last executing test programs: 3m48.475770912s ago: executing program 2 (id=8267): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "115e4ecd", {0x3, 0x100, 0x0, 0x6, 0x3, 0x8, 0xd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 3m47.954148192s ago: executing program 1 (id=8271): socket$inet_tcp(0x2, 0x1, 0x0) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) memfd_secret(0x80000) r0 = userfaultfd(0x80001) getpid() readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) 3m46.95987113s ago: executing program 1 (id=8272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x4, "5eee"}]}}}}}}}}, 0x0) 3m46.951655119s ago: executing program 3 (id=8273): syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x10000, 0x0, 0xffffffff}, 0x0, 0x0, &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 3m46.837060005s ago: executing program 1 (id=8274): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x0, [0x9, 0x9, 0x1, 0x5, 0x17, 0xad75], 0x1, &(0x7f0000000100)=[{}], 0x0}, 0x0) 3m46.712060371s ago: executing program 1 (id=8275): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 3m45.595774662s ago: executing program 3 (id=8276): syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x10000, 0x0, 0xffffffff}, 0x0, 0x0, &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 3m44.949978196s ago: executing program 1 (id=8278): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000001c0)={'s526\x00', [0xcf7, 0x20, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x7, 0x4, 0x1, 0x8, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40d, 0xe69, 0x81, 0x10008, 0x3, 0x1cdc, 0xfbfffffa]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec"], 0x1c}, 0x1, 0xfff0}, 0x0) 3m44.727702117s ago: executing program 3 (id=8279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x88c0) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001000)=""/51, 0x33}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/233, 0xe9}, {&(0x7f0000002940)=""/136, 0x88}], 0x4}, 0x53}], 0x4, 0x40002002, 0x0) 3m44.662127406s ago: executing program 2 (id=8280): socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000007c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 3m44.613150416s ago: executing program 1 (id=8281): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xc2) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 3m44.508725143s ago: executing program 2 (id=8282): socket$inet_tcp(0x2, 0x1, 0x0) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) memfd_secret(0x80000) r0 = userfaultfd(0x80001) getpid() readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) 3m43.501620755s ago: executing program 4 (id=8284): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x40080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) epoll_create1(0x80000) 3m43.495228515s ago: executing program 2 (id=8285): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x0, [0x9, 0x9, 0x1, 0x5, 0x17, 0xad75], 0x1, &(0x7f0000000100)=[{}], 0x0}, 0x0) 3m43.448586559s ago: executing program 3 (id=8286): syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x10000, 0x0, 0xffffffff}, 0x0, 0x0, &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 3m43.163511662s ago: executing program 3 (id=8287): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r0, 0x0, 0x0, 0x8000c5e) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r1, &(0x7f00000005c0)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3m42.261083446s ago: executing program 2 (id=8289): syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x10000, 0x0, 0xffffffff}, 0x0, 0x0, &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 3m41.83251902s ago: executing program 4 (id=8291): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000001c0)={'s526\x00', [0xcf7, 0x20, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x7, 0x4, 0x1, 0x8, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40d, 0xe69, 0x81, 0x10008, 0x3, 0x1cdc, 0xfbfffffa]}) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000440), &(0x7f00000003c0), &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec"], 0x1c}, 0x1, 0xfff0}, 0x0) 3m40.333500766s ago: executing program 2 (id=8292): socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000007c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 3m40.192488269s ago: executing program 4 (id=8293): userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m39.696933571s ago: executing program 3 (id=8294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x40004, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) write$nci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r8], 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x3ec0) close(0xffffffffffffffff) 3m37.7885991s ago: executing program 4 (id=8297): syz_io_uring_setup(0x2aa8, &(0x7f0000000140)={0x0, 0x4b5, 0x10000, 0x0, 0xffffffff}, 0x0, 0x0, &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 3m37.44503676s ago: executing program 4 (id=8298): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x8}) 3m37.27638976s ago: executing program 4 (id=8299): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x0, [0x9, 0x9, 0x1, 0x5, 0x17, 0xad75], 0x1, &(0x7f0000000100)=[{}], 0x0}, 0x0) 3m29.384335853s ago: executing program 32 (id=8281): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0xc2) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 3m24.858957427s ago: executing program 33 (id=8292): socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000007c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 3m24.388900111s ago: executing program 34 (id=8294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x40004, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) write$nci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r8], 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x3ec0) close(0xffffffffffffffff) 3m21.895182331s ago: executing program 35 (id=8299): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x0, [0x9, 0x9, 0x1, 0x5, 0x17, 0xad75], 0x1, &(0x7f0000000100)=[{}], 0x0}, 0x0) 1m27.672091948s ago: executing program 8 (id=8562): syz_io_uring_setup(0x3ec3, 0x0, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x2, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m24.637238249s ago: executing program 8 (id=8568): syz_io_uring_setup(0x2aa8, 0x0, 0x0, 0x0, &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 1m23.335091677s ago: executing program 8 (id=8569): r0 = io_uring_setup(0x667, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.551046172s ago: executing program 6 (id=8587): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1m17.379164709s ago: executing program 8 (id=8588): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 1m17.076137326s ago: executing program 0 (id=8589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) 1m15.840000156s ago: executing program 6 (id=8592): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xbf7ffffd}}, {{0xa, 0x4e08, 0x4a3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) 1m15.750728755s ago: executing program 6 (id=8593): r0 = socket$inet6(0xa, 0x3, 0x76) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r0) 1m15.713923303s ago: executing program 0 (id=8594): syz_emit_vhci(0x0, 0x1d) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m15.632572625s ago: executing program 6 (id=8595): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x3, 0xb}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) 1m15.257677414s ago: executing program 0 (id=8597): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.224971025s ago: executing program 7 (id=8598): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x8000000a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d03420008000200", @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) 1m15.054935215s ago: executing program 6 (id=8599): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) r1 = memfd_create(0x0, 0x5) ftruncate(r1, 0x400000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac2(0x5, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100300000040732b130040000102030109027d000301053009080b00010107208c0904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000040)) 1m14.865848872s ago: executing program 7 (id=8600): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x88c0) recvmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001000)=""/51, 0x33}, {&(0x7f0000002840)=""/233, 0xe9}, {&(0x7f0000002940)=""/136, 0x88}], 0x3}, 0x53}], 0x4, 0x40002002, 0x0) 1m14.262741133s ago: executing program 0 (id=8601): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) gettid() r1 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, 0x0, 0x4000010) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, 0x0, 0x80000) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r2, 0x0, &(0x7f0000000180)) 1m14.117948046s ago: executing program 7 (id=8602): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 1m13.583764504s ago: executing program 0 (id=8603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) 1m13.537040944s ago: executing program 6 (id=8604): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a000000090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x100e, 0xa08, 0x101, 0xb, 0x445, 0x5, 0x9, 0x3004, 0x200, 0xd, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m13.531447406s ago: executing program 7 (id=8605): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000013000100000000008bcd36aa5f9eca00000000cde73661dc24b5af93b68b1de20326a6936d2605282c7c1933c59770deb1f14f99d9b210deb0f81282f8bd589f7057ffdbc120712b29428f9591bfb7b7638eca2c6e8203184c66f27dd2beafa90f3dbf3751216c5378b94a3bc2bb0a48ad68548d7106b7b8f9a1d2ebeb3ce55779132b4eed82e03e6a418924"], 0xe0}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x5, 0x10, 0xae19, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m12.284143435s ago: executing program 0 (id=8606): syz_emit_vhci(0x0, 0x1d) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m12.199599537s ago: executing program 7 (id=8607): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3580) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x1, 0x0, 0x4}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000001c0)={'s526\x00', [0xcf7, 0x20, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x7, 0x4, 0x1, 0x8, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40d, 0xe69, 0x81, 0x10008, 0x3, 0x1cdc, 0xfbfffffa]}) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000440), &(0x7f00000003c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec"], 0x1c}, 0x1, 0xfff0}, 0x0) 1m12.069329918s ago: executing program 7 (id=8608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x3, 0xb}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840) 1m11.704118786s ago: executing program 8 (id=8609): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x8000000a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d03420008000200", @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) 1m11.138180924s ago: executing program 8 (id=8610): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3f0}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x4) 0s ago: executing program 36 (id=8604): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a000000090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x100e, 0xa08, 0x101, 0xb, 0x445, 0x5, 0x9, 0x3004, 0x200, 0xd, 0xc, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): usb 4-1: USB disconnect, device number 101 [ 1490.272085][T11806] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1490.676628][T11806] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1490.676657][T11806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.676677][T11806] usb 1-1: Product: syz [ 1490.676689][T11806] usb 1-1: Manufacturer: syz [ 1490.676702][T11806] usb 1-1: SerialNumber: syz [ 1490.736621][T11806] usb 1-1: config 0 descriptor?? [ 1490.954011][T11806] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1491.052895][T28324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1491.140943][T18377] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1491.300896][T18377] usb 2-1: Using ep0 maxpacket: 32 [ 1491.302547][T18377] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1491.302570][T18377] usb 2-1: config 0 has no interface number 0 [ 1491.302602][T18377] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1491.304801][T18377] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1491.304815][T18377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.304826][T18377] usb 2-1: Product: syz [ 1491.304833][T18377] usb 2-1: Manufacturer: syz [ 1491.304840][T18377] usb 2-1: SerialNumber: syz [ 1491.393198][T18377] usb 2-1: config 0 descriptor?? [ 1491.443363][ T5584] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1491.567527][T11806] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1491.594641][ T5584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1491.594673][ T5584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.594707][ T5584] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1491.594728][ T5584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.621478][ T5584] usb 5-1: config 0 descriptor?? [ 1491.842872][T18377] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1491.842925][T18377] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1491.842940][T18377] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1491.843030][T18377] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1491.883606][T18377] usb 2-1: USB disconnect, device number 104 [ 1492.266604][T28330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.267826][T28330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.294675][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7482'. [ 1492.319753][ T1116] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.320149][ T1116] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.320187][ T1116] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.320219][ T1116] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.320313][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7482'. [ 1492.613886][ T31] usb 1-1: USB disconnect, device number 112 [ 1493.004370][ T5584] usbhid 5-1:0.0: can't add hid device: -71 [ 1493.004490][ T5584] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1493.013129][ T5584] usb 5-1: USB disconnect, device number 123 [ 1493.761051][T11806] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1493.925534][T11806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1493.927058][T11806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.927080][T11806] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1493.927125][T11806] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1493.927169][T11806] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1493.927292][T11806] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1493.927396][T11806] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1493.949565][T11806] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1493.949591][T11806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.949610][T11806] usb 4-1: Product: syz [ 1493.949622][T11806] usb 4-1: Manufacturer: syz [ 1493.949638][T11806] usb 4-1: SerialNumber: syz [ 1494.482987][T11806] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1494.492461][T11806] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1494.492477][T11806] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1494.492486][T11806] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1495.308856][T11806] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1495.337598][T11806] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1495.377126][T11806] usb 4-1: USB disconnect, device number 102 [ 1495.567787][T21018] udevd[21018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.780892][T18377] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1495.870940][ T5584] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1495.930967][T18377] usb 3-1: Using ep0 maxpacket: 32 [ 1495.932897][T18377] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1495.932921][T18377] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.932939][T18377] usb 3-1: config 0 has no interface number 0 [ 1495.932979][T18377] usb 3-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1495.935251][T18377] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1495.935275][T18377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.935285][T18377] usb 3-1: Product: syz [ 1495.935292][T18377] usb 3-1: Manufacturer: syz [ 1495.935299][T18377] usb 3-1: SerialNumber: syz [ 1495.940313][T18377] usb 3-1: config 0 descriptor?? [ 1496.027347][ T5584] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1496.027374][ T5584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.027393][ T5584] usb 2-1: Product: syz [ 1496.027406][ T5584] usb 2-1: Manufacturer: syz [ 1496.027418][ T5584] usb 2-1: SerialNumber: syz [ 1496.070347][ T5584] usb 2-1: config 0 descriptor?? [ 1496.278720][ T5584] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1496.957593][ T5584] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1497.253946][ T7673] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.253995][ T7673] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.254019][ T7673] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.254037][ T7673] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.640422][T24005] usb 3-1: USB disconnect, device number 104 [ 1498.698876][ T5584] usb 2-1: USB disconnect, device number 105 [ 1501.171101][T28494] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1501.171254][T28494] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7521'. [ 1501.263733][T28497] tipc: Failed to remove unknown binding: 66,0,0/0:2592078211/2592078212 [ 1501.380952][T24005] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1501.531063][T24005] usb 5-1: Using ep0 maxpacket: 32 [ 1501.533609][T24005] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1501.533632][T24005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.533651][T24005] usb 5-1: config 0 has no interface number 0 [ 1501.533692][T24005] usb 5-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1501.537352][T24005] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1501.537378][T24005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.537396][T24005] usb 5-1: Product: syz [ 1501.537409][T24005] usb 5-1: Manufacturer: syz [ 1501.537423][T24005] usb 5-1: SerialNumber: syz [ 1501.555667][T24005] usb 5-1: config 0 descriptor?? [ 1504.297694][T13413] usb 5-1: USB disconnect, device number 124 [ 1504.716074][T28547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1504.716248][T28547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1504.761063][T13413] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1504.913733][T13413] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.913757][T13413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1504.913805][T13413] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1504.913826][T13413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.963080][T13413] usb 5-1: config 0 descriptor?? [ 1505.181806][T13413] Bluetooth: Can't get state to change to load ram patch err [ 1505.181826][T13413] Bluetooth: Loading patch file failed [ 1505.181864][T13413] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 1505.214530][T13413] usb 5-1: USB disconnect, device number 125 [ 1505.721718][ T31] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1506.364666][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.364692][ T31] usb 1-1: config 0 has no interfaces? [ 1506.364721][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1506.364743][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.444911][ T31] usb 1-1: config 0 descriptor?? [ 