last executing test programs: 8m53.432691092s ago: executing program 2 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) get_robust_list(0x0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x5) io_submit(0x0, 0x0, 0x0) shutdown(r4, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) syz_open_pts(r3, 0x80) 8m51.75366249s ago: executing program 2 (id=89): socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) 8m49.450578052s ago: executing program 2 (id=93): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "9a535dd1b83f806e", "5dbfe75c22a7d0895e35d9f1d49a74ac", "87747cc1", "1c6f22837cfa6c31"}, 0x28) 8m49.249108067s ago: executing program 2 (id=95): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) lseek(r0, 0x10001, 0x0) 8m49.09648403s ago: executing program 2 (id=97): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') 8m48.680910319s ago: executing program 2 (id=98): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace$getsig(0x4202, r4, 0xc, 0x0) process_vm_writev(r4, &(0x7f0000003200)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/158, 0x9e}, {&(0x7f0000002dc0)=""/144, 0x90}, {&(0x7f0000002e80)=""/115, 0x73}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/209, 0xd1}, {&(0x7f0000003100)=""/247, 0xf7}], 0x7, &(0x7f0000003340)=[{&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/97, 0x61}], 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009965, r5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) eventfd(0x8c66) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x8) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r8, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m47.77993914s ago: executing program 32 (id=98): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) ptrace$getsig(0x4202, r4, 0xc, 0x0) process_vm_writev(r4, &(0x7f0000003200)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/158, 0x9e}, {&(0x7f0000002dc0)=""/144, 0x90}, {&(0x7f0000002e80)=""/115, 0x73}, {&(0x7f0000002f00)=""/203, 0xcb}, {&(0x7f0000003000)=""/209, 0xd1}, {&(0x7f0000003100)=""/247, 0xf7}], 0x7, &(0x7f0000003340)=[{&(0x7f0000003280)=""/28, 0x1c}, {&(0x7f00000032c0)=""/97, 0x61}], 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009965, r5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) eventfd(0x8c66) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x8) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r8, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m18.672848946s ago: executing program 1 (id=1310): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) creat(0x0, 0x120) statfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2082) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) 1m14.97532555s ago: executing program 1 (id=1328): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 1m13.969755062s ago: executing program 1 (id=1330): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB=' '], 0x16) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="764f000000000000defadbdfd9cb632505020199e101000000e51b7d6398f6f0bcf36bf8b01829105c652d025026c1d4f2cabe154cb81837fa2551a3e47d4602960ee68a83c7bc2ced05d00000000021a395af7c8b4c368964fbe48b06000000d1ed68db58d448b1d51fe1fca7ffffc4d5a110261e1c487bedcda77fb2455da82af35976659ce3f7254135024eab27c4cfbddd1554ba803d0923fb9a9c15ef39a190255f0f911ef00ba9bb293ff0a22e0cffedfd9078c52d8346f43db0059c7a84c61c6e8aa3e5c65c8a63b5ec99a70ae06a7a070d06274a4bd4a733bd400ab4bbe7e81fdea4c3c50a221b07437d6fd99e6d2b6a459364015a474905ff3cfd29a19ecafc2fbd9ed63aa7fe17f5ab61a2bfd6d5d82e931826dbcc49374f9b6fc9a35eefd28a32338a35d1a116fac9c5c373faf3b8ed07452ddbe988634a6cfec0854b3a215719d12f982b98bab2120a47cf1c3a2b6ce757a49509acd8f4f635189f2d95efba1869e23d89900b04330c951ac84b75a7f7e73a19d91d99f317dff65b374dee09950be3de8aac1a31ed9c1363209881"], 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x54004050) io_uring_setup(0x3241, &(0x7f0000000080)={0x0, 0xede9, 0x1, 0x0, 0x3ba}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x1}) sendmmsg$unix(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="11", 0x1}], 0x1}}], 0x1, 0x48015) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0200a9bd7000fcdbdf250900000008007e000300000005000700000000000c0006000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80e0}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x1412, 0x100, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x24008800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r7) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 1m12.857033447s ago: executing program 1 (id=1334): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="710502070202010203654422d671519a69783bd1150bf224a96e2c00b38a5357f4712e384c2cf7792324488372a67928406a"], 0x6f) 1m9.508548653s ago: executing program 1 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) get_robust_list(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000080)=""/97, &(0x7f0000000100)=0x61) 1m8.387805099s ago: executing program 1 (id=1355): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) 52.91283755s ago: executing program 33 (id=1355): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) 12.78386903s ago: executing program 5 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14", 0x7}], 0x1}, 0x2000600d) 10.194958999s ago: executing program 4 (id=1563): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 10.049504232s ago: executing program 5 (id=1565): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r0 = io_uring_setup(0x6f78, &(0x7f00000001c0)={0x0, 0xb463, 0x40, 0x1, 0x8001a6}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080), 0x0) 9.983870223s ago: executing program 6 (id=1566): syz_open_dev$tty1(0xc, 0x4, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x20, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}}}}}}}, 0x0) 9.860981496s ago: executing program 5 (id=1568): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) creat(0x0, 0x120) statfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2082) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x41, 0x0) 9.042809645s ago: executing program 6 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100210126bd7000000000000a000000000000000000000008000a0004"], 0x24}}, 0x0) 8.692715103s ago: executing program 6 (id=1574): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xb86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 7.424491071s ago: executing program 6 (id=1576): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) prlimit64(r0, 0x3, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006", 0x44, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000340), 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r8, r7}, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 7.204237996s ago: executing program 4 (id=1577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 6.830218875s ago: executing program 4 (id=1579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@ptr, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000100)=""/189, 0x3a, 0xbd, 0x1}, 0x28) 6.510501532s ago: executing program 6 (id=1581): syz_open_dev$tty1(0xc, 0x4, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000040)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x22, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0xe, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}, "efc1"}}}}}}, 0x0) 5.007326816s ago: executing program 4 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) get_robust_list(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000080)=""/97, &(0x7f0000000100)=0x61) 4.610999005s ago: executing program 6 (id=1584): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = eventfd2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.869046622s ago: executing program 4 (id=1587): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 3.045010601s ago: executing program 0 (id=1588): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48) 2.819215846s ago: executing program 3 (id=1589): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r1, 0x2, {0x1, 0x1, 0x5}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1, {0x0, 0x1, 0x2}, 0xfd}, 0x18) 2.729232778s ago: executing program 0 (id=1590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="65f853000386"], 0xfdef) 2.62504649s ago: executing program 3 (id=1591): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x7, 0x0, 0x0, 0x8b, "00000000000000000000ffff00"}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000700)=0xe) sendfile(r1, r2, 0x0, 0x10ffff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) 2.584732021s ago: executing program 0 (id=1592): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000bc0)={0x40, 0x2c, 0x4, "d4ef56cb"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.509291313s ago: executing program 3 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@ptr, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000100)=""/189, 0x3a, 0xbd, 0x1}, 0x28) 1.409468058s ago: executing program 0 (id=1594): syz_open_dev$tty1(0xc, 0x4, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video4linux(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x0, 0x268, 0x138, 0x0, 0x268, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'bond_slave_0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xc, 0x3, 0x74}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd69, 0x1, @broadcast, 0x4e24}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0x0, 0xffffff00, 'team0\x00', 'hsr0\x00', {}, {}, 0xff, 0x2, 0x68}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000040)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x22, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0xe, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}, "efc1"}}}}}}, 0x0) 1.408909678s ago: executing program 3 (id=1595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 1.32898636s ago: executing program 5 (id=1596): socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) poll(0x0, 0x0, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.176088993s ago: executing program 5 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) get_robust_list(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000080)=""/97, &(0x7f0000000100)=0x61) 641.141485ms ago: executing program 3 (id=1598): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x2001000, 0x84, 0x2}}) 417.68542ms ago: executing program 0 (id=1599): r0 = syz_open_dev$cec(&(0x7f00000001c0), 0xffffffffffffffff, 0x200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", '\x00', "03000800", "97ad3700", ["fdffff01000030dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) 174.635996ms ago: executing program 4 (id=1600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x33}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, 0x0, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 58.878748ms ago: executing program 0 (id=1601): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES8=r0]) 537.71µs ago: executing program 3 (id=1602): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r1}) 0s ago: executing program 5 (id=1603): openat(0xffffffffffffff9c, 0x0, 0x80540, 0x1d4) r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0x3c, 0x0, 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) kernel console output (not intermixed with test programs): ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 261.475674][ T4196] ? lock_chain_count+0x20/0x20 [ 261.480734][ T4196] ? __rwlock_init+0x140/0x140 [ 261.485521][ T4196] hci_event_packet+0xe0b/0x1310 [ 261.490756][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 261.495648][ T4196] ? rcu_lock_release+0x20/0x20 [ 261.500766][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 261.506264][ T4196] hci_rx_work+0x255/0xa10 [ 261.510970][ T4196] process_one_work+0x867/0xff0 [ 261.515867][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 261.521725][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 261.527120][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 261.532510][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 261.538101][ T4196] ? wq_worker_running+0x97/0x170 [ 261.543224][ T4196] worker_thread+0xad7/0x12a0 [ 261.548241][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 261.554369][ T4196] kthread+0x42e/0x520 [ 261.558718][ T4196] ? rcu_lock_release+0x20/0x20 [ 261.563736][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 261.568711][ T4196] ret_from_fork+0x1f/0x30 [ 261.573159][ T4196] [ 261.597441][ T4196] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 261.611612][ T4196] Bluetooth: hci3: failed to register connection device [ 262.266588][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 262.413402][ T6247] loop0: detected capacity change from 0 to 4096 [ 262.829061][ T6247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.905151][ T6258] misc userio: Invalid payload size [ 264.379376][ T4229] Bluetooth: hci3: command 0x2016 tx timeout [ 264.600323][ T6273] loop1: detected capacity change from 0 to 128 [ 265.320293][ T6273] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 265.332656][ T6273] hpfs: filesystem error: improperly stopped [ 265.338794][ T6273] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 265.347028][ T6273] hpfs: You really don't want any checks? You are crazy... [ 265.354805][ T6273] hpfs: Code page index out of array [ 265.360577][ T6273] hpfs: code page support is disabled [ 265.371381][ T6273] hpfs: hpfs_map_4sectors(): unaligned read [ 265.378531][ T6273] hpfs: hpfs_map_4sectors(): unaligned read [ 265.384514][ T6273] hpfs: filesystem error: unable to find root dir [ 271.860873][ T6297] misc userio: Invalid payload size [ 275.493748][ T6319] loop5: detected capacity change from 0 to 131072 [ 275.584554][ T6319] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 275.594657][ T6319] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 275.637250][ T6319] F2FS-fs (loop5): Found nat_bits in checkpoint [ 275.703453][ T6319] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 275.711078][ T6319] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 275.808181][ T6331] loop0: detected capacity change from 0 to 764 [ 276.638568][ T6342] device syzkaller0 entered promiscuous mode [ 278.119413][ T4229] Bluetooth: hci2: command 0x0405 tx timeout [ 279.232614][ T6357] loop1: detected capacity change from 0 to 4096 [ 279.498372][ T6357] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.269507][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 280.921321][ T6384] device syzkaller0 entered promiscuous mode [ 285.395381][ T6421] misc userio: Invalid payload size [ 285.417043][ T6423] device syzkaller0 entered promiscuous mode [ 286.020098][ T6417] loop1: detected capacity change from 0 to 32768 [ 286.302631][ T26] audit: type=1800 audit(1783762905.386:13): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 286.323695][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.537822][ T6436] loop3: detected capacity change from 0 to 4096 [ 286.673812][ T6436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.259655][ T6445] loop1: detected capacity change