.401864][ T28] genl_rcv_msg+0x5cb/0x790 [ 444.406703][ T28] ? genl_bind+0x360/0x360 [ 444.411469][ T28] ? ethnl_default_notify+0x5f0/0x5f0 [ 444.416882][ T28] ? ethnl_default_doit+0xb40/0xb40 [ 444.422413][ T28] ? ethnl_default_start+0x5a0/0x5a0 [ 444.427912][ T28] ? ethnl_default_dumpit+0xed0/0xed0 [ 444.433994][ T28] netlink_rcv_skb+0x1fb/0x450 [ 444.439838][ T28] ? genl_bind+0x360/0x360 [ 444.444482][ T28] ? netlink_ack+0x1170/0x1170 [ 444.449769][ T28] ? down_read+0x1a8/0x2d0 [ 444.454351][ T28] genl_rcv+0x24/0x40 [ 444.458373][ T28] netlink_unicast+0x74d/0x8d0 [ 444.463754][ T28] netlink_sendmsg+0x8ad/0xbd0 [ 444.468683][ T28] ? netlink_getsockopt+0x550/0x550 [ 444.474210][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 444.479432][ T28] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 444.484759][ T28] ? security_socket_sendmsg+0x7c/0xa0 [ 444.490685][ T28] ? netlink_getsockopt+0x550/0x550 [ 444.495925][ T28] ____sys_sendmsg+0x5be/0x970 [ 444.501007][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 444.506356][ T28] ? __import_iovec+0x315/0x500 [ 444.514976][ T28] ? import_iovec+0x6f/0xa0 [ 444.522406][ T28] ___sys_sendmsg+0x2a2/0x360 [ 444.527315][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 444.536125][ T28] ? __sys_sendmsg+0x290/0x290 [ 444.544056][ T28] __se_sys_sendmsg+0x1bb/0x2a0 [ 444.549074][ T28] ? __x64_sys_sendmsg+0x80/0x80 [ 444.557802][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 444.564422][ T28] do_syscall_64+0x4c/0xa0 [ 444.568879][ T28] ? clear_bhb_loop+0x60/0xb0 [ 444.578514][ T28] ? clear_bhb_loop+0x60/0xb0 [ 444.584837][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.594333][ T28] RIP: 0033:0x7f3d3a99ce59 [ 444.598785][ T28] RSP: 002b:00007f3d38bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.608717][ T28] RAX: ffffffffffffffda RBX: 00007f3d3ac16180 RCX: 00007f3d3a99ce59 [ 444.623458][ T28] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 444.647367][ T28] RBP: 00007f3d3aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 444.657003][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.668869][ T28] R13: 00007f3d3ac16218 R14: 00007f3d3ac16180 R15: 00007fff848c7b48 [ 444.678288][ T28] [ 444.685172][ T28] INFO: task syz.3.740:7026 blocked for more than 146 seconds. [ 444.694488][ T28] Not tainted syzkaller #0 [ 444.703058][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.713161][ T28] task:syz.3.740 state:D stack:29168 pid:7026 ppid:4285 flags:0x00004004 [ 444.723102][ T28] Call Trace: [ 444.726414][ T28] [ 444.730816][ T28] __schedule+0x11d1/0x40e0 [ 444.735581][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 444.741922][ T28] ? __sched_text_start+0x8/0x8 [ 444.747560][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 444.753384][ T28] ? prepare_to_wait_event+0x430/0x470 [ 444.758903][ T28] schedule+0xb9/0x180 [ 444.763466][ T28] synchronize_rcu_expedited+0x7ad/0x890 [ 444.769437][ T28] ? synchronize_rcu+0x3f0/0x3f0 [ 444.774514][ T28] ? wake_bit_function+0x200/0x200 [ 444.780163][ T28] ? tomoyo_path_number_perm+0x205/0x650 [ 444.785880][ T28] ? __kasan_slab_alloc+0x6b/0x80 [ 444.791851][ T28] ? slab_post_alloc_hook+0x67/0x480 [ 444.797292][ T28] ? slab_pre_alloc_hook+0x59/0x310 [ 444.802978][ T28] ? rcu_is_watching+0x11/0xa0 [ 444.807906][ T28] ? kmem_cache_alloc+0x151/0x2f0 [ 444.813391][ T28] ? mpol_new+0x165/0x300 [ 444.817876][ T28] lru_cache_disable+0x22/0x30 [ 444.823005][ T28] __se_sys_mbind+0x483/0x810 [ 444.827731][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 444.833263][ T28] ? __x64_sys_mbind+0xf0/0xf0 [ 444.838068][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 444.844556][ T28] ? lock_chain_count+0x20/0x20 [ 444.851416][ T28] ? __x64_sys_mbind+0x1d/0xf0 [ 444.856238][ T28] do_syscall_64+0x4c/0xa0 [ 444.861035][ T28] ? clear_bhb_loop+0x60/0xb0 [ 444.865880][ T28] ? clear_bhb_loop+0x60/0xb0 [ 444.871359][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.877296][ T28] RIP: 0033:0x7fe42e79ce59 [ 444.882038][ T28] RSP: 002b:00007fe42f5bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 444.890699][ T28] RAX: ffffffffffffffda RBX: 00007fe42ea16090 RCX: 00007fe42e79ce59 [ 444.898805][ T28] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000001000 [ 444.907924][ T28] RBP: 00007fe42e832d6f R08: 0000000000000000 R09: 0000000000000002 [ 444.916732][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.925187][ T28] R13: 00007fe42ea16128 R14: 00007fe42ea16090 R15: 00007fff3b039ea8 [ 444.933432][ T28] [ 444.936638][ T28] [ 444.936638][ T28] Showing all locks held in the system: [ 444.945185][ T28] 3 locks held by kworker/0:0/7: [ 444.951544][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 444.963202][ T28] #1: ffffc900000c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 444.977314][ T28] #2: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 444.992787][ T28] 1 lock held by rcu_tasks_kthre/12: [ 444.998320][ T28] #0: ffffffff8cb2e770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 445.014880][ T28] 1 lock held by rcu_tasks_trace/13: [ 445.020513][ T28] #0: ffffffff8cb2ef90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 445.036197][ T28] 3 locks held by kworker/0:1/14: [ 445.041789][ T28] #0: ffff88802eddb538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.055603][ T28] #1: ffffc90000137d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.072647][ T28] #2: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 445.083879][ T28] 1 lock held by khungtaskd/28: [ 445.088849][ T28] #0: ffffffff8cb2dde0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 445.099476][ T28] 1 lock held by khugepaged/34: [ 445.104445][ T28] #0: ffffffff8cbd4ea8 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x66/0x800 [ 445.114138][ T28] 4 locks held by kworker/u5:0/48: [ 445.120997][ T28] #0: ffff88801d281138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.131956][ T28] #1: ffffc90000b97d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.143825][ T28] #2: ffff8880320d4428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.155337][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.166213][ T28] 2 locks held by getty/4034: [ 445.171886][ T28] #0: ffff88814d79b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 445.182135][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 445.192885][ T28] 4 locks held by udevd/4266: [ 445.197693][ T28] #0: ffff88801e3dbe80 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 445.206881][ T28] #1: ffff888028b99488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x410 [ 445.216556][ T28] #2: ffff88814724b008 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0xae/0x410 [ 445.226510][ T28] #3: ffff88807bacd190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 445.236704][ T28] 4 locks held by kworker/u5:1/4276: [ 445.242279][ T28] #0: ffff88801fb94938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.253185][ T28] #1: ffffc90003f87d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.266376][ T28] #2: ffff8880320e4428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.276703][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.287595][ T28] 4 locks held by kworker/u5:2/4279: [ 445.293441][ T28] #0: ffff8880559e1938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.309342][ T28] #1: ffffc90003fd7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.321829][ T28] #2: ffff8880320d0428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.332222][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.344462][ T28] 4 locks held by kworker/u5:3/4281: [ 445.350174][ T28] #0: ffff888052f70138 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.364566][ T28] #1: ffffc90003fe7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.376357][ T28] #2: ffff8880320c4428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.393570][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.407103][ T28] 3 locks held by syz-executor/4285: [ 445.415238][ T28] #0: ffff88805c0f5468 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500 [ 445.427773][ T28] #1: ffff88805c0f4428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x45b/0xf40 [ 445.442224][ T28] #2: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290 [ 445.453942][ T28] 4 locks held by kworker/u5:5/4288: [ 445.459789][ T28] #0: ffff888054b1b938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.471931][ T28] #1: ffffc90004037d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.483755][ T28] #2: ffff8880320dc428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.494167][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.505943][ T28] 4 locks held by kworker/u5:6/4289: [ 445.511597][ T28] #0: ffff888056a37138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.523110][ T28] #1: ffffc90004047d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.535998][ T28] #2: ffff8880320e0428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.550753][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.565360][ T28] 4 locks held by kworker/u5:7/4290: [ 445.570991][ T28] #0: ffff888072db7138 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.581842][ T28] #1: ffffc90004057d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.593524][ T28] #2: ffff8880320c8428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.603684][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.615127][ T28] 4 locks held by kworker/u5:8/4291: [ 445.620761][ T28] #0: ffff8880788e7138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.632624][ T28] #1: ffffc90004067d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.644329][ T28] #2: ffff88801ff2c428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 445.654724][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 445.666765][ T28] 3 locks held by kworker/u4:6/4336: [ 445.688037][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.703987][ T28] #1: ffffc90004647d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 445.714592][ T28] #2: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 445.730362][ T28] 6 locks held by kworker/1:8/4947: [ 445.735598][ T28] 1 lock held by syz.2.732/7003: [ 445.744584][ T28] #0: ffffffff8cb33ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 445.766328][ T28] 2 locks held by syz.0.737/7013: [ 445.773422][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 445.788484][ T28] #1: ffffffff8cb33ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 445.804169][ T28] 3 locks held by syz.4.739/7020: [ 445.809565][ T28] #0: ffffffff8dda8b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 445.817890][ T28] #1: ffff88807a8e0698 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x6f0 [ 445.834719][ T28] #2: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_dumpit+0x95/0xed0 [ 445.846911][ T28] 1 lock held by syz-executor/7029: [ 445.857621][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 445.867703][ T28] 1 lock held by syz-executor/7034: [ 445.879370][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 445.889061][ T28] 1 lock held by syz-executor/7036: [ 445.900442][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 445.913053][ T28] 1 lock held by syz-executor/7038: [ 445.918562][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 445.932926][ T28] 1 lock held by syz-executor/7041: [ 445.938191][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 445.948135][ T28] 1 lock held by dhcpcd/7043: [ 445.959770][ T28] #0: ffff88807bcee130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 445.974902][ T28] 1 lock held by dhcpcd/7044: [ 445.980979][ T28] #0: ffff888079672130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 445.994942][ T28] 1 lock held by dhcpcd/7045: [ 446.002638][ T28] #0: ffff888073834130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 446.016789][ T28] 1 lock held by dhcpcd/7046: [ 446.023078][ T28] #0: ffff88805496e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 446.036774][ T28] 1 lock held by dhcpcd/7047: [ 446.043078][ T28] #0: ffff8880794d4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 446.056697][ T28] 1 lock held by dhcpcd/7048: [ 446.064683][ T28] #0: ffff888026c7a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 446.076812][ T28] 1 lock held by syz-executor/7050: [ 446.082624][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.092582][ T28] 1 lock held by syz-executor/7055: [ 446.097921][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.112651][ T28] 1 lock held by syz-executor/7057: [ 446.117898][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.133121][ T28] 1 lock held by syz-executor/7059: [ 446.138734][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.148896][ T28] 1 lock held by syz-executor/7062: [ 446.159294][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.168821][ T28] 1 lock held by syz-executor/7065: [ 446.183024][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.194825][ T28] 1 lock held by syz-executor/7070: [ 446.203812][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.214975][ T28] 4 locks held by kworker/u5:9/7071: [ 446.223800][ T28] #0: ffff88801a66b138 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 446.237256][ T28] #1: ffffc9000604fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 446.253719][ T28] #2: ffff88808e63c428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 446.263963][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 446.281381][ T28] 1 lock held by syz-executor/7073: [ 446.286653][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.297124][ T28] 1 lock held by syz-executor/7074: [ 446.302752][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.312605][ T28] 4 locks held by kworker/u5:10/7076: [ 446.318097][ T28] #0: ffff8880559ef938 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 446.328955][ T28] #1: ffffc9000bf8fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 446.342288][ T28] #2: ffff8880320e8428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 446.354310][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 446.365060][ T28] 4 locks held by kworker/u5:11/7077: [ 446.370722][ T28] #0: ffff88807d17c938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 446.381943][ T28] #1: ffffc9000bf9fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 446.395599][ T28] #2: ffff8880779f4428 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x94/0xa50 [ 446.410932][ T28] #3: ffffffff8dea6be8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x607/0xa50 [ 446.424220][ T28] 1 lock held by syz-executor/7081: [ 446.432317][ T28] #0: ffffffff8dd48728 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0 [ 446.444290][ T28] [ 446.446772][ T28] ============================================= [ 446.446772][ T28] [ 446.461741][ T28] NMI backtrace for cpu 0 [ 446.466218][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 446.473444][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.483712][ T28] Call Trace: [ 446.487109][ T28] [ 446.490240][ T28] dump_stack_lvl+0x188/0x24e [ 446.495151][ T28] ? irq_work_queue+0xb8/0x140 [ 446.500078][ T28] ? show_regs_print_info+0x12/0x12 [ 446.505422][ T28] ? load_image+0x400/0x400 [ 446.510045][ T28] ? vprintk_emit+0x59f/0x6a0 [ 446.514774][ T28] ? printk_sprint+0x460/0x460 [ 446.519678][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 446.524865][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 446.531175][ T28] ? _printk+0xda/0x130 [ 446.535390][ T28] ? load_image+0x400/0x400 [ 446.539958][ T28] ? load_image+0x400/0x400 [ 446.544697][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 446.550808][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 446.556936][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 446.563231][ T28] watchdog+0xeee/0xf30 [ 446.567451][ T28] ? watchdog+0x1ed/0xf30 [ 446.571859][ T28] kthread+0x29d/0x330 [ 446.575971][ T28] ? hungtask_pm_notify+0x40/0x40 [ 446.581025][ T28] ? kthread_blkcg+0xd0/0xd0 [ 446.585823][ T28] ret_from_fork+0x1f/0x30 [ 446.590372][ T28] [ 446.594503][ T28] Sending NMI from CPU 0 to CPUs 1: [ 446.600050][ C1] NMI backtrace for cpu 1 [ 446.600061][ C1] CPU: 1 PID: 4947 Comm: kworker/1:8 Not tainted syzkaller #0 [ 446.600077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.600087][ C1] Workqueue: usb_hub_wq hub_event [ 446.600116][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 446.600138][ C1] Code: 84 e8 7f 7e 65 8b 15 85 e8 7f 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 446.600151][ C1] RSP: 0018:ffffc9000cbaeb18 EFLAGS: 00000246 [ 446.600164][ C1] RAX: ffffffff881dbe1c RBX: ffff88807e74610d RCX: ffff8880274f9dc0 [ 446.600175][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000020 [ 446.600193][ C1] RBP: ffffc9000cbaed20 R08: ffff8880274f9dc0 R09: 0000000000000020 [ 446.600203][ C1] R10: 00000000000000bc R11: 0000000000000002 R12: dffffc0000000000 [ 446.600213][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000006f5 [ 446.600222][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 446.600234][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.600245][ C1] CR2: 00005622bf339000 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 446.600260][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.600269][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.600278][ C1] Call Trace: [ 446.600283][ C1] [ 446.600288][ C1] __snd_usb_parse_audio_interface+0x343c/0x4b00 [ 446.600320][ C1] ? snd_usb_parse_audio_interface+0xb0/0xb0 [ 446.600348][ C1] snd_usb_parse_audio_interface+0x36/0xb0 [ 446.600370][ C1] snd_usb_create_stream+0x3ec/0x610 [ 446.600392][ C1] usb_audio_probe+0x130b/0x1d90 [ 446.600416][ C1] ? snd_usb_autosuspend+0x1b0/0x1b0 [ 446.600432][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 446.600454][ C1] usb_probe_interface+0x5c5/0xb20 [ 446.600476][ C1] ? usb_register_driver+0x3d0/0x3d0 [ 446.600492][ C1] really_probe+0x2aa/0xc70 [ 446.600512][ C1] ? pm_runtime_barrier+0x147/0x1c0 [ 446.600530][ C1] __driver_probe_device+0x18c/0x330 [ 446.600550][ C1] driver_probe_device+0x4f/0x420 [ 446.600570][ C1] __device_attach_driver+0x2c6/0x510 [ 446.600589][ C1] ? coredump_store+0x90/0x90 [ 446.600607][ C1] bus_for_each_drv+0x184/0x210 [ 446.600625][ C1] ? coredump_store+0x90/0x90 [ 446.600642][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 446.600663][ C1] __device_attach+0x2a8/0x480 [ 446.600683][ C1] ? device_attach+0x20/0x20 [ 446.600701][ C1] ? kobject_uevent_env+0x35f/0x8a0 [ 446.600719][ C1] bus_probe_device+0xbc/0x1e0 [ 446.600734][ C1] ? device_add+0x97c/0xfb0 [ 446.600749][ C1] device_add+0xa00/0xfb0 [ 446.600767][ C1] usb_set_configuration+0x1991/0x1fd0 [ 446.600795][ C1] usb_generic_driver_probe+0x89/0x150 [ 446.600812][ C1] usb_probe_device+0x139/0x270 [ 446.600830][ C1] ? usb_register_device_driver+0x230/0x230 [ 446.600845][ C1] really_probe+0x2aa/0xc70 [ 446.600864][ C1] ? pm_runtime_barrier+0x147/0x1c0 [ 446.600882][ C1] __driver_probe_device+0x18c/0x330 [ 446.600901][ C1] driver_probe_device+0x4f/0x420 [ 446.600921][ C1] __device_attach_driver+0x2c6/0x510 [ 446.600939][ C1] ? coredump_store+0x90/0x90 [ 446.600958][ C1] bus_for_each_drv+0x184/0x210 [ 446.600974][ C1] ? coredump_store+0x90/0x90 [ 446.600991][ C1] ? subsys_find_device_by_id+0x360/0x360 [ 446.601013][ C1] __device_attach+0x2a8/0x480 [ 446.601031][ C1] ? device_attach+0x20/0x20 [ 446.601047][ C1] ? __kmem_cache_free+0xb6/0x1f0 [ 446.601066][ C1] ? kobject_uevent_env+0x35f/0x8a0 [ 446.601083][ C1] bus_probe_device+0xbc/0x1e0 [ 446.601098][ C1] ? device_add+0x97c/0xfb0 [ 446.601112][ C1] device_add+0xa00/0xfb0 [ 446.601130][ C1] usb_new_device+0xd66/0x1650 [ 446.601153][ C1] ? lock_chain_count+0x20/0x20 [ 446.601172][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 446.601199][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 446.601215][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 446.601232][ C1] hub_event+0x2dcf/0x5560 [ 446.601272][ C1] ? hub_post_resume+0x120/0x120 [ 446.601290][ C1] ? read_lock_is_recursive+0x10/0x10 [ 446.601309][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 446.601324][ C1] ? _raw_spin_unlock+0x40/0x40 [ 446.601340][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 446.601357][ C1] ? process_one_work+0x7b0/0x1160 [ 446.601374][ C1] process_one_work+0x8a2/0x1160 [ 446.601398][ C1] ? worker_detach_from_pool+0x240/0x240 [ 446.601416][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 446.601431][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 446.601446][ C1] ? kthread_data+0x4b/0xc0 [ 446.601468][ C1] worker_thread+0xaa2/0x1270 [ 446.601492][ C1] ? __kthread_parkme+0x162/0x1c0 [ 446.601514][ C1] kthread+0x29d/0x330 [ 446.601527][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 446.601542][ C1] ? kthread_blkcg+0xd0/0xd0 [ 446.601556][ C1] ret_from_fork+0x1f/0x30 [ 446.601581][ C1] [ 447.110466][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 447.117562][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 447.124890][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.135153][ T28] Call Trace: [ 447.138456][ T28] [ 447.141564][ T28] dump_stack_lvl+0x188/0x24e [ 447.146341][ T28] ? memcpy+0x3c/0x60 [ 447.150480][ T28] ? show_regs_print_info+0x12/0x12 [ 447.155753][ T28] ? load_image+0x400/0x400 [ 447.160316][ T28] panic+0x2e5/0x730 [ 447.164250][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 447.169920][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 447.174564][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 447.180504][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 447.186782][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 447.192976][ T28] watchdog+0xf2d/0xf30 [ 447.197161][ T28] ? watchdog+0x1ed/0xf30 [ 447.201530][ T28] kthread+0x29d/0x330 [ 447.205629][ T28] ? hungtask_pm_notify+0x40/0x40 [ 447.210772][ T28] ? kthread_blkcg+0xd0/0xd0 [ 447.215487][ T28] ret_from_fork+0x1f/0x30 [ 447.220036][ T28] [ 447.223620][ T28] Kernel Offset: disabled [ 447.228088][ T28] Rebooting in 86400 seconds..