last executing test programs: 5m18.242644979s ago: executing program 2 (id=1997): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1288636", 0x5}], 0x1}}], 0x2, 0x4000) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 5m16.739250835s ago: executing program 2 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={r4, r3}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x28004800) mount$afs(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x4, &(0x7f0000000040)) 5m11.754941151s ago: executing program 2 (id=2008): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x35, "", [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x3782547cd4e8e663, 0x0, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xbe, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x0, 0x23, 0x1f, {0x1f, 0x22, "4f4752c8c6216ff4000f37020ec22c483855beab117b8354181451a7d4"}}, 0x0, 0x0, 0x0}, 0x0) 5m7.803424636s ago: executing program 2 (id=2018): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m7.165495554s ago: executing program 2 (id=2020): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) epoll_create1(0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close(r0) 5m5.442269505s ago: executing program 2 (id=2025): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5m4.641118527s ago: executing program 32 (id=2025): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1m39.494857463s ago: executing program 0 (id=2326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m28.575928306s ago: executing program 0 (id=2332): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x13, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x80000000, 0xf4, &(0x7f00000007c0)=""/244, 0x41000, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x4fffffd, {0x0, 0xffffffff, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 1m25.251067501s ago: executing program 0 (id=2336): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000003c0)={@my=0x0}) 1m24.00156569s ago: executing program 0 (id=2338): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r2, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 1m23.159830343s ago: executing program 0 (id=2343): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) 1m21.685796628s ago: executing program 5 (id=2345): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m20.301054988s ago: executing program 5 (id=2348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) listen(r0, 0x10001) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) fchdir(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') pread64(r1, &(0x7f0000000080)=""/220, 0xdc, 0x4007) 1m20.162187307s ago: executing program 0 (id=2349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2e28, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(r2) 1m18.189920612s ago: executing program 5 (id=2351): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0xcc, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x14}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @private0, 0xfffffffd}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24044800}, 0x40000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 1m18.076479661s ago: executing program 4 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000000400)}], 0x3}, 0x40000c4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000929000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.673481855s ago: executing program 1 (id=2353): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 1m17.518421799s ago: executing program 5 (id=2354): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xe) 1m15.0495195s ago: executing program 5 (id=2356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 1m13.90786137s ago: executing program 1 (id=2357): socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008890}, 0xc004) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000) 1m13.841179372s ago: executing program 4 (id=2358): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m12.575945567s ago: executing program 5 (id=2360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000002400)={[{0xa, 0xcc, 0xfa, 0x5, 0xff, 0x96, 0xc9, 0x6, 0x4, 0x3, 0x1, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0xb5, 0xef, 0x6, 0xbb, 0x2, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x28, 0x2, 0x1, 0x2a, 0x4, 0x9, 0xe, 0x40, 0xf4, 0x5, 0x200}], 0x6}) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f00000002c0)={&(0x7f0000000240), 0x0, 0x10, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0xa694, 0x3, r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r12 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r12, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x109301) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m11.311345604s ago: executing program 4 (id=2361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/23, 0x17, 0x0, 0x36}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1m5.790254739s ago: executing program 1 (id=2363): getresgid(&(0x7f0000000480), 0x0, 0x0) 1m4.509606256s ago: executing program 33 (id=2349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2e28, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(r2) 1m4.34220753s ago: executing program 4 (id=2366): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0xe) 1m1.282755413s ago: executing program 1 (id=2367): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x400000000003ff, 0x7}) 56.799712817s ago: executing program 34 (id=2360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000002400)={[{0xa, 0xcc, 0xfa, 0x5, 0xff, 0x96, 0xc9, 0x6, 0x4, 0x3, 0x1, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0xb5, 0xef, 0x6, 0xbb, 0x2, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x28, 0x2, 0x1, 0x2a, 0x4, 0x9, 0xe, 0x40, 0xf4, 0x5, 0x200}], 0x6}) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f00000002c0)={&(0x7f0000000240), 0x0, 0x10, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd2(0x8, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0xa694, 0x3, r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r12 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r12, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x109301) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x0) 54.595530301s ago: executing program 4 (id=2370): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) socket$unix(0x1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x43) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 54.045023733s ago: executing program 1 (id=2371): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) close(r0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000500)={r3, 0x1ff, 0x0, 0xffffffff, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffe, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b8, 0x1], [0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000002000)=[0x0], 0x0, 0x0, 0x0, 0x1}) 52.330140501s ago: executing program 1 (id=2373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, 0x0) writev(r1, &(0x7f0000000100), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') exit(0xffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r5}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 49.449747536s ago: executing program 4 (id=2374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f00000000c0), 0x6e, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 48.552988537s ago: executing program 3 (id=2376): getresgid(&(0x7f0000000480), 0x0, 0x0) 45.883239877s ago: executing program 3 (id=2377): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000005e80)=ANY=[], 0x80}}, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 40.990949964s ago: executing program 3 (id=2378): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x2400, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x8) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0xf533, 0x2}, 0x20}) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000480)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x1, 0x2, 0x5, 0x5}}], 0x38, 0x4855}, 0x24000052) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 37.267061559s ago: executing program 35 (id=2373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, 0x0) writev(r1, &(0x7f0000000100), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') exit(0xffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r5}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 34.263248531s ago: executing program 36 (id=2374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f00000000c0), 0x6e, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) 29.312136458s ago: executing program 3 (id=2381): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x101, @local, 0xb}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x7000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000004c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xa, 0x431160a1, 0x4000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1454c2, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)={@map, 0xffffffffffffffff, 0x19, 0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 24.433953517s ago: executing program 3 (id=2382): io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(0x0, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17.890045328s ago: executing program 3 (id=2383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x0, &(0x7f0000000100), 0x0, 0x643, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) 0s ago: executing program 37 (id=2383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x0, &(0x7f0000000100), 0x0, 0x643, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) kernel console output (not intermixed with test programs): USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.184231][ T5618] usb 1-1: config 0 descriptor?? [ 709.340265][ T5826] usbhid 5-1:0.0: can't add hid device: -71 [ 709.340622][ T5826] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 709.392196][ T5826] usb 5-1: USB disconnect, device number 11 [ 709.489768][ T5618] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 711.049187][ T5618] usb 1-1: USB disconnect, device number 8 [ 711.143598][ T5618] usblp0: removed [ 712.298242][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 712.448138][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 712.454300][ T9] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 712.454327][ T9] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 712.493921][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 712.493954][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 712.493976][ T9] usb 1-1: Product: syz [ 712.493991][ T9] usb 1-1: Manufacturer: syz [ 712.494006][ T9] usb 1-1: SerialNumber: syz [ 712.778268][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.780685][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.819877][ T9] usb 1-1: USB disconnect, device number 9 [ 717.021493][ T5618] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 718.037270][ T5618] usb 1-1: Using ep0 maxpacket: 32 [ 718.093635][ T5618] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 718.093667][ T5618] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 718.093689][ T5618] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 718.093754][ T5618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.093778][ T5618] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.093803][ T5618] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 718.093847][ T5618] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 718.093873][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.227035][ T5618] usb 1-1: config 0 descriptor?? [ 719.232039][ T5618] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 719.284710][ T5618] usb 1-1: USB disconnect, device number 10 [ 719.820617][ T5618] usblp0: removed [ 722.332559][ T5618] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 723.118413][ T5618] usb 5-1: Using ep0 maxpacket: 16 [ 723.122312][ T5618] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 723.122341][ T5618] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 723.127433][ T5618] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 723.127463][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 723.127485][ T5618] usb 5-1: Product: syz [ 723.127501][ T5618] usb 5-1: Manufacturer: syz [ 723.127517][ T5618] usb 5-1: SerialNumber: syz [ 723.779174][ T5618] usb 5-1: USB disconnect, device number 12 [ 726.858159][ T1259] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 727.018567][ T1259] usb 3-1: Using ep0 maxpacket: 32 [ 727.021004][ T1259] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 727.021032][ T1259] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 727.021053][ T1259] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 727.021105][ T1259] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.021128][ T1259] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 727.021153][ T1259] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 727.021197][ T1259] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 727.021220][ T1259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.026836][ T1259] usb 3-1: config 0 descriptor?? [ 727.342276][ T1259] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 732.947020][T11056] syz_tun: entered allmulticast mode [ 734.508297][ T5618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 735.158378][ T5618] usb 5-1: Using ep0 maxpacket: 32 [ 735.161237][ T5618] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 735.161264][ T5618] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 735.161286][ T5618] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 735.161337][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 735.161359][ T5618] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 735.161383][ T5618] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 735.161427][ T5618] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 735.161451][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.285610][ T5618] usb 5-1: config 0 descriptor?? [ 735.511477][ T5618] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 737.169165][T11093] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 737.724673][ T820] usb 5-1: USB disconnect, device number 13 [ 737.857035][ T31] usb 3-1: USB disconnect, device number 4 [ 737.873157][ T820] usblp1: removed [ 738.358091][T11104] ALSA: mixer_oss: invalid OSS volume '' [ 738.777465][ T31] usblp0: removed [ 739.980910][ T866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 740.139763][ T866] usb 1-1: Using ep0 maxpacket: 16 [ 740.145411][ T866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 740.166486][ T866] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 740.166508][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.166522][ T866] usb 1-1: Product: syz [ 740.166533][ T866] usb 1-1: Manufacturer: syz [ 740.166543][ T866] usb 1-1: SerialNumber: syz [ 740.214441][ T866] usb 1-1: config 0 descriptor?? [ 740.242493][ T866] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 740.282868][ T866] usb 1-1: Detected FT232R [ 740.646929][ T866] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 741.343019][T11130] ceph: No mds server is up or the cluster is laggy [ 741.464268][ T820] libceph: connect (1)[c::]:6789 error -101 [ 741.483499][ T820] libceph: mon0 (1)[c::]:6789 connect error [ 741.843776][ T866] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 741.863930][ T866] usb 1-1: USB disconnect, device number 11 [ 742.158158][ T5618] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 742.308149][ T5618] usb 5-1: Using ep0 maxpacket: 32 [ 742.310582][ T5618] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 742.310610][ T5618] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 742.310633][ T5618] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 742.310686][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 742.310709][ T5618] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 742.310734][ T5618] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 742.310777][ T5618] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 742.310802][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.334337][ T866] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 742.413956][ T5618] usb 5-1: config 0 descriptor?? [ 742.513823][ T866] ftdi_sio 1-1:0.0: device disconnected [ 742.646469][ T5618] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 744.658157][ T820] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 744.827082][ T820] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 744.827116][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.827139][ T820] usb 1-1: Product: syz [ 744.827154][ T820] usb 1-1: Manufacturer: syz [ 744.827170][ T820] usb 1-1: SerialNumber: syz [ 745.444108][ T820] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 747.436719][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.437421][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.263019][ T866] usb 1-1: USB disconnect, device number 12 [ 748.513917][ T866] usblp1: removed [ 750.128143][T11213] ALSA: mixer_oss: invalid OSS volume '' [ 750.238377][ T5724] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 750.428207][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 750.431126][ T5724] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 750.431152][ T5724] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 750.431173][ T5724] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 750.431224][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 750.431247][ T5724] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 750.431273][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 750.431315][ T5724] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 750.431338][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.547831][ T5724] usb 1-1: config 0 descriptor?? [ 750.824834][ T5724] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 753.676434][T11236] vivid-000: kernel_thread() failed [ 754.291578][ T866] usb 5-1: USB disconnect, device number 14 [ 754.708110][T11256] ALSA: mixer_oss: invalid OSS volume '' [ 755.424708][ T866] usblp0: removed [ 