from 0 to 128 [ 291.359776][ T6467] device syzkaller0 entered promiscuous mode [ 291.618989][ T6472] misc userio: Invalid payload size [ 295.696095][ T6505] loop3: detected capacity change from 0 to 128 [ 296.232159][ T6500] loop0: detected capacity change from 0 to 4096 [ 296.347879][ T6500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 296.395937][ T6510] device syzkaller0 entered promiscuous mode [ 296.754781][ T6514] misc userio: Invalid payload size [ 299.859879][ T6546] tipc: Enabled bearer , priority 0 [ 299.909828][ T6546] device syzkaller0 entered promiscuous mode [ 299.959859][ T6546] tipc: Resetting bearer [ 299.995522][ T6545] tipc: Resetting bearer [ 300.019356][ T6545] tipc: Disabling bearer [ 300.980715][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 300.990417][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 300.997997][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.008483][ T4196] Workqueue: hci4 hci_rx_work [ 301.013207][ T4196] Call Trace: [ 301.016500][ T4196] [ 301.019446][ T4196] dump_stack_lvl+0x188/0x250 [ 301.024249][ T4196] ? show_regs_print_info+0x20/0x20 [ 301.029483][ T4196] ? load_image+0x410/0x410 [ 301.034035][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 301.039195][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 301.043903][ T4196] ? kthread+0x42e/0x520 [ 301.048173][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 301.053408][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 301.058648][ T4196] kobject_add+0x160/0x230 [ 301.063108][ T4196] ? kobject_init+0x1c0/0x1c0 [ 301.067870][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 301.073188][ T4196] ? klist_children_get+0x50/0x50 [ 301.078250][ T4196] ? get_device_parent+0x121/0x3e0 [ 301.083393][ T4196] device_add+0x470/0x1050 [ 301.088006][ T4196] ? device_initialize+0x2a5/0x4d0 [ 301.093245][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 301.098223][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 301.103559][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 301.108704][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 301.114322][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 301.119218][ T4196] ? hci_event_packet+0x363/0x1310 [ 301.124371][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 301.129449][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 301.135552][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 301.141269][ T4196] ? mark_lock+0x94/0x320 [ 301.145631][ T4196] ? mutex_unlock+0x10/0x10 [ 301.150255][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 301.156288][ T4196] ? lock_chain_count+0x20/0x20 [ 301.161361][ T4196] ? __rwlock_init+0x140/0x140 [ 301.166171][ T4196] hci_event_packet+0xe0b/0x1310 [ 301.171147][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 301.176126][ T4196] ? rcu_lock_release+0x20/0x20 [ 301.181015][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 301.186251][ T4196] hci_rx_work+0x255/0xa10 [ 301.190977][ T4196] process_one_work+0x867/0xff0 [ 301.195965][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 301.201718][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 301.207386][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 301.212444][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 301.218032][ T4196] ? wq_worker_running+0x97/0x170 [ 301.223189][ T4196] worker_thread+0xad7/0x12a0 [ 301.228003][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 301.234037][ T4196] kthread+0x42e/0x520 [ 301.238151][ T4196] ? rcu_lock_release+0x20/0x20 [ 301.243028][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 301.247846][ T4196] ret_from_fork+0x1f/0x30 [ 301.252315][ T4196] [ 301.259887][ T4196] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 301.273295][ T4196] Bluetooth: hci4: failed to register connection device [ 301.521349][ T6567] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 301.521349][ T6567] program syz.3.565 not setting count and/or reply_len properly [ 302.239045][ T6576] device syzkaller0 entered promiscuous mode [ 302.446986][ T6579] misc userio: Invalid payload size [ 303.457449][ T4199] Bluetooth: hci4: command 0x2016 tx timeout [ 304.384420][ T6592] tipc: Enabled bearer , priority 0 [ 304.433981][ T6592] device syzkaller0 entered promiscuous mode [ 304.435798][ T6590] loop1: detected capacity change from 0 to 4096 [ 304.476028][ T6592] tipc: Resetting bearer [ 304.504017][ T6591] tipc: Resetting bearer [ 304.554308][ T6591] tipc: Disabling bearer [ 304.572484][ T6590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.995897][ T6615] device syzkaller0 entered promiscuous mode [ 306.329832][ T6622] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 306.329832][ T6622] program syz.0.582 not setting count and/or reply_len properly [ 308.522130][ T6630] misc userio: Invalid payload size [ 310.243153][ T6651] device syzkaller0 entered promiscuous mode [ 310.477214][ T6657] tipc: Enabled bearer , priority 0 [ 310.494763][ T6657] device syzkaller0 entered promiscuous mode [ 310.526047][ T6657] tipc: Resetting bearer [ 310.535193][ T6655] loop3: detected capacity change from 0 to 4096 [ 310.545973][ T6656] tipc: Resetting bearer [ 310.589818][ T6656] tipc: Disabling bearer [ 310.609572][ T6655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.321751][ T6679] misc userio: Invalid payload size [ 313.414387][ T6693] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 313.414387][ T6693] program syz.3.603 not setting count and/or reply_len properly [ 313.918537][ T6695] device syzkaller0 entered promiscuous mode [ 313.999190][ T6699] tipc: Enabled bearer , priority 0 [ 314.040827][ T6699] device syzkaller0 entered promiscuous mode [ 314.215456][ T6699] tipc: Resetting bearer [ 314.296637][ T6698] tipc: Resetting bearer [ 314.362469][ T6698] tipc: Disabling bearer [ 315.476335][ T6718] loop4: detected capacity change from 0 to 4096 [ 315.595457][ T6718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.079394][ T6732] misc userio: Invalid payload size [ 317.140546][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.147015][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.424388][ T6742] device syzkaller0 entered promiscuous mode [ 318.982125][ T6749] tipc: Enabled bearer , priority 0 [ 319.021706][ T6749] device syzkaller0 entered promiscuous mode [ 319.258480][ T6748] tipc: Resetting bearer [ 319.430316][ T6748] tipc: Disabling bearer [ 321.208781][ T6764] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 321.208781][ T6764] program syz.1.626 not setting count and/or reply_len properly [ 321.339377][ T6772] misc userio: Invalid payload size [ 321.568451][ T6777] device syzkaller0 entered promiscuous mode [ 322.645536][ T6783] loop4: detected capacity change from 0 to 4096 [ 322.805823][ T6783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.154404][ T6804] tipc: Enabled bearer , priority 0 [ 325.199132][ T6804] device syzkaller0 entered promiscuous mode [ 325.226100][ T6803] tipc: Resetting bearer [ 325.278092][ T6803] tipc: Disabling bearer [ 325.465996][ T6817] loop5: detected capacity change from 0 to 128 [ 326.745277][ T6824] device syzkaller0 entered promiscuous mode [ 328.234199][ T6848] tipc: Enabled bearer , priority 0 [ 328.269598][ T6848] device syzkaller0 entered promiscuous mode [ 328.329421][ T6847] tipc: Resetting bearer [ 328.413924][ T6847] tipc: Disabling bearer [ 328.909610][ T6856] loop0: detected capacity change from 0 to 128 [ 329.688216][ T6858] loop1: detected capacity change from 0 to 4096 [ 331.066385][ T6866] device syzkaller0 entered promiscuous mode [ 331.159761][ T6866] tipc: Enabling of bearer rejected, failed to enable media [ 331.232673][ T6858] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 333.401703][ T6904] loop1: detected capacity change from 0 to 128 [ 335.585571][ T6919] device syzkaller0 entered promiscuous mode [ 335.612660][ T6919] tipc: Enabling of bearer rejected, failed to enable media [ 336.513065][ T6937] loop4: detected capacity change from 0 to 4096 [ 336.953731][ T6937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 337.897708][ T6949] device syzkaller0 entered promiscuous mode [ 338.910517][ T6949] tipc: Enabling of bearer rejected, failed to enable media [ 339.479469][ T6967] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 339.486158][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 339.494778][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 339.807459][ T4199] usb 44-1: SetAddress Request (6) to port 0 [ 339.820685][ T4199] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 340.333892][ T6968] vhci_hcd: connection reset by peer [ 340.351930][ T1235] vhci_hcd: stop threads [ 340.376940][ T1235] vhci_hcd: release socket [ 340.475642][ T1235] vhci_hcd: disconnect device [ 343.945925][ T6991] loop5: detected capacity change from 0 to 128 [ 344.010956][ T6993] device syzkaller0 entered promiscuous mode [ 344.032449][ T6993] tipc: Enabling of bearer rejected, failed to enable media [ 344.296443][ T6997] loop3: detected capacity change from 0 to 128 [ 344.430223][ T6997] FAT-fs (loop3): bogus number of reserved sectors [ 344.436995][ T6997] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 344.481722][ T6997] FAT-fs (loop3): Can't find a valid FAT filesystem [ 344.752098][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 344.978084][ T4199] usb 44-1: device descriptor read/8, error -110 [ 345.845219][ T4199] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 345.854261][ T4199] usb usb44-port1: attempt power cycle [ 347.292021][ T4199] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 347.748037][ T4199] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 347.844916][ T4199] usb usb44-port1: unable to enumerate USB device [ 348.113709][ T7029] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 348.113709][ T7029] program syz.3.708 not setting count and/or reply_len properly [ 348.300661][ T7031] device syzkaller0 entered promiscuous mode [ 348.537892][ T7031] tipc: Enabling of bearer rejected, failed to enable media [ 349.130823][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 350.566170][ T7062] loop0: detected capacity change from 0 to 128 [ 351.353557][ T7062] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.708307][ T7062] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.898172][ T26] audit: type=1804 audit(1783762970.976:14): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.721" name="/newroot/146/bus/bus" dev="loop0" ino=1048623 res=1 errno=0 [ 351.931658][ T7067] sg_write: data in/out 221184/136 bytes for SCSI command 0x0-- guessing data in; [ 351.931658][ T7067] program syz.4.722 not setting count and/or reply_len properly [ 352.108868][ T26] audit: type=1800 audit(1783762970.976:15): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.721" name="bus" dev="loop0" ino=1048623 res=0 errno=0 [ 353.525198][ T7083] device syzkaller0 entered promiscuous mode [ 353.615139][ T7083] tipc: Enabling of bearer rejected, failed to enable media [ 354.453006][ T7092] loop0: detected capacity change from 0 to 4096 [ 354.871422][ T7092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 357.061694][ T7122] loop5: detected capacity change from 0 to 128 [ 363.002375][ T7169] loop1: detected capacity change from 0 to 32768 [ 364.983333][ T7200] loop1: detected capacity change from 0 to 4096 [ 365.126834][ T7200] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 366.123635][ T7210] loop4: detected capacity change from 0 to 4096 [ 366.404670][ T7210] EXT4-fs (loop4): Test dummy encryption mode enabled [ 366.451920][ T7210] EXT4-fs (loop4): inline encryption not supported [ 366.452104][ T7216] loop3: detected capacity change from 0 to 256 [ 366.575677][ T7210] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,nodioread_nolock,test_dummy_encryption,inlinecrypt,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 367.672627][ T7229] loop3: detected capacity change from 0 to 128 [ 371.971500][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:8393' [ 371.981398][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 371.988979][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.999064][ T4196] Workqueue: hci1 hci_rx_work [ 372.003873][ T4196] Call Trace: [ 372.007213][ T4196] [ 372.010213][ T4196] dump_stack_lvl+0x188/0x250 [ 372.014970][ T4196] ? show_regs_print_info+0x20/0x20 [ 372.020589][ T4196] ? load_image+0x410/0x410 [ 372.025144][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 372.030349][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 372.035047][ T4196] ? mark_lock+0x94/0x320 [ 372.039545][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 372.044774][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 372.050242][ T4196] kobject_add+0x160/0x230 [ 372.054771][ T4196] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 372.060472][ T4196] ? kobject_init+0x1c0/0x1c0 [ 372.065175][ T4196] ? kobject_get+0xbb/0x110 [ 372.069783][ T4196] ? audit_tree_destroy_watch+0x20/0x20 [ 372.075503][ T4196] ? get_device_parent+0x121/0x3e0 [ 372.080762][ T4196] device_add+0x470/0x1050 [ 372.085337][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 372.090648][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 372.096108][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 372.101259][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 372.106139][ T4196] ? mark_lock+0x94/0x320 [ 372.110599][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 372.116828][ T4196] ? __cond_resched+0xd0/0xd0 [ 372.121578][ T4196] ? lock_chain_count+0x20/0x20 [ 372.126451][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 372.132730][ T4196] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 372.138391][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 372.143663][ T4196] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 372.149332][ T4196] ? hci_event_packet+0x5b7/0x1310 [ 372.154474][ T4196] hci_event_packet+0xe0b/0x1310 [ 372.159616][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 372.164506][ T4196] ? rcu_lock_release+0x20/0x20 [ 372.169386][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 372.174678][ T4196] hci_rx_work+0x255/0xa10 [ 372.179139][ T4196] process_one_work+0x867/0xff0 [ 372.184098][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 372.189750][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 372.195065][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 372.200111][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 372.205776][ T4196] ? wq_worker_running+0x97/0x170 [ 372.210826][ T4196] worker_thread+0xad7/0x12a0 [ 372.215623][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 372.221641][ T4196] kthread+0x42e/0x520 [ 372.225795][ T4196] ? rcu_lock_release+0x20/0x20 [ 372.230664][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 372.235370][ T4196] ret_from_fork+0x1f/0x30 [ 372.239843][ T4196] [ 372.242977][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.275144][ T4196] kobject_add_internal failed for hci1:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 372.289600][ T4196] Bluetooth: hci1: failed to register connection device [ 372.878188][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:8393' [ 372.888218][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 372.895992][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 372.906293][ T4196] Workqueue: hci1 hci_rx_work [ 372.911114][ T4196] Call Trace: [ 372.914476][ T4196] [ 372.917434][ T4196] dump_stack_lvl+0x188/0x250 [ 372.922325][ T4196] ? show_regs_print_info+0x20/0x20 [ 372.927558][ T4196] ? load_image+0x410/0x410 [ 372.932415][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 372.937661][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 372.942370][ T4196] ? kthread+0x42e/0x520 [ 372.946637][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 372.951867][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 372.957215][ T4196] kobject_add+0x160/0x230 [ 372.961666][ T4196] ? kobject_init+0x1c0/0x1c0 [ 372.966832][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 372.972335][ T4196] ? klist_children_get+0x50/0x50 [ 372.977496][ T4196] ? get_device_parent+0x121/0x3e0 [ 372.982736][ T4196] device_add+0x470/0x1050 [ 372.987182][ T4196] ? device_initialize+0x2a5/0x4d0 [ 372.992318][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 372.997291][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 373.002716][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 373.007863][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 373.013805][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 373.018683][ T4196] ? hci_event_packet+0x363/0x1310 [ 373.023824][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 373.028974][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 373.035338][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 373.041172][ T4196] ? mark_lock+0x94/0x320 [ 373.045548][ T4196] ? mutex_unlock+0x10/0x10 [ 373.050069][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 373.056078][ T4196] ? lock_chain_count+0x20/0x20 [ 373.060950][ T4196] ? __rwlock_init+0x140/0x140 [ 373.065753][ T4196] hci_event_packet+0xe0b/0x1310 [ 373.070765][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 373.075759][ T4196] ? rcu_lock_release+0x20/0x20 [ 373.080816][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 373.086299][ T4196] hci_rx_work+0x255/0xa10 [ 373.090835][ T4196] process_one_work+0x867/0xff0 [ 373.095813][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 373.101577][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 373.106978][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 373.112205][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 373.117895][ T4196] ? wq_worker_running+0x97/0x170 [ 373.122956][ T4196] worker_thread+0xad7/0x12a0 [ 373.127940][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 373.133967][ T4196] kthread+0x42e/0x520 [ 373.138073][ T4196] ? rcu_lock_release+0x20/0x20 [ 373.143128][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 373.147774][ T4196] ret_from_fork+0x1f/0x30 [ 373.152250][ T4196] [ 373.155395][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.178946][ T4196] kobject_add_internal failed for hci1:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 373.192883][ T4196] Bluetooth: hci1: failed to register connection device [ 373.415356][ T7277] device syzkaller0 entered promiscuous mode [ 374.699239][ T13] Bluetooth: hci1: command 0x2016 tx timeout [ 376.817389][ T13] Bluetooth: hci1: command 0x2016 tx timeout [ 377.031599][ T7315] device syzkaller0 entered promiscuous mode [ 377.332664][ T7305] loop3: detected capacity change from 0 to 32768 [ 377.602098][ T7305] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 377.637144][ T7324] loop5: detected capacity change from 0 to 4096 [ 377.816788][ T7324] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 378.037880][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:8393' [ 378.047634][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 378.055221][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.065400][ T4196] Workqueue: hci1 hci_rx_work [ 378.070135][ T4196] Call Trace: [ 378.073440][ T4196] [ 378.076487][ T4196] dump_stack_lvl+0x188/0x250 [ 378.081204][ T4196] ? show_regs_print_info+0x20/0x20 [ 378.086536][ T4196] ? load_image+0x410/0x410 [ 378.091179][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 378.096327][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 378.101039][ T4196] ? kthread+0x42e/0x520 [ 378.105323][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 378.110560][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 378.115815][ T4196] kobject_add+0x160/0x230 [ 378.120281][ T4196] ? kobject_init+0x1c0/0x1c0 [ 378.125002][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 378.130454][ T4196] ? klist_children_get+0x50/0x50 [ 378.135682][ T4196] ? get_device_parent+0x121/0x3e0 [ 378.140835][ T4196] device_add+0x470/0x1050 [ 378.145368][ T4196] ? device_initialize+0x2a5/0x4d0 [ 378.150510][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 378.155656][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 378.161001][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 378.166160][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 378.171845][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 378.176779][ T4196] ? hci_event_packet+0x363/0x1310 [ 378.181931][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 378.187006][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 378.193126][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 378.198801][ T4196] ? mark_lock+0x94/0x320 [ 378.203165][ T4196] ? mutex_unlock+0x10/0x10 [ 378.209487][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 378.209526][ T4196] ? lock_chain_count+0x20/0x20 [ 378.209549][ T4196] ? __rwlock_init+0x140/0x140 [ 378.209574][ T4196] hci_event_packet+0xe0b/0x1310 [ 378.209604][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 378.209627][ T4196] ? rcu_lock_release+0x20/0x20 [ 378.209655][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 378.209679][ T4196] hci_rx_work+0x255/0xa10 [ 378.209712][ T4196] process_one_work+0x867/0xff0 [ 378.209759][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 378.209777][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 378.209800][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 378.209819][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 378.209842][ T4196] ? wq_worker_running+0x97/0x170 [ 378.209864][ T4196] worker_thread+0xad7/0x12a0 [ 378.209900][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 378.209935][ T4196] kthread+0x42e/0x520 [ 378.209952][ T4196] ? rcu_lock_release+0x20/0x20 [ 378.209970][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 378.209991][ T4196] ret_from_fork+0x1f/0x30 [ 378.210030][ T4196] [ 378.210099][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.215407][ T4196] kobject_add_internal failed for hci1:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 378.215436][ T4196] Bluetooth: hci1: failed to register connection device [ 378.400926][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 378.585489][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.585540][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.257405][ T4230] Bluetooth: hci1: command 0x2016 tx timeout [ 380.837744][ T7356] device syzkaller0 entered promiscuous mode [ 381.569125][ T7364] loop1: detected capacity change from 0 to 128 [ 381.993353][ T7364] overlayfs: filesystem on './file0' not supported [ 382.121290][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:8393' [ 382.131495][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 382.139272][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.149373][ T4196] Workqueue: hci1 hci_rx_work [ 382.154183][ T4196] Call Trace: [ 382.157581][ T4196] [ 382.160639][ T4196] dump_stack_lvl+0x188/0x250 [ 382.165351][ T4196] ? show_regs_print_info+0x20/0x20 [ 382.170588][ T4196] ? load_image+0x410/0x410 [ 382.175151][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 382.180299][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 382.185016][ T4196] ? kthread+0x42e/0x520 [ 382.189377][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 382.194795][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 382.200787][ T4196] kobject_add+0x160/0x230 [ 382.205380][ T4196] ? kobject_init+0x1c0/0x1c0 [ 382.210100][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 382.215451][ T4196] ? klist_children_get+0x50/0x50 [ 382.220793][ T4196] ? get_device_parent+0x121/0x3e0 [ 382.226210][ T4196] device_add+0x470/0x1050 [ 382.231871][ T4196] ? device_initialize+0x2a5/0x4d0 [ 382.237025][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 382.245137][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 382.250478][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 382.255627][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 382.261325][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 382.268569][ T4196] ? hci_event_packet+0x363/0x1310 [ 382.273728][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 382.278884][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 382.285067][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 382.291147][ T4196] ? mark_lock+0x94/0x320 [ 382.295481][ T4196] ? mutex_unlock+0x10/0x10 [ 382.300071][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 382.306056][ T4196] ? lock_chain_count+0x20/0x20 [ 382.310907][ T4196] ? __rwlock_init+0x140/0x140 [ 382.315842][ T4196] hci_event_packet+0xe0b/0x1310 [ 382.320790][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 382.325640][ T4196] ? rcu_lock_release+0x20/0x20 [ 382.330497][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 382.335701][ T4196] hci_rx_work+0x255/0xa10 [ 382.340137][ T4196] process_one_work+0x867/0xff0 [ 382.345006][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 382.350825][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 382.356132][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 382.361356][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 382.367109][ T4196] ? wq_worker_running+0x97/0x170 [ 382.372694][ T4196] worker_thread+0xad7/0x12a0 [ 382.377602][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 382.383782][ T4196] kthread+0x42e/0x520 [ 382.387954][ T4196] ? rcu_lock_release+0x20/0x20 [ 382.393075][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 382.397836][ T4196] ret_from_fork+0x1f/0x30 [ 382.402302][ T4196] [ 382.413830][ T4196] kobject_add_internal failed for hci1:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 382.428388][ T4196] Bluetooth: hci1: failed to register connection device [ 383.634456][ T7387] device syzkaller0 entered promiscuous mode [ 384.497378][ T4228] Bluetooth: hci1: command 0x2016 tx timeout [ 384.657396][ T4228] Bluetooth: hci2: command 0x2016 tx timeout [ 385.894661][ T7410] loop5: detected capacity change from 0 to 4096 [ 385.957487][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 385.967145][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 385.974722][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.984982][ T4196] Workqueue: hci3 hci_rx_work [ 385.989710][ T4196] Call Trace: [ 385.993013][ T4196] [ 385.995957][ T4196] dump_stack_lvl+0x188/0x250 [ 386.000685][ T4196] ? show_regs_print_info+0x20/0x20 [ 386.005922][ T4196] ? load_image+0x410/0x410 [ 386.010480][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 386.015632][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 386.020335][ T4196] ? kthread+0x42e/0x520 [ 386.024607][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 386.029933][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 386.036515][ T4196] kobject_add+0x160/0x230 [ 386.040970][ T4196] ? kobject_init+0x1c0/0x1c0 [ 386.045849][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 386.051239][ T4196] ? klist_children_get+0x50/0x50 [ 386.056594][ T4196] ? get_device_parent+0x121/0x3e0 [ 386.061816][ T4196] device_add+0x470/0x1050 [ 386.066239][ T4196] ? device_initialize+0x2a5/0x4d0 [ 386.071447][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 386.076393][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 386.081697][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 386.086903][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 386.092460][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 386.097407][ T4196] ? hci_event_packet+0x363/0x1310 [ 386.102526][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 386.107768][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 386.113843][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 386.119484][ T4196] ? mark_lock+0x94/0x320 [ 386.123813][ T4196] ? mutex_unlock+0x10/0x10 [ 386.128319][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 386.134426][ T4196] ? lock_chain_count+0x20/0x20 [ 386.139337][ T4196] ? __rwlock_init+0x140/0x140 [ 386.144224][ T4196] hci_event_packet+0xe0b/0x1310 [ 386.149199][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 386.154323][ T4196] ? rcu_lock_release+0x20/0x20 [ 386.159189][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 386.164390][ T4196] hci_rx_work+0x255/0xa10 [ 386.168907][ T4196] process_one_work+0x867/0xff0 [ 386.173775][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 386.179495][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 386.184788][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.189843][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.195393][ T4196] ? wq_worker_running+0x97/0x170 [ 386.200445][ T4196] worker_thread+0xad7/0x12a0 [ 386.205138][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.211044][ T4196] kthread+0x42e/0x520 [ 386.215257][ T4196] ? rcu_lock_release+0x20/0x20 [ 386.220700][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 386.225323][ T4196] ret_from_fork+0x1f/0x30 [ 386.229768][ T4196] [ 386.233108][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.242659][ T4196] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.256815][ T4196] Bluetooth: hci3: failed to register connection device [ 387.729127][ T7410] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 387.937935][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 387.947969][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 387.955556][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.965814][ T4196] Workqueue: hci3 hci_rx_work [ 387.970587][ T4196] Call Trace: [ 387.973860][ T4196] [ 387.976792][ T4196] dump_stack_lvl+0x188/0x250 [ 387.981607][ T4196] ? show_regs_print_info+0x20/0x20 [ 387.986938][ T4196] ? load_image+0x410/0x410 [ 387.991781][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 387.997035][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 388.001850][ T4196] ? kthread+0x42e/0x520 [ 388.006133][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 388.011461][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 388.016793][ T4196] kobject_add+0x160/0x230 [ 388.021416][ T4196] ? kobject_init+0x1c0/0x1c0 [ 388.026237][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 388.031606][ T4196] ? klist_children_get+0x50/0x50 [ 388.036644][ T4196] ? get_device_parent+0x121/0x3e0 [ 388.041968][ T4196] device_add+0x470/0x1050 [ 388.046569][ T4196] ? device_initialize+0x2a5/0x4d0 [ 388.052051][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 388.057094][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 388.062416][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 388.067662][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 388.073355][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 388.078223][ T4196] ? hci_event_packet+0x363/0x1310 [ 388.083339][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 388.088467][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 388.094755][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 388.100416][ T4196] ? mark_lock+0x94/0x320 [ 388.104988][ T4196] ? mutex_unlock+0x10/0x10 [ 388.109565][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 388.115613][ T4196] ? lock_chain_count+0x20/0x20 [ 388.120601][ T4196] ? __rwlock_init+0x140/0x140 [ 388.125591][ T4196] hci_event_packet+0xe0b/0x1310 [ 388.130822][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 388.135762][ T4196] ? rcu_lock_release+0x20/0x20 [ 388.140628][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 388.145839][ T4196] hci_rx_work+0x255/0xa10 [ 388.150351][ T4196] process_one_work+0x867/0xff0 [ 388.155657][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 388.161504][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 388.166917][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 388.171960][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 388.177530][ T4196] ? wq_worker_running+0x97/0x170 [ 388.182554][ T4196] worker_thread+0xad7/0x12a0 [ 388.187522][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.193543][ T4196] kthread+0x42e/0x520 [ 388.197723][ T4196] ? rcu_lock_release+0x20/0x20 [ 388.202595][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 388.207209][ T4196] ret_from_fork+0x1f/0x30 [ 388.211899][ T4196] [ 388.218099][ T4196] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 388.231602][ T4196] Bluetooth: hci3: failed to register connection device [ 388.337456][ T4832] Bluetooth: hci3: command 0x2016 tx timeout [ 389.040730][ T7433] device syzkaller0 entered promiscuous mode [ 390.570972][ T4832] Bluetooth: hci3: command 0x2016 tx timeout [ 392.935595][ T7472] device syzkaller0 entered promiscuous mode [ 395.293634][ T4199] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 395.577527][ T4199] usb 4-1: Using ep0 maxpacket: 16 [ 395.621001][ T7501] loop4: detected capacity change from 0 to 4096 [ 395.727488][ T4199] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 395.780224][ T4199] usb 4-1: config 251 has no interface number 0 [ 395.786780][ T4199] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 395.797339][ T4199] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 395.808613][ T4199] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 395.820119][ T4199] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 395.831918][ T4199] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.846605][ T4199] usb 4-1: config 251 interface 202 has no altsetting 0 [ 395.863861][ T7501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 397.078777][ T4199] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 397.097326][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.105923][ T4199] usb 4-1: Product: syz [ 397.127327][ T4199] usb 4-1: Manufacturer: syz [ 397.132233][ T4199] usb 4-1: SerialNumber: syz [ 397.177795][ T7497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 397.271001][ T7513] device syzkaller0 entered promiscuous mode [ 397.723136][ T4199] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 397.752422][ T4199] usb 4-1: USB disconnect, device number 5 [ 398.236516][ T4178] udevd[4178]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory [ 398.488050][ T4178] udevd[4178]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory [ 398.706224][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 398.716189][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 398.723777][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.733875][ T4196] Workqueue: hci4 hci_rx_work [ 398.738616][ T4196] Call Trace: [ 398.741926][ T4196] [ 398.744987][ T4196] dump_stack_lvl+0x188/0x250 [ 398.749706][ T4196] ? show_regs_print_info+0x20/0x20 [ 398.754950][ T4196] ? load_image+0x410/0x410 [ 398.759523][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 398.764680][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 398.769394][ T4196] ? kthread+0x42e/0x520 [ 398.773762][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 398.779003][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 398.784257][ T4196] kobject_add+0x160/0x230 [ 398.788821][ T4196] ? kobject_init+0x1c0/0x1c0 [ 398.793733][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 398.799266][ T4196] ? klist_children_get+0x50/0x50 [ 398.804725][ T4196] ? get_device_parent+0x121/0x3e0 [ 398.810835][ T4196] device_add+0x470/0x1050 [ 398.815375][ T4196] ? device_initialize+0x2a5/0x4d0 [ 398.820523][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 398.825573][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 398.831434][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 398.836587][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 398.842170][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 398.847061][ T4196] ? hci_event_packet+0x363/0x1310 [ 398.852206][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 398.857363][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 398.863469][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 398.869578][ T4196] ? mark_lock+0x94/0x320 [ 398.874119][ T4196] ? mutex_unlock+0x10/0x10 [ 398.878782][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 398.884887][ T4196] ? lock_chain_count+0x20/0x20 [ 398.890387][ T4196] ? __rwlock_init+0x140/0x140 [ 398.895183][ T4196] hci_event_packet+0xe0b/0x1310 [ 398.900466][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 398.905472][ T4196] ? rcu_lock_release+0x20/0x20 [ 398.910473][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 398.916160][ T4196] hci_rx_work+0x255/0xa10 [ 398.920641][ T4196] process_one_work+0x867/0xff0 [ 398.925546][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 398.931306][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 398.936810][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 398.941972][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 398.947576][ T4196] ? wq_worker_running+0x97/0x170 [ 398.952902][ T4196] worker_thread+0xad7/0x12a0 [ 398.957868][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 398.964215][ T4196] kthread+0x42e/0x520 [ 398.968393][ T4196] ? rcu_lock_release+0x20/0x20 [ 398.973248][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 398.977872][ T4196] ret_from_fork+0x1f/0x30 [ 398.982393][ T4196] [ 398.986710][ T4196] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 399.008100][ T4196] Bluetooth: hci4: failed to register connection device [ 399.102161][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 401.067833][ T4832] Bluetooth: hci4: command 0x2016 tx timeout [ 402.028181][ T7560] loop4: detected capacity change from 0 to 4096 [ 402.189446][ T7560] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 405.125075][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 405.135400][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 405.143079][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.153312][ T4196] Workqueue: hci3 hci_rx_work [ 405.158218][ T4196] Call Trace: [ 405.161702][ T4196] [ 405.164758][ T4196] dump_stack_lvl+0x188/0x250 [ 405.169561][ T4196] ? show_regs_print_info+0x20/0x20 [ 405.174803][ T4196] ? load_image+0x410/0x410 [ 405.179389][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 405.184544][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 405.189269][ T4196] ? kthread+0x42e/0x520 [ 405.195272][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 405.200713][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 405.205976][ T4196] kobject_add+0x160/0x230 [ 405.210435][ T4196] ? kobject_init+0x1c0/0x1c0 [ 405.215158][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 405.220622][ T4196] ? klist_children_get+0x50/0x50 [ 405.225694][ T4196] ? get_device_parent+0x121/0x3e0 [ 405.230853][ T4196] device_add+0x470/0x1050 [ 405.235304][ T4196] ? device_initialize+0x2a5/0x4d0 [ 405.240449][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 405.245415][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 405.251002][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 405.256167][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 405.261813][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 405.266854][ T4196] ? hci_event_packet+0x363/0x1310 [ 405.272668][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 405.277806][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 405.283885][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 405.289523][ T4196] ? mark_lock+0x94/0x320 [ 405.293865][ T4196] ? mutex_unlock+0x10/0x10 [ 405.298545][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 405.304534][ T4196] ? lock_chain_count+0x20/0x20 [ 405.309389][ T4196] ? __rwlock_init+0x140/0x140 [ 405.314209][ T4196] hci_event_packet+0xe0b/0x1310 [ 405.319184][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 405.324146][ T4196] ? rcu_lock_release+0x20/0x20 [ 405.329006][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 405.334405][ T4196] hci_rx_work+0x255/0xa10 [ 405.338924][ T4196] process_one_work+0x867/0xff0 [ 405.344202][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 405.350404][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 405.356434][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 405.361750][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 405.367501][ T4196] ? wq_worker_running+0x97/0x170 [ 405.372548][ T4196] worker_thread+0xad7/0x12a0 [ 405.377297][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 405.383217][ T4196] kthread+0x42e/0x520 [ 405.387733][ T4196] ? rcu_lock_release+0x20/0x20 [ 405.393377][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 405.398444][ T4196] ret_from_fork+0x1f/0x30 [ 405.402972][ T4196] [ 405.797627][ T4196] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 405.816295][ T4196] Bluetooth: hci3: failed to register connection device [ 407.949330][ T4199] Bluetooth: hci3: command 0x2016 tx timeout [ 408.839718][ T7621] loop5: detected capacity change from 0 to 4096 [ 408.916772][ T7621] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 412.656574][ T7653] device syzkaller0 entered promiscuous mode [ 413.376037][ T7659] loop4: detected capacity change from 0 to 4096 [ 413.519193][ T7659] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 419.076758][ T7694] device syzkaller0 entered promiscuous mode [ 421.049784][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 421.060339][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 421.068104][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.078317][ T4196] Workqueue: hci4 hci_rx_work [ 421.083074][ T4196] Call Trace: [ 421.086582][ T4196] [ 421.089662][ T4196] dump_stack_lvl+0x188/0x250 [ 421.094499][ T4196] ? show_regs_print_info+0x20/0x20 [ 421.099821][ T4196] ? load_image+0x410/0x410 [ 421.104570][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 421.109868][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 421.114755][ T4196] ? kthread+0x42e/0x520 [ 421.119213][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 421.124463][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 421.129724][ T4196] kobject_add+0x160/0x230 [ 421.134189][ T4196] ? kobject_init+0x1c0/0x1c0 [ 421.139151][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 421.144592][ T4196] ? klist_children_get+0x50/0x50 [ 421.149689][ T4196] ? get_device_parent+0x121/0x3e0 [ 421.155023][ T4196] device_add+0x470/0x1050 [ 421.159486][ T4196] ? device_initialize+0x2a5/0x4d0 [ 421.164869][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 421.171095][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 421.176527][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 421.182077][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 421.188686][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 421.194522][ T4196] ? hci_event_packet+0x363/0x1310 [ 421.199823][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 421.205438][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 421.211999][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 421.218134][ T4196] ? mark_lock+0x94/0x320 [ 421.222897][ T4196] ? mutex_unlock+0x10/0x10 [ 421.227727][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 421.233772][ T4196] ? lock_chain_count+0x20/0x20 [ 421.238802][ T4196] ? __rwlock_init+0x140/0x140 [ 421.245882][ T4196] hci_event_packet+0xe0b/0x1310 [ 421.250880][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 421.255867][ T4196] ? rcu_lock_release+0x20/0x20 [ 421.260992][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 421.266575][ T4196] hci_rx_work+0x255/0xa10 [ 421.271433][ T4196] process_one_work+0x867/0xff0 [ 421.276540][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 421.282637][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 421.288511][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 421.293589][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 421.299187][ T4196] ? wq_worker_running+0x97/0x170 [ 421.304621][ T4196] worker_thread+0xad7/0x12a0 [ 421.309999][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 421.316087][ T4196] kthread+0x42e/0x520 [ 421.320300][ T4196] ? rcu_lock_release+0x20/0x20 [ 421.325290][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 421.330009][ T4196] ret_from_fork+0x1f/0x30 [ 421.334601][ T4196] [ 421.343572][ T4196] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 421.357587][ T4196] Bluetooth: hci4: failed to register connection device [ 422.688493][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 423.382867][ T2857] Bluetooth: hci4: command 0x2016 tx timeout [ 425.416649][ T7746] loop4: detected capacity change from 0 to 4096 [ 426.945005][ T7746] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 432.259873][ T7782] loop5: detected capacity change from 0 to 32768 [ 432.312753][ T7812] loop1: detected capacity change from 0 to 128 [ 432.362006][ T7782] find_entry called with index = 0 [ 432.392318][ T7782] read_mapping_page failed! [ 432.407696][ T7782] ERROR: (device loop5): txCommit: [ 432.407696][ T7782] [ 432.437726][ T7782] ERROR: (device loop5): remounting filesystem as read-only [ 432.526096][ T7812] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 432.573650][ T7812] hpfs: filesystem error: improperly stopped [ 432.627557][ T7812] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 432.646392][ T7818] loop5: detected capacity change from 0 to 1024 [ 432.677412][ T7812] hpfs: You really don't want any checks? You are crazy... [ 432.684981][ T7812] hpfs: Code page index out of array [ 432.707700][ T7812] hpfs: code page support is disabled [ 432.713358][ T7812] hpfs: hpfs_map_4sectors(): unaligned read [ 432.748772][ T7812] hpfs: hpfs_map_4sectors(): unaligned read [ 432.757568][ T7818] EXT4-fs (loop5): Ignoring removed bh option [ 432.777755][ T7812] hpfs: filesystem error: unable to find root dir [ 432.851072][ T7811] hpfs: hpfs_map_4sectors(): unaligned read [ 432.973630][ T7818] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none. [ 435.680781][ T7848] loop5: detected capacity change from 0 to 256 [ 435.721378][ T7848] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 435.732206][ T7848] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 435.761886][ T7848] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 436.977601][ T4228] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 437.237800][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 437.358323][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.532155][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.683004][ T4228] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 437.816162][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.983062][ T4228] usb 6-1: config 0 descriptor?? [ 438.122904][ T4228] hub 6-1:0.0: USB hub found [ 438.307583][ T4228] hub 6-1:0.0: 1 port detected [ 439.757472][ T4199] hub 6-1:0.0: activate --> -90 [ 440.020246][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.026603][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.057438][ T4199] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 440.058743][ T13] usb 6-1: USB disconnect, device number 3 [ 440.866318][ T7883] loop4: detected capacity change from 0 to 4096 [ 441.235258][ T7883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 444.085692][ T7922] loop3: detected capacity change from 0 to 256 [ 444.140987][ T26] audit: type=1800 audit(1783763063.226:16): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.963" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 454.097398][ T4832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 454.537648][ T4832] usb 5-1: config 0 has no interfaces? [ 454.543243][ T4832] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 454.775110][ T4832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.338258][ T4832] usb 5-1: config 0 descriptor?? [ 455.571462][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:8393' [ 455.581791][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 455.589456][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.599663][ T4196] Workqueue: hci2 hci_rx_work [ 455.604391][ T4196] Call Trace: [ 455.607691][ T4196] [ 455.610637][ T4196] dump_stack_lvl+0x188/0x250 [ 455.615345][ T4196] ? show_regs_print_info+0x20/0x20 [ 455.620569][ T4196] ? load_image+0x410/0x410 [ 455.625118][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 455.630264][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 455.635037][ T4196] ? kthread+0x42e/0x520 [ 455.639301][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 455.644533][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 455.649774][ T4196] kobject_add+0x160/0x230 [ 455.654402][ T4196] ? kobject_init+0x1c0/0x1c0 [ 455.659118][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 455.664450][ T4196] ? klist_children_get+0x50/0x50 [ 455.669516][ T4196] ? get_device_parent+0x121/0x3e0 [ 455.674884][ T4196] device_add+0x470/0x1050 [ 455.679350][ T4196] ? device_initialize+0x2a5/0x4d0 [ 455.684993][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 455.690249][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 455.695574][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 455.700719][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 455.706406][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 455.711304][ T4196] ? hci_event_packet+0x363/0x1310 [ 455.716457][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 455.721531][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 455.723705][ T13] usb 5-1: USB disconnect, device number 4 [ 455.727635][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 455.727706][ T4196] ? mark_lock+0x94/0x320 [ 455.727727][ T4196] ? mutex_unlock+0x10/0x10 [ 455.727747][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 455.754231][ T4196] ? lock_chain_count+0x20/0x20 [ 455.759131][ T4196] ? __rwlock_init+0x140/0x140 [ 455.763935][ T4196] hci_event_packet+0xe0b/0x1310 [ 455.768926][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 455.773823][ T4196] ? rcu_lock_release+0x20/0x20 [ 455.778721][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 455.784043][ T4196] hci_rx_work+0x255/0xa10 [ 455.788508][ T4196] process_one_work+0x867/0xff0 [ 455.793443][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 455.799198][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 455.804518][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 455.809574][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 455.815163][ T4196] ? wq_worker_running+0x97/0x170 [ 455.820228][ T4196] worker_thread+0xad7/0x12a0 [ 455.824966][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 455.831084][ T4196] kthread+0x42e/0x520 [ 455.835197][ T4196] ? rcu_lock_release+0x20/0x20 [ 455.840186][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 455.844815][ T4196] ret_from_fork+0x1f/0x30 [ 455.849285][ T4196] [ 455.852395][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.031409][ T4196] kobject_add_internal failed for hci2:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 456.045169][ T4196] Bluetooth: hci2: failed to register connection device [ 458.097513][ T4199] Bluetooth: hci2: command 0x2016 tx timeout [ 462.080571][ T8106] loop4: detected capacity change from 0 to 2048 [ 462.274383][ T8109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 462.639425][ T8115] loop1: detected capacity change from 0 to 4096 [ 462.672621][ T8106] syz.4.1020 (8106) used greatest stack depth: 20144 bytes left [ 462.774419][ T8115] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 466.221274][ T4832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 466.737563][ T4832] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 466.852456][ T4832] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 467.043366][ T4832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 467.205902][ T4832] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 467.610547][ T4199] Bluetooth: hci2: command 0x0405 tx timeout [ 467.937493][ T4832] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 467.946952][ T4832] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 467.950420][ T8161] loop5: detected capacity change from 0 to 4096 [ 467.977379][ T4832] usb 2-1: Product: syz [ 468.311819][ T8161] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 468.711340][ T4832] usb 2-1: Manufacturer: syz [ 468.847375][ T4832] usb 2-1: can't set config #1, error -71 [ 468.859878][ T4832] usb 2-1: USB disconnect, device number 2 [ 470.957381][ T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 471.134325][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 471.467729][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 471.588035][ T13] usb 5-1: config 252 has an invalid interface number: 2 but max is 0 [ 471.713438][ T13] usb 5-1: config 252 has no interface number 0 [ 471.867858][ T13] usb 5-1: config 252 interface 2 has no altsetting 0 [ 472.177635][ T4832] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 472.187607][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.5d [ 472.208777][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.216920][ T13] usb 5-1: Product: syz [ 472.227366][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 472.262817][ T13] usb 5-1: Manufacturer: syz [ 472.278788][ T13] usb 5-1: SerialNumber: syz [ 472.377549][ T4229] usb 2-1: config 4 has an invalid interface number: 8 but max is 0 [ 472.386047][ T4229] usb 2-1: config 4 has no interface number 0 [ 472.393726][ T4229] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 472.417381][ T4229] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 472.437304][ T4229] usb 2-1: config 4 interface 8 has no altsetting 0 [ 472.613827][ T4832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 472.617478][ T4229] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 472.637377][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.645557][ T4229] usb 2-1: Product: syz [ 472.657305][ T4229] usb 2-1: Manufacturer: syz [ 472.661959][ T4229] usb 2-1: SerialNumber: syz [ 472.666757][ T13] apple-mfi-fastcharge 5-1: USB disconnect, device number 5 [ 472.727779][ T4832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.755604][ T4832] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 472.775188][ T4832] usb 4-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 9325, setting to 1024 [ 472.792931][ T4832] usb 4-1: config 1 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.817573][ T4832] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 472.925158][ T8194] udc-core: couldn't find an available UDC or it's busy [ 472.942882][ T8194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 472.966607][ T8194] udc-core: couldn't find an available UDC or it's busy [ 472.982501][ T8194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 472.997439][ T4832] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 473.016944][ T4832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.025545][ T4832] usb 4-1: Product: syz [ 473.036693][ T4832] usb 4-1: Manufacturer: syz [ 473.041733][ T4832] usb 4-1: SerialNumber: syz [ 473.230862][ T8194] udc-core: couldn't find an available UDC or it's busy [ 473.247359][ T8194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 473.551489][ T8194] udc-core: couldn't find an available UDC or it's busy [ 473.577531][ T8194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 473.598677][ T8194] udc-core: couldn't find an available UDC or it's busy [ 473.626188][ T8194] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 473.670075][ T4832] usb 4-1: 1:2 : no or invalid class specific endpoint descriptor [ 473.687390][ T4832] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 473.740271][ T4832] usb 4-1: unit 2 not found! [ 473.776857][ T4832] usb 4-1: unit 8 not found! [ 473.828940][ T4229] opticon 2-1:4.8: opticon converter detected [ 473.840778][ T4229] usb 2-1: opticon converter now attached to ttyUSB0 [ 474.372688][ T4832] usb 4-1: USB disconnect, device number 6 [ 474.608012][ T4229] usb 2-1: USB disconnect, device number 3 [ 474.649987][ T4229] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 474.680352][ T4229] opticon 2-1:4.8: device disconnected [ 477.571584][ T8238] loop1: detected capacity change from 0 to 4096 [ 477.637531][ T4228] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 477.710005][ T8238] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 478.777402][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.794195][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.772477][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 479.782150][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 479.789702][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.799777][ T4196] Workqueue: hci4 hci_rx_work [ 479.804462][ T4196] Call Trace: [ 479.807736][ T4196] [ 479.810663][ T4196] dump_stack_lvl+0x188/0x250 [ 479.815375][ T4196] ? show_regs_print_info+0x20/0x20 [ 479.820564][ T4196] ? load_image+0x410/0x410 [ 479.825089][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 479.830281][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 479.834955][ T4196] ? kthread+0x42e/0x520 [ 479.839191][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 479.844389][ T4196] kobject_add_internal+0x5ba/0xcd0 [ 479.849588][ T4196] kobject_add+0x160/0x230 [ 479.854012][ T4196] ? kobject_init+0x1c0/0x1c0 [ 479.858713][ T4196] ? __raw_spin_lock_init+0x41/0x100 [ 479.864012][ T4196] ? klist_children_get+0x50/0x50 [ 479.869052][ T4196] ? get_device_parent+0x121/0x3e0 [ 479.874155][ T4196] device_add+0x470/0x1050 [ 479.878559][ T4196] ? device_initialize+0x2a5/0x4d0 [ 479.883850][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 479.888787][ T4196] le_conn_complete_evt+0xc2e/0x14d0 [ 479.894100][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 479.899214][ T4196] ? __mutex_trylock_common+0x15c/0x260 [ 479.904754][ T4196] hci_le_meta_evt+0x285/0x3ca0 [ 479.909608][ T4196] ? hci_event_packet+0x363/0x1310 [ 479.914710][ T4196] ? __lock_acquire+0x7b50/0x7b50 [ 479.919752][ T4196] ? hci_remote_host_features_evt+0x240/0x240 [ 479.925821][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 479.931448][ T4196] ? mark_lock+0x94/0x320 [ 479.935791][ T4196] ? mutex_unlock+0x10/0x10 [ 479.940293][ T4196] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 479.946372][ T4196] ? lock_chain_count+0x20/0x20 [ 479.951228][ T4196] ? __rwlock_init+0x140/0x140 [ 479.955984][ T4196] hci_event_packet+0xe0b/0x1310 [ 479.960918][ T4196] ? _raw_spin_unlock+0x40/0x40 [ 479.965784][ T4196] ? rcu_lock_release+0x20/0x20 [ 479.970628][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 479.975842][ T4196] hci_rx_work+0x255/0xa10 [ 479.980274][ T4196] process_one_work+0x867/0xff0 [ 479.985312][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 479.987456][ T4228] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 479.990940][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 480.005337][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 480.010570][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 480.016135][ T4196] ? wq_worker_running+0x97/0x170 [ 480.021184][ T4196] worker_thread+0xad7/0x12a0 [ 480.025879][ T4196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 480.031797][ T4196] kthread+0x42e/0x520 [ 480.035859][ T4196] ? rcu_lock_release+0x20/0x20 [ 480.037585][ T4199] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 480.040709][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 480.052768][ T4196] ret_from_fork+0x1f/0x30 [ 480.057203][ T4196] [ 480.062822][ T4196] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 480.076214][ T4196] Bluetooth: hci4: failed to register connection device [ 480.207511][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.215598][ T4228] usb 5-1: Product: syz [ 480.225771][ T4228] usb 5-1: Manufacturer: syz [ 480.231382][ T4228] usb 5-1: SerialNumber: syz [ 480.758868][ T4228] usb 5-1: can't set config #1, error -71 [ 480.885985][ T4228] usb 5-1: USB disconnect, device number 6 [ 481.047669][ T4199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 481.102473][ T4199] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 481.143800][ T4199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.173143][ T4199] usb 4-1: config 0 descriptor?? [ 481.199340][ T8253] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 