1506.553574][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7542'. [ 1507.320985][T24005] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1507.480358][T24005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1507.480390][T24005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1507.480425][T24005] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1507.480444][T24005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.531968][T24005] usb 3-1: config 0 descriptor?? [ 1508.304154][T28588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.305905][T28588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.309325][T28588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1508.309546][T28588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1508.349835][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1508.366969][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1509.224830][T18377] usb 1-1: USB disconnect, device number 113 [ 1509.725011][T24005] usbhid 3-1:0.0: can't add hid device: -71 [ 1509.725127][T24005] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1509.731626][T13413] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1510.809219][T24005] usb 3-1: USB disconnect, device number 105 [ 1510.864005][T18377] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1510.976869][T13413] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1510.982341][T13413] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1510.982383][T13413] usb 5-1: can't read configurations, error -71 [ 1511.022855][T18377] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.022870][T18377] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1511.022896][T18377] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1511.022908][T18377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.027950][T18377] usb 1-1: config 0 descriptor?? [ 1511.233087][T18377] Bluetooth: Can't get state to change to load ram patch err [ 1511.233105][T18377] Bluetooth: Loading patch file failed [ 1511.233144][T18377] ath3k 1-1:0.0: probe with driver ath3k failed with error -32 [ 1511.240930][T18377] usb 1-1: USB disconnect, device number 114 [ 1513.563020][T28682] binder: 28681:28682 ioctl 4018620d 0 returned -22 [ 1513.950857][ T5584] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1514.103843][ T5584] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1514.104961][ T5584] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.104984][ T5584] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1514.105156][ T5584] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1514.105178][ T5584] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1514.105198][ T5584] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1514.105211][ T5584] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1514.107583][ T5584] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1514.107608][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.107623][ T5584] usb 4-1: Product: syz [ 1514.107630][ T5584] usb 4-1: Manufacturer: syz [ 1514.107638][ T5584] usb 4-1: SerialNumber: syz [ 1514.493076][ T5584] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1514.515642][ T5584] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1514.515668][ T5584] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1514.515684][ T5584] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1514.594082][ T5584] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1514.626011][ T5584] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1514.655522][ T5584] usb 4-1: USB disconnect, device number 103 [ 1514.762159][T21018] udevd[21018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.223396][T28732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1516.223410][T28732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1516.293263][T28732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1516.293285][T28732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1520.890876][ T5584] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1521.213808][ T5584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1521.213839][ T5584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.213874][ T5584] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1521.213895][ T5584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.262602][ T5584] usb 1-1: config 0 descriptor?? [ 1522.232647][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.232670][T28815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.237330][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.237726][T28815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.275433][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.275452][T28815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.279613][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.279630][T28815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1522.858022][ T5584] usbhid 1-1:0.0: can't add hid device: -71 [ 1522.883198][ T5584] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1522.935211][ T5584] usb 1-1: USB disconnect, device number 115 [ 1524.076924][ T5584] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1524.453813][ T5584] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1524.453838][ T5584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.453855][ T5584] usb 1-1: Product: syz [ 1524.453868][ T5584] usb 1-1: Manufacturer: syz [ 1524.453880][ T5584] usb 1-1: SerialNumber: syz [ 1524.464354][ T5584] usb 1-1: config 0 descriptor?? [ 1525.115757][ T5584] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1525.721876][ T5584] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1526.752195][ T5584] usb 1-1: USB disconnect, device number 116 [ 1531.061266][T24005] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1531.212874][T24005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1531.212898][T24005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.212919][T24005] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1531.212930][T24005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.217568][T24005] usb 5-1: config 0 descriptor?? [ 1531.370874][T13413] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1531.523136][T13413] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1531.523164][T13413] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1531.523182][T13413] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1531.523226][T13413] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1531.523250][T13413] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1531.524995][T13413] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1531.525019][T13413] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1531.525037][T13413] usb 4-1: Product: syz [ 1531.525049][T13413] usb 4-1: Manufacturer: syz [ 1531.588161][T13413] cdc_wdm 4-1:1.0: skipping garbage [ 1531.588178][T13413] cdc_wdm 4-1:1.0: skipping garbage [ 1531.588273][T13413] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1531.852261][T28997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.859120][T28997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.866501][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7655'. [ 1532.140443][ T39] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.140697][ T39] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.141180][ T39] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.141224][ T39] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.141399][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7655'. [ 1532.703253][T24005] usbhid 5-1:0.0: can't add hid device: -71 [ 1532.703355][T24005] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1532.733721][T24005] usb 5-1: USB disconnect, device number 2 [ 1534.105418][T18379] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1534.202732][T13413] usb 4-1: USB disconnect, device number 104 [ 1534.262773][T18379] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.262798][T18379] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1534.262832][T18379] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1534.262852][T18379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.302825][T18379] usb 1-1: config 0 descriptor?? [ 1536.810870][T24005] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1536.850136][ T39] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.850185][ T39] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.850220][ T39] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.850255][ T39] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.963140][T24005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1536.963174][T24005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.963210][T24005] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1536.963232][T24005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.012978][T13413] usb 1-1: USB disconnect, device number 117 [ 1537.052924][T24005] usb 4-1: config 0 descriptor?? [ 1538.256003][T29087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.280213][T29087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.786513][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7678'. [ 1539.195491][ T1116] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1539.196006][ T1116] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1539.196045][ T1116] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1539.196078][ T1116] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1539.198164][T29087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7678'. [ 1540.858169][T24005] usbhid 4-1:0.0: can't add hid device: -71 [ 1540.858296][T24005] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1540.881005][T24005] usb 4-1: USB disconnect, device number 105 [ 1541.351453][T13413] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1541.525045][T13413] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1541.525073][T13413] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1541.525091][T13413] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1541.525137][T13413] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1541.525161][T13413] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1541.529510][T13413] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1541.529536][T13413] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1541.529555][T13413] usb 1-1: Product: syz [ 1541.529576][T13413] usb 1-1: Manufacturer: syz [ 1541.573437][T13413] cdc_wdm 1-1:1.0: skipping garbage [ 1541.573454][T13413] cdc_wdm 1-1:1.0: skipping garbage [ 1541.573567][T13413] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1542.157565][T29141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1542.272576][T29141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1542.510827][T18379] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1542.691871][T18379] usb 4-1: Using ep0 maxpacket: 32 [ 1543.024289][T18379] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1543.024317][T18379] usb 4-1: config 0 has no interface number 0 [ 1543.024636][T18379] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1543.137722][T18379] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1543.137801][T18379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.137845][T18379] usb 4-1: Product: syz [ 1543.137882][T18379] usb 4-1: Manufacturer: syz [ 1543.137920][T18379] usb 4-1: SerialNumber: syz [ 1543.596974][T18379] usb 4-1: config 0 descriptor?? [ 1543.958135][T24005] usb 1-1: USB disconnect, device number 118 [ 1544.590872][ T5584] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1544.743433][ T5584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1544.743466][ T5584] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.743500][ T5584] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1544.743522][ T5584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.749087][ T5584] usb 2-1: config 0 descriptor?? [ 1545.133073][T29201] binder: 29200:29201 ioctl c0306201 0 returned -14 [ 1545.134975][T29201] binder: 29200:29201 unknown command 0 [ 1545.134993][T29201] binder: 29200:29201 ioctl c0306201 200000000480 returned -22 [ 1545.451692][T29191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.454417][T29191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.461622][T29191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1545.462470][T29191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1545.462934][T24005] usb 4-1: USB disconnect, device number 106 [ 1545.501850][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1545.503066][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7707'. [ 1546.013277][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.141259][T18379] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1546.202454][ T5584] usbhid 2-1:0.0: can't add hid device: -71 [ 1546.202571][ T5584] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1546.211262][ T5584] usb 2-1: USB disconnect, device number 106 [ 1546.298428][T18379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1546.298459][T18379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.298493][T18379] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1546.298513][T18379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.345209][T18379] usb 1-1: config 0 descriptor?? [ 1547.367791][T29242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.373780][T29242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.410083][T29215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7715'. [ 1547.410250][T29215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7715'. [ 1547.433048][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7715'. [ 1547.435487][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7715'. [ 1548.990836][ T5584] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1549.057057][T18379] usbhid 1-1:0.0: can't add hid device: -71 [ 1549.057169][T18379] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1549.087836][T18379] usb 1-1: USB disconnect, device number 119 [ 1549.150874][ T5584] usb 4-1: Using ep0 maxpacket: 32 [ 1549.153027][ T5584] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1549.153049][ T5584] usb 4-1: config 0 has no interface number 0 [ 1549.153091][ T5584] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1549.159921][ T5584] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1549.159946][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.159964][ T5584] usb 4-1: Product: syz [ 1549.159977][ T5584] usb 4-1: Manufacturer: syz [ 1549.159990][ T5584] usb 4-1: SerialNumber: syz [ 1549.244396][ T5584] usb 4-1: config 0 descriptor?? [ 1549.334135][ T5584] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1549.334176][ T5584] em28xx 4-1:0.132: Video interface 132 found: [ 1549.698410][ T5584] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1550.100469][ T5584] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1550.100501][ T5584] em28xx 4-1:0.132: board has no eeprom [ 1550.170797][ T5584] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1550.170824][ T5584] em28xx 4-1:0.132: analog set to bulk mode. [ 1550.195290][T24005] em28xx 4-1:0.132: Registering V4L2 extension [ 1550.214435][ T5584] usb 4-1: USB disconnect, device number 107 [ 1550.220605][ T5584] em28xx 4-1:0.132: Disconnecting em28xx [ 1550.417812][T24005] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1550.417835][T24005] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1550.417848][T24005] em28xx 4-1:0.132: No AC97 audio processor [ 1550.443933][T24005] usb 4-1: Decoder not found [ 1550.443951][T24005] em28xx 4-1:0.132: failed to create media graph [ 1550.443984][T24005] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1550.450676][T24005] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1550.462418][ T5584] em28xx 4-1:0.132: Closing input extension [ 1550.509628][ T5584] em28xx 4-1:0.132: Freeing device [ 1553.526563][T29313] binder: 29311:29313 unknown command 0 [ 1553.526583][T29313] binder: 29311:29313 ioctl c0306201 200000000480 returned -22 [ 1553.924608][T13413] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1554.781725][T13413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1554.783365][T13413] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.783387][T13413] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1554.783434][T13413] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1554.783481][T13413] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1554.783519][T13413] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1554.783544][T13413] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1554.794579][T13413] usb 1-1: string descriptor 0 read error: -22 [ 1554.794719][T13413] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1554.794741][T13413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.143850][T13413] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1556.251227][T13413] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 1556.355011][T13413] usb 1-1: USB disconnect, device number 120 [ 1556.491876][T24753] udevd[24753]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.258687][T29411] binder: 29409:29411 unknown command 0 [ 1561.258707][T29411] binder: 29409:29411 ioctl c0306201 200000000480 returned -22 [ 1562.518006][T29450] binder: 29449:29450 unknown command 0 [ 1562.518019][T29450] binder: 29449:29450 ioctl c0306201 200000000480 returned -22 [ 1563.050864][T24005] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1563.180868][T24005] usb 2-1: device descriptor read/64, error -71 [ 1563.980889][T24005] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1564.110916][T24005] usb 2-1: device descriptor read/64, error -71 [ 1564.252654][T24005] usb usb2-port1: attempt power cycle [ 1565.300843][T24005] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1565.321549][T24005] usb 2-1: device descriptor read/8, error -71 [ 1565.567447][T24005] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1565.592545][T24005] usb 2-1: device descriptor read/8, error -71 [ 1565.701841][T24005] usb usb2-port1: unable to enumerate USB device [ 1566.050904][T24005] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1566.779353][T24005] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1566.779382][T24005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.779401][T24005] usb 4-1: Product: syz [ 1566.779414][T24005] usb 4-1: Manufacturer: syz [ 1566.779427][T24005] usb 4-1: SerialNumber: syz [ 1566.846241][T24005] usb 4-1: config 0 descriptor?? [ 1567.054915][T24005] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1567.661540][T24005] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1567.811726][T29542] binder: 29541:29542 ioctl c0306201 0 returned -14 [ 1567.860926][T13413] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1567.981368][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7809'. [ 1567.981396][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7809'. [ 1567.991466][T13413] usb 5-1: device descriptor read/64, error -71 [ 1568.240961][T13413] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1568.370861][T13413] usb 5-1: device descriptor read/64, error -71 [ 1568.614744][T13413] usb usb5-port1: attempt power cycle [ 1569.484945][T18379] usb 4-1: USB disconnect, device number 108 [ 1569.711619][T13413] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1569.736703][T13413] usb 5-1: device descriptor read/8, error -71 [ 1570.100840][T13413] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1570.121490][T13413] usb 5-1: device descriptor read/8, error -71 [ 1570.333296][T13413] usb usb5-port1: unable to enumerate USB device [ 1570.919922][T29581] binder: 29580:29581 ioctl c0306201 0 returned -14 [ 1571.103420][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7820'. [ 1571.103445][T29585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7820'. [ 1573.080809][ T5584] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1573.238995][ T5584] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1573.239023][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.239041][ T5584] usb 4-1: Product: syz [ 1573.239055][ T5584] usb 4-1: Manufacturer: syz [ 1573.239068][ T5584] usb 4-1: SerialNumber: syz [ 1573.291363][ T5584] usb 4-1: config 0 descriptor?? [ 1573.648742][ T5584] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1574.332692][T29616] binder: BINDER_SET_CONTEXT_MGR already set [ 1574.332760][T29616] binder: 29615:29616 ioctl 4018620d 200000004a80 returned -16 [ 1574.335868][T29616] binder: 29615:29616 ioctl c0306201 0 returned -14 [ 1574.773605][ T5584] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1574.822232][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1574.822256][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1576.079923][T18379] usb 4-1: USB disconnect, device number 109 [ 1576.439741][T29654] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1576.439755][T29654] UDF-fs: Scanning with blocksize 512 failed [ 1576.441181][T29654] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1576.441192][T29654] UDF-fs: Scanning with blocksize 1024 failed [ 1576.441487][T29654] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1576.441496][T29654] UDF-fs: Scanning with blocksize 2048 failed [ 1576.442869][T29654] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1576.442879][T29654] UDF-fs: Scanning with blocksize 4096 failed [ 1577.897159][T29676] binder: 29673:29676 ioctl c0285840 200000000000 returned -22 [ 1577.925717][T18379] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1578.291979][T18379] usb 2-1: Using ep0 maxpacket: 32 [ 1578.356960][T18379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.356993][T18379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.357014][T18379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1578.357053][T18379] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1578.357073][T18379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.764027][T18379] usb 2-1: config 0 descriptor?? [ 1579.350517][T18379] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input93 [ 1579.502840][T29687] netlink: 'syz.2.7850': attribute type 1 has an invalid length. [ 1579.707970][T29687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1579.980165][T29691] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1580.000367][T29692] bond1: (slave dummy0): making interface the new active one [ 1580.104765][T29692] dummy0: entered promiscuous mode [ 1580.105147][T29692] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1580.536160][T18379] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0003/input/input94 [ 1585.067142][T18379] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1585.196383][T13413] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1585.398279][T13413] usb 3-1: Using ep0 maxpacket: 8 [ 1585.417400][T13413] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1585.417463][T13413] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1585.417517][T13413] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1585.417541][T13413] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1585.417564][T13413] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1585.418174][T13413] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1585.418198][T13413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.700065][T18379] usb 2-1: USB disconnect, device number 111 [ 1586.425798][T13413] usb 3-1: usb_control_msg returned -32 [ 1586.425826][T13413] usbtmc 3-1:16.0: can't read capabilities [ 1586.473983][T29724] fido_id[29724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1586.655025][T13413] usb 3-1: USB disconnect, device number 106 [ 1586.807187][T15371] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1586.807233][T15371] CPU: 0 UID: 0 PID: 15371 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1586.807260][T15371] Tainted: [L]=SOFTLOCKUP [ 1586.807267][T15371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1586.807280][T15371] Workqueue: hci3 hci_rx_work [ 1586.807387][T15371] Call Trace: [ 1586.807397][T15371] [ 1586.807405][T15371] dump_stack_lvl+0xe8/0x150 [ 1586.807427][T15371] sysfs_create_dir_ns+0x271/0x2a0 [ 1586.807449][T15371] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1586.807498][T15371] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1586.807522][T15371] ? rt_spin_unlock+0x160/0x200 [ 1586.807539][T15371] kobject_add_internal+0x631/0xd10 [ 1586.807590][T15371] kobject_add+0x163/0x240 [ 1586.807614][T15371] ? __pfx_kobject_add+0x10/0x10 [ 1586.807639][T15371] ? get_device_parent+0x370/0x3a0 [ 1586.807660][T15371] device_add+0x408/0xbb0 [ 1586.807679][T15371] hci_conn_add_sysfs+0xd5/0x210 [ 1586.807721][T15371] le_conn_complete_evt+0x10e6/0x16b0 [ 1586.807772][T15371] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1586.807793][T15371] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1586.807819][T15371] ? lockdep_hardirqs_on+0x7a/0x110 [ 1586.807880][T15371] ? skb_pull_data+0xfb/0x200 [ 1586.807932][T15371] hci_le_conn_complete_evt+0x187/0x470 [ 1586.807959][T15371] hci_event_packet+0x659/0xef0 [ 1586.807998][T15371] ? irqentry_exit+0x218/0x760 [ 1586.808021][T15371] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1586.808039][T15371] ? __pfx_hci_event_packet+0x10/0x10 [ 1586.808064][T15371] ? hci_rx_work+0x3e1/0x1040 [ 1586.808085][T15371] hci_rx_work+0x3ee/0x1040 [ 1586.808107][T15371] ? process_scheduled_works+0xa70/0x1860 [ 1586.808125][T15371] process_scheduled_works+0xb5d/0x1860 [ 1586.808164][T15371] ? __pfx_process_scheduled_works+0x10/0x10 [ 1586.808185][T15371] ? assign_work+0x3d5/0x5e0 [ 1586.808204][T15371] worker_thread+0xa53/0xfc0 [ 1586.808241][T15371] kthread+0x388/0x470 [ 1586.808260][T15371] ? __pfx_worker_thread+0x10/0x10 [ 1586.808274][T15371] ? __pfx_kthread+0x10/0x10 [ 1586.808294][T15371] ret_from_fork+0x514/0xb70 [ 1586.808312][T15371] ? __pfx_ret_from_fork+0x10/0x10 [ 1586.808328][T15371] ? __switch_to+0xc79/0x1410 [ 1586.808350][T15371] ? __pfx_kthread+0x10/0x10 [ 1586.808369][T15371] ret_from_fork_asm+0x1a/0x30 [ 1586.808399][T15371] [ 1586.808433][T15371] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1586.808473][T15371] Bluetooth: hci3: failed to register connection device [ 1589.553368][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 1589.553395][ T36] audit: type=1804 audit(1778641230.057:371): pid=29754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.7869" name="bus" dev="ramfs" ino=166795 res=1 errno=0 [ 1591.221044][T29765] capability: warning: `syz.2.7874' uses deprecated v2 capabilities in a way that may be insecure [ 1591.640040][T29770] input: syz1 as /devices/virtual/input/input95 [ 1592.278884][T29779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1593.920248][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7881'. [ 1593.920277][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7881'. [ 1598.672873][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.672906][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.672930][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.672954][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.672978][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.673008][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.673032][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.673056][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.673080][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.673103][T18379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1598.843595][T18379] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.04 Device [syz0] on syz1 [ 1598.968888][T29814] could not allocate digest TFM handle hmac(sha256-neon) [ 1599.133976][T29828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1599.238626][T29822] fido_id[29822]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1603.590541][T29857] CUSE: unknown device info "" [ 1603.590551][T29857] CUSE: unknown device info "" [ 1603.590556][T29857] CUSE: unknown device info "ÿ" [ 1603.590560][T29857] CUSE: unknown device info "" [ 1603.590564][T29857] CUSE: unknown device info "ÿ" [ 1603.590568][T29857] CUSE: unknown device info "" [ 1603.590572][T29857] CUSE: unknown device info "" [ 1603.590576][T29857] CUSE: unknown device info "" [ 1603.590580][T29857] CUSE: DEVNAME unspecified [ 1604.856609][ T7413] dummy0: left promiscuous mode [ 1606.287277][T12964] Bluetooth: hci1: hcon ffff888038db4000 sent 1 < count 107 [ 1607.650277][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.011753][T29914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7914'. [ 1613.146832][T24005] IPVS: starting estimator thread 0... [ 1613.221455][T29914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7914'. [ 1614.584360][T29917] IPVS: using max 9 ests per chain, 21600 per kthread [ 1617.220483][T29932] binder: 29929:29932 ioctl c0306201 2000000001c0 returned -14 [ 1617.946392][T29938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7924'. [ 1621.245623][T29954] netlink: 'syz.4.7928': attribute type 4 has an invalid length. [ 1622.810841][ T31] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1622.963102][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.963156][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1622.963176][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.974762][ T31] usb 3-1: config 0 descriptor?? [ 1622.989550][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 1623.496491][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1623.497153][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 1623.497792][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1623.498414][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 1623.499052][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 1623.499637][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 1624.396688][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 1624.398739][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 1624.400627][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 1624.405884][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 1624.409340][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 1624.411654][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 1624.413573][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 1624.416932][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 1624.420859][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 1629.732948][ T31] pwc: Registered as video103. [ 1629.781532][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input96 [ 1630.179880][ T31] usb 3-1: USB disconnect, device number 107 [ 1631.983140][T29995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7926'. [ 1637.371492][T18379] IPVS: starting estimator thread 0... [ 1637.432054][T11806] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1637.460912][T30036] IPVS: using max 9 ests per chain, 21600 per kthread [ 1637.958122][T11806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.958146][T11806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.959304][T11806] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1637.959328][T11806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1637.959346][T11806] usb 2-1: SerialNumber: syz [ 1638.257075][T11806] usb 2-1: 0:2 : does not exist [ 1638.257170][T11806] usb 2-1: unit 5 not found! [ 1639.426088][T11806] usb 2-1: USB disconnect, device number 112 [ 1640.990990][T29973] udevd[29973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1641.943020][T30068] evm: overlay not supported [ 1642.872710][T30077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7958'. [ 1647.263754][T30125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7974'. [ 1648.390972][T24005] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1648.653894][T24005] usb 4-1: Using ep0 maxpacket: 8 [ 1648.806870][T24005] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1648.806930][T24005] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1648.806952][T24005] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1648.806974][T24005] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1648.806995][T24005] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1648.807035][T24005] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1648.807055][T24005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.923746][T24005] usb 4-1: usb_control_msg returned -32 [ 1649.923793][T24005] usbtmc 4-1:16.0: can't read capabilities [ 1650.138717][T30130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.139331][T30130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.187797][T13413] usb 4-1: USB disconnect, device number 110 [ 1650.943006][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1651.092586][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1651.094798][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1651.094836][ T31] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1651.094858][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.225860][ T31] usb 5-1: config 0 descriptor?? [ 1651.319341][T30162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7987'. [ 1652.145083][T13413] usb 5-1: USB disconnect, device number 7 [ 1652.913794][ T36] audit: type=1800 audit(1778641293.508:372): pid=30165 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.7988" name="file1" dev="overlay" ino=1860 res=0 errno=0 [ 1655.427227][T30205] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1657.667482][T24005] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1658.133637][T24005] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1658.133669][T24005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1658.133709][T24005] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1658.133730][T24005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.304800][T24005] usb 3-1: config 0 descriptor?? [ 1659.580783][T24005] ath6kl: Failed to submit usb control message: -71 [ 1659.580843][T24005] ath6kl: unable to send the bmi data to the device: -71 [ 1659.580856][T24005] ath6kl: Unable to send get target info: -71 [ 1659.649217][T24005] ath6kl: Failed to init ath6kl core: -71 [ 1659.654489][T24005] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1659.690828][T24005] usb 3-1: USB disconnect, device number 108 [ 1662.334643][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.334824][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.334920][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.334996][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.335069][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.335143][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.335214][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.335285][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1662.335409][ T6082] Bluetooth: hci4: Frame reassembly failed (-84) [ 1664.342707][T15371] Bluetooth: hci4: command 0xfc11 tx timeout [ 1664.520939][T12964] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1665.107595][ T5729] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1665.109917][ T31] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1665.400763][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1665.404735][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1665.404762][ T31] usb 4-1: config 0 has no interface number 0 [ 1665.404806][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1665.406601][ T5729] usb 1-1: config 0 has no interfaces? [ 1665.410478][ T5729] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1665.410503][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.410573][ T5729] usb 1-1: Product: syz [ 1665.410588][ T5729] usb 1-1: Manufacturer: syz [ 1665.410601][ T5729] usb 1-1: SerialNumber: syz [ 1665.417599][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1665.417625][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.417644][ T31] usb 4-1: Product: syz [ 1665.417657][ T31] usb 4-1: Manufacturer: syz [ 1665.417670][ T31] usb 4-1: SerialNumber: syz [ 1665.967085][ T5729] usb 1-1: config 0 descriptor?? [ 1665.967719][ T31] usb 4-1: config 0 descriptor?? [ 1666.603085][T30312] binder: 30306:30312 ioctl c0306201 2000000001c0 returned -14 [ 1667.286689][ T5729] usb 1-1: USB disconnect, device number 121 [ 1667.407564][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1667.438842][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1667.493467][ T31] usb 4-1: USB disconnect, device number 111 [ 1672.387456][ T5729] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1672.582056][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 1672.753998][ T5729] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1672.754967][ T5729] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1672.755047][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1672.755131][ T5729] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1672.755179][ T5729] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.756207][ T5729] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1672.756294][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.370358][ T5729] usb 5-1: usb_control_msg returned -32 [ 1673.370387][ T5729] usbtmc 5-1:16.0: can't read capabilities [ 1673.590519][T30391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.601902][T30391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.886560][T30391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.886917][T30391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.914168][T30391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1673.914491][T30391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.584043][ T31] usb 5-1: USB disconnect, device number 8 [ 1674.606937][T30391] usbtmc: can not find device for minor 0 [ 1674.796270][T30420] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8047'. [ 1684.268843][T30501] binder: 30500:30501 ioctl c0306201 2000000001c0 returned -14 [ 1690.107719][T30539] binder: 30538:30539 ioctl c0306201 2000000001c0 returned -14 [ 1691.497337][T30550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8111'. [ 1692.044738][T30550] vlan2: entered promiscuous mode [ 1692.044761][T30550] bond0: entered promiscuous mode [ 1692.044775][T30550] bond_slave_0: entered promiscuous mode [ 1692.045097][T30550] bond_slave_1: entered promiscuous mode [ 1693.510790][ T31] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1693.663298][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1693.665870][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.665890][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1693.673559][ T31] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1693.673584][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.673602][ T31] usb 1-1: Product: syz [ 1693.673615][ T31] usb 1-1: Manufacturer: syz [ 1693.673628][ T31] usb 1-1: SerialNumber: syz [ 1696.300878][ T31] usb 1-1: cannot find UAC_HEADER [ 1696.414740][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1696.425351][ T31] usb 1-1: USB disconnect, device number 122 [ 1696.554344][T30563] udevd[30563]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1715.980792][T13413] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1716.133201][T13413] usb 2-1: config 0 has no interfaces? [ 1716.135617][T13413] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1716.135642][T13413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.135660][T13413] usb 2-1: Product: syz [ 1716.135674][T13413] usb 2-1: Manufacturer: syz [ 1716.135687][T13413] usb 2-1: SerialNumber: syz [ 1716.146991][T13413] usb 2-1: config 0 descriptor?? [ 1717.032815][ T31] usb 2-1: USB disconnect, device number 113 [ 1721.050764][ T31] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 1721.203741][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1721.203786][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1721.203810][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1721.203849][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1721.203870][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.236824][ T31] usb 3-1: config 0 descriptor?? [ 1721.261016][T30888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1722.166513][ T31] hid_parser_main: 30 callbacks suppressed [ 1722.166537][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166585][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166627][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166668][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166706][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166745][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166785][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166808][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166831][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.166855][ T31] logitech 0003:046D:C24F.0005: unknown main item tag 0x0 [ 1722.384466][ T31] logitech 0003:046D:C24F.0005: hidraw0: USB HID v0.08 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 1722.384504][ T31] logitech 0003:046D:C24F.0005: no inputs found [ 1722.400914][T13413] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1722.580771][T13413] usb 1-1: config 0 has no interfaces? [ 1722.596373][T13413] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1722.596399][T13413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.596418][T13413] usb 1-1: Product: syz [ 1722.596431][T13413] usb 1-1: Manufacturer: syz [ 1722.596444][T13413] usb 1-1: SerialNumber: syz [ 1722.648032][T13413] usb 1-1: config 0 descriptor?? [ 1722.660746][ T5729] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1723.098762][ T31] usb 3-1: USB disconnect, device number 109 [ 1723.122926][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1723.123026][ T5729] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1723.123047][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.993877][ T5729] usb 2-1: config 0 descriptor?? [ 1724.848012][ T5729] ath6kl: Failed to submit usb control message: -71 [ 1724.848061][ T5729] ath6kl: unable to send the bmi data to the device: -71 [ 1724.848074][ T5729] ath6kl: Unable to send get target info: -71 [ 1724.917018][ T5729] ath6kl: Failed to init ath6kl core: -71 [ 1724.917545][ T5729] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1725.000721][T30919] fido_id[30919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1725.073167][ T5729] usb 2-1: USB disconnect, device number 114 [ 1725.118950][ T5584] usb 1-1: USB disconnect, device number 123 [ 1729.238115][T18375] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1730.294817][T18375] usb 4-1: config 0 has no interfaces? [ 1730.310574][T18375] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1730.310601][T18375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.310756][T18375] usb 4-1: Product: syz [ 1730.310770][T18375] usb 4-1: Manufacturer: syz [ 1730.310782][T18375] usb 4-1: SerialNumber: syz [ 1730.320508][T18375] usb 4-1: config 0 descriptor?? [ 1730.686000][ T5729] usb 4-1: USB disconnect, device number 112 [ 1734.481766][T12964] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1734.912326][T31091] bridge0: port 3(macvlan2) entered blocking state [ 1734.912648][T31091] bridge0: port 3(macvlan2) entered disabled state [ 1734.912840][T31091] macvlan2: entered allmulticast mode [ 1734.912855][T31091] ip6gretap0: entered allmulticast mode [ 1734.952637][T31091] macvlan2: entered promiscuous mode [ 1735.120780][T13413] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1735.241726][ T5729] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1736.009404][T13413] usb 1-1: config 0 has no interfaces? [ 1736.013371][T13413] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1736.013395][T13413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.013412][T13413] usb 1-1: Product: syz [ 1736.013424][T13413] usb 1-1: Manufacturer: syz [ 1736.013436][T13413] usb 1-1: SerialNumber: syz [ 1736.027155][T13413] usb 1-1: config 0 descriptor?? [ 1736.205490][ T5729] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1736.205519][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.205537][ T5729] usb 3-1: Product: syz [ 1736.205549][ T5729] usb 3-1: Manufacturer: syz [ 1736.205562][ T5729] usb 3-1: SerialNumber: syz [ 1736.266399][ T5729] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1736.389805][T13413] usb 1-1: USB disconnect, device number 124 [ 1738.177789][ T5584] usb 3-1: USB disconnect, device number 110 [ 1738.532055][T30966] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1738.534685][ T5584] usb 3-1: ath9k_htc: USB layer deinitialized [ 1740.650512][ T36] audit: type=1326 audit(1778641381.193:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31132 comm="syz.4.8284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7676bdce59 code=0x7ffc0000 [ 1740.652183][ T36] audit: type=1326 audit(1778641381.203:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31132 comm="syz.4.8284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7676bdce59 code=0x7ffc0000 [ 1740.652784][ T36] audit: type=1326 audit(1778641381.213:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31132 comm="syz.4.8284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7676bdce59 code=0x7ffc0000 [ 1740.653143][ T36] audit: type=1326 audit(1778641381.213:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31132 comm="syz.4.8284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7676bdce59 code=0x7ffc0000 [ 1740.653631][ T36] audit: type=1326 audit(1778641381.223:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31132 comm="syz.4.8284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7676bdce59 code=0x7ffc0000 [ 1740.654048][ T36] audit: type=1326 audit(1778641381.233:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31132 comm="syz.4.8284" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7676bdce59 code=0x7ffc0000 [ 1742.880776][T13413] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1743.065985][T13413] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1743.067329][T13413] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.067351][T13413] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1743.071259][T13413] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1743.071282][T13413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.071300][T13413] usb 1-1: Product: syz [ 1743.071333][T13413] usb 1-1: Manufacturer: syz [ 1743.071347][T13413] usb 1-1: SerialNumber: syz [ 1743.452290][T13413] usb 1-1: cannot find UAC_HEADER [ 1743.470796][T26078] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1743.633049][T26078] usb 5-1: config 0 has no interfaces? [ 1743.637170][T26078] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1743.637196][T26078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.637214][T26078] usb 5-1: Product: syz [ 1743.637228][T26078] usb 5-1: Manufacturer: syz [ 1743.637241][T26078] usb 5-1: SerialNumber: syz [ 1743.674105][T26078] usb 5-1: config 0 descriptor?? [ 1743.684203][T13413] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1743.719148][T13413] usb 1-1: USB disconnect, device number 125 [ 1743.865214][T30563] udevd[30563]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1744.053162][T13413] usb 5-1: USB disconnect, device number 9 [ 1754.050548][T31206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1754.132727][T31206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1754.143344][T31206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1754.151481][T31206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1754.157209][T31206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1756.357369][T12964] Bluetooth: hci4: command tx timeout [ 1758.400913][T12964] Bluetooth: hci4: command tx timeout [ 1758.507757][T31206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1758.580976][T31206] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1758.582502][T31206] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1758.583972][T31206] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1758.584672][T31206] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1758.989278][T31206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1759.062515][T31206] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1759.071810][T31206] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1759.140062][T31208] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1759.147989][T31208] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1760.494013][T31208] Bluetooth: hci4: command tx timeout [ 1760.825524][T31208] Bluetooth: hci6: command tx timeout [ 1761.318920][T31208] Bluetooth: hci7: command tx timeout [ 1761.529584][T12964] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1761.623152][T12964] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1761.670899][T12964] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1761.671989][T12964] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1761.673173][T12964] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1762.570748][T31208] Bluetooth: hci4: command tx timeout [ 1762.881133][T31208] Bluetooth: hci6: command tx timeout [ 1763.360838][T31208] Bluetooth: hci7: command tx timeout [ 1763.920985][T31208] Bluetooth: hci8: command tx timeout [ 1764.978744][T31208] Bluetooth: hci6: command tx timeout [ 1765.440766][T31208] Bluetooth: hci7: command tx timeout [ 1765.854285][T31156] gretap1: entered promiscuous mode [ 1765.855490][T31156] batman_adv: batadv0: Adding interface: gretap1 [ 1765.855504][T31156] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1765.855528][T31156] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1766.000793][T31208] Bluetooth: hci8: command tx timeout [ 1767.040785][T31208] Bluetooth: hci6: command tx timeout [ 1768.157921][T31208] Bluetooth: hci7: command tx timeout [ 1768.157955][T31208] Bluetooth: hci8: command tx timeout [ 1770.163204][T12964] Bluetooth: hci8: command tx timeout [ 1772.248880][T31218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.248947][T31218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.249125][T31218] bridge_slave_0: entered allmulticast mode [ 1772.260328][T31218] bridge_slave_0: entered promiscuous mode [ 1772.334761][T31218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.334890][T31218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.335026][T31218] bridge_slave_1: entered allmulticast mode [ 1772.338102][T31218] bridge_slave_1: entered promiscuous mode [ 1772.450966][T31212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.451159][T31212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.451685][T31212] bridge_slave_0: entered allmulticast mode [ 1772.454280][T31212] bridge_slave_0: entered promiscuous mode [ 1772.526934][T31218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.527218][T31212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.527315][T31212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.527481][T31212] bridge_slave_1: entered allmulticast mode [ 1772.552774][T31212] bridge_slave_1: entered promiscuous mode [ 1772.554248][T31204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.554357][T31204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.554542][T31204] bridge_slave_0: entered allmulticast mode [ 1772.557575][T31204] bridge_slave_0: entered promiscuous mode [ 1772.772172][T31218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.787223][T31204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.787570][T31204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.787752][T31204] bridge_slave_1: entered allmulticast mode [ 1772.790199][T31204] bridge_slave_1: entered promiscuous mode [ 1772.795733][T31223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.795886][T31223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.796073][T31223] bridge_slave_0: entered allmulticast mode [ 1772.803723][T31223] bridge_slave_0: entered promiscuous mode [ 1772.869593][T31223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.869706][T31223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.870126][T31223] bridge_slave_1: entered allmulticast mode [ 1772.876665][T31223] bridge_slave_1: entered promiscuous mode [ 1772.906648][T31212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.957695][T31218] team0: Port device team_slave_0 added [ 1772.960246][T31212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.969732][T31204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.054168][T31218] team0: Port device team_slave_1 added [ 1773.056597][T31204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.078622][T31223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1773.177113][T31223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.222338][T31212] team0: Port device team_slave_0 added [ 1773.236806][T31218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1773.236816][T31218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1773.236829][T31218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.503262][T31204] team0: Port device team_slave_0 added [ 1773.505704][T31212] team0: Port device team_slave_1 added [ 1773.523334][T31218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.523349][T31218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1773.523374][T31218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1773.788357][T30742] bridge_slave_1: left allmulticast mode [ 1773.788380][T30742] bridge_slave_1: left promiscuous mode [ 1773.788557][T30742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.832047][T30742] bridge_slave_0: left allmulticast mode [ 1773.832069][T30742] bridge_slave_0: left promiscuous mode [ 1773.832249][T30742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.451536][T30742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.571683][T30742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.611696][T30742] bond0 (unregistering): Released all slaves [ 1774.730419][T30742] bond1 (unregistering): (slave veth7): Releasing active interface [ 1774.923419][T30742] dummy0: entered promiscuous mode [ 1775.311722][T30742] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1775.375559][T30742] bond1 (unregistering): Released all slaves [ 1775.432845][T31204] team0: Port device team_slave_1 added [ 1775.450218][T31223] team0: Port device team_slave_0 added [ 1775.576736][T31223] team0: Port device team_slave_1 added [ 1775.628207][T31212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.628222][T31212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.628244][T31212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.638338][ T5584] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1775.647659][T31204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.647674][T31204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.647698][T31204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.704241][T31212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.704257][T31212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.704280][T31212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.705700][T31204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.705712][T31204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.705735][T31204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.708464][T31223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.708476][T31223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.708499][T31223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.823812][ T5584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1775.823842][ T5584] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1775.823880][ T5584] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1775.823901][ T5584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.834535][ T5584] usb 1-1: config 0 descriptor?? [ 1775.863875][T31223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.863890][T31223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1775.863964][T31223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.979688][T31218] hsr_slave_0: entered promiscuous mode [ 1775.986944][T31218] hsr_slave_1: entered promiscuous mode [ 1775.987778][T31218] debugfs: 'hsr0' already exists in 'hsr' [ 1775.987800][T31218] Cannot create hsr debugfs directory [ 1776.298117][ T5584] hid_parser_main: 30 callbacks suppressed [ 1776.298139][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298168][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298194][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298219][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298245][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298270][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298293][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298318][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298343][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.298368][ T5584] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 1776.368630][T31212] hsr_slave_0: entered promiscuous mode [ 1776.370001][T31212] hsr_slave_1: entered promiscuous mode [ 1776.375031][T31212] debugfs: 'hsr0' already exists in 'hsr' [ 1776.375055][T31212] Cannot create hsr debugfs directory [ 1776.385222][T31204] hsr_slave_0: entered promiscuous mode [ 1776.386579][T31204] hsr_slave_1: entered promiscuous mode [ 1776.387675][T31204] debugfs: 'hsr0' already exists in 'hsr' [ 1776.387696][T31204] Cannot create hsr debugfs directory [ 1776.428539][ T5584] kovaplus 0003:1E7D:2D50.0006: invalid report_size 26978 [ 1776.428552][ T5584] kovaplus 0003:1E7D:2D50.0006: item 0 2 1 7 parsing failed [ 1776.430571][ T5584] kovaplus 0003:1E7D:2D50.0006: parse failed [ 1776.440960][T31223] hsr_slave_0: entered promiscuous mode [ 1776.442515][T31223] hsr_slave_1: entered promiscuous mode [ 1776.443463][T31223] debugfs: 'hsr0' already exists in 'hsr' [ 1776.443485][T31223] Cannot create hsr debugfs directory [ 1776.473485][ T5584] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -22 [ 1776.477632][T31325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.478164][T31325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.508526][ T5584] usb 1-1: USB disconnect, device number 126 [ 1777.022639][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1777.311449][T30742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.351531][T30742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.511213][T30742] team0 (unregistering): Port device batadv7 removed [ 1777.561404][T30742] team0 (unregistering): Port device batadv6 removed [ 1777.602601][T30742] team0 (unregistering): Port device batadv5 removed [ 1777.621373][T30742] team0 (unregistering): Port device batadv4 removed [ 1777.661364][T30742] team0 (unregistering): Port device batadv3 removed [ 1777.682307][T30742] team0 (unregistering): Port device batadv2 removed [ 1777.742143][T30742] team0 (unregistering): Port device batadv1 removed [ 1778.372548][T30742] team0 (unregistering): Port device team_slave_1 removed [ 1778.412681][T30742] team0 (unregistering): Port device team_slave_0 removed [ 1780.183555][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1780.196010][T31218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1780.224608][T31218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1780.227558][T31218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1780.337989][T31218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1780.351276][T31218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1780.415942][T31218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1780.436585][T31218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1780.489681][T31218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1781.577882][T31212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1781.641714][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1781.658113][T31212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1781.695951][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1781.741441][T31212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1781.948505][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1781.987705][T31212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1782.027027][T31212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1782.764465][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1782.902030][T31218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1785.344907][T31218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1785.475328][T30372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.475477][T30372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1785.480916][T31204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1785.539463][T31204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1785.626456][T31204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1785.677349][T31204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1786.105985][T31204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1786.386971][T31204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1786.442327][T31204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1787.365397][T31204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1787.475445][T30372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.475568][T30372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.561180][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1788.436824][T31223] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1788.473723][T31223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1788.633864][T31223] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1788.705260][T31223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1788.725481][T31223] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1788.755110][T31223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1788.848837][T31223] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1788.885292][T31223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1789.057920][T31212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.226846][T31212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.300813][T26078] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1789.310253][T30362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.310456][T30362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.462849][T26078] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.462912][T26078] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.462942][T26078] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1789.464485][T26078] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1789.464506][T26078] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1789.464516][T26078] usb 1-1: Product: syz [ 1789.464523][T26078] usb 1-1: SerialNumber: syz [ 1789.867011][T31034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.867200][T31034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.038094][T31204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.094866][T26078] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1790.095051][T26078] cdc_ncm 1-1:1.0: bind() failure [ 1790.132815][T26078] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1790.132859][T26078] cdc_ncm 1-1:1.1: bind() failure [ 1790.380916][T31204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1790.399802][T30356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.399999][T30356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1790.714444][T30372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.714732][T30372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1790.787492][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1790.963086][T31218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1791.037801][T31223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.317936][T31223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.359572][T30356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.359769][T30356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.414718][T30372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.414854][T30372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1792.134279][T24005] usb 1-1: USB disconnect, device number 127 [ 1792.757830][T31218] veth0_vlan: entered promiscuous mode [ 1793.053182][T31212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1793.208416][T31218] veth1_vlan: entered promiscuous mode [ 1793.424202][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1793.568328][T31218] veth0_macvtap: entered promiscuous mode [ 1793.601760][T31218] veth1_macvtap: entered promiscuous mode [ 1794.158415][T30742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1794.364357][T31218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1794.367161][T31204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.373159][T31223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.438729][T31218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1794.467903][T30356] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.486040][T30356] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.504357][T30356] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.520118][T30356] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.709356][T30742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.779893][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1796.817388][T31212] veth0_vlan: entered promiscuous mode [ 1797.055775][T30742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.105610][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.105630][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.136219][T31212] veth1_vlan: entered promiscuous mode [ 1797.232899][ T7673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.232919][ T7673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.388588][T30742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.595932][T31212] veth0_macvtap: entered promiscuous mode [ 1797.758612][T31212] veth1_macvtap: entered promiscuous mode [ 1797.778939][T31223] veth0_vlan: entered promiscuous mode [ 1797.781958][T31204] veth0_vlan: entered promiscuous mode [ 1797.858195][T31223] veth1_vlan: entered promiscuous mode [ 1797.914811][T31204] veth1_vlan: entered promiscuous mode [ 1797.966373][T31212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.026361][T31212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.475090][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8371'. [ 1798.487632][ T1198] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.513911][T31648] bridge0: port 3(macvlan2) entered blocking state [ 1798.514114][T31648] bridge0: port 3(macvlan2) entered disabled state [ 1798.514310][T31648] macvlan2: entered allmulticast mode [ 1798.514326][T31648] ip6gretap0: entered allmulticast mode [ 1798.519201][T31648] macvlan2: entered promiscuous mode [ 1798.723320][ T1198] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.760806][ T1198] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.767391][ T1198] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.156819][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1800.159345][T31223] veth0_macvtap: entered promiscuous mode [ 1801.499455][T30742] bridge_slave_1: left allmulticast mode [ 1801.499489][T30742] bridge_slave_1: left promiscuous mode [ 1801.499726][T30742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.781703][T30742] bridge_slave_0: left allmulticast mode [ 1801.781736][T30742] bridge_slave_0: left promiscuous mode [ 1801.782067][T30742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.945883][T30742] macvlan2: left allmulticast mode [ 1802.945904][T30742] ip6gretap0: left allmulticast mode [ 1802.951129][T30742] macvlan2: left promiscuous mode [ 1802.951454][T30742] bridge0: port 3(macvlan2) entered disabled state [ 1803.012315][T30742] bridge_slave_1: left allmulticast mode [ 1803.012348][T30742] bridge_slave_1: left promiscuous mode [ 1803.012590][T30742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.071681][T30742] bridge_slave_0: left allmulticast mode [ 1803.071703][T30742] bridge_slave_0: left promiscuous mode [ 1803.071850][T30742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.241429][T30742] bridge_slave_1: left allmulticast mode [ 1803.241452][T30742] bridge_slave_1: left promiscuous mode [ 1803.241587][T30742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.293043][T30742] bridge_slave_0: left allmulticast mode [ 1803.293065][T30742] bridge_slave_0: left promiscuous mode [ 1803.293208][T30742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.911319][T30742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1803.941061][T30742] bond_slave_0: left promiscuous mode [ 1803.964913][T30742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1803.981381][T30742] bond_slave_1: left promiscuous mode [ 1803.982010][T30742] bond0 (unregistering): Released all slaves [ 1803.988137][T30742] bond1 (unregistering): Released all slaves [ 1804.562217][T30742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1804.601249][T30742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1804.625894][T30742] bond0 (unregistering): Released all slaves [ 1804.632617][T30742] bond1 (unregistering): Released all slaves [ 1805.016767][T30742] batman_adv: batadv0: Removing interface: gretap1 [ 1805.142600][T30742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.221297][T30742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.241878][T30742] bond0 (unregistering): Released all slaves [ 1805.251594][T30742] bond1 (unregistering): Released all slaves [ 1805.262327][T30742] bond2 (unregistering): Released all slaves [ 1805.273045][T30742] bond3 (unregistering): Released all slaves [ 1805.352252][T31204] veth0_macvtap: entered promiscuous mode [ 1805.377079][T31223] veth1_macvtap: entered promiscuous mode [ 1805.524593][T31204] veth1_macvtap: entered promiscuous mode [ 1805.856066][T31223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.888909][ T7673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.888927][ T7673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.905469][T31223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1805.940706][T31204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.969505][ T7673] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.978898][ T7673] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.036085][ T7673] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.123298][T31204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.164888][T30372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.186545][T30742] tipc: Left network mode [ 1807.546601][ T1116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.572484][ T1116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.721264][ T1116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.767595][ T1116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.839767][T30356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1807.839787][T30356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.735129][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1810.061555][T31034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.061574][T31034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.285247][T30372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.285266][T30372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.814008][T31208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1814.859018][T31208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1814.877198][T31208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1814.939353][T31208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1815.017515][T31208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1816.242553][T12964] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1816.242590][T12964] CPU: 1 UID: 0 PID: 12964 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1816.242616][T12964] Tainted: [L]=SOFTLOCKUP [ 1816.242623][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1816.242636][T12964] Workqueue: hci0 hci_rx_work [ 1816.242664][T12964] Call Trace: [ 1816.242673][T12964] [ 1816.242682][T12964] dump_stack_lvl+0xe8/0x150 [ 1816.242707][T12964] sysfs_create_dir_ns+0x271/0x2a0 [ 1816.242743][T12964] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1816.242766][T12964] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1816.242796][T12964] ? rt_spin_unlock+0x160/0x200 [ 1816.242821][T12964] kobject_add_internal+0x631/0xd10 [ 1816.242855][T12964] kobject_add+0x163/0x240 [ 1816.242884][T12964] ? __pfx_kobject_add+0x10/0x10 [ 1816.242916][T12964] ? get_device_parent+0x370/0x3a0 [ 1816.242939][T12964] device_add+0x408/0xbb0 [ 1816.242965][T12964] hci_conn_add_sysfs+0xd5/0x210 [ 1816.242989][T12964] le_conn_complete_evt+0x10e6/0x16b0 [ 1816.243026][T12964] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1816.243051][T12964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1816.243075][T12964] ? lockdep_hardirqs_on+0x7a/0x110 [ 1816.243099][T12964] ? skb_pull_data+0xfb/0x200 [ 1816.243130][T12964] hci_le_conn_complete_evt+0x187/0x470 [ 1816.243164][T12964] hci_event_packet+0x659/0xef0 [ 1816.243194][T12964] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1816.243211][T12964] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1816.243233][T12964] ? __pfx_hci_event_packet+0x10/0x10 [ 1816.243254][T12964] ? rt_spin_unlock+0x14f/0x200 [ 1816.243282][T12964] ? hci_send_to_monitor+0xe2/0x590 [ 1816.243390][T12964] hci_rx_work+0x3ee/0x1040 [ 1816.243420][T12964] ? process_scheduled_works+0xa70/0x1860 [ 1816.243442][T12964] process_scheduled_works+0xb5d/0x1860 [ 1816.243489][T12964] ? __pfx_process_scheduled_works+0x10/0x10 [ 1816.243514][T12964] ? assign_work+0x3d5/0x5e0 [ 1816.243540][T12964] worker_thread+0xa53/0xfc0 [ 1816.243590][T12964] kthread+0x388/0x470 [ 1816.243614][T12964] ? __pfx_worker_thread+0x10/0x10 [ 1816.243632][T12964] ? __pfx_kthread+0x10/0x10 [ 1816.243656][T12964] ret_from_fork+0x514/0xb70 [ 1816.243680][T12964] ? __pfx_ret_from_fork+0x10/0x10 [ 1816.243701][T12964] ? __switch_to+0xc79/0x1410 [ 1816.243738][T12964] ? __pfx_kthread+0x10/0x10 [ 1816.243765][T12964] ret_from_fork_asm+0x1a/0x30 [ 1816.243806][T12964] [ 1816.245069][T12964] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1816.245112][T12964] Bluetooth: hci0: failed to register connection device [ 1816.579736][T31785] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1816.819416][T31790] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1817.122612][T31208] Bluetooth: hci1: command tx timeout [ 1818.715942][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1819.200789][T31208] Bluetooth: hci1: command tx timeout [ 1821.284515][T31208] Bluetooth: hci1: command tx timeout [ 1821.323434][T30966] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1821.552910][T30966] usb 8-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 1821.552963][T30966] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1821.553003][T30966] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1821.553024][T30966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.563584][T30966] usb 8-1: config 0 descriptor?? [ 1821.835100][T30966] ath6kl: Failed to submit usb control message: -71 [ 1821.835149][T30966] ath6kl: unable to send the bmi data to the device: -71 [ 1821.835163][T30966] ath6kl: Unable to send get target info: -71 [ 1821.835761][T30966] ath6kl: Failed to init ath6kl core: -71 [ 1821.836150][T30966] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1821.848868][T30966] usb 8-1: USB disconnect, device number 2 [ 1822.227554][T31917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8444'. [ 1822.586277][T30742] hsr_slave_0: left promiscuous mode [ 1822.620793][T13413] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1822.622135][T30742] hsr_slave_1: left promiscuous mode [ 1822.623390][T30742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.692105][T30742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.762764][T13413] usb 9-1: device descriptor read/64, error -71 [ 1822.903536][T30742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.943523][T30742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.035049][T13413] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1823.180862][T13413] usb 9-1: device descriptor read/64, error -71 [ 1823.200309][T30966] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1823.282059][T13413] usb usb9-port1: attempt power cycle [ 1823.287099][T30742] hsr_slave_0: left promiscuous mode [ 1823.339420][T30742] hsr_slave_1: left promiscuous mode [ 1823.341705][T30742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.360825][T30966] usb 1-1: Using ep0 maxpacket: 32 [ 1823.361037][T31208] Bluetooth: hci1: command tx timeout [ 1823.365184][T30966] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1823.365210][T30966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.365227][T30966] usb 1-1: Product: syz [ 1823.365241][T30966] usb 1-1: Manufacturer: syz [ 1823.365253][T30966] usb 1-1: SerialNumber: syz [ 1823.371219][T30966] usb 1-1: config 0 descriptor?? [ 1823.380276][T30966] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1823.380361][T30966] dvb-usb: bulk message failed: -22 (4/0) [ 1823.380376][T30966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1823.381115][T30966] dvb-usb: bulk message failed: -22 (5/0) [ 1823.381211][T30966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1823.413666][T30966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1823.414807][T30966] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1823.414858][T30966] usb 1-1: media controller created [ 1823.464277][T30966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1823.497721][T30966] usb 1-1: selecting invalid altsetting 3 [ 1823.497740][T30966] ttusb2: set interface to alts=3 failed [ 1823.543665][T30966] DVB: Unable to find symbol tda10086_attach() [ 1823.543681][T30966] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1823.546218][T30966] dvb-usb: bulk message failed: -22 (4/0) [ 1823.546237][T30966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1823.546334][T30966] dvb-usb: bulk message failed: -22 (5/0) [ 1823.546348][T30966] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1823.546482][T30966] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1823.598099][T30742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.646788][T13413] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1823.668189][T13413] usb 9-1: device descriptor read/8, error -71 [ 1823.700619][T18379] usb 1-1: USB disconnect, device number 2 [ 1823.822685][T18379] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1823.884343][T30742] team0 (unregistering): Port device batadv5 removed [ 1823.900835][T13413] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1823.921438][T13413] usb 9-1: device descriptor read/8, error -71 [ 1823.922317][T30742] team0 (unregistering): Port device batadv4 removed [ 1823.971256][T30742] team0 (unregistering): Port device batadv3 removed [ 1824.019128][T30742] team0 (unregistering): Port device batadv2 removed [ 1824.031032][T13413] usb usb9-port1: unable to enumerate USB device [ 1824.123736][T30742] team0 (unregistering): Port device batadv1 removed [ 1825.407438][T30742] team0 (unregistering): Port device team_slave_1 removed [ 1825.531605][T30742] team0 (unregistering): Port device team_slave_0 removed [ 1825.992769][T30742] team0 (unregistering): Port device batadv6 removed [ 1826.032712][T30742] team0 (unregistering): Port device batadv5 removed [ 1826.071596][T30742] team0 (unregistering): Port device batadv4 removed [ 1826.091592][T30742] team0 (unregistering): Port device batadv3 removed [ 1826.120804][T31535] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1826.139783][T30742] team0 (unregistering): Port device batadv2 removed [ 1826.195974][T30742] team0 (unregistering): Port device batadv1 removed [ 1826.345395][T31535] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1826.345424][T31535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.345442][T31535] usb 8-1: Product: syz [ 1826.345455][T31535] usb 8-1: Manufacturer: syz [ 1826.345466][T31535] usb 8-1: SerialNumber: syz [ 1826.600964][T31987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.601879][T31987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.604198][T31535] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1826.604231][T31535] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1826.604241][T31535] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1826.673205][T31535] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1826.680780][T31535] usb 8-1: USB disconnect, device number 3 [ 1826.921314][T30742] team0 (unregistering): Port device team_slave_1 removed [ 1826.981339][T30742] team0 (unregistering): Port device team_slave_0 removed [ 1827.241505][T30742] team0 (unregistering): Port device batadv4 removed [ 1827.261996][T30742] team0 (unregistering): Port device batadv3 removed [ 1827.305495][T30742] team0 (unregistering): Port device batadv2 removed [ 1827.363139][T30742] team0 (unregistering): Port device batadv1 removed [ 1827.881260][T30742] team0 (unregistering): Port device team_slave_1 removed [ 1827.922335][T30742] team0 (unregistering): Port device team_slave_0 removed [ 1828.139900][T31961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8456'. [ 1828.452446][T32001] kernel profiling enabled (shift: 3) [ 1828.662361][T31979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1829.080849][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1829.219351][ T31] usb 8-1: device descriptor read/64, error -71 [ 1829.351331][T31755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.351458][T31755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.351730][T31755] bridge_slave_0: entered allmulticast mode [ 1829.384139][T31755] bridge_slave_0: entered promiscuous mode [ 1829.428613][T31755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.428781][T31755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.433225][T31755] bridge_slave_1: entered allmulticast mode [ 1829.439352][T31755] bridge_slave_1: entered promiscuous mode [ 1829.460724][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1829.694016][ T31] usb 8-1: device descriptor read/64, error -71 [ 1829.810273][ T31] usb usb8-port1: attempt power cycle [ 1829.869108][T31755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.889672][T31755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.073517][T31755] team0: Port device team_slave_0 added [ 1830.082083][T31755] team0: Port device team_slave_1 added [ 1830.150715][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1830.171627][ T31] usb 8-1: device descriptor read/8, error -71 [ 1830.188519][T31755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.188534][T31755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.188559][T31755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.194398][T31755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.194413][T31755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.194437][T31755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1830.383011][T31755] hsr_slave_0: entered promiscuous mode [ 1830.385455][T31755] hsr_slave_1: entered promiscuous mode [ 1830.386137][T31755] debugfs: 'hsr0' already exists in 'hsr' [ 1830.386152][T31755] Cannot create hsr debugfs directory [ 1830.393097][T13413] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1830.411309][ T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1830.434310][ T31] usb 8-1: device descriptor read/8, error -71 [ 1830.541156][ T31] usb usb8-port1: unable to enumerate USB device [ 1830.560824][T13413] usb 9-1: Using ep0 maxpacket: 8 [ 1830.562236][T13413] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1830.562250][T13413] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1830.562260][T13413] usb 9-1: config 0 has no interface number 0 [ 1830.562283][T13413] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1830.562296][T13413] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1830.562316][T13413] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1830.563604][T13413] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1830.563617][T13413] usb 9-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1830.563628][T13413] usb 9-1: Product: syz [ 1830.563635][T13413] usb 9-1: Manufacturer: syz [ 1830.575542][T13413] usb 9-1: config 0 descriptor?? [ 1830.576516][T32027] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1831.243290][T13413] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.21/input/input97 [ 1831.876513][T31700] usb 9-1: USB disconnect, device number 6 [ 1831.876632][ C0] keyspan_remote 9-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1839.065907][T31755] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.674008][T31755] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.736922][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1845.796702][ T5729] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1846.863076][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1846.863097][ T5729] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1846.863119][ T5729] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1846.863130][ T5729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.866236][ T5729] usb 8-1: config 0 descriptor?? [ 1847.288791][ T5729] hid_parser_main: 173 callbacks suppressed [ 1847.288806][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288823][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288838][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288852][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288867][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288882][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288896][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288911][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288925][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.288940][ T5729] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 1847.290165][ T5729] kovaplus 0003:1E7D:2D50.0007: invalid report_size 26978 [ 1847.290174][ T5729] kovaplus 0003:1E7D:2D50.0007: item 0 2 1 7 parsing failed [ 1847.409180][ T5729] kovaplus 0003:1E7D:2D50.0007: parse failed [ 1847.409252][ T5729] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -22 [ 1847.497448][T32142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.497849][T32142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.533814][T18377] usb 8-1: USB disconnect, device number 8 [ 1847.958114][T31755] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.122756][T32152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8506'. [ 1851.592992][T31755] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.705114][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1853.030972][T30742] IPVS: stop unused estimator thread 0... [ 1855.833790][ T5729] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1855.941081][T30742] bridge_slave_1: left allmulticast mode [ 1855.941114][T30742] bridge_slave_1: left promiscuous mode [ 1855.941355][T30742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.993016][ T5729] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.011638][ T5729] usb 9-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1856.011666][ T5729] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.011684][ T5729] usb 9-1: Product: syz [ 1856.011697][ T5729] usb 9-1: Manufacturer: syz [ 1856.011710][ T5729] usb 9-1: SerialNumber: syz [ 1856.071654][ T5729] usb 9-1: config 0 descriptor?? [ 1856.090204][ T5729] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1856.274206][T30742] bridge_slave_0: left allmulticast mode [ 1856.274293][T30742] bridge_slave_0: left promiscuous mode [ 1856.327162][T30742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.940734][ T5729] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1856.940840][ T5729] gspca_pac7302 9-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1856.996880][ T5729] usb 9-1: USB disconnect, device number 7 [ 1858.252657][T30742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.471412][T30742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.537549][T30742] bond0 (unregistering): Released all slaves [ 1858.586305][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1858.586782][T32229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8519'. [ 1860.864760][T31755] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1860.953908][T31755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1861.157859][T31755] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1861.179739][T31208] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1861.195859][T31755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1861.242614][T31755] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1861.422350][T31755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1861.475589][T31755] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1861.610521][T31755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1861.700726][ T5604] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1861.805680][T30742] hsr_slave_0: left promiscuous mode [ 1861.853323][ T5604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.856496][ T5604] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1861.856520][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.856538][ T5604] usb 1-1: Product: syz [ 1861.856552][ T5604] usb 1-1: Manufacturer: syz [ 1861.856565][ T5604] usb 1-1: SerialNumber: syz [ 1861.896940][ T5604] usb 1-1: config 0 descriptor?? [ 1861.966013][ T5604] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1862.070300][T30742] hsr_slave_1: left promiscuous mode [ 1862.139305][T30742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1862.139332][T30742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.272206][T30742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1862.272233][T30742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.575008][ T5604] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1862.575106][ T5604] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1862.610762][ T5604] usb 1-1: USB disconnect, device number 3 [ 1862.673918][T30742] veth1_macvtap: left promiscuous mode [ 1862.673979][T30742] veth0_macvtap: left promiscuous mode [ 1862.674155][T30742] veth1_vlan: left promiscuous mode [ 1862.674251][T30742] veth0_vlan: left promiscuous mode [ 1863.320678][T32292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8536'. [ 1863.452752][T30742] team0 (unregistering): Port device team_slave_1 removed [ 1863.511904][T30742] team0 (unregistering): Port device team_slave_0 removed [ 1863.797940][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1865.609193][T32287] syzkaller0: entered promiscuous mode [ 1865.609212][T32287] syzkaller0: entered allmulticast mode [ 1866.450181][T31208] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1867.474851][T31755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1867.695488][T31755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.767264][T30368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.767398][T30368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.854399][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.854522][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.803587][T18377] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1868.954558][T18377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1868.955879][T18377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.955902][T18377] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1868.958477][T18377] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1868.958502][T18377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.958521][T18377] usb 1-1: Product: syz [ 1868.958533][T18377] usb 1-1: Manufacturer: syz [ 1868.958547][T18377] usb 1-1: SerialNumber: syz [ 1869.307119][T18377] usb 1-1: USB disconnect, device number 4 [ 1870.926280][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1871.849432][T31755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.970660][T18379] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1875.124334][T18379] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1875.127295][T18379] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.127318][T18379] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1875.161157][T18379] usb 7-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1875.161185][T18379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.161204][T18379] usb 7-1: Product: syz [ 1875.161217][T18379] usb 7-1: Manufacturer: syz [ 1875.161230][T18379] usb 7-1: SerialNumber: syz [ 1875.477405][T12964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1875.568084][T12964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1875.587706][T12964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1875.627922][T12964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1875.651790][T12964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1875.804838][T18379] usb 7-1: USB disconnect, device number 2 [ 1876.137934][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1878.023936][T12964] Bluetooth: hci2: command tx timeout [ 1880.082719][T31206] Bluetooth: hci2: command tx timeout [ 1880.178074][ T5604] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1880.337207][ T5604] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1880.337235][ T5604] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1880.337257][ T5604] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1880.337268][ T5604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.353454][ T5604] usb 8-1: config 0 descriptor?? [ 1880.450732][T18377] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1880.615068][T18377] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1880.623449][T18377] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.623470][T18377] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1880.626909][T18377] usb 7-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1880.626934][T18377] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.626953][T18377] usb 7-1: Product: syz [ 1880.626966][T18377] usb 7-1: Manufacturer: syz [ 1880.626980][T18377] usb 7-1: SerialNumber: syz [ 1880.826286][ T5604] hid_parser_main: 173 callbacks suppressed [ 1880.826309][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826340][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826366][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826391][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826417][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826443][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826468][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826493][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826517][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.826542][ T5604] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 1880.838829][ T5604] kovaplus 0003:1E7D:2D50.0008: invalid report_size 26978 [ 1880.838849][ T5604] kovaplus 0003:1E7D:2D50.0008: item 0 2 1 7 parsing failed [ 1880.849091][ T5604] kovaplus 0003:1E7D:2D50.0008: parse failed [ 1880.849157][ T5604] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -22 [ 1881.002753][T18377] usb 7-1: USB disconnect, device number 3 [ 1881.048712][T32515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.049370][T32515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.067958][T13413] usb 8-1: USB disconnect, device number 9 [ 1881.840816][T31208] Bluetooth: hci6: command 0x0406 tx timeout [ 1882.161311][T31208] Bluetooth: hci2: command tx timeout [ 1884.246305][T31206] Bluetooth: hci2: command tx timeout [ 1884.389936][T32569] overlayfs: failed to resolve './file1': -2 [ 1885.090958][T18377] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1885.267721][T18377] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1885.269126][T18377] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.269148][T18377] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1885.273468][T18377] usb 8-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1885.273492][T18377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.273510][T18377] usb 8-1: Product: syz [ 1885.273523][T18377] usb 8-1: Manufacturer: syz [ 1885.273536][T18377] usb 8-1: SerialNumber: syz [ 1885.539512][T18377] usb 8-1: USB disconnect, device number 10 [ 1886.089610][T31206] Bluetooth: hci8: command 0x0406 tx timeout [ 1886.089778][T31206] Bluetooth: hci7: command 0x0406 tx timeout [ 1887.628005][T32615] overlayfs: failed to resolve './file1': -2 [ 1888.440736][T30966] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1888.601827][T30966] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1888.604938][T30966] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.604961][T30966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1888.639272][T30966] usb 7-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1888.639299][T30966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.639319][T30966] usb 7-1: Product: syz [ 1888.639332][T30966] usb 7-1: Manufacturer: syz [ 1888.639346][T30966] usb 7-1: SerialNumber: syz [ 1888.822660][T32461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1888.822818][T32461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.823079][T32461] bridge_slave_0: entered allmulticast mode [ 1888.827639][T32461] bridge_slave_0: entered promiscuous mode [ 1888.887779][T32461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1888.953374][T32461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.953658][T32461] bridge_slave_1: entered allmulticast mode [ 1888.967192][T30966] usb 7-1: USB disconnect, device number 4 [ 1888.976507][T32461] bridge_slave_1: entered promiscuous mode [ 1889.365171][T32461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1889.389151][T32461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1890.696704][T31535] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1890.965024][T31535] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.965087][T31535] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.968039][T31535] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1890.968064][T31535] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1890.968083][T31535] usb 7-1: Product: syz [ 1890.968096][T31535] usb 7-1: SerialNumber: syz [ 1891.064240][T32671] overlayfs: failed to resolve './file1': -2 [ 1891.098740][T31535] usb 7-1: selecting invalid altsetting 1 [ 1891.100436][T32461] team0: Port device team_slave_0 added [ 1891.122283][T32461] team0: Port device team_slave_1 added [ 1891.552514][T31535] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 1891.552596][T31535] cdc_ncm 7-1:1.0: bind() failure [ 1891.598997][T32677] tipc: Started in network mode [ 1891.599024][T32677] tipc: Node identity 1a4a7a6cb50b, cluster identity 4711 [ 1891.599216][T32677] tipc: Enabled bearer , priority 0 [ 1891.915944][T32461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1891.915961][T32461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1891.915981][T32461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.403951][T32672] tipc: Disabling bearer [ 1908.920726][ C0] sched: DL replenish lagged too much [ 2037.182492][T12964] Bluetooth: hci2: command tx timeout [ 2047.296829][ T37] INFO: task dhcpcd:5257 blocked for more than 148 seconds. [ 2047.296854][ T37] Tainted: G L syzkaller #0 [ 2047.296865][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2047.296874][ T37] task:dhcpcd state:D stack:20472 pid:5257 tgid:5257 ppid:5256 task_flags:0x400140 flags:0x00080000 [ 2047.296919][ T37] Call Trace: [ 2047.296927][ T37] [ 2047.296941][ T37] __schedule+0x16ec/0x5620 [ 2047.296998][ T37] ? __pfx___schedule+0x10/0x10 [ 2047.297035][ T37] rt_mutex_schedule+0x76/0[ 2047.297035][ T37] rt_mutex_schedule+0x76/0xf0 [ 2047.297055][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2047.297099][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2047.297120][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2047.297138][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2047.297167][ T37] ? rtnl_dumpit+0x92/0x200 [ 2047.297275][ T37] ? rtnl_dumpit+0x92/0x200 [ 2047.297292][ T37] mutex_lock_nested+0x168/0x1d0 [ 2047.297324][ T37] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 2047.297345][ T37] rtnl_dumpit+0x92/0x200 [ 2047.297369][ T37] netlink_dump+0x702/0xe10 [ 2047.297435][ T37] ? __pfx_netlink_dump+0x10/0x10 [ 2047.297470][ T37] ? netlink_recvmsg+0x5d6/0xa50 [ 2047.297489][ T37] ? kmem_cache_free+0x187/0x6c0 [ 2047.297510][ T37] ? netlink_recvmsg+0x5d6/0xa50 [ 2047.297535][ T37] netlink_recvmsg+0x690/0xa50 [ 2047.297565][ T37] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2047.297585][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 2047.297617][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2047.297643][ T37] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2047.297662][ T37] ? security_socket_recvmsg+0x7e/0x2c0 [ 2047.297684][ T37] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2047.297706][ T37] sock_recvmsg+0x172/0x1b0 [ 2047.297756][ T37] ____sys_recvmsg+0x1f2/0x4b0 [ 2047.297813][ T37] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2047.297850][ T37] ? import_iovec+0x73/0xa0 [ 2047.297875][ T37] ___sys_recvmsg+0x215/0x590 [ 2047.297904][ T37] ? __pfx____sys_recvmsg+0x10/0x10 [ 2047.297931][ T37] ? count_memcg_event_mm+0x21/0x260 [ 2047.297965][ T37] ? handle_mm_fault+0xe7/0x13c0 [ 2047.297988][ T37] ? __pfx_handle_mm_fault+0x10/0x10 [ 2047.298016][ T37] __x64_sys_recvmsg+0x1c0/0x2a0 [ 2047.298042][ T37] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2047.298093][ T37] ? do_user_addr_fault+0xc6f/0x1340 [ 2049.333243][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.333278][ T37] do_syscall_64+0x15f/0xf80 [ 2049.333301][ T37] ? trace_irq_disable+0x3b/0x140 [ 2049.333322][ T37] ? clear_bhb_loop+0x40/0x90 [ 2049.333344][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.333376][ T37] RIP: 0033:0x7fe406296407 [ 2049.333398][ T37] RSP: 002b:00007ffd2b47e890 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 2049.333419][ T37] RAX: ffffffffffffffda RBX: 00007fe40620c780 RCX: 00007fe406296407 [ 2049.333432][ T37] RDX: 0000000000000000 RSI: 00007ffd2b47e920 RDI: 000000000000002a [ 2049.333445][ T37] RBP: 00007ffd2b47e904 R08: 0000000000000000 R09: 0000000000000000 [ 2049.333457][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001f40 [ 2049.333469][ T37] R13: 00007ffd2b47e910 R14: 00007ffd2b47ea00 R15: 0000000000000000 [ 2049.333498][ T37] [ 2049.333529][ T37] INFO: task kworker/0:3:11806 blocked for more than 150 seconds. [ 2049.333546][ T37] Tainted: G L syzkaller #0 [ 2049.333556][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.333566][ T37] task:kworker/0:3 state:D stack:21192 pid:11806 tgid:11806 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2049.333608][ T37] Workqueue: events tipc_net_finalize_work [ 2049.333684][ T37] Call Trace: [ 2049.333690][ T37] [ 2049.333699][ T37] __schedule+0x16ec/0x5620 [ 2049.333855][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.333896][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.333914][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.333955][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.333975][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.333993][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.334026][ T37] ? tipc_net_finalize_work+0x1e/0x90 [ 2049.334057][ T37] ? tipc_net_finalize_work+0x1e/0x90 [ 2049.334085][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.334113][ T37] tipc_net_finalize_work+0x1e/0x90 [ 2049.334136][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.334150][ T37] process_scheduled_works+0xb5d/0x1860 [ 2049.334186][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 2049.334205][ T37] ? assign_work+0x3d5/0x5e0 [ 2049.334223][ T37] worker_thread+0xa53/0xfc0 [ 2049.334258][ T37] kthread+0x388/0x470 [ 2049.334276][ T37] ? __pfx_worker_thread+0x10/0x10 [ 2049.334289][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.334307][ T37] ret_from_fork+0x514/0xb70 [ 2049.334326][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.334341][ T37] ? __switch_to+0xc79/0x1410 [ 2049.334373][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.334398][ T37] ret_from_fork_asm+0x1a/0x30 [ 2049.334429][ T37] [ 2049.334477][ T37] INFO: task kworker/u8:5:30359 blocked for more than 150 seconds. [ 2049.334510][ T37] Tainted: G L syzkaller #0 [ 2049.334518][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.334525][ T37] task:kworker/u8:5 state:D stack:24264 pid:30359 tgid:30359 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2049.334563][ T37] Workqueue: events_unbound linkwatch_event [ 2049.334583][ T37] Call Trace: [ 2049.334588][ T37] [ 2049.334596][ T37] __schedule+0x16ec/0x5620 [ 2049.334636][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.338241][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.338265][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.338302][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.338322][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.338340][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.338374][ T37] ? linkwatch_event+0xe/0x60 [ 2049.338410][ T37] ? linkwatch_event+0xe/0x60 [ 2049.338430][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.338452][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.338472][ T37] linkwatch_event+0xe/0x60 [ 2049.338493][ T37] process_scheduled_works+0xb5d/0x1860 [ 2049.338547][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 2049.338571][ T37] ? assign_work+0x3d5/0x5e0 [ 2049.338597][ T37] worker_thread+0xa53/0xfc0 [ 2049.338642][ T37] kthread+0x388/0x470 [ 2049.338665][ T37] ? __pfx_worker_thread+0x10/0x10 [ 2049.338683][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.338706][ T37] ret_from_fork+0x514/0xb70 [ 2049.338729][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.338749][ T37] ? __switch_to+0xc79/0x1410 [ 2049.338776][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.338799][ T37] ret_from_fork_asm+0x1a/0x30 [ 2049.338834][ T37] [ 2049.338844][ T37] INFO: task kworker/u8:13:30373 blocked for more than 150 seconds. [ 2049.338859][ T37] Tainted: G L syzkaller #0 [ 2049.338869][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.338878][ T37] task:kworker/u8:13 state:D stack:24192 pid:30373 tgid:30373 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2049.338921][ T37] Workqueue: ipv6_addrconf addrconf_dad_work [ 2049.339025][ T37] Call Trace: [ 2049.339031][ T37] [ 2049.339040][ T37] __schedule+0x16ec/0x5620 [ 2049.339088][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.339119][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.339136][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.339174][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.339190][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.339203][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.339224][ T37] ? addrconf_dad_work+0x124/0x1680 [ 2049.339245][ T37] ? addrconf_dad_work+0x124/0x1680 [ 2049.339264][ T37] ? addrconf_dad_work+0x124/0x1680 [ 2049.339278][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.339302][ T37] addrconf_dad_work+0x124/0x1680 [ 2049.339321][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 2049.339342][ T37] ? __pfx_addrconf_dad_work+0x10/0x10 [ 2049.339367][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.339389][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.339403][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.339419][ T37] process_scheduled_works+0xb5d/0x1860 [ 2049.339460][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 2049.339482][ T37] ? assign_work+0x3d5/0x5e0 [ 2049.339502][ T37] worker_thread+0xa53/0xfc0 [ 2049.339540][ T37] kthread+0x388/0x470 [ 2049.339557][ T37] ? __pfx_worker_thread+0x10/0x10 [ 2049.339570][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.339587][ T37] ret_from_fork+0x514/0xb70 [ 2049.339605][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.339621][ T37] ? __switch_to+0xc79/0x1410 [ 2049.339642][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.339660][ T37] ret_from_fork_asm+0x1a/0x30 [ 2049.339689][ T37] [ 2049.339696][ T37] INFO: task kworker/u8:19:30742 blocked for more than 150 seconds. [ 2049.339709][ T37] Tainted: G L syzkaller #0 [ 2049.339717][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.339725][ T37] task:kworker/u8:19 state:D stack:23256 pid:30742 tgid:30742 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 2049.339762][ T37] Workqueue: netns cleanup_net [ 2049.339819][ T37] Call Trace: [ 2049.339824][ T37] [ 2049.339833][ T37] __schedule+0x16ec/0x5620 [ 2049.339879][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.339906][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.339921][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.339959][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.339981][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.339998][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.340023][ T37] ? nsim_create+0x894/0x1170 [ 2049.340112][ T37] ? nsim_create+0x894/0x1170 [ 2049.340136][ T37] ? nsim_create+0x894/0x1170 [ 2049.340152][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.340178][ T37] nsim_create+0x894/0x1170 [ 2049.340204][ T37] ? debugfs_create_symlink+0x14d/0x1c0 [ 2049.340229][ T37] __nsim_dev_port_add+0x857/0xd30 [ 2049.340258][ T37] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 2049.340286][ T37] ? __mod_timer+0xb64/0xf60 [ 2049.340319][ T37] ? queue_delayed_work_on+0x171/0x1e0 [ 2049.340349][ T37] nsim_dev_port_add_all+0x37/0xf0 [ 2049.340380][ T37] nsim_dev_reload_up+0x45f/0x7c0 [ 2049.340407][ T37] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 2049.340442][ T37] devlink_reload+0x501/0x8d0 [ 2049.340631][ T37] ? __pfx_devlink_reload+0x10/0x10 [ 2049.340656][ T37] ? xa_get_mark+0x6fc/0x7b0 [ 2049.340727][ T37] devlink_pernet_pre_exit+0x1ff/0x420 [ 2049.340780][ T37] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2049.340804][ T37] ? class_remove_file_ns+0x124/0x160 [ 2049.340847][ T37] ops_undo_list+0x187/0x940 [ 2049.340865][ T37] ? rt_spin_unlock+0x1c0/0x200 [ 2049.340879][ T37] ? __pfx_ops_undo_list+0x10/0x10 [ 2049.340892][ T37] ? rt_spin_unlock+0x14f/0x200 [ 2049.340907][ T37] ? idr_destroy+0x21b/0x2a0 [ 2049.340956][ T37] ? rt_spin_unlock+0x160/0x200 [ 2049.340972][ T37] cleanup_net+0x56e/0x800 [ 2049.340988][ T37] ? __pfx_cleanup_net+0x10/0x10 [ 2049.341009][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.341024][ T37] ? process_scheduled_works+0xa70/0x1860 [ 2049.341041][ T37] process_scheduled_works+0xb5d/0x1860 [ 2049.341082][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 2049.341104][ T37] ? assign_work+0x3d5/0x5e0 [ 2049.341125][ T37] worker_thread+0xa53/0xfc0 [ 2049.341160][ T37] kthread+0x388/0x470 [ 2049.341178][ T37] ? __pfx_worker_thread+0x10/0x10 [ 2049.341192][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.341210][ T37] ret_from_fork+0x514/0xb70 [ 2049.341230][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.341246][ T37] ? __switch_to+0xc79/0x1410 [ 2049.341267][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.341286][ T37] ret_from_fork_asm+0x1a/0x30 [ 2049.341315][ T37] [ 2049.341373][ T37] INFO: task syz-executor:32461 blocked for more than 150 seconds. [ 2049.341387][ T37] Tainted: G L syzkaller #0 [ 2049.341395][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.341402][ T37] task:syz-executor state:D stack:22744 pid:32461 tgid:32461 ppid:32451 task_flags:0x400140 flags:0x00080000 [ 2049.341441][ T37] Call Trace: [ 2049.341447][ T37] [ 2049.341456][ T37] __schedule+0x16ec/0x5620 [ 2049.341503][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.341519][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2049.341549][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.341563][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.341590][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 2049.341611][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.341673][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.341691][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.341712][ T37] ? rtnl_newlink+0x883/0x1bb0 [ 2049.341732][ T37] ? rtnl_newlink+0x883/0x1bb0 [ 2049.341752][ T37] ? rtnl_newlink+0x883/0x1bb0 [ 2049.341765][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.341788][ T37] rtnl_newlink+0x883/0x1bb0 [ 2049.341812][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 2049.341826][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.341848][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.341866][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.341886][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.341905][ T37] ? unwind_next_frame+0xa6/0x2550 [ 2049.341927][ T37] ? unwind_next_frame+0xa6/0x2550 [ 2049.341945][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 2049.341974][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.341998][ T37] ? kernel_text_address+0xa5/0xe0 [ 2049.342022][ T37] ? __kernel_text_address+0xd/0x30 [ 2049.342043][ T37] ? unwind_get_return_address+0x4d/0x90 [ 2049.342062][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2049.342082][ T37] ? arch_stack_walk+0xfb/0x150 [ 2049.342106][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2049.342132][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 2049.342145][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2049.342159][ T37] ? kasan_save_track+0x3e/0x80 [ 2049.342173][ T37] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 2049.342189][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2049.342202][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2049.342217][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.342243][ T37] netlink_rcv_skb+0x232/0x4b0 [ 2049.342260][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2049.342275][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2049.342301][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 2049.342316][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 2049.342336][ T37] netlink_unicast+0x780/0x920 [ 2049.342359][ T37] netlink_sendmsg+0x813/0xb40 [ 2049.342385][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2049.342407][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2049.342423][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2049.342440][ T37] __sys_sendto+0x67f/0x710 [ 2049.342463][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 2049.342500][ T37] ? fput_close_sync+0x11f/0x240 [ 2049.342522][ T37] ? __pfx_fput_close_sync+0x10/0x10 [ 2049.342550][ T37] __x64_sys_sendto+0xde/0x100 [ 2049.342565][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.342580][ T37] do_syscall_64+0x15f/0xf80 [ 2049.342598][ T37] ? clear_bhb_loop+0x40/0x90 [ 2049.342628][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.342642][ T37] RIP: 0033:0x7f5058d7d68e [ 2049.342656][ T37] RSP: 002b:00007ffd964f0d28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2049.342672][ T37] RAX: ffffffffffffffda RBX: 000055556041e500 RCX: 00007f5058d7d68e [ 2049.342683][ T37] RDX: 0000000000000028 RSI: 00007f5059b64670 RDI: 0000000000000003 [ 2049.342692][ T37] RBP: 0000000000000001 R08: 00007ffd964f0da4 R09: 000000000000000c [ 2049.342702][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2049.342710][ T37] R13: 0000000000000000 R14: 00007f5059b64670 R15: 0000000000000000 [ 2049.342732][ T37] [ 2049.342749][ T37] INFO: task syz.7.8608:32679 blocked for more than 150 seconds. [ 2049.342762][ T37] Tainted: G L syzkaller #0 [ 2049.342770][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.342777][ T37] task:syz.7.8608 state:D stack:28440 pid:32679 tgid:32672 ppid:31218 task_flags:0x400140 flags:0x00080002 [ 2049.342818][ T37] Call Trace: [ 2049.342824][ T37] [ 2049.342833][ T37] __schedule+0x16ec/0x5620 [ 2049.342876][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.342907][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.342924][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.342957][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.342972][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.342985][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.343005][ T37] ? dev_ioctl+0x7a4/0x1150 [ 2049.343078][ T37] ? dev_ioctl+0x7a4/0x1150 [ 2049.343090][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.343109][ T37] ? dev_load+0x21/0x1f0 [ 2049.343126][ T37] dev_ioctl+0x7a4/0x1150 [ 2049.343145][ T37] sock_do_ioctl+0x23e/0x320 [ 2049.343168][ T37] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2049.343197][ T37] ? __asan_memset+0x22/0x50 [ 2049.343217][ T37] ? smack_file_ioctl+0x263/0x360 [ 2049.343240][ T37] sock_ioctl+0x5c9/0x7f0 [ 2049.343260][ T37] ? __pfx_sock_ioctl+0x10/0x10 [ 2049.343279][ T37] ? __fget_files+0x2a/0x420 [ 2049.343292][ T37] ? __fget_files+0x3a6/0x420 [ 2049.343306][ T37] ? __fget_files+0x2a/0x420 [ 2049.343324][ T37] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2049.343345][ T37] ? __pfx_sock_ioctl+0x10/0x10 [ 2049.343367][ T37] __se_sys_ioctl+0xff/0x170 [ 2049.343387][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.343407][ T37] do_syscall_64+0x15f/0xf80 [ 2049.343427][ T37] ? trace_irq_disable+0x3b/0x140 [ 2049.343446][ T37] ? clear_bhb_loop+0x40/0x90 [ 2049.343468][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.343486][ T37] RIP: 0033:0x7f2695face59 [ 2049.343503][ T37] RSP: 002b:00007f2693d99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2049.343521][ T37] RAX: ffffffffffffffda RBX: 00007f2696226270 RCX: 00007f2695face59 [ 2049.343535][ T37] RDX: 0000200000000240 RSI: 0000000000008914 RDI: 0000000000000004 [ 2049.343547][ T37] RBP: 00007f2696042d6f R08: 0000000000000000 R09: 0000000000000000 [ 2049.343559][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2049.343570][ T37] R13: 00007f2696226308 R14: 00007f2696226270 R15: 00007ffd569e5dc8 [ 2049.343612][ T37] [ 2049.343623][ T37] INFO: task syz.8.8610:32691 blocked for more than 150 seconds. [ 2049.343639][ T37] Tainted: G L syzkaller #0 [ 2049.343649][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.343657][ T37] task:syz.8.8610 state:D stack:27560 pid:32691 tgid:32689 ppid:31223 task_flags:0x400140 flags:0x00080002 [ 2049.343702][ T37] Call Trace: [ 2049.343709][ T37] [ 2049.343720][ T37] __schedule+0x16ec/0x5620 [ 2049.343771][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.343806][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.343825][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.343868][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.343887][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.343906][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.343935][ T37] ? __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344003][ T37] ? __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344029][ T37] ? __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344048][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.344078][ T37] __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344105][ T37] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2049.344131][ T37] ? __fget_files+0x2a/0x420 [ 2049.344146][ T37] ? __fget_files+0x3a6/0x420 [ 2049.344162][ T37] ? __fget_files+0x2a/0x420 [ 2049.344182][ T37] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2049.344201][ T37] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2049.344222][ T37] __se_sys_ioctl+0xff/0x170 [ 2049.344243][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.344262][ T37] do_syscall_64+0x15f/0xf80 [ 2049.344282][ T37] ? trace_irq_disable+0x3b/0x140 [ 2049.344302][ T37] ? clear_bhb_loop+0x40/0x90 [ 2049.344324][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.344342][ T37] RIP: 0033:0x7f8d8c2ace59 [ 2049.344358][ T37] RSP: 002b:00007f8d8a4dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2049.344375][ T37] RAX: ffffffffffffffda RBX: 00007f8d8c526090 RCX: 00007f8d8c2ace59 [ 2049.344388][ T37] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000007 [ 2049.344401][ T37] RBP: 00007f8d8c342d6f R08: 0000000000000000 R09: 0000000000000000 [ 2049.344413][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2049.344424][ T37] R13: 00007f8d8c526128 R14: 00007f8d8c526090 R15: 00007ffefd1bb598 [ 2049.344454][ T37] [ 2049.344461][ T37] INFO: task syz.8.8610:32692 blocked for more than 150 seconds. [ 2049.344477][ T37] Tainted: G L syzkaller #0 [ 2049.344486][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2049.344495][ T37] task:syz.8.8610 state:D stack:28056 pid:32692 tgid:32689 ppid:31223 task_flags:0x400040 flags:0x00080002 [ 2049.344539][ T37] Call Trace: [ 2049.344545][ T37] [ 2049.344556][ T37] __schedule+0x16ec/0x5620 [ 2049.344612][ T37] ? __pfx___schedule+0x10/0x10 [ 2049.344647][ T37] rt_mutex_schedule+0x76/0xf0 [ 2049.344665][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 2049.344707][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 2049.344728][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 2049.344746][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2049.344775][ T37] ? __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344800][ T37] ? __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344826][ T37] ? __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344845][ T37] mutex_lock_nested+0x168/0x1d0 [ 2049.344875][ T37] __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.344902][ T37] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2049.344927][ T37] ? __fget_files+0x2a/0x420 [ 2049.344943][ T37] ? __fget_files+0x3a6/0x420 [ 2049.344958][ T37] ? __fget_files+0x2a/0x420 [ 2049.344979][ T37] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2049.344997][ T37] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2049.345017][ T37] __se_sys_ioctl+0xff/0x170 [ 2049.345038][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.345058][ T37] do_syscall_64+0x15f/0xf80 [ 2049.345077][ T37] ? trace_irq_disable+0x3b/0x140 [ 2049.345101][ T37] ? clear_bhb_loop+0x40/0x90 [ 2049.345123][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.345141][ T37] RIP: 0033:0x7f8d8c2ace59 [ 2049.345155][ T37] RSP: 002b:00007f8d8a4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2049.345172][ T37] RAX: ffffffffffffffda RBX: 00007f8d8c526180 RCX: 00007f8d8c2ace59 [ 2049.345186][ T37] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000009 [ 2049.345198][ T37] RBP: 00007f8d8c342d6f R08: 0000000000000000 R09: 0000000000000000 [ 2049.345210][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2049.345221][ T37] R13: 00007f8d8c526218 R14: 00007f8d8c526180 R15: 00007ffefd1bb598 [ 2049.345251][ T37] [ 2049.345269][ T37] [ 2049.345269][ T37] Showing all locks held in the system: [ 2049.345278][ T37] 3 locks held by ktimers/0/16: [ 2049.345293][ T37] 3 locks held by pr/legacy/17: [ 2049.345306][ T37] 1 lock held by khungtaskd/37: [ 2049.345316][ T37] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2049.345366][ T37] 4 locks held by kswapd0/93: [ 2049.345384][ T37] 8 locks held by kworker/u8:12/1198: [ 2049.345394][ T37] #0: ffff88801f29f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.345437][ T37] #1: ffffc900060c7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.345478][ T37] #2: ffff888036d140d0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 2049.345522][ T37] #3: ffff888036d00cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 2049.345569][ T37] #4: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.345614][ T37] #5: ffff8880b8942c18 (&pcp->lock){+.+.}-{3:3}, at: free_frozen_page_commit+0x827/0x1850 [ 2049.345657][ T37] #6: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 2049.345697][ T37] #7: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x4d0 [ 2049.345755][ T37] 2 locks held by klogd/4951: [ 2049.345766][ T37] #0: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.345808][ T37] #1: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.345855][ T37] 4 locks held by udevd/4962: [ 2049.345864][ T37] #0: ffff888037664480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2049.345908][ T37] #1: ffff888032a5dd28 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2ad/0x610 [ 2049.345957][ T37] #2: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.345995][ T37] #3: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.346035][ T37] 2 locks held by dhcpcd/5257: [ 2049.346046][ T37] #0: ffff88803b6cc928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 2049.346087][ T37] #1: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 2049.346128][ T37] 1 lock held by crond/5333: [ 2049.346138][ T37] 2 locks held by getty/5351: [ 2049.346149][ T37] #0: ffff888036ab40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2049.346190][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 2049.346239][ T37] 4 locks held by kworker/u8:14/6082: [ 2049.346248][ T37] 2 locks held by kworker/u8:15/7413: [ 2049.346259][ T37] 5 locks held by kworker/u8:18/8505: [ 2049.346269][ T37] 3 locks held by kworker/u8:20/9255: [ 2049.346280][ T37] 3 locks held by kworker/0:3/11806: [ 2049.346290][ T37] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.346332][ T37] #1: ffffc900040efc40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.346386][ T37] #2: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 2049.346434][ T37] 4 locks held by kworker/0:4/13413: [ 2049.346445][ T37] #0: ffff88801a036538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.346486][ T37] #1: ffffc90005f87c40 ((work_completion)(&(&priv->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.346530][ T37] #2: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.346569][ T37] #3: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.346621][ T37] 4 locks held by kworker/0:12/18377: [ 2049.346632][ T37] 5 locks held by kworker/0:14/18379: [ 2049.346643][ T37] #0: ffff88805b000938 ((wq_completion)wg-kex-wg0#34){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.346688][ T37] #1: ffffc9001118fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.346741][ T37] #2: ffff888060d2ee88 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 2049.346782][ T37] #3: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.346822][ T37] #4: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.346866][ T37] 5 locks held by kworker/0:0/26078: [ 2049.346876][ T37] #0: ffff8880365b6938 ((wq_completion)wg-kex-wg2#36){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.346923][ T37] #1: ffffc90003c3fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.346974][ T37] #2: ffff888060b703f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 2049.347015][ T37] #3: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.347054][ T37] #4: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.347095][ T37] 3 locks held by kworker/u8:1/29956: [ 2049.347107][ T37] 5 locks held by kworker/u8:3/30354: [ 2049.347117][ T37] 5 locks held by kworker/u8:4/30356: [ 2049.347128][ T37] 3 locks held by kworker/u8:5/30359: [ 2049.347138][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.347180][ T37] #1: ffffc9000ec97c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.347220][ T37] #2: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2049.347265][ T37] 5 locks held by kworker/u8:7/30366: [ 2049.347275][ T37] 5 locks held by kworker/u8:11/30372: [ 2049.347286][ T37] 3 locks held by kworker/u8:13/30373: [ 2049.347296][ T37] #0: ffff8880323b6138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.347339][ T37] #1: ffffc9000fe57c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.347380][ T37] #2: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 2049.347424][ T37] 6 locks held by kworker/u8:19/30742: [ 2049.347434][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.347474][ T37] #1: ffffc9000d6afc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.347515][ T37] #2: ffffffff8f3487a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 2049.347555][ T37] #3: ffff888039f1c160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 2049.347609][ T37] #4: ffff888026dd2310 (&devlink->lock_key#20){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 2049.347659][ T37] #5: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x894/0x1170 [ 2049.347706][ T37] 4 locks held by kworker/1:1/30966: [ 2049.347716][ T37] 6 locks held by kworker/u8:21/31034: [ 2049.347726][ T37] 3 locks held by kworker/u8:22/31036: [ 2049.347737][ T37] 6 locks held by kworker/u9:3/31208: [ 2049.347747][ T37] #0: ffff88803fbb9138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.347789][ T37] #1: ffffc9000569fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.347829][ T37] #2: ffff88808b188f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2049.347909][ T37] #3: ffff88808b1880b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 2049.347982][ T37] #4: ffffffff8f4d7a38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 2049.348029][ T37] #5: ffff88803f8bcb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 2049.348103][ T37] 5 locks held by kworker/0:1/31700: [ 2049.348115][ T37] #0: ffff888024251938 ((wq_completion)wg-kex-wg0#36){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.348161][ T37] #1: ffffc90005ec7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.348213][ T37] #2: ffff8880384763e0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 2049.348256][ T37] #3: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.348294][ T37] #4: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.348335][ T37] 3 locks held by kworker/u8:23/32333: [ 2049.348346][ T37] 1 lock held by syz-executor/32461: [ 2049.348356][ T37] #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 2049.348399][ T37] 3 locks held by syz.7.8608/32672: [ 2049.348410][ T37] #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 2049.348451][ T37] #1: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.348490][ T37] #2: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.348530][ T37] 1 lock held by syz.7.8608/32679: [ 2049.348540][ T37] #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 2049.348582][ T37] 1 lock held by syz.8.8610/32691: [ 2049.348590][ T37] #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.348639][ T37] 1 lock held by syz.8.8610/32692: [ 2049.348650][ T37] #0: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e10 [ 2049.348691][ T37] 7 locks held by kworker/0:2/32693: [ 2049.348701][ T37] #0: ffff88807a93bd38 ((wq_completion)wg-kex-wg1#32){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.348747][ T37] #1: ffffc9000557fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.348800][ T37] #2: ffff888060d2f930 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 2049.348843][ T37] #3: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.348880][ T37] #4: ffff8880b8842c18 (&pcp->lock){+.+.}-{3:3}, at: free_frozen_page_commit+0x827/0x1850 [ 2049.348923][ T37] #5: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 2049.348962][ T37] #6: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x4d0 [ 2049.349003][ T37] 2 locks held by kworker/0:5/32694: [ 2049.349013][ T37] #0: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.349051][ T37] #1: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.349091][ T37] 5 locks held by kworker/0:6/32695: [ 2049.349101][ T37] #0: ffff88805b003938 ((wq_completion)wg-kex-wg2#31){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 2049.349146][ T37] #1: ffffc900042ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 2049.349200][ T37] #2: ffff888054d8ae98 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 2049.349241][ T37] #3: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.349284][ T37] #4: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.349325][ T37] 3 locks held by syz-executor/32697: [ 2049.349336][ T37] #0: ffff88801e3f1db0 (&mm->mmap_lock){++++}-{4:4}, at: create_init_stack_vma+0x201/0x9b0 [ 2049.349384][ T37] #1: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 2049.349424][ T37] #2: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 2049.349470][ T37] 4 locks held by kworker/u8:24/32698: [ 2049.349481][ T37] [ 2049.349486][ T37] ============================================= [ 2049.349486][ T37] [ 2049.349500][ T37] NMI backtrace for cpu 1 [ 2049.349515][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2049.349539][ T37] Tainted: [L]=SOFTLOCKUP [ 2049.349544][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2049.349554][ T37] Call Trace: [ 2049.349561][ T37] [ 2049.349568][ T37] dump_stack_lvl+0xe8/0x150 [ 2049.349590][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 2049.349620][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2049.349642][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2049.349668][ T37] sys_info+0x135/0x170 [ 2049.349690][ T37] watchdog+0xfd3/0x1030 [ 2049.349718][ T37] ? watchdog+0x1c9/0x1030 [ 2049.349742][ T37] kthread+0x388/0x470 [ 2049.349763][ T37] ? __pfx_watchdog+0x10/0x10 [ 2049.349780][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.349803][ T37] ret_from_fork+0x514/0xb70 [ 2049.349825][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.349844][ T37] ? __switch_to+0xc79/0x1410 [ 2049.349871][ T37] ? __pfx_kthread+0x10/0x10 [ 2049.349892][ T37] ret_from_fork_asm+0x1a/0x30 [ 2049.349926][ T37] [ 2049.349933][ T37] Sending NMI from CPU 1 to CPUs 0: [ 2049.349955][ C0] NMI backtrace for cpu 0 [ 2049.349971][ C0] CPU: 0 UID: 0 PID: 18377 Comm: kworker/0:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2049.349993][ C0] Tainted: [L]=SOFTLOCKUP [ 2049.349999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2049.350009][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 2049.350031][ C0] RIP: 0010:debug_check_no_obj_freed+0x227/0x550 [ 2049.350056][ C0] Code: c1 e8 03 80 3c 10 00 74 12 4c 89 ff e8 12 77 7f fd 48 ba 00 00 00 00 00 fc ff df 4d 8b 3f 4d 39 ef 0f 92 c0 4d 39 fc 0f 96 c1 <08> c1 75 90 4c 8d 6d 10 4c 89 e8 48 c1 e8 03 0f b6 04 10 84 c0 0f [ 2049.350070][ C0] RSP: 0018:ffffc90010f4f390 EFLAGS: 00000083 [ 2049.350083][ C0] RAX: 1ffff1100c293200 RBX: 0000000000000006 RCX: 0000000000000001 [ 2049.350094][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90010f4f300 [ 2049.350105][ C0] RBP: ffff888061499310 R08: 0000000000000003 R09: 0000000000000004 [ 2049.350121][ C0] R10: dffffc0000000000 R11: fffff520021e9e60 R12: ffff8880752c0000 [ 2049.350133][ C0] R13: ffff8880752bc000 R14: 1ffff1100c293262 R15: ffffea0001486f50 [ 2049.350145][ C0] FS: 0000000000000000(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 2049.350158][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2049.350170][ C0] CR2: 00007fcd9a8efff8 CR3: 00000000389fa000 CR4: 00000000003526f0 [ 2049.350184][ C0] Call Trace: [ 2049.350190][ C0] [ 2049.350202][ C0] __free_frozen_pages+0x515/0x10f0 [ 2049.350224][ C0] ? __pfx___free_frozen_pages+0x10/0x10 [ 2049.350241][ C0] ? rt_spin_unlock+0x14f/0x200 [ 2049.350257][ C0] ? __free_slab+0x18f/0x290 [ 2049.350276][ C0] ? rt_spin_unlock+0x160/0x200 [ 2049.350292][ C0] __slab_free+0x252/0x2a0 [ 2049.350311][ C0] ? qlist_free_all+0x8e/0x100 [ 2049.350327][ C0] qlist_free_all+0x99/0x100 [ 2049.350343][ C0] kasan_quarantine_reduce+0x148/0x160 [ 2049.350365][ C0] __kasan_kmalloc+0x22/0xb0 [ 2049.350381][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 2049.350398][ C0] ? wg_noise_handshake_begin_session+0xcc/0xbe0 [ 2049.350418][ C0] wg_noise_handshake_begin_session+0xcc/0xbe0 [ 2049.350438][ C0] ? wg_packet_send_handshake_response+0x12d/0x310 [ 2049.350464][ C0] wg_packet_send_handshake_response+0x13c/0x310 [ 2049.350486][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 2049.350507][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xd7/0x130 [ 2049.350532][ C0] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 2049.350549][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 2049.350569][ C0] wg_packet_handshake_receive_worker+0x72a/0x10a0 [ 2049.350589][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 2049.350607][ C0] ? look_up_lock_class+0x57/0x110 [ 2049.350627][ C0] ? wg_packet_handshake_receive_worker+0x16e/0x10a0 [ 2049.350651][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 2049.350670][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2049.350692][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 2049.350710][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2049.350727][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2049.350747][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2049.350762][ C0] ? process_scheduled_works+0xa70/0x1860 [ 2049.350779][ C0] process_scheduled_works+0xb5d/0x1860 [ 2049.350809][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2049.350828][ C0] ? assign_work+0x3d5/0x5e0 [ 2049.350846][ C0] worker_thread+0xa53/0xfc0 [ 2049.350873][ C0] kthread+0x388/0x470 [ 2049.350892][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2049.350907][ C0] ? __pfx_kthread+0x10/0x10 [ 2049.350927][ C0] ret_from_fork+0x514/0xb70 [ 2049.350944][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2049.350960][ C0] ? __switch_to+0xc79/0x1410 [ 2049.350982][ C0] ? __pfx_kthread+0x10/0x10 [ 2049.351001][ C0] ret_from_fork_asm+0x1a/0x30 [ 2049.351026][ C0] [ 2050.390841][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 2050.390865][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2050.390892][ T37] Tainted: [L]=SOFTLOCKUP [ 2050.390899][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2050.390910][ T37] Call Trace: [ 2050.390918][ T37] [ 2050.390925][ T37] vpanic+0x56c/0xa60 [ 2050.390951][ T37] ? __pfx___schedule+0x10/0x10 [ 2050.390972][ T37] ? __pfx_vpanic+0x10/0x10 [ 2050.391002][ T37] panic+0xc5/0xd0 [ 2050.391020][ T37] ? __pfx_panic+0x10/0x10 [ 2050.391041][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 2050.391070][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2050.391099][ T37] watchdog+0x102c/0x1030 [ 2050.391126][ T37] ? watchdog+0x1c9/0x1030 [ 2050.391150][ T37] kthread+0x388/0x470 [ 2050.391172][ T37] ? __pfx_watchdog+0x10/0x10 [ 2050.391190][ T37] ? __pfx_kthread+0x10/0x10 [ 2050.391213][ T37] ret_from_fork+0x514/0xb70 [ 2050.391235][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 2050.391268][ T37] ? __switch_to+0xc79/0x1410 [ 2050.391295][ T37] ? __pfx_kthread+0x10/0x10 [ 2050.391318][ T37] ret_from_fork_asm+0x1a/0x30 [ 2050.391351][ T37] [ 2050.391729][ T37] Kernel Offset: disabled