755.918512][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 756.068163][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 756.070707][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.070760][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 756.070789][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 756.070815][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 756.070838][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 756.074147][ T31] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 756.074176][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 756.074197][ T31] usb 3-1: Product: syz [ 756.074213][ T31] usb 3-1: Manufacturer: syz [ 756.074227][ T31] usb 3-1: SerialNumber: syz [ 756.212285][ T31] usb 3-1: config 0 descriptor?? [ 756.422805][ T31] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 756.422831][ T31] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 756.598194][ T866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 756.623718][ T31] radio-si470x 3-1:0.0: software version 252, hardware version 249 [ 756.623746][ T31] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 756.748202][ T866] usb 2-1: Using ep0 maxpacket: 32 [ 756.752767][ T866] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 756.752797][ T866] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 756.752818][ T866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 756.752872][ T866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 756.752896][ T866] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 756.752935][ T866] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 756.752979][ T866] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 756.753003][ T866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.858923][ T866] usb 2-1: config 0 descriptor?? [ 756.873006][ T31] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 756.873132][ T31] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 756.874841][ T31] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 756.875482][ T31] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 756.968236][ T31] usb 3-1: USB disconnect, device number 5 [ 757.113544][ T866] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 758.540003][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.411631][ T31] usb 2-1: USB disconnect, device number 11 [ 759.518856][ T31] usblp0: removed [ 760.308648][ T866] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 761.051421][T11299] vivid-000: kernel_thread() failed [ 761.120627][ T866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 761.122147][ T866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.122171][ T866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.127134][ T866] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 761.127166][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.127186][ T866] usb 5-1: Product: syz [ 761.127201][ T866] usb 5-1: Manufacturer: syz [ 761.127216][ T866] usb 5-1: SerialNumber: syz [ 761.300258][ T866] usb 5-1: selecting invalid altsetting 1 [ 761.338478][ T866] usb 5-1: unit 6 not found! [ 761.708233][ T5740] usb 1-1: USB disconnect, device number 13 [ 762.426141][ T866] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 762.652700][ T5740] usblp1: removed [ 763.807265][ T866] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 763.934050][ T866] usb 5-1: USB disconnect, device number 15 [ 764.107492][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 764.852121][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 765.011740][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 765.027371][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 765.027403][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 765.027427][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 765.027484][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 765.027509][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 765.027537][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 765.027586][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 765.027612][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.743055][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 765.864589][T11343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.905830][ T31] usb 3-1: config 0 descriptor?? [ 766.147824][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 768.769089][ T866] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 769.313917][ T5846] usb 3-1: USB disconnect, device number 6 [ 769.342269][ T866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 769.344745][ T866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.344771][ T866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.369166][ T866] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 769.369195][ T866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.369216][ T866] usb 5-1: Product: syz [ 769.369231][ T866] usb 5-1: Manufacturer: syz [ 769.369246][ T866] usb 5-1: SerialNumber: syz [ 769.418641][ T5846] usblp0: removed [ 769.449308][ T866] usb 5-1: selecting invalid altsetting 1 [ 769.451631][ T866] usb 5-1: unit 6 not found! [ 770.038214][ T866] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 771.791290][ T866] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 771.811868][ T866] usb 5-1: USB disconnect, device number 16 [ 771.967792][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.127796][ T5616] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 772.127817][ T5616] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 777.051294][ T866] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 777.214313][ T866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 777.217329][ T866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.217356][ T866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.254388][ T866] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 777.254420][ T866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.254441][ T866] usb 2-1: Product: syz [ 777.254457][ T866] usb 2-1: Manufacturer: syz [ 777.254473][ T866] usb 2-1: SerialNumber: syz [ 777.329040][ T866] usb 2-1: selecting invalid altsetting 1 [ 777.329845][ T866] usb 2-1: unit 6 not found! [ 777.876355][T11449] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 778.872868][ T866] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 779.087057][T11453] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1643'. [ 779.120863][ T866] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 779.126813][ T866] usb 2-1: USB disconnect, device number 12 [ 779.357738][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.602700][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 781.271948][ T866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 781.418089][ T866] usb 3-1: Using ep0 maxpacket: 32 [ 781.421754][ T866] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 781.421784][ T866] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 781.421805][ T866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 781.421969][ T866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 781.422000][ T866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 781.422026][ T866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 781.422071][ T866] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 781.422186][ T866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.000200][ T866] usb 3-1: config 0 descriptor?? [ 782.238992][ T866] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 782.296921][T11463] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.719778][T11500] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1658'. [ 785.268875][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 785.435604][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.435634][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 785.467840][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice= 0.40 [ 785.467933][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.467956][ T31] usb 1-1: Product: syz [ 785.467971][ T31] usb 1-1: Manufacturer: syz [ 785.471142][ T31] usb 1-1: SerialNumber: syz [ 786.266023][ T31] snd_usb_podhd 1-1:1.0: Line 6 POD HD400 found [ 786.266050][ T31] usb 1-1: selecting invalid altsetting 5 [ 786.266066][ T31] snd_usb_podhd 1-1:1.0: set_interface failed [ 786.498391][T11510] ipvlan2: entered allmulticast mode [ 786.504030][T11510] batadv_slave_1: entered allmulticast mode [ 786.603576][T11510] batman_adv: batadv0: Adding interface: ipvlan2 [ 786.603602][T11510] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.605504][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.605528][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.605540][T11510] batman_adv: batadv0: Interface activated: ipvlan2 [ 786.841485][ T31] snd_usb_podhd 1-1:1.0: Line 6 POD HD400 now disconnected [ 786.912231][ T31] snd_usb_podhd 1-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 786.983525][ T31] usb 1-1: USB disconnect, device number 14 [ 788.888391][ T5740] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 789.038210][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 789.043644][ T5740] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 789.043672][ T5740] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 789.043693][ T5740] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 789.043805][ T5740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 789.043828][ T5740] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 789.043853][ T5740] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 789.044302][ T5740] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 789.044321][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.201291][ T5740] usb 5-1: config 0 descriptor?? [ 789.535550][ T5740] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 790.161449][T11539] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1671'. [ 791.650193][ T866] usb 5-1: USB disconnect, device number 17 [ 792.508968][ T866] usblp1: removed [ 793.096662][T11556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.944163][T11558] ipvlan2: entered allmulticast mode [ 793.944224][T11558] batadv_slave_1: entered allmulticast mode [ 794.118389][T11558] batman_adv: batadv0: Adding interface: ipvlan2 [ 794.118409][T11558] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.118565][T11558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.118636][T11558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.118654][T11558] batman_adv: batadv0: Interface activated: ipvlan2 [ 798.665063][ T5724] usb 3-1: USB disconnect, device number 7 [ 799.094653][ T5724] usblp0: removed [ 800.204495][T11589] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1684'. [ 808.771630][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.771840][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.818739][ T5618] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 809.047561][ T5618] usb 3-1: Using ep0 maxpacket: 32 [ 809.070400][ T5618] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 809.070429][ T5618] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 809.070450][ T5618] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 809.070502][ T5618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 809.070526][ T5618] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 809.070552][ T5618] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 809.070595][ T5618] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 809.070618][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.075117][T11653] ALSA: seq fatal error: cannot create timer (-22) [ 809.173993][ T5618] usb 3-1: config 0 descriptor?? [ 809.388685][ T5618] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 812.905880][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1712'. [ 813.211243][ T820] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 813.368195][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 813.372875][ T820] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 813.372903][ T820] usb 2-1: config 1 has no interface number 0 [ 813.373029][ T820] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 813.373057][ T820] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 813.373082][ T820] usb 2-1: config 1 interface 105 has no altsetting 0 [ 813.404198][ T820] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 813.405742][ T820] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 813.407292][ T820] usb 2-1: Product: syz [ 813.407336][ T820] usb 2-1: Manufacturer: syz [ 813.408460][ T820] usb 2-1: SerialNumber: syz [ 813.647313][T11676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 813.647824][T11676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 814.167096][T11676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 814.167298][T11676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 814.373576][ T820] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 814.404048][ T820] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 814.466316][ T820] usb 2-1: USB disconnect, device number 13 [ 815.221063][T11700] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1719'. [ 816.626922][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 818.033466][ T866] usb 3-1: USB disconnect, device number 8 [ 818.162450][ T866] usblp0: removed [ 820.761704][T11748] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1734'. [ 821.840719][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 821.988116][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 821.990561][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 821.990587][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 821.990608][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 821.990656][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 821.990679][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 821.990703][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 821.990744][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 821.990768][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.099657][ T9] usb 5-1: config 0 descriptor?? [ 822.335758][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 822.405169][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 825.666924][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 826.145620][ T9] IPVS: starting estimator thread 0... [ 826.228809][T11786] IPVS: using max 8 ests per chain, 19200 per kthread [ 828.486927][T11799] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1749'. [ 828.740927][T11805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'. [ 835.027650][T11846] openvswitch: netlink: EtherType 50a is less than min 600 [ 835.978342][ T5846] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 836.278752][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 836.281621][ T5846] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 836.281646][ T5846] usb 2-1: config 0 has no interface number 0 [ 836.285983][ T5846] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 836.286012][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.286094][ T5846] usb 2-1: Product: syz [ 836.286110][ T5846] usb 2-1: Manufacturer: syz [ 836.286125][ T5846] usb 2-1: SerialNumber: syz [ 836.390288][ T5846] usb 2-1: config 0 descriptor?? [ 836.426705][ T5846] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 836.702538][ T5846] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 836.733873][ T5846] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 837.050105][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 837.057828][ T9] usb 2-1: USB disconnect, device number 14 [ 837.381792][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 837.497804][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 837.521112][ T9] quatech2 2-1:0.51: device disconnected [ 837.930207][ T31] usb 5-1: USB disconnect, device number 18 [ 838.049056][ T31] usblp0: removed [ 838.516377][T11870] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1767'. [ 843.108799][T11898] ALSA: mixer_oss: invalid OSS volume '' [ 843.972515][T11904] openvswitch: netlink: EtherType 50a is less than min 600 [ 849.262687][T11941] ALSA: mixer_oss: invalid OSS volume '' [ 851.851385][T11961] openvswitch: netlink: EtherType 50a is less than min 600 [ 852.211454][T11948] ceph: No mds server is up or the cluster is laggy [ 852.386854][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 852.387067][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 852.682056][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 852.682274][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 855.439375][T11994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.590749][T11999] ALSA: mixer_oss: invalid OSS volume '' [ 857.989099][T12005] ceph: No mds server is up or the cluster is laggy [ 858.295965][ T31] libceph: connect (1)[c::]:6789 error -101 [ 858.296183][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 860.630455][T12025] openvswitch: netlink: EtherType 50a is less than min 600 [ 861.934625][T11797] libceph: connect (1)[c::]:6789 error -101 [ 861.934823][T11797] libceph: mon0 (1)[c::]:6789 connect error [ 862.188620][T11797] libceph: connect (1)[c::]:6789 error -101 [ 862.188818][T11797] libceph: mon0 (1)[c::]:6789 connect error [ 862.194100][T12018] ceph: No mds server is up or the cluster is laggy [ 863.332929][ T820] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 863.989727][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'. [ 864.458206][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 864.461768][ T820] usb 5-1: config 6 has an invalid interface number: 221 but max is 0 [ 864.461795][ T820] usb 5-1: config 6 has no interface number 0 [ 864.461827][ T820] usb 5-1: config 6 interface 221 has no altsetting 0 [ 864.466738][ T820] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 864.466766][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.466787][ T820] usb 5-1: Product: syz [ 864.466802][ T820] usb 5-1: Manufacturer: syz [ 864.466817][ T820] usb 5-1: SerialNumber: syz [ 864.926139][ T820] f81534a_ctrl 5-1:6.221: probe with driver f81534a_ctrl failed with error -71 [ 864.976082][ T820] usb 5-1: USB disconnect, device number 19 [ 867.209045][T12064] ceph: No mds server is up or the cluster is laggy [ 867.615543][ T820] libceph: connect (1)[c::]:6789 error -101 [ 867.615743][ T820] libceph: mon0 (1)[c::]:6789 connect error [ 868.874625][T12081] openvswitch: netlink: EtherType 50a is less than min 600 [ 870.450596][T12084] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 870.898860][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.898963][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.461310][T12103] program syz.0.1824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 874.409391][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'. [ 876.750566][T12134] openvswitch: netlink: EtherType 50a is less than min 600 [ 877.308287][T12137] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 883.174449][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 885.102800][T12194] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 888.478153][ T5724] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 889.949761][ T5724] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 889.949794][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.949823][ T5724] usb 5-1: Product: syz [ 889.949839][ T5724] usb 5-1: Manufacturer: syz [ 889.949855][ T5724] usb 5-1: SerialNumber: syz [ 890.566615][ T5724] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 893.202449][ T5724] usb 5-1: USB disconnect, device number 20 [ 893.292145][T12246] vivid-000: kernel_thread() failed [ 893.349545][ T5724] usblp0: removed [ 899.695791][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'. [ 900.259059][T12319] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 906.755982][T12343] input: syz1 as /devices/virtual/input/input8 [ 907.512159][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 919.666746][T12450] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 920.712753][T12458] IPVS: stopping master sync thread 12319 ... [ 924.781753][T12498] netlink: 'syz.4.1933': attribute type 12 has an invalid length. [ 924.781778][T12498] netlink: 'syz.4.1933': attribute type 29 has an invalid length. [ 924.781792][T12498] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1933'. [ 924.781824][T12498] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1933'. [ 927.081314][T12506] IPVS: stopping master sync thread 12450 ... [ 927.785799][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 927.786006][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 928.321608][T12517] ceph: No mds server is up or the cluster is laggy [ 928.439619][ T31] libceph: connect (1)[c::]:6789 error -101 [ 928.441678][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 930.598114][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 930.792044][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 930.793275][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.793300][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.829846][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 930.829888][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.829910][ T31] usb 2-1: Product: syz [ 930.829926][ T31] usb 2-1: Manufacturer: syz [ 930.829941][ T31] usb 2-1: SerialNumber: syz [ 930.951893][ T31] usb 2-1: selecting invalid altsetting 1 [ 930.966533][ T31] usb 2-1: unit 6 not found! [ 931.650228][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.650302][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.868461][ T31] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 932.033960][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 932.054278][ T31] usb 2-1: USB disconnect, device number 15 [ 932.166582][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 933.027523][T12560] IPVS: stopping master sync thread 10224 ... [ 933.701910][ T31] libceph: connect (1)[c::]:6789 error -101 [ 933.702123][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 934.095447][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 934.095649][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 934.243571][T12567] ceph: No mds server is up or the cluster is laggy [ 939.298091][T12613] IPVS: stopping master sync thread 7874 ... [ 941.701393][ T31] libceph: connect (1)[c::]:6789 error -101 [ 941.701718][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 942.086719][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 942.088959][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 942.262352][T12625] ceph: No mds server is up or the cluster is laggy [ 943.858913][T12654] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 946.187783][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 946.194116][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 946.544497][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 946.544664][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 946.570849][T12675] ceph: No mds server is up or the cluster is laggy [ 949.754295][T12699] syz.2.1992 (12699) used greatest stack depth: 18072 bytes left [ 957.176334][ T5739] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 957.698079][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 957.710925][ T5739] usb 3-1: config 0 interface 0 has no altsetting 0 [ 957.710965][ T5739] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 957.710989][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.775516][ T5739] usb 3-1: config 0 descriptor?? [ 958.533004][ T5739] usbhid 3-1:0.0: can't add hid device: -71 [ 958.533152][ T5739] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 958.537894][ T5739] usb 3-1: USB disconnect, device number 9 [ 961.090267][T12790] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 961.976089][T12792] fuse: fd is not a fuse device [ 962.310706][ T31] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 962.479321][T12289] syz_tun (unregistering): left allmulticast mode [ 962.494513][ T31] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 962.494544][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.494565][ T31] usb 1-1: Product: syz [ 962.494580][ T31] usb 1-1: Manufacturer: syz [ 962.494595][ T31] usb 1-1: SerialNumber: syz [ 963.075028][ T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 963.353933][ T31] usb 1-1: USB disconnect, device number 15 [ 963.610171][ T31] usblp0: removed [ 963.630733][ T5855] udevd[5855]: setting mode of /dev/bus/usb/001/015 to 020664 failed: No such file or directory [ 963.630838][ T5855] udevd[5855]: setting owner of /dev/bus/usb/001/015 to uid=0, gid=0 failed: No such file or directory [ 964.515026][ T6147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.651839][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 964.685821][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 964.704253][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 964.722923][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 964.745268][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 965.123608][T12814] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 965.547630][T12808] bridge0: port 3(vlan2) entered blocking state [ 965.560741][T12808] bridge0: port 3(vlan2) entered disabled state [ 965.560991][T12808] vlan2: entered allmulticast mode [ 965.561009][T12808] geneve0: entered allmulticast mode [ 965.604117][T12808] vlan2: entered promiscuous mode [ 965.604136][T12808] geneve0: entered promiscuous mode [ 966.260510][ T6147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.617511][ T6147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.133565][ T6147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.488186][ T5616] Bluetooth: hci0: command tx timeout [ 967.548079][ T820] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 967.548365][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 967.718072][ T820] usb 2-1: device descriptor read/64, error -32 [ 967.958062][ T820] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 967.958331][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 968.088159][ T820] usb 2-1: device descriptor read/64, error -32 [ 968.200213][ T820] usb usb2-port1: attempt power cycle [ 968.598220][ T820] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 968.921792][T12857] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 969.568210][ T5616] Bluetooth: hci0: command tx timeout [ 971.003202][ T820] usb 2-1: device descriptor read/all, error -71 [ 971.648540][ T5616] Bluetooth: hci0: command tx timeout [ 972.548498][ T6147] bridge_slave_1: left allmulticast mode [ 972.548739][ T6147] bridge_slave_1: left promiscuous mode [ 972.581301][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.792514][ T6147] bridge_slave_0: left allmulticast mode [ 972.792552][ T6147] bridge_slave_0: left promiscuous mode [ 972.792890][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.942836][T12902] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 973.728491][ T5616] Bluetooth: hci0: command tx timeout [ 974.380461][ T820] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 974.569101][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 975.479499][ T820] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 975.479530][ T820] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 975.482590][ T820] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 975.482618][ T820] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 975.482639][ T820] usb 2-1: Product: syz [ 975.482654][ T820] usb 2-1: Manufacturer: syz [ 975.482669][ T820] usb 2-1: SerialNumber: syz [ 977.509099][ T820] usb 2-1: USB disconnect, device number 20 [ 977.540558][ T6885] udevd[6885]: setting mode of /dev/bus/usb/002/020 to 020664 failed: No such file or directory [ 977.540742][ T6885] udevd[6885]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 977.753049][T12929] fuse: fd is not a fuse device [ 979.610946][ T6147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.698923][ T6147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.742234][ T6147] bond0 (unregistering): Released all slaves [ 979.920854][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 979.923157][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.923287][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.923508][T12805] bridge_slave_0: entered allmulticast mode [ 979.942584][T12805] bridge_slave_0: entered promiscuous mode [ 979.957827][T11797] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 979.988662][T12805] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.988870][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.989184][T12805] bridge_slave_1: entered allmulticast mode [ 979.994829][T12805] bridge_slave_1: entered promiscuous mode [ 980.127340][T12805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.153160][T11797] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 980.153190][T11797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.153209][T11797] usb 5-1: Product: syz [ 980.153223][T11797] usb 5-1: Manufacturer: syz [ 980.153238][T11797] usb 5-1: SerialNumber: syz [ 980.180699][T12805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.307893][T12805] team0: Port device team_slave_0 added [ 980.333690][T12805] team0: Port device team_slave_1 added [ 980.493269][T12805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.493286][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.493309][T12805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.495338][T12805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.495352][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.495375][T12805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.524317][T11797] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 980.647620][T11797] usb 5-1: USB disconnect, device number 21 [ 981.932198][T11797] usblp0: removed [ 984.191994][ T5740] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 984.444332][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 984.449549][ T5740] usb 5-1: Using ep0 maxpacket: 16 [ 984.471758][T12805] hsr_slave_0: entered promiscuous mode [ 984.473076][T12805] hsr_slave_1: entered promiscuous mode [ 984.473901][T12805] debugfs: 'hsr0' already exists in 'hsr' [ 984.473923][T12805] Cannot create hsr debugfs directory [ 984.484201][ T5740] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 984.484254][ T5740] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 984.503675][ T5740] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 984.503766][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 984.503819][ T5740] usb 5-1: Product: syz [ 984.503859][ T5740] usb 5-1: Manufacturer: syz [ 984.503900][ T5740] usb 5-1: SerialNumber: syz [ 984.793487][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.794128][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.881859][ T5740] usb 5-1: USB disconnect, device number 22 [ 988.033420][T13019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.342199][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 988.361182][T11797] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 988.538232][T11797] usb 2-1: device descriptor read/64, error -71 [ 988.591583][T12805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 988.742034][T12805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.743263][T12805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 988.800357][T11797] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 988.847949][T12805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.852625][T12805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 988.888730][T12805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.893411][T12805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 988.938076][T11797] usb 2-1: device descriptor read/64, error -71 [ 988.977462][T12805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 989.048802][T11797] usb usb2-port1: attempt power cycle [ 989.238258][ T6147] hsr_slave_0: left promiscuous mode [ 989.278628][ T6147] hsr_slave_1: left promiscuous mode [ 989.280416][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.280547][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.399902][T11797] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 989.584501][T11797] usb 2-1: device descriptor read/8, error -71 [ 989.625530][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.625560][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.828156][T11797] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 989.938176][T11797] usb 2-1: device descriptor read/8, error -71 [ 990.058465][T11797] usb usb2-port1: unable to enumerate USB device [ 990.312561][ T6147] veth1_macvtap: left promiscuous mode [ 990.312801][ T6147] veth0_macvtap: left promiscuous mode [ 990.314384][ T6147] veth1_vlan: left promiscuous mode [ 990.314589][ T6147] veth0_vlan: left promiscuous mode [ 990.468085][T11797] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 990.630187][T11797] usb 5-1: Using ep0 maxpacket: 16 [ 990.654808][T11797] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 990.654835][T11797] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 990.693889][T11797] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 990.693925][T11797] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 990.693945][T11797] usb 5-1: Product: syz [ 990.693958][T11797] usb 5-1: Manufacturer: syz [ 990.693972][T11797] usb 5-1: SerialNumber: syz [ 990.959870][T13050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.960652][T13050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.003074][T11797] usb 5-1: USB disconnect, device number 23 [ 993.411890][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.411961][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.426777][ T6147] team0 (unregistering): Port device team_slave_1 removed [ 993.514342][ T6147] team0 (unregistering): Port device team_slave_0 removed [ 993.688289][T13070] fuse: Unknown parameter 'grou00000000000000000000' [ 993.876990][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000090 [ 993.901486][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x600000000d0 [ 993.931993][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 993.965141][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000030 [ 993.996697][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000070 [ 994.048879][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000080 [ 994.050371][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 994.123077][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000010 [ 994.192627][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000050 [ 994.240545][T13074] kvm: kvm [13071]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000000 [ 994.638960][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.779649][T12805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.856663][T12805] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.964239][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.964550][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.025391][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.025519][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.489310][T12805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.406939][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 998.570361][T12805] veth0_vlan: entered promiscuous mode [ 998.578114][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 998.596847][ T10] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 998.596868][ T10] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 998.634679][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 998.634702][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 998.634717][ T10] usb 5-1: Product: syz [ 998.634727][ T10] usb 5-1: Manufacturer: syz [ 998.634737][ T10] usb 5-1: SerialNumber: syz [ 998.636728][T12805] veth1_vlan: entered promiscuous mode [ 998.782010][T12805] veth0_macvtap: entered promiscuous mode [ 998.801196][T12805] veth1_macvtap: entered promiscuous mode [ 998.864651][T12805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.908174][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.909298][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.982940][ T10] usb 5-1: USB disconnect, device number 