481.663707][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.684709][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.700501][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.716367][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.732388][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.747397][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.763546][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.771714][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.779739][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.789347][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.802989][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.812776][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.837132][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.848080][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.856018][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.871555][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.882249][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.891659][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.899973][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.908032][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.915722][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.923803][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.931973][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.940123][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.948208][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.956063][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.964059][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.972180][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 481.980135][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.007327][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.025664][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.044404][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.062424][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.078198][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.096358][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.097360][ T4232] Bluetooth: hci4: command 0x2016 tx timeout [ 482.115268][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.133597][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.152167][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.170935][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.200895][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.221346][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.237823][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.256167][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.274799][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.314634][ T8279] loop5: detected capacity change from 0 to 4096 [ 482.321280][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.353697][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.365830][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.376422][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.388714][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.396229][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.419170][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.432271][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.440450][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.448837][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.456533][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.461070][ T8279] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.464373][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.482986][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.490840][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.498585][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.507161][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.515003][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.522731][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.535470][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.629227][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 482.708527][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.716754][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.734757][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.742417][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.750062][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.757824][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.765407][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.772985][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 482.877763][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 483.015332][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 483.025968][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 483.033649][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.043962][ T146] Workqueue: hci3 hci_rx_work [ 483.048692][ T146] Call Trace: [ 483.052096][ T146] [ 483.055052][ T146] dump_stack_lvl+0x188/0x250 [ 483.059769][ T146] ? show_regs_print_info+0x20/0x20 [ 483.065075][ T146] ? load_image+0x410/0x410 [ 483.069616][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 483.074845][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 483.079631][ T146] ? kthread+0x42e/0x520 [ 483.083906][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 483.089500][ T146] kobject_add_internal+0x5ba/0xcd0 [ 483.094730][ T146] kobject_add+0x160/0x230 [ 483.099174][ T146] ? kobject_init+0x1c0/0x1c0 [ 483.103879][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 483.109187][ T146] ? klist_children_get+0x50/0x50 [ 483.114232][ T146] ? get_device_parent+0x121/0x3e0 [ 483.119366][ T146] device_add+0x470/0x1050 [ 483.123804][ T146] ? device_initialize+0x2a5/0x4d0 [ 483.128955][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 483.133919][ T146] le_conn_complete_evt+0xc2e/0x14d0 [ 483.139405][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 483.144568][ T146] ? __mutex_trylock_common+0x15c/0x260 [ 483.150143][ T146] hci_le_meta_evt+0x285/0x3ca0 [ 483.155026][ T146] ? hci_event_packet+0x363/0x1310 [ 483.158716][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.160158][ T146] ? __lock_acquire+0x7b50/0x7b50 [ 483.167623][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.172579][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 483.186112][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 483.191831][ T146] ? mark_lock+0x94/0x320 [ 483.196198][ T146] ? mutex_unlock+0x10/0x10 [ 483.197297][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.200736][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 483.200765][ T146] ? lock_chain_count+0x20/0x20 [ 483.219014][ T146] ? __rwlock_init+0x140/0x140 [ 483.223829][ T146] hci_event_packet+0xe0b/0x1310 [ 483.228893][ T146] ? _raw_spin_unlock+0x40/0x40 [ 483.233791][ T146] ? rcu_lock_release+0x20/0x20 [ 483.238778][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 483.244022][ T146] hci_rx_work+0x255/0xa10 [ 483.248490][ T146] process_one_work+0x867/0xff0 [ 483.253409][ T146] ? worker_detach_from_pool+0x240/0x240 [ 483.259082][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 483.264411][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 483.267325][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.270388][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 483.270423][ T146] ? wq_worker_running+0x97/0x170 [ 483.270448][ T146] worker_thread+0xad7/0x12a0 [ 483.293244][ T146] kthread+0x42e/0x520 [ 483.297538][ T146] ? rcu_lock_release+0x20/0x20 [ 483.302517][ T146] ? kthread_blkcg+0xd0/0xd0 [ 483.307146][ T146] ret_from_fork+0x1f/0x30 [ 483.311632][ T146] [ 483.315034][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.328759][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 483.343858][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.344689][ T146] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 483.365158][ T146] Bluetooth: hci3: failed to register connection device [ 483.442940][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.447474][ T4232] usb 2-1: config 1 has an invalid interface number: 153 but max is 0 [ 483.451259][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.466971][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.474771][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.478597][ T4232] usb 2-1: config 1 has no interface number 0 [ 483.483927][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.498031][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.505631][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.514070][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.517373][ T4232] usb 2-1: config 1 interface 153 has no altsetting 0 [ 483.522183][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.537408][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.545000][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.552862][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.560814][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.577348][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.595126][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.605236][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.613811][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.621965][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.637474][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.647600][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.655112][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.664411][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.672791][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.680730][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.688747][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.696267][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.704239][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.712186][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.720501][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.729438][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.734384][ T4232] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=cc.c5 [ 483.737028][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.754222][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.762106][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.768895][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.769973][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.791622][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.793581][ T4232] usb 2-1: Product: syz [ 483.806344][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.810021][ T4232] usb 2-1: Manufacturer: syz [ 483.819801][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.834541][ T4232] usb 2-1: SerialNumber: syz [ 483.837513][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.849401][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.860983][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.876548][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.894667][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.902578][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.917488][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.935267][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.955589][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.967306][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.974797][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.982787][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.990605][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 483.998477][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.006096][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.014375][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.022380][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.031068][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.039821][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.047781][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.055583][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.064107][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.072183][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.080220][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.088383][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.096178][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.099016][ T8283] udc-core: couldn't find an available UDC or it's busy [ 484.104274][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.118909][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.126523][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.134501][ T8283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 484.143367][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.151446][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.159456][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.169200][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.180160][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.188651][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.196431][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.196874][ T8283] udc-core: couldn't find an available UDC or it's busy [ 484.213352][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.221607][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.229629][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.237636][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.239543][ T8283] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 484.246046][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.260958][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.268953][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.276794][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.285106][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.293240][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.301483][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.309663][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.317565][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.325298][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.333395][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.341583][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.350339][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.358300][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.365865][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.373940][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.381909][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.390035][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.390712][ T4232] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 484.398057][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.413429][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.415777][ T4232] visor 2-1:1.153: missing endpoints [ 484.421473][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.434342][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.442330][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.451196][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.455687][ T4232] usb 2-1: USB disconnect, device number 4 [ 484.468906][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.487947][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.501253][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.509867][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.518109][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.525988][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.534636][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.542730][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.551638][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.559636][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.567487][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.575268][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.583907][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.591986][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.599928][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.608033][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.615790][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.624026][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.632223][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.640456][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.648343][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.657737][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.666198][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.674502][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.682361][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.690440][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.698874][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.706587][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.714537][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.722500][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.730377][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.738486][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.746046][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.754920][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.763048][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.771084][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.778952][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.786706][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.794824][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.802863][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.810845][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.819155][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.826734][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.835225][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.843107][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.851122][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.859395][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.867192][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.874773][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.882898][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.891178][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.898973][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.906650][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.914405][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.922115][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.929852][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.955362][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.974295][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.988664][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 484.996480][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.009476][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.027142][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.035242][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.052214][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.063533][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.115083][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.178766][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.186392][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.194593][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.202764][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.210643][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.218488][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.226277][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.233895][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.241489][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.249147][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.256706][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.265133][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.273699][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.281335][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.289319][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.296897][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.304996][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.312994][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.321000][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.329033][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.336529][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.344490][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.353052][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.360983][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.369737][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.377996][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.380962][ T4232] Bluetooth: hci3: command 0x2016 tx timeout [ 485.385581][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.399904][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.407938][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.415669][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.423739][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.431662][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.439567][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.447051][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.454991][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.462997][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.471683][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.479669][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.487523][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.495235][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.503502][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.511921][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.520025][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.528057][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.535560][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.543705][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.552651][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.560260][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.568201][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.577110][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.584782][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.592371][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.599989][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.607597][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.615111][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.622816][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.630616][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.638258][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.645873][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.653454][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.661374][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.669814][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.678579][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.686460][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.694046][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.701762][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.709657][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.717141][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.724836][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.732446][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.740161][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.747657][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.755394][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.763030][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.770627][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.779246][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.786905][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.794453][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.801954][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.809605][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.817110][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.824848][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.832560][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.840440][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.848121][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.856021][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.863836][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.871337][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.879768][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.887323][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.894746][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.902447][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.910090][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.917722][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.925307][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.932898][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.941082][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.949067][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.956750][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.964387][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.971996][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.979605][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.988094][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 485.995589][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.003474][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.011099][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.019336][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.026997][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.034595][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.042454][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.050069][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.057704][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.065192][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.072762][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.080424][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.089211][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.096705][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.104573][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.112285][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.119988][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.127893][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.135763][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.143830][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.151784][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.159692][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.167474][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.175040][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.182885][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.191433][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.199338][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.207101][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.215299][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.223523][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.231499][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.239449][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.247529][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.255256][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.263209][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.270934][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.278591][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.286256][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.295023][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.302724][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.310743][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.318823][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.326315][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.334474][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.342513][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.350379][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.358003][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.365490][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.373017][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.380741][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.389041][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.397325][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.405116][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.412839][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.420493][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.428113][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.435703][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.443495][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.451234][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.461337][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.469368][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.477614][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.485217][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.493925][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.501761][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.509878][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.518086][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.526061][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.533727][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.541350][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.549080][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.556828][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.564660][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.572496][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.580210][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.587829][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.596312][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.604011][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.611769][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.619337][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.626792][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.634349][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.641905][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.649521][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.657072][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.664686][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.672504][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.680192][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.687811][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.695268][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.703608][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.711218][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.718855][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.726405][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.733936][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.741653][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.749413][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.757543][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.765028][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.772769][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.780315][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.787952][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.795523][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.803769][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.811484][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.819028][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.826498][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.834058][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.841600][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.849636][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.857798][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.865581][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.873224][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.880774][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.888414][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.895907][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.904250][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.912002][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.919653][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.927153][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.934834][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.942495][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.950222][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.957876][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.965345][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.973789][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.981414][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.989020][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 486.996484][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 487.003956][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 487.012514][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 487.020358][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 487.027988][ T4199] hid-generic 0003:17EF:60EE.0002: unknown main item tag 0x0 [ 487.104950][ T4199] hid-generic 0003:17EF:60EE.0002: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 487.131175][ T4199] usb 4-1: USB disconnect, device number 7 [ 487.399852][ T8314] fido_id[8314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 488.552350][ T8326] loop1: detected capacity change from 0 to 4096 [ 488.577417][ T4232] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 488.671801][ T8326] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.987492][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.037851][ T4232] usb 4-1: not running at top speed; connect to a high speed hub [ 489.127926][ T4232] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 62, changing to 4 [ 489.283702][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 489.574022][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 489.597748][ T4232] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 489.627439][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.647299][ T4230] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 489.657786][ T4232] usb 4-1: Product: ꄻ㈲퇬酲⡊⧎솢朽篽ᡲ펰 [ 489.664600][ T4232] usb 4-1: SerialNumber: syz [ 489.857854][ T13] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 489.875882][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.884898][ T13] usb 5-1: Product: syz [ 489.889503][ T4230] usb 6-1: Using ep0 maxpacket: 32 [ 489.895007][ T13] usb 5-1: Manufacturer: syz [ 489.900108][ T13] usb 5-1: SerialNumber: syz [ 489.916408][ T13] usb 5-1: config 0 descriptor?? [ 489.964754][ T13] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 489.973398][ T13] pctv452e: pctv452e_power_ctrl: 1 [ 489.973398][ T13] [ 489.988384][ T13] usb 5-1: selecting invalid altsetting 3 [ 489.994166][ T13] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 489.994166][ T13] [ 490.007120][ T13] dvb-usb: bulk message failed: -22 (5/0) [ 490.014006][ T4230] usb 6-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 490.042775][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.052482][ T4230] usb 6-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 490.065866][ T4232] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 490.075262][ T4230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 490.085438][ T4230] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 490.929967][ T13] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 490.941746][ T13] usb 5-1: media controller created [ 490.950397][ T13] dvb-usb: bulk message failed: -22 (8/0) [ 490.956630][ T13] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 490.969269][ T4232] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 490.978386][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.992644][ T4230] usb 6-1: config 0 descriptor?? [ 491.001836][ T13] dvb-usb: MAC address reading failed. [ 491.009902][ T4232] usb 4-1: USB disconnect, device number 8 [ 491.038642][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.051923][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 491.188043][ T13] DVB: Unable to find symbol stb0899_attach() [ 491.194345][ T13] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 491.287364][ T4832] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 491.307495][ T13] rc_core: IR keymap rc-tt-1500 not found [ 491.313256][ T13] Registered IR keymap rc-empty [ 491.322270][ T13] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 491.343950][ T13] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 491.370485][ T13] dvb-usb: schedule remote query interval to 100 msecs. [ 491.387307][ T13] pctv452e: pctv452e_power_ctrl: 0 [ 491.387307][ T13] [ 491.394723][ T13] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 491.404537][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 491.500393][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 491.508092][ T13] dvb-usb: error -22 while querying for an remote control event. [ 491.527350][ T4832] usb 2-1: Using ep0 maxpacket: 8 [ 491.627371][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 491.634285][ T13] dvb-usb: error -22 while querying for an remote control event. [ 491.647597][ T4832] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 491.661567][ T4832] usb 2-1: config 179 has no interface number 0 [ 491.675504][ T8337] udc-core: couldn't find an available UDC or it's busy [ 491.686307][ T4832] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 491.701741][ T8337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.712370][ T4832] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 491.725570][ T4832] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.738381][ T4832] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 491.749226][ T4832] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 491.763777][ T4832] usb 2-1: config 179 interface 65 has no altsetting 0 [ 491.771247][ T4832] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 491.781060][ T4832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.791810][ T13] dvb-usb: bulk message failed: -22 (4/0) [ 491.798251][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.819194][ T13] dvb-usb: error -22 while querying for an remote control event. [ 491.828123][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.838580][ T4232] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 491.848369][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.866209][ T4232] usb 4-1: config 0 descriptor?? [ 491.883592][ T4832] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 491.913241][ T8337] udc-core: couldn't find an available UDC or it's busy [ 491.933470][ T8337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.951997][ T4832] dvb-usb: bulk message failed: -22 (4/0) [ 491.959687][ T4832] dvb-usb: error -22 while querying for an remote control event. [ 491.967910][ T8337] udc-core: couldn't find an available UDC or it's busy [ 491.975058][ T8337] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 492.001799][ T4832] usb 5-1: USB disconnect, device number 7 [ 492.042962][ T4230] wacom 0003:056A:00C5.0003: ignoring exceeding usage max [ 492.068917][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.087358][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.105964][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.113727][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.121501][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.130192][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.139550][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.146808][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.154371][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.161831][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.170872][ T8369] udc-core: couldn't find an available UDC or it's busy [ 492.178439][ T4230] wacom 0003:056A:00C5.0003: unknown main item tag 0x0 [ 492.187594][ T8369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 492.241504][ T4230] wacom 0003:056A:00C5.0003: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.5-1/input0 [ 492.260097][ T8344] udc-core: couldn't find an available UDC or it's busy [ 492.281466][ T8344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 492.308428][ T4832] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 492.331372][ T4230] usb 6-1: USB disconnect, device number 4 [ 492.369520][ T4232] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 492.403491][ T4232] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 492.426282][ T4232] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 492.444552][ T4232] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 492.460762][ T4232] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 492.470358][ T8371] fido_id[8371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 492.518068][ T4232] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 492.555790][ T8344] udc-core: couldn't find an available UDC or it's busy [ 492.565421][ T4232] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 492.594040][ T8344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 492.652043][ T4232] usb 4-1: USB disconnect, device number 9 [ 492.762591][ T8373] fido_id[8373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 493.008353][ T8344] udc-core: couldn't find an available UDC or it's busy [ 493.022495][ T8344] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 493.184811][ T8379] loop4: detected capacity change from 0 to 4096 [ 493.379861][ T8379] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 493.391373][ T4232] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 493.489056][ T4230] usb 2-1: USB disconnect, device number 5 [ 493.497508][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 493.510639][ T4230] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 493.917529][ T4232] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.932507][ T4232] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 494.187419][ T4232] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 494.204047][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.224282][ T4232] usb 6-1: Product: syz [ 494.235716][ T4232] usb 6-1: Manufacturer: syz [ 494.248357][ T4232] usb 6-1: SerialNumber: syz [ 494.400728][ T4232] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 494.528564][ T4230] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 495.467309][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 495.547467][ T2857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 495.587629][ T4230] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 495.596098][ T4230] usb 5-1: config 4 has no interface number 0 [ 495.602440][ T4230] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 495.612935][ T4230] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 495.623261][ T4230] usb 5-1: config 4 interface 8 has no altsetting 0 [ 495.789275][ T4230] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 495.798795][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.806800][ T4230] usb 5-1: Product: syz [ 495.807372][ T2857] usb 2-1: Using ep0 maxpacket: 16 [ 495.811033][ T4230] usb 5-1: Manufacturer: syz [ 495.811050][ T4230] usb 5-1: SerialNumber: syz [ 495.837582][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 495.857660][ T4232] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 496.007592][ T2857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 496.070961][ T8391] udc-core: couldn't find an available UDC or it's busy [ 496.084044][ T8391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.087938][ T4199] usb 6-1: USB disconnect, device number 5 [ 496.099559][ T2857] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 7 [ 496.103730][ T8391] udc-core: couldn't find an available UDC or it's busy [ 496.113020][ T2857] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.119856][ T8391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.197572][ T13] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 496.205794][ T13] usb 4-1: config 0 has no interface number 0 [ 496.212408][ T13] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.287679][ T2857] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 496.296874][ T2857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.305035][ T2857] usb 2-1: Product: syz [ 496.309604][ T2857] usb 2-1: Manufacturer: syz [