24 [ 998.996615][T12805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.023599][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.024772][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.061558][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.062837][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.010362][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.010385][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.569316][T13140] fuse: fd is not a fuse device [ 1001.693668][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.693690][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.064201][T13158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.718865][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1004.908109][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1004.955218][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1004.955260][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 1004.955284][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.001091][ T9] usb 2-1: config 0 descriptor?? [ 1005.143363][T13175] fuse: Unknown parameter 'group_i00000000000000000000' [ 1005.408138][ T5724] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1005.569282][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 1005.962119][ T5724] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.962145][ T5724] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1006.003555][ T5724] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1006.003586][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1006.003608][ T5724] usb 5-1: Product: syz [ 1006.003624][ T5724] usb 5-1: Manufacturer: syz [ 1006.003638][ T5724] usb 5-1: SerialNumber: syz [ 1006.301210][T13170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.340991][T13170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.388982][ T5724] usb 5-1: USB disconnect, device number 25 [ 1006.428120][ T5739] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1006.588997][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 1006.597277][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.597334][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1006.597364][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1006.597386][ T5739] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1006.597410][ T5739] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.666696][ T5739] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1006.666739][ T5739] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1006.666761][ T5739] usb 6-1: Manufacturer: syz [ 1006.699912][ T5739] usb 6-1: config 0 descriptor?? [ 1007.258093][ T5739] rc_core: IR keymap rc-hauppauge not found [ 1007.258191][ T5739] Registered IR keymap rc-empty [ 1007.286313][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.298255][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.300866][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1007.300969][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1007.351377][ T5739] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1007.351743][ T9] usb 2-1: USB disconnect, device number 25 [ 1007.354375][ T5739] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 1007.447416][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.458238][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.478117][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.500127][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.519774][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.542019][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.558205][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.578115][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.598231][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.618104][ T5739] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1007.782494][ T5739] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1007.782520][ T5739] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1007.804545][ T5739] usb 6-1: USB disconnect, device number 2 [ 1008.269945][T13208] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1008.381196][T13214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.987476][T13247] fuse: Unknown parameter 'group_i00000000000000000000' [ 1018.128043][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1018.368063][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1018.662517][ T9] usb 2-1: config 6 has an invalid interface number: 221 but max is 0 [ 1018.662548][ T9] usb 2-1: config 6 has no interface number 0 [ 1018.662585][ T9] usb 2-1: config 6 interface 221 has no altsetting 0 [ 1018.726209][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92 [ 1018.726243][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.726266][ T9] usb 2-1: Product: syz [ 1018.726281][ T9] usb 2-1: Manufacturer: syz [ 1018.726297][ T9] usb 2-1: SerialNumber: syz [ 1019.208930][ T5618] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1019.359108][ T5618] usb 5-1: Using ep0 maxpacket: 16 [ 1019.377279][ T5618] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.377381][ T5618] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1019.464734][ T5618] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1019.464769][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1019.465687][ T5618] usb 5-1: Product: syz [ 1019.465706][ T5618] usb 5-1: Manufacturer: syz [ 1019.465722][ T5618] usb 5-1: SerialNumber: syz [ 1019.827994][T13254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.831937][T13254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.044078][ T5618] usb 5-1: USB disconnect, device number 26 [ 1020.231877][ T866] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1020.234544][ T9] f81534a_ctrl 2-1:6.221: probe with driver f81534a_ctrl failed with error -121 [ 1020.450152][ T866] usb 1-1: Using ep0 maxpacket: 16 [ 1020.454393][ T866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.454449][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.454494][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1020.454517][ T866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1020.454542][ T866] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.456223][ T866] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1020.456251][ T866] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1020.456272][ T866] usb 1-1: Manufacturer: syz [ 1020.559858][ T866] usb 1-1: config 0 descriptor?? [ 1021.040648][ T866] rc_core: IR keymap rc-hauppauge not found [ 1021.040670][ T866] Registered IR keymap rc-empty [ 1021.040827][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.058234][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.084724][ T866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1021.102275][ T866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 1021.360800][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.378093][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.400504][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.404017][T13295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1021.426040][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.448179][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.468204][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.488049][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.508187][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.714268][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.728077][ T866] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1021.752104][ T866] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1021.752130][ T866] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.784017][ T866] usb 1-1: USB disconnect, device number 16 [ 1022.794833][ T5739] usb 2-1: USB disconnect, device number 26 [ 1025.754231][T13328] tipc: Enabling of bearer rejected, failed to enable media [ 1027.099490][T13339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.289268][ T866] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1029.449644][ T866] usb 6-1: Using ep0 maxpacket: 16 [ 1029.464250][ T866] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.464278][ T866] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1029.467063][ T866] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1029.467098][ T866] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1029.467113][ T866] usb 6-1: Product: syz [ 1029.467124][ T866] usb 6-1: Manufacturer: syz [ 1029.467134][ T866] usb 6-1: SerialNumber: syz [ 1029.539811][ T820] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1029.688923][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 1029.698499][ T820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.698622][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.698678][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1029.698706][ T820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1029.698757][ T820] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.734755][ T820] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1029.734845][ T820] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1029.734893][ T820] usb 5-1: Manufacturer: syz [ 1029.785308][ T820] usb 5-1: config 0 descriptor?? [ 1029.819905][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.005472][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.858114][ T866] usb 6-1: USB disconnect, device number 3 [ 1031.078031][ T820] rc_core: IR keymap rc-hauppauge not found [ 1031.078052][ T820] Registered IR keymap rc-empty [ 1031.078200][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.101501][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.120429][ T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1031.123384][ T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 1031.206878][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.218135][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.235215][T13366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.240918][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.262591][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.278139][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.298186][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.318223][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.338158][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.358153][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.378125][ T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1031.416345][ T820] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1031.416371][ T820] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1031.445448][ T820] usb 5-1: USB disconnect, device number 27 [ 1036.791027][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1037.358287][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1037.852818][ T9] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.852848][ T9] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1037.856190][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1037.856221][ T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1037.856243][ T9] usb 6-1: Product: syz [ 1037.856259][ T9] usb 6-1: Manufacturer: syz [ 1037.856274][ T9] usb 6-1: SerialNumber: syz [ 1038.127534][T13402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.138275][T13402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.145359][ T9] usb 6-1: USB disconnect, device number 4 [ 1038.454097][T13416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.990594][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1039.496384][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1039.496427][ T31] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1039.496472][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1039.496498][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.526641][T13425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1039.543191][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.843280][ T31] usb 1-1: USB disconnect, device number 17 [ 1041.155204][T13448] tipc: Enabling of bearer rejected, failed to enable media [ 1042.777804][T13463] fuse: fd is not a fuse device [ 1043.740995][T13458] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1046.011510][T13490] netlink: 'syz.5.2186': attribute type 12 has an invalid length. [ 1046.011533][T13490] netlink: 'syz.5.2186': attribute type 29 has an invalid length. [ 1046.011547][T13490] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2186'. [ 1046.011566][T13490] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2186'. [ 1048.269472][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1048.681309][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1048.681350][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1048.681393][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1048.681419][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.755969][T13498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1048.775653][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1049.052057][ T31] usb 5-1: USB disconnect, device number 28 [ 1049.429914][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1049.949223][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1051.160565][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1051.160597][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.160618][ T9] usb 2-1: config 1 has no interface number 0 [ 1051.160667][ T9] usb 2-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1051.160691][ T9] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.160720][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1051.718699][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1051.718734][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1051.718757][ T9] usb 2-1: Product: syz [ 1051.718773][ T9] usb 2-1: Manufacturer: syz [ 1051.718789][ T9] usb 2-1: SerialNumber: syz [ 1051.744967][T13513] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1052.422044][ T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 1052.488226][ T9] usb 2-1: USB disconnect, device number 27 [ 1053.429764][T13517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.318103][ T5846] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1054.509261][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 1054.511637][ T5846] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1054.511665][ T5846] usb 2-1: config 0 has no interface number 0 [ 1054.514759][ T5846] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1054.514789][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.514811][ T5846] usb 2-1: Product: syz [ 1054.514827][ T5846] usb 2-1: Manufacturer: syz [ 1054.514844][ T5846] usb 2-1: SerialNumber: syz [ 1054.659266][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.659343][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.956615][T13527] netlink: 'syz.5.2199': attribute type 12 has an invalid length. [ 1054.956637][T13527] netlink: 'syz.5.2199': attribute type 29 has an invalid length. [ 1054.956653][T13527] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2199'. [ 1054.956673][T13527] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2199'. [ 1055.067674][ T5846] usb 2-1: config 0 descriptor?? [ 1055.156402][ T5846] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1055.443765][ T5846] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1055.521781][ T5846] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1056.196476][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1056.209761][ T5846] usb 2-1: USB disconnect, device number 28 [ 1057.493681][ T5846] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1057.651511][ T5846] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1057.775850][ T5846] quatech2 2-1:0.51: device disconnected [ 1058.703449][T13539] vlan2: entered promiscuous mode [ 1058.703473][T13539] bridge0: entered promiscuous mode [ 1059.287995][ T866] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1059.453433][ T866] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1059.453472][ T866] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1059.453512][ T866] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.453537][ T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.520676][T13543] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1059.630934][ T866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.313116][ T866] usb 1-1: USB disconnect, device number 18 [ 1063.149583][T13558] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1065.903833][T13553] ipvlan2: entered allmulticast mode [ 1065.904023][T13553] batadv_slave_1: entered allmulticast mode [ 1067.242572][T13553] batman_adv: batadv0: Adding interface: ipvlan2 [ 1067.242757][T13553] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.242959][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.243148][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.243345][T13553] batman_adv: batadv0: Interface activated: ipvlan2 [ 1070.306037][T13567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.618143][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1073.770264][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1073.770304][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1073.770346][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1073.770372][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.788400][T13590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1073.871178][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1074.881388][ T9] usb 1-1: USB disconnect, device number 19 [ 1076.643889][T13600] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2221'. [ 1080.083780][T13619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.165848][T13622] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1085.394802][ T820] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1087.979204][ T820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.979271][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1087.979303][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1087.979325][ T820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1087.979349][ T820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.981877][ T820] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1087.981905][ T820] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1087.981927][ T820] usb 1-1: Manufacturer: syz [ 1087.993417][ T820] usb 1-1: config 0 descriptor?? [ 1090.195410][ T820] rc_core: IR keymap rc-hauppauge not found [ 1090.195425][ T820] Registered IR keymap rc-empty [ 1090.195535][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1090.209528][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1090.249816][ T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1090.252978][ T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 1091.028122][ T37] audit: type=1326 audit(1781109214.273:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.032923][ T37] audit: type=1326 audit(1781109214.303:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.034580][ T37] audit: type=1326 audit(1781109214.303:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.035882][ T37] audit: type=1326 audit(1781109214.303:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.037809][ T37] audit: type=1326 audit(1781109214.303:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.551830][ T37] audit: type=1326 audit(1781109214.823:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.609306][ T37] audit: type=1326 audit(1781109214.823:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.609689][ T37] audit: type=1326 audit(1781109214.883:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.718178][ T37] audit: type=1326 audit(1781109214.983:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.718453][ T37] audit: type=1326 audit(1781109214.983:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13667 comm="syz.5.2243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x7ffc0000 [ 1091.728406][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1091.959629][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.024237][T13679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.144684][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.176729][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.195597][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.208139][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.230738][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.375291][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.457671][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 1092.743972][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.761769][ T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1093.241421][ T820] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1093.241448][ T820] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1093.269952][ T820] usb 1-1: USB disconnect, device number 20 [ 1098.110342][ T5846] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1098.259098][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 1098.263358][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.263417][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1098.263448][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1098.263472][ T5846] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1098.263498][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.266256][ T5846] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1098.266288][ T5846] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1098.266311][ T5846] usb 5-1: Manufacturer: syz [ 1098.377222][ T5846] usb 5-1: config 0 descriptor?? [ 1098.778173][ T5846] rc_core: IR keymap rc-hauppauge not found [ 1098.778196][ T5846] Registered IR keymap rc-empty [ 1098.778980][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1098.798084][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1098.829161][ T5846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1098.838338][ T5846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 1098.909453][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1098.928454][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1098.948291][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1098.971074][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1098.988181][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.008427][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.028220][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.052925][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.068116][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.096458][ T5846] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1099.309298][ T5846] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1099.309326][ T5846] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1099.371313][ T5846] usb 5-1: USB disconnect, device number 29 [ 1108.676934][T13716] netlink: 'syz.5.2257': attribute type 12 has an invalid length. [ 1108.676958][T13716] netlink: 'syz.5.2257': attribute type 29 has an invalid length. [ 1108.676973][T13716] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1108.676993][T13716] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1108.704916][T13716] netlink: 'syz.5.2257': attribute type 12 has an invalid length. [ 1108.704942][T13716] netlink: 'syz.5.2257': attribute type 29 has an invalid length. [ 1108.704957][T13716] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1108.704978][T13716] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2257'. [ 1116.108895][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.109081][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.068106][ T5618] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1118.069506][ T5846] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1118.217973][ T5618] usb 5-1: Using ep0 maxpacket: 16 [ 1118.226421][ T5846] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1118.226455][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.230132][ T5618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.230190][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1118.230222][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1118.230246][ T5618] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1118.230272][ T5618] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.317740][ T5618] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1118.317774][ T5618] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1118.317797][ T5618] usb 5-1: Manufacturer: syz [ 1118.363976][ T5846] usb 6-1: config 0 descriptor?? [ 1118.434039][ T5618] usb 5-1: config 0 descriptor?? [ 1118.826776][ T5846] usb 6-1: Cannot set MAC address [ 1118.827151][ T5846] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1118.907602][ T5846] usb 6-1: USB disconnect, device number 5 [ 1119.088607][ T5618] rc_core: IR keymap rc-hauppauge not found [ 1119.088646][ T5618] Registered IR keymap rc-empty [ 1119.088816][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.108101][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.140525][ T5618] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1119.160594][ T5618] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 1119.212486][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.230293][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.248628][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.268270][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.288222][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.310970][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.329700][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.359783][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.378188][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.398237][ T5618] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1119.480936][ T5618] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1119.480963][ T5618] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1119.533688][ T5618] usb 5-1: USB disconnect, device number 30 [ 1123.280265][T13770] netlink: 'syz.5.2272': attribute type 12 has an invalid length. [ 1123.280289][T13770] netlink: 'syz.5.2272': attribute type 29 has an invalid length. [ 1123.280304][T13770] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1123.280326][T13770] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1123.282397][T13770] netlink: 'syz.5.2272': attribute type 12 has an invalid length. [ 1123.282418][T13770] netlink: 'syz.5.2272': attribute type 29 has an invalid length. [ 1123.282432][T13770] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1123.282451][T13770] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2272'. [ 1127.040554][T13790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.608013][ T5618] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1135.788025][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 1135.791065][ T5618] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1135.792683][ T5618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.792780][ T5618] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.795809][ T5618] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1135.795839][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.795862][ T5618] usb 2-1: Product: syz [ 1135.795877][ T5618] usb 2-1: Manufacturer: syz [ 1135.795893][ T5618] usb 2-1: SerialNumber: syz [ 1136.123520][ T5618] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1136.126993][ T5618] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1136.347556][T13827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.367260][T13827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.584090][ T5618] usb 2-1: 2:1 : can't get Cluster Descriptor [ 1136.971396][ T5618] usb 2-1: USB disconnect, device number 29 [ 1141.107108][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.989841][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1148.137982][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1148.140943][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1148.144662][ T9] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1148.144694][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.144716][ T9] usb 6-1: Product: syz [ 1148.144731][ T9] usb 6-1: Manufacturer: syz [ 1148.144747][ T9] usb 6-1: SerialNumber: syz [ 1148.205577][ T9] usb 6-1: config 0 descriptor?? [ 1148.229034][ T9] usb 6-1: no audio or video endpoints found [ 1148.356047][T13855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2303'. [ 1148.425861][ T9] usb 6-1: USB disconnect, device number 6 [ 1150.053996][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1150.211563][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1150.213460][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.213485][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.251841][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1150.251875][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.251896][ T9] usb 1-1: Product: syz [ 1150.251912][ T9] usb 1-1: Manufacturer: syz [ 1150.251928][ T9] usb 1-1: SerialNumber: syz [ 1150.329128][ T9] usb 1-1: selecting invalid altsetting 1 [ 1150.330012][ T9] usb 1-1: unit 6 not found! [ 1150.926397][ T9] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1152.318746][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1152.326543][ T9] usb 1-1: USB disconnect, device number 21 [ 1152.462191][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.174716][T13876] openvswitch: netlink: EtherType 50a is less than min 600 [ 1153.368032][ T5846] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1153.518008][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 1153.525133][ T5846] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.525172][ T5846] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1153.525210][ T5846] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 1153.525235][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.587656][ T5846] usb 1-1: config 0 descriptor?? [ 1154.057069][ T5846] usbhid 1-1:0.0: can't add hid device: -71 [ 1154.057205][ T5846] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1154.111770][ T5846] usb 1-1: USB disconnect, device number 22 [ 1154.317453][T13885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.030373][T13912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2320'. [ 1172.814950][T13933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.438607][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.438685][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.227965][ T5846] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1185.381581][ T5846] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1185.381613][ T5846] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1185.381635][ T5846] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1185.381687][ T5846] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1185.384091][ T5846] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1185.384122][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1185.384144][ T5846] usb 5-1: Product: syz [ 1185.384160][ T5846] usb 5-1: Manufacturer: syz [ 1185.495236][ T5846] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1185.734484][ T5846] usb 5-1: USB disconnect, device number 31 [ 1185.826125][T13976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.023982][T13977] openvswitch: netlink: EtherType 50a is less than min 600 [ 1191.788030][ T5846] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1191.899390][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1191.964882][ T5846] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1191.964915][ T5846] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1191.964938][ T5846] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1191.964997][ T5846] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1191.967269][ T5846] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1191.967300][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1191.967322][ T5846] usb 6-1: Product: syz [ 1191.967338][ T5846] usb 6-1: Manufacturer: syz [ 1192.070510][ T5846] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1192.117989][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1192.156143][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1192.157797][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.182813][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.213366][ T9] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1192.213399][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.213423][ T9] usb 2-1: Product: syz [ 1192.213438][ T9] usb 2-1: Manufacturer: syz [ 1192.213455][ T9] usb 2-1: SerialNumber: syz [ 1192.305423][ T5618] usb 6-1: USB disconnect, device number 7 [ 1192.731756][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.736813][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.197266][ T9] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1193.256995][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1193.834393][ T9] usb 2-1: USB disconnect, device number 30 [ 1193.866952][T14021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1197.235224][T14034] openvswitch: netlink: EtherType 50a is less than min 600 [ 1198.519624][ T37] audit: type=1326 audit(1781109321.793:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14037 comm="syz.5.2360" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e43ce59 code=0x0 [ 1198.763300][T14040] kvm: requested 8380 ns i8254 timer period limited to 200000 ns [ 1201.666866][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1201.677315][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1201.906594][T14048] ceph: No mds server is up or the cluster is laggy [ 1201.976313][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1202.008714][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1202.565668][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1202.566044][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1205.405251][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1205.548410][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1205.565101][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1205.598942][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1205.600267][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1208.135227][ T5613] Bluetooth: hci5: command tx timeout [ 1208.991586][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.991810][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.992021][T14054] bridge_slave_0: entered allmulticast mode [ 1209.024039][T14054] bridge_slave_0: entered promiscuous mode [ 1209.042056][T14054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.042242][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.042465][T14054] bridge_slave_1: entered allmulticast mode [ 1209.045511][T14054] bridge_slave_1: entered promiscuous mode [ 1209.144357][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.167580][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.242498][T14054] team0: Port device team_slave_0 added [ 1209.246678][T14054] team0: Port device team_slave_1 added [ 1209.316453][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.316472][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.316503][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.373203][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.373224][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.373264][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.512949][T14054] hsr_slave_0: entered promiscuous mode [ 1209.514481][T14054] hsr_slave_1: entered promiscuous mode [ 1209.515501][T14054] debugfs: 'hsr0' already exists in 'hsr' [ 1209.515527][T14054] Cannot create hsr debugfs directory [ 1210.208054][ T5613] Bluetooth: hci5: command tx timeout [ 1211.665356][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1211.713626][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1211.717547][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1211.741419][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1211.742322][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1212.287998][ T5616] Bluetooth: hci5: command tx timeout [ 1212.317986][ T5618] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1212.482955][ T5618] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1212.482986][ T5618] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1212.483008][ T5618] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1212.483060][ T5618] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1212.485526][ T5618] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1212.485556][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1212.485578][ T5618] usb 5-1: Product: syz [ 1212.485594][ T5618] usb 5-1: Manufacturer: syz [ 1212.579933][ T5618] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1212.806335][ T5618] usb 5-1: USB disconnect, device number 32 [ 1213.813333][ T5616] Bluetooth: hci6: command tx timeout [ 1214.368028][ T5616] Bluetooth: hci5: command tx timeout [ 1215.898027][ T5616] Bluetooth: hci6: command tx timeout [ 1217.968132][ T5616] Bluetooth: hci6: command tx timeout [ 1219.528841][T14110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.048031][ T5616] Bluetooth: hci6: command tx timeout [ 1220.164303][ T1027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.779553][T14054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1221.847678][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1221.994939][T14054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1225.134563][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1225.152898][T14054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1225.606392][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1227.099998][ T1027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.704958][T14054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1231.133802][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1231.193470][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1231.197727][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1231.217774][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1231.218714][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1233.328205][ T5616] Bluetooth: hci0: command tx timeout [ 1233.550491][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1234.123684][ T5613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1234.194086][ T5613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1234.197709][ T5613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1234.642319][ T5613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1234.645540][ T5613] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1235.417297][ T5613] Bluetooth: hci0: command tx timeout [ 1236.848891][ T5613] Bluetooth: hci7: command tx timeout [ 1237.488099][ T5613] Bluetooth: hci0: command tx timeout [ 1238.851152][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.851228][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.928163][ T5613] Bluetooth: hci7: command tx timeout [ 1239.568024][ T5613] Bluetooth: hci0: command tx timeout [ 1241.008611][ T5613] Bluetooth: hci7: command tx timeout [ 1242.192557][ T1027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.783692][T14054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.088283][ T5613] Bluetooth: hci7: command tx timeout [ 1243.261340][T14074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.261472][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.261746][T14074] bridge_slave_0: entered allmulticast mode [ 1243.330497][T14074] bridge_slave_0: entered promiscuous mode [ 1243.456663][T14074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.456798][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.457066][T14074] bridge_slave_1: entered allmulticast mode [ 1243.484635][T14074] bridge_slave_1: entered promiscuous mode [ 1244.170301][T14074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.202142][T14054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.461873][ T1027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.610129][T14074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.265630][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.265882][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.336111][T14074] team0: Port device team_slave_0 added [ 1250.354317][T14074] team0: Port device team_slave_1 added [ 1252.384726][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.402242][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.478683][T14074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.478703][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.478735][T14074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.569579][T14074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.569599][T14074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.569631][T14074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.167649][T14074] hsr_slave_0: entered promiscuous mode [ 1253.182148][T14074] hsr_slave_1: entered promiscuous mode [ 1253.186826][T14074] debugfs: 'hsr0' already exists in 'hsr' [ 1253.186857][T14074] Cannot create hsr debugfs directory [ 1264.246230][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.246469][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.246731][T14124] bridge_slave_0: entered allmulticast mode [ 1264.278326][T14124] bridge_slave_0: entered promiscuous mode [ 1264.864969][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1264.921546][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1264.943747][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1264.988923][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1264.992083][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1265.709465][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.709599][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.709861][T14124] bridge_slave_1: entered allmulticast mode [ 1265.714594][T14124] bridge_slave_1: entered promiscuous mode [ 1267.096971][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.097177][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.097433][T14132] bridge_slave_0: entered allmulticast mode [ 1267.129795][T14132] bridge_slave_0: entered promiscuous mode [ 1267.168015][ T5616] Bluetooth: hci8: command tx timeout [ 1267.373579][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.373840][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.374102][T14132] bridge_slave_1: entered allmulticast mode [ 1267.407127][T14132] bridge_slave_1: entered promiscuous mode [ 1267.498803][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.823806][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.383271][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.235097][ T5613] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1269.282193][ T5613] Bluetooth: hci8: command tx timeout [ 1269.285475][ T5613] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1269.303682][ T5613] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1269.328095][ T5613] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1269.328937][ T5613] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1271.328115][T14205] Bluetooth: hci8: command tx timeout [ 1271.912223][T12809] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1271.960389][T12809] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1272.070454][T12809] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1272.183764][T12809] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1272.184861][T12809] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1273.409337][T14205] Bluetooth: hci8: command tx timeout [ 1273.800600][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.905344][T14124] team0: Port device team_slave_0 added [ 1274.094669][T14124] team0: Port device team_slave_1 added [ 1274.470566][T14132] team0: Port device team_slave_0 added [ 1274.652667][T14132] team0: Port device team_slave_1 added [ 1275.322316][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.322336][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.322369][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.728035][T14205] Bluetooth: hci9: command tx timeout [ 1275.728553][T12809] Bluetooth: hci10: command tx timeout [ 1277.812899][T14205] Bluetooth: hci9: command tx timeout [ 1277.813005][T12809] Bluetooth: hci10: command tx timeout [ 1278.235025][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.235045][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.235076][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.887943][T14205] Bluetooth: hci9: command tx timeout [ 1279.893197][T12809] Bluetooth: hci10: command tx timeout [ 1281.969862][T14205] Bluetooth: hci9: command tx timeout [ 1281.969919][T12809] Bluetooth: hci10: command tx timeout [ 1285.776509][ T1027] bridge_slave_1: left allmulticast mode [ 1285.776551][ T1027] bridge_slave_1: left promiscuous mode [ 1285.776877][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.471728][ T1027] bridge_slave_0: left allmulticast mode [ 1289.471767][ T1027] bridge_slave_0: left promiscuous mode [ 1289.508153][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.193417][T14205] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1291.247699][T14205] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1291.264508][T14205] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1291.288981][T14205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1291.292137][T14205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1293.487937][T14205] Bluetooth: hci5: command tx timeout [ 1294.211972][T12809] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1294.310692][T12809] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1294.313808][T12809] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1294.339311][T12809] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1294.340179][T12809] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1295.568230][T14205] Bluetooth: hci5: command tx timeout [ 1296.528545][T14205] Bluetooth: hci11: command tx timeout [ 1297.659782][T14205] Bluetooth: hci5: command tx timeout [ 1298.609764][T14205] Bluetooth: hci11: command tx timeout [ 1299.738780][T14205] Bluetooth: hci5: command tx timeout [ 1300.313891][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.313966][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.696755][T14205] Bluetooth: hci11: command tx timeout [ 1302.768365][T14205] Bluetooth: hci11: command tx timeout [ 1309.769501][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.839551][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.869723][ T1027] bond0 (unregistering): Released all slaves [ 1310.139799][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.139819][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.139852][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.674133][T14195] syz_tun (unregistering): left allmulticast mode [ 1318.275187][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1321.632133][T14186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.637637][T14186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.661550][T14186] bridge_slave_0: entered allmulticast mode [ 1321.680841][T14186] bridge_slave_0: entered promiscuous mode [ 1322.220094][T14186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.220257][T14186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.220563][T14186] bridge_slave_1: entered allmulticast mode [ 1322.226793][T14186] bridge_slave_1: entered promiscuous mode [ 1322.833877][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1322.892369][T14207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.892594][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.952113][T14207] bridge_slave_0: entered allmulticast mode [ 1322.955467][T14207] bridge_slave_0: entered promiscuous mode [ 1323.487113][T14207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.487274][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.487535][T14207] bridge_slave_1: entered allmulticast mode [ 1323.492826][T14207] bridge_slave_1: entered promiscuous mode [ 1323.521935][T14201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.522068][T14201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.522299][T14201] bridge_slave_0: entered allmulticast mode [ 1323.525414][T14201] bridge_slave_0: entered promiscuous mode [ 1328.989098][T12809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1329.081201][T12809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1329.116062][T12809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1329.126903][T12809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1329.167409][T12809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1329.636240][T14205] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1329.696395][T14205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1329.716248][T14205] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1329.731464][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1329.735844][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1330.920924][T14186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.248389][T12809] Bluetooth: hci0: command tx timeout [ 1332.045885][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1332.067553][T14205] Bluetooth: hci4: command tx timeout [ 1332.119011][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1332.121269][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1332.122548][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1332.123718][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1332.894992][T14201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.895179][T14201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.895392][T14201] bridge_slave_1: entered allmulticast mode [ 1332.925251][T14201] bridge_slave_1: entered promiscuous mode [ 1333.328132][T12809] Bluetooth: hci0: command tx timeout [ 1334.128161][T12809] Bluetooth: hci4: command tx timeout [ 1334.288245][T12809] Bluetooth: hci6: command tx timeout [ 1335.408087][T12809] Bluetooth: hci0: command tx timeout [ 1336.207893][T12809] Bluetooth: hci4: command tx timeout [ 1336.368004][T12809] Bluetooth: hci6: command tx timeout [ 1337.488136][T12809] Bluetooth: hci0: command tx timeout [ 1338.296456][T12809] Bluetooth: hci4: command tx timeout [ 1338.448127][T12809] Bluetooth: hci6: command tx timeout [ 1340.528211][T12809] Bluetooth: hci6: command tx timeout [ 1352.213585][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1352.303793][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.316076][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1352.317436][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1352.338498][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1361.730003][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.730080][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.843645][T14205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1370.924456][T14205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1370.946303][T14205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1370.960024][T14205] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1370.960947][T14205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1373.577939][T12809] Bluetooth: hci2: command tx timeout [ 1373.578586][T12809] Bluetooth: hci7: command tx timeout [ 1375.648349][T14205] Bluetooth: hci7: command tx timeout [ 1375.648387][T14205] Bluetooth: hci2: command tx timeout [ 1377.728279][T14205] Bluetooth: hci7: command tx timeout [ 1377.728318][T14205] Bluetooth: hci2: command tx timeout [ 1379.808404][T12809] Bluetooth: hci2: command tx timeout [ 1379.808441][T12809] Bluetooth: hci7: command tx timeout [ 1386.935255][T12809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1386.995081][T12809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1386.997136][T12809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1387.015520][T12809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1387.016486][T12809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1389.087920][T12809] Bluetooth: hci5: command tx timeout [ 1389.706009][T14205] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1389.761272][T14205] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1389.763134][T14205] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1389.767127][T14205] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1389.798915][T14205] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1391.167966][T14205] Bluetooth: hci5: command tx timeout [ 1391.898267][T12809] Bluetooth: hci8: command tx timeout [ 1392.255430][T14205] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1392.713769][T14205] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1392.725579][T14205] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1392.727603][T14205] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1392.824462][T14205] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1393.247889][T12809] Bluetooth: hci5: command tx timeout [ 1393.968145][T12809] Bluetooth: hci8: command tx timeout [ 1394.928152][T12809] Bluetooth: hci9: command tx timeout [ 1395.327940][T12809] Bluetooth: hci5: command tx timeout [ 1396.058556][T12809] Bluetooth: hci8: command tx timeout [ 1397.008120][T12809] Bluetooth: hci9: command tx timeout [ 1398.127981][T12809] Bluetooth: hci8: command tx timeout [ 1399.168594][T12809] Bluetooth: hci9: command tx timeout [ 1401.249663][T12809] Bluetooth: hci9: command tx timeout [ 1412.329464][T14205] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1412.394929][T14205] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1412.422694][T14205] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1412.423903][T14205] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1412.424709][T14205] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1414.531171][T12809] Bluetooth: hci10: command tx timeout [ 1416.608088][T12809] Bluetooth: hci10: command tx timeout [ 1418.688119][T12809] Bluetooth: hci10: command tx timeout [ 1420.148589][T12809] Bluetooth: hci11: command 0x0406 tx timeout [ 1420.767904][T14205] Bluetooth: hci10: command tx timeout [ 1423.170006][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.170084][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.303029][T12809] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1431.364124][T12809] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1431.448213][T12809] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1431.449706][T12809] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1431.454561][T12809] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1434.209484][T12809] Bluetooth: hci12: command tx timeout [ 1436.288055][T12809] Bluetooth: hci12: command tx timeout [ 1438.368049][T12809] Bluetooth: hci12: command tx timeout [ 1440.447976][T12809] Bluetooth: hci12: command tx timeout [ 1447.743062][T14205] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1447.802966][T14205] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1447.804662][T14205] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1447.806090][T14205] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1447.807025][T14205] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1449.855544][T12809] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1449.923213][T12809] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1449.924994][T12809] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1449.927208][T12809] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1449.955869][T12809] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1450.049060][ T5616] Bluetooth: hci13: command tx timeout [ 1452.128120][T12809] Bluetooth: hci13: command tx timeout [ 1452.135210][T14205] Bluetooth: hci14: command tx timeout [ 1452.695406][T12809] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1452.766377][T12809] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1452.776514][T12809] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1452.818802][T12809] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1452.819881][T12809] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1454.224680][T14416] Bluetooth: hci13: command tx timeout [ 1454.250713][T14415] Bluetooth: hci14: command tx timeout [ 1454.606125][T14112] syz_tun (unregistering): left allmulticast mode [ 1454.927884][T14415] Bluetooth: hci15: command tx timeout [ 1456.045313][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 1456.045355][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1456.046020][T14415] Bluetooth: hci6: command 0x0406 tx timeout [ 1456.298229][T14415] Bluetooth: hci14: command tx timeout [ 1456.298267][T14415] Bluetooth: hci13: command tx timeout [ 1457.008334][ T5616] Bluetooth: hci15: command tx timeout [ 1458.368621][ T5616] Bluetooth: hci14: command tx timeout [ 1459.088067][T12809] Bluetooth: hci15: command tx timeout [ 1461.169615][T12809] Bluetooth: hci15: command tx timeout [ 1473.438838][ T5616] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1473.503740][ T5616] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1473.506274][ T5616] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1473.553607][ T5616] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1473.556023][ T5616] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1475.648109][T12809] Bluetooth: hci16: command tx timeout [ 1477.739245][T12809] Bluetooth: hci16: command tx timeout [ 1479.808223][T12809] Bluetooth: hci16: command tx timeout [ 1481.888249][T12809] Bluetooth: hci16: command tx timeout [ 1484.609971][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.610044][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.728876][ T38] INFO: task kworker/u8:5:91 blocked for more than 143 seconds. [ 1489.728922][ T38] Tainted: G L syzkaller #0 [ 1489.728936][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.728965][ T38] task:kworker/u8:5 state:D stack:21128 pid:91 tgid:91 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1489.729048][ T38] Workqueue: events_unbound linkwatch_event [ 1489.729239][ T38] Call Trace: [ 1489.729248][ T38] [ 1489.729263][ T38] __schedule+0x16ec/0x5620 [ 1489.729400][ T38] ? __pfx___schedule+0x10/0x10 [ 1489.729451][ T38] rt_mutex_schedule+0x76/0xf0 [ 1489.729537][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1489.729619][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1489.729651][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1489.729681][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1489.729721][ T38] ? linkwatch_event+0xe/0x60 [ 1489.729757][ T38] ? linkwatch_event+0xe/0x60 [ 1489.729778][ T38] mutex_lock_nested+0x168/0x1d0 [ 1489.729807][ T38] ? process_scheduled_works+0xa70/0x1860 [ 1489.729852][ T38] linkwatch_event+0xe/0x60 [ 1489.729874][ T38] process_scheduled_works+0xb5d/0x1860 [ 1489.729932][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1489.729984][ T38] ? assign_work+0x3d5/0x5e0 [ 1489.730015][ T38] worker_thread+0xa53/0xfc0 [ 1489.730082][ T38] kthread+0x388/0x470 [ 1489.730115][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1489.730138][ T38] ? __pfx_kthread+0x10/0x10 [ 1489.730172][ T38] ret_from_fork+0x514/0xb70 [ 1489.730229][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1489.730257][ T38] ? __switch_to+0xc79/0x1410 [ 1489.730323][ T38] ? __pfx_kthread+0x10/0x10 [ 1489.730358][ T38] ret_from_fork_asm+0x1a/0x30 [ 1489.730421][ T38] [ 1489.730443][ T38] INFO: task kworker/u8:6:150 blocked for more than 143 seconds. [ 1489.730463][ T38] Tainted: G L syzkaller #0 [ 1489.730476][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.730487][ T38] task:kworker/u8:6 state:D stack:20848 pid:150 tgid:150 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1489.730551][ T38] Workqueue: ipv6_addrconf addrconf_dad_work [ 1489.730663][ T38] Call Trace: [ 1489.730671][ T38] [ 1489.730685][ T38] __schedule+0x16ec/0x5620 [ 1489.730752][ T38] ? __pfx___schedule+0x10/0x10 [ 1489.730802][ T38] rt_mutex_schedule+0x76/0xf0 [ 1489.730826][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1489.730875][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1489.730907][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1489.730938][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1489.730992][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1489.731040][ T38] ? addrconf_dad_work+0x124/0x1680 [ 1489.731079][ T38] mutex_lock_nested+0x168/0x1d0 [ 1489.731107][ T38] ? addrconf_dad_work+0x124/0x1680 [ 1489.731146][ T38] addrconf_dad_work+0x124/0x1680 [ 1489.731182][ T38] ? lock_acquire+0x106/0x350 [ 1489.731268][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1489.731300][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1489.731336][ T38] ? process_scheduled_works+0xa70/0x1860 [ 1489.731370][ T38] ? process_scheduled_works+0xa70/0x1860 [ 1489.731395][ T38] ? process_scheduled_works+0xa70/0x1860 [ 1489.731423][ T38] process_scheduled_works+0xb5d/0x1860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1489.731484][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1489.731516][ T38] ? assign_work+0x3d5/0x5e0 [ 1489.731547][ T38] worker_thread+0xa53/0xfc0 [ 1489.731604][ T38] kthread+0x388/0x470 [ 1489.731637][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1489.731661][ T38] ? __pfx_kthread+0x10/0x10 [ 1489.731694][ T38] ret_from_fork+0x514/0xb70 [ 1489.731723][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1489.731750][ T38] ? __switch_to+0xc79/0x1410 [ 1489.731790][ T38] ? __pfx_kthread+0x10/0x10 [ 1489.731822][ T38] ret_from_fork_asm+0x1a/0x30 [ 1489.731869][ T38] [ 1489.731972][ T38] INFO: task dhcpcd:5263 blocked for more than 143 seconds. [ 1489.731993][ T38] Tainted: G L syzkaller #0 [ 1489.732006][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.732017][ T38] task:dhcpcd state:D stack:21464 pid:5263 tgid:5263 ppid:5262 task_flags:0x400140 flags:0x00080000 [ 1489.732087][ T38] Call Trace: [ 1489.732095][ T38] [ 1489.732109][ T38] __schedule+0x16ec/0x5620 [ 1489.732177][ T38] ? __pfx___schedule+0x10/0x10 [ 1489.732227][ T38] rt_mutex_schedule+0x76/0xf0 [ 1489.732251][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1489.732300][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1489.732331][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1489.732361][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1489.732412][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1489.732451][ T38] ? rtnl_dumpit+0x92/0x200 [ 1489.732509][ T38] mutex_lock_nested+0x168/0x1d0 [ 1489.732537][ T38] ? rtnl_dumpit+0x92/0x200 [ 1489.732568][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 1489.732600][ T38] rtnl_dumpit+0x92/0x200 [ 1489.732636][ T38] netlink_dump+0x702/0xe10 [ 1489.732728][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 1489.732773][ T38] ? netlink_recvmsg+0x5d6/0xa50 [ 1489.732819][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1489.732926][ T38] ? netlink_recvmsg+0x5d6/0xa50 [ 1489.732965][ T38] netlink_recvmsg+0x690/0xa50 [ 1489.733000][ T38] ? __might_fault+0xaf/0x130 [ 1489.733072][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1489.733113][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1489.733148][ T38] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1489.733216][ T38] ? security_socket_recvmsg+0x7e/0x2c0 [ 1489.733327][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1489.733362][ T38] sock_recvmsg+0x172/0x1b0 [ 1489.733419][ T38] ____sys_recvmsg+0x1f2/0x4b0 [ 1489.733495][ T38] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1489.733550][ T38] ? import_iovec+0x73/0xa0 [ 1489.733658][ T38] ___sys_recvmsg+0x215/0x590 [ 1489.733688][ T38] ? __pfx____sys_recvmsg+0x10/0x10 [ 1489.733735][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1489.733783][ T38] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1489.733811][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1489.733844][ T38] ? rcu_is_watching+0x15/0xb0 [ 1489.733939][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.733982][ T38] do_syscall_64+0x174/0x580 [ 1489.734069][ T38] ? trace_irq_disable+0x3b/0x140 [ 1489.734134][ T38] ? clear_bhb_loop+0x40/0x90 [ 1489.734164][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.734194][ T38] RIP: 0033:0x7fb3af0f1407 [ 1489.734220][ T38] RSP: 002b:00007ffdb4e61430 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1489.734243][ T38] RAX: ffffffffffffffda RBX: 00007fb3af067780 RCX: 00007fb3af0f1407 [ 1489.734261][ T38] RDX: 0000000000000000 RSI: 00007ffdb4e614c0 RDI: 0000000000000023 [ 1489.734277][ T38] RBP: 00007ffdb4e614a4 R08: 0000000000000000 R09: 0000000000000000 [ 1489.734291][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001df8 [ 1489.734305][ T38] R13: 00007ffdb4e614b0 R14: 00007ffdb4e615a0 R15: 0000000000000000 [ 1489.734340][ T38] [ 1489.734424][ T38] INFO: task syz-executor:14234 blocked for more than 143 seconds. [ 1489.734445][ T38] Tainted: G L syzkaller #0 [ 1489.734459][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.734469][ T38] task:syz-executor state:D stack:22632 pid:14234 tgid:14234 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1489.734530][ T38] Call Trace: [ 1489.734537][ T38] [ 1489.734551][ T38] __schedule+0x16ec/0x5620 [ 1489.734583][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1489.734677][ T38] ? __pfx___schedule+0x10/0x10 [ 1489.734728][ T38] rt_mutex_schedule+0x76/0xf0 [ 1489.734752][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1489.734801][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1489.734832][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1489.734864][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1489.734917][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1489.734958][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 1489.734988][ T38] mutex_lock_nested+0x168/0x1d0 [ 1489.735016][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 1489.735058][ T38] rtnl_newlink+0x883/0x1bb0 [ 1489.735103][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1489.735134][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1489.735173][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1489.735268][ T38] ? kernel_text_address+0xa5/0xe0 [ 1489.735305][ T38] ? __kernel_text_address+0xd/0x30 [ 1489.735339][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1489.735384][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1489.735436][ T38] ? arch_stack_walk+0xfb/0x150 [ 1489.735476][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1489.735524][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1489.735554][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1489.735584][ T38] ? kasan_save_track+0x3e/0x80 [ 1489.735635][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1489.735665][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1489.735696][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.735729][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1489.735774][ T38] netlink_rcv_skb+0x232/0x4b0 [ 1489.735809][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.735843][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1489.735892][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.735925][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1489.735965][ T38] netlink_unicast+0x780/0x920 [ 1489.736007][ T38] netlink_sendmsg+0x813/0xb40 [ 1489.736059][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.736103][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.736128][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.736163][ T38] __sys_sendto+0x67f/0x710 [ 1489.736203][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1489.736270][ T38] ? rcu_is_watching+0x15/0xb0 [ 1489.736313][ T38] __x64_sys_sendto+0xde/0x100 [ 1489.736348][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.736373][ T38] do_syscall_64+0x174/0x580 [ 1489.736408][ T38] ? trace_irq_disable+0x3b/0x140 [ 1489.736436][ T38] ? clear_bhb_loop+0x40/0x90 [ 1489.736465][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.736490][ T38] RIP: 0033:0x7f2e54fcd68e [ 1489.736509][ T38] RSP: 002b:00007ffcfd9aa3c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1489.736532][ T38] RAX: ffffffffffffffda RBX: 000055558af53500 RCX: 00007f2e54fcd68e [ 1489.736550][ T38] RDX: 000000000000008c RSI: 00007f2e55db4670 RDI: 0000000000000003 [ 1489.736565][ T38] RBP: 0000000000000001 R08: 00007ffcfd9aa444 R09: 000000000000000c [ 1489.736579][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1489.736593][ T38] R13: 0000000000000000 R14: 00007f2e55db4670 R15: 0000000000000000 [ 1489.736628][ T38] [ 1489.736651][ T38] INFO: task syz-executor:14319 blocked for more than 143 seconds. [ 1489.736670][ T38] Tainted: G L syzkaller #0 [ 1489.736683][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.736693][ T38] task:syz-executor state:D stack:25752 pid:14319 tgid:14319 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1489.736763][ T38] Call Trace: [ 1489.736770][ T38] [ 1489.736784][ T38] __schedule+0x16ec/0x5620 [ 1489.736816][ T38] ? __request_module+0x3db/0x630 [ 1489.736908][ T38] ? __pfx___schedule+0x10/0x10 [ 1489.736958][ T38] rt_mutex_schedule+0x76/0xf0 [ 1489.736981][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1489.737038][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1489.737070][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1489.737101][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1489.737143][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1489.737227][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1489.737267][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1489.737297][ T38] mutex_lock_nested+0x168/0x1d0 [ 1489.737331][ T38] inet_rtm_newaddr+0x404/0x1ad0 [ 1489.737365][ T38] ? __kernel_text_address+0xd/0x30 [ 1489.737412][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1489.737464][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1489.737497][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1489.737526][ T38] ? kasan_save_track+0x3e/0x80 [ 1489.737550][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1489.737580][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1489.737611][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1489.737644][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1489.737687][ T38] netlink_rcv_skb+0x232/0x4b0 [ 1490.260585][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1490.260639][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1490.260689][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1490.260724][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1490.260762][ T38] netlink_unicast+0x780/0x920 [ 1490.260806][ T38] netlink_sendmsg+0x813/0xb40 [ 1490.260851][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1490.260894][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1490.260920][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1490.260956][ T38] __sys_sendto+0x67f/0x710 [ 1490.260996][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1490.261058][ T38] ? fput_close_sync+0x11f/0x240 [ 1490.261181][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1490.261213][ T38] __x64_sys_sendto+0xde/0x100 [ 1490.261248][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.261275][ T38] do_syscall_64+0x174/0x580 [ 1490.261311][ T38] ? trace_irq_disable+0x3b/0x140 [ 1490.261339][ T38] ? clear_bhb_loop+0x40/0x90 [ 1490.261369][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.261394][ T38] RIP: 0033:0x7f3a2f88d68e [ 1490.261416][ T38] RSP: 002b:00007ffe848f2848 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1490.261442][ T38] RAX: ffffffffffffffda RBX: 00005555810dd500 RCX: 00007f3a2f88d68e [ 1490.261459][ T38] RDX: 0000000000000028 RSI: 00007f3a30674670 RDI: 0000000000000003 [ 1490.261474][ T38] RBP: 0000000000000001 R08: 00007ffe848f28c4 R09: 000000000000000c [ 1490.261488][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1490.261502][ T38] R13: 0000000000000000 R14: 00007f3a30674670 R15: 0000000000000000 [ 1490.261537][ T38] [ 1490.261551][ T38] INFO: task syz-executor:14324 blocked for more than 143 seconds. [ 1490.261574][ T38] Tainted: G L syzkaller #0 [ 1490.261588][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1490.261598][ T38] task:syz-executor state:D stack:25752 pid:14324 tgid:14324 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1490.261677][ T38] Call Trace: [ 1490.261685][ T38] [ 1490.261699][ T38] __schedule+0x16ec/0x5620 [ 1490.261767][ T38] ? __pfx___schedule+0x10/0x10 [ 1490.261818][ T38] rt_mutex_schedule+0x76/0xf0 [ 1490.261843][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1490.261894][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1490.261926][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1490.261957][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1490.262000][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1490.395018][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1490.395071][ T38] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1490.395103][ T38] mutex_lock_nested+0x168/0x1d0 [ 1490.395142][ T38] inet_rtm_newaddr+0x404/0x1ad0 [ 1490.395177][ T38] ? __kernel_text_address+0xd/0x30 [ 1490.395225][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1490.395276][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1490.395309][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1490.395340][ T38] ? kasan_save_track+0x3e/0x80 [ 1490.395365][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1490.395394][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1490.395429][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1490.395462][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.395509][ T38] netlink_rcv_skb+0x232/0x4b0 [ 1490.395545][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1490.395578][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1490.395631][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1490.395665][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1490.395705][ T38] netlink_unicast+0x780/0x920 [ 1490.395748][ T38] netlink_sendmsg+0x813/0xb40 [ 1490.395794][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1490.395838][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1490.395863][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1490.395900][ T38] __sys_sendto+0x67f/0x710 [ 1490.395940][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1490.396002][ T38] ? fput_close_sync+0x11f/0x240 [ 1490.396026][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1490.396060][ T38] __x64_sys_sendto+0xde/0x100 [ 1490.396096][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.396122][ T38] do_syscall_64+0x174/0x580 [ 1490.396157][ T38] ? trace_irq_disable+0x3b/0x140 [ 1490.396185][ T38] ? clear_bhb_loop+0x40/0x90 [ 1490.396216][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.396239][ T38] RIP: 0033:0x7f73aa77d68e [ 1490.396260][ T38] RSP: 002b:00007ffe4ecc6cb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1490.396285][ T38] RAX: ffffffffffffffda RBX: 000055556b2dd500 RCX: 00007f73aa77d68e [ 1490.396302][ T38] RDX: 0000000000000028 RSI: 00007f73ab564670 RDI: 0000000000000003 [ 1490.396318][ T38] RBP: 0000000000000001 R08: 00007ffe4ecc6d34 R09: 000000000000000c [ 1490.396333][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1490.396347][ T38] R13: 0000000000000000 R14: 00007f73ab564670 R15: 0000000000000000 [ 1490.396383][ T38] [ 1490.396398][ T38] INFO: task syz-executor:14331 blocked for more than 144 seconds. [ 1490.396420][ T38] Tainted: G L syzkaller #0 [ 1490.396432][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1490.396443][ T38] task:syz-executor state:D stack:25752 pid:14331 tgid:14331 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1490.452702][ T38] Call Trace: [ 1490.452725][ T38] [ 1490.452757][ T38] __schedule+0x16ec/0x5620 [ 1490.452856][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1490.453033][ T38] ? __pfx___schedule+0x10/0x10 [ 1490.453155][ T38] rt_mutex_schedule+0x76/0xf0 [ 1490.453217][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1490.453335][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1490.453416][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1490.453446][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1490.453553][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 1490.453664][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 1490.453756][ T38] ? rtnl_newlink+0x883/0x1bb0 [ 1490.453831][ T38] mutex_lock_nested+0x168/0x1d0 [ 1490.453915][ T38] rtnl_newlink+0x883/0x1bb0 [ 1490.454030][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1490.454103][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.454195][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.454279][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.454370][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.454445][ T38] ? unwind_next_frame+0xa6/0x2550 [ 1490.454551][ T38] ? unwind_next_frame+0xa6/0x2550 [ 1490.454625][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 1490.454746][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.454837][ T38] ? kernel_text_address+0xa5/0xe0 [ 1490.454904][ T38] ? __kernel_text_address+0xd/0x30 [ 1490.455014][ T38] ? unwind_get_return_address+0x4d/0x90 [ 1490.455086][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1490.460816][ T38] ? arch_stack_walk+0xfb/0x150 [ 1490.460910][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1490.461043][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 1490.461123][ T38] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1490.461196][ T38] ? kas[ 1490.461196][ T38] ? kasan_save_track+0x3e/0x80 [ 1490.461259][ T38] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1490.461333][ T38] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1490.461406][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1490.461492][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.461636][ T38] netlink_rcv_skb+0x232/0x4b0 [ 1490.461726][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1490.461801][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1490.461917][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1490.461999][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1490.462102][ T38] netlink_unicast+0x780/0x920 [ 1490.462207][ T38] netlink_sendmsg+0x813/0xb40 [ 1490.462284][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1490.462387][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1490.462450][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1490.462501][ T38] __sys_sendto+0x67f/0x710 [ 1490.462578][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 1490.462726][ T38] ? fput_close_sync+0x11f/0x240 [ 1490.462787][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1490.462869][ T38] __x64_sys_sendto+0xde/0x100 [ 1490.462969][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.463060][ T38] do_syscall_64+0x174/0x580 [ 1491.427858][ T38] ? trace_irq_disable+0x3b/0x140 [ 1491.427963][ T38] ? clear_bhb_loop+0x40/0x90 [ 1491.428051][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.428113][ T38] RIP: 0033:0x7f0a82a7d68e [ 1491.428171][ T38] RSP: 002b:00007ffd5c2ee058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1491.428228][ T38] RAX: ffffffffffffffda RBX: 0000555560ddf500 RCX: 00007f0a82a7d68e [ 1491.428278][ T38] RDX: 000000000000002c RSI: 00007f0a83864670 RDI: 0000000000000003 [ 1491.428313][ T38] RBP: 0000000000000001 R08: 00007ffd5c2ee0d4 R09: 000000000000000c [ 1491.428352][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1491.428386][ T38] R13: 0000000000000000 R14: 00007f0a83864670 R15: 0000000000000000 [ 1491.428470][ T38] [ 1491.428556][ T38] [ 1491.428556][ T38] Showing all locks held in the system: [ 1491.428586][ T38] 5 locks held by kworker/u8:1/13: [ 1491.428627][ T38] 4 locks held by pr/legacy/17: [ 1491.428667][ T38] 4 locks held by ktimers/1/29: [ 1491.428705][ T38] 3 locks held by kworker/1:0/31: [ 1491.428737][ T38] 1 lock held by khungtaskd/38: [ 1491.428768][ T38] #0: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1491.428981][ T38] 6 locks held by kworker/u8:3/56: [ 1491.429021][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1491.429172][ T38] #1: ffffc9000122fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1491.429352][ T38] #2: ffff888035316310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1491.429624][ T38] #3: ffff88803c883920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1491.429762][ T38] #4: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1491.429908][ T38] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcae/0x2930 [ 1491.430117][ T38] 3 locks held by kworker/u8:5/91: [ 1491.430148][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1491.430289][ T38] #1: ffffc90002f2fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1491.430373][ T38] #2: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1491.430546][ T38] 3 locks held by kworker/u8:6/150: [ 1491.430579][ T38] #0: ffff888032386938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1491.430714][ T38] #1: ffffc90003a1fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1491.430856][ T38] #2: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 1491.431031][ T38] 4 locks held by kworker/u8:7/1027: [ 1491.431062][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1491.431198][ T38] #1: ffffc900060b7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1491.431327][ T38] #2: ffffffff8f341820 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1491.431515][ T38] #3: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1491.431755][ T38] 5 locks held by kworker/u8:10/1450: [ 1491.431796][ T38] 2 locks held by klogd/4957: [ 1491.431810][ T38] 2 locks held by dhcpcd/5263: [ 1491.431842][ T38] #0: ffff8880366a8928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 1491.432038][ T38] #1: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1491.432184][ T38] 2 locks held by getty/5355: [ 1491.432216][ T38] #0: ffff88802927d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1491.432403][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1491.432567][ T38] 5 locks held by syz-executor/5588: [ 1491.432619][ T38] 6 locks held by kworker/u8:14/6147: [ 1491.432652][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1491.432785][ T38] #1: ffffc900068d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1491.432926][ T38] #2: ffff888034dfc310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1491.433095][ T38] #3: ffff888060a37520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1491.433262][ T38] #4: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1491.433373][ T38] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcae/0x2930 [ 1491.433513][ T38] 9 locks held by kworker/u8:15/6233: [ 1491.433552][ T38] 6 locks held by kworker/u8:19/6241: [ 1491.433583][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1491.433719][ T38] #1: ffffc90006dc7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1491.433863][ T38] #2: ffff88803e962310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1491.434028][ T38] #3: ffff888060c3c120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1491.434173][ T38] #4: ffffffff8dfc8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1491.434337][ T38] #5: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcae/0x2930 [ 1491.434486][ T38] 6 locks held by kworker/u8:2/12614: [ 1491.434527][ T38] 3 locks held by syz.1.2373/14107: [ 1491.434566][ T38] 6 locks held by syz.4.2374/14112: [ 1491.434607][ T38] 1 lock held by syz-executor/14201: [ 1491.434679][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1491.458800][ T38] 1 lock held by syz-executor/14207: [ 1491.458843][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1491.459021][ T38] 1 lock held by syz-executor/14227: [ 1491.459051][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1491.459224][ T38] 2 locks held by syz-executor/14234: [ 1491.459256][ T38] #0: ffffffff8eac4d48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1491.459446][ T38] #1: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1491.459615][ T38] 1 lock held by syz-executor/14319: [ 1491.459646][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.459810][ T38] 1 lock held by syz-executor/14324: [ 1491.459841][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.459995][ T38] 1 lock held by syz-executor/14331: [ 1491.460048][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1491.460153][ T38] 1 lock held by syz-executor/14350: [ 1491.460191][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.460347][ T38] 1 lock held by syz-executor/14355: [ 1491.460378][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.460543][ T38] 1 lock held by syz-executor/14363: [ 1491.460575][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.460715][ T38] 1 lock held by syz-executor/14369: [ 1491.460746][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.460900][ T38] 1 lock held by syz-executor/14376: [ 1491.619190][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619273][ T38] 1 lock held by syz-executor/14381: [ 1491.619288][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619353][ T38] 1 lock held by syz-executor/14390: [ 1491.619367][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619430][ T38] 1 lock held by syz-executor/14397: [ 1491.619443][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619514][ T38] 1 lock held by syz-executor/14404: [ 1491.619527][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619592][ T38] 1 lock held by syz-executor/14409: [ 1491.619605][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619671][ T38] 1 lock held by syz-executor/14419: [ 1491.619685][ T38] #0: ffffffff8f350578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1491.619751][ T38] [ 1491.619757][ T38] ============================================= [ 1491.619757][ T38] [ 1491.619785][ T38] NMI backtrace for cpu 0 [ 1491.619814][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.619845][ T38] Tainted: [L]=SOFTLOCKUP [ 1491.619853][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1491.619867][ T38] Call Trace: [ 1491.619877][ T38] [ 1491.619887][ T38] dump_stack_lvl+0xe8/0x150 [ 1491.619915][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1491.620012][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1491.620041][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1491.620073][ T38] sys_info+0x135/0x170 [ 1491.620097][ T38] watchdog+0xfd3/0x1030 [ 1491.620163][ T38] ? watchdog+0x1c9/0x1030 [ 1491.620196][ T38] kthread+0x388/0x470 [ 1491.620228][ T38] ? __pfx_watchdog+0x10/0x10 [ 1491.620252][ T38] ? __pfx_kthread+0x10/0x10 [ 1491.620283][ T38] ret_from_fork+0x514/0xb70 [ 1491.620313][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.620338][ T38] ? __switch_to+0xc79/0x1410 [ 1491.620377][ T38] ? __pfx_kthread+0x10/0x10 [ 1491.620409][ T38] ret_from_fork_asm+0x1a/0x30 [ 1491.620456][ T38] [ 1491.620465][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1491.620498][ C1] NMI backtrace for cpu 1 [ 1491.620516][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.620541][ C1] Tainted: [L]=SOFTLOCKUP [ 1491.620548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1491.620559][ C1] RIP: 0010:__lock_acquire+0x7/0x2cf0 [ 1491.620587][ C1] Code: 00 b9 0a 00 00 00 5b e9 c7 55 00 00 5b e9 d1 23 7f 09 cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 <41> 54 53 48 81 ec e8 00 00 00 65 48 8b 05 e7 56 c9 10 48 89 84 24 [ 1491.620603][ C1] RSP: 0000:ffffc90000a3f9d0 EFLAGS: 00000046 [ 1491.620618][ C1] RAX: 0000000000000000 RBX: ffffc90000a3fa74 RCX: 0000000000000002 [ 1491.620630][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8dfc8100 [ 1491.620642][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1491.620653][ C1] R10: 0000000000000000 R11: fffffbfff1f10e1f R12: 0000000000000005 [ 1491.620665][ C1] R13: 0000000000000005 R14: ffff88801da9ca64 R15: 0000000000000000 [ 1491.620679][ C1] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 1491.620693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1491.620705][ C1] CR2: 00007ff446ae1636 CR3: 000000003a070000 CR4: 00000000003526f0 [ 1491.620721][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1491.620733][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1491.620746][ C1] Call Trace: [ 1491.620753][ C1] [ 1491.620761][ C1] reacquire_held_locks+0x104/0x190 [ 1491.620790][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1491.620814][ C1] lock_release+0x199/0x3c0 [ 1491.620838][ C1] ? advance_sched+0x958/0xc20 [ 1491.620907][ C1] rt_spin_unlock+0x29/0x200 [ 1491.620930][ C1] advance_sched+0x958/0xc20 [ 1491.620964][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1491.620998][ C1] __hrtimer_run_queues+0x405/0xb10 [ 1491.621046][ C1] hrtimer_run_softirq+0x18f/0x260 [ 1491.621067][ C1] handle_softirqs+0x1de/0x6d0 [ 1491.621091][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1491.621150][ C1] run_ktimerd+0x69/0x100 [ 1491.621172][ C1] smpboot_thread_fn+0x541/0xa50 [ 1491.621193][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1491.621218][ C1] kthread+0x388/0x470 [ 1491.621242][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1491.621262][ C1] ? __pfx_kthread+0x10/0x10 [ 1491.621286][ C1] ret_from_fork+0x514/0xb70 [ 1491.621307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.621326][ C1] ? __switch_to+0xc79/0x1410 [ 1491.621354][ C1] ? __pfx_kthread+0x10/0x10 [ 1491.621377][ C1] ret_from_fork_asm+0x1a/0x30 [ 1491.621407][ C1] [ 1491.777856][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1491.777883][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.777913][ T38] Tainted: [L]=SOFTLOCKUP [ 1491.777921][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1491.777936][ T38] Call Trace: [ 1491.777946][ T38] [ 1491.777956][ T38] vpanic+0x56c/0xa60 [ 1491.777990][ T38] ? __pfx___schedule+0x10/0x10 [ 1491.778024][ T38] ? __pfx_vpanic+0x10/0x10 [ 1491.778064][ T38] panic+0xc5/0xd0 [ 1491.778090][ T38] ? __pfx_panic+0x10/0x10 [ 1491.778120][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1491.778159][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1491.778192][ T38] watchdog+0x102c/0x1030 [ 1491.778227][ T38] ? watchdog+0x1c9/0x1030 [ 1491.778260][ T38] kthread+0x388/0x470 [ 1491.778292][ T38] ? __pfx_watchdog+0x10/0x10 [ 1491.778316][ T38] ? __pfx_kthread+0x10/0x10 [ 1491.778348][ T38] ret_from_fork+0x514/0xb70 [ 1491.778378][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.778404][ T38] ? __switch_to+0xc79/0x1410 [ 1491.778443][ T38] ? __pfx_kthread+0x10/0x10 [ 1491.778474][ T38] ret_from_fork_asm+0x1a/0x30 [ 1491.778528][ T38] [ 1491.779137][ T38] Kernel Offset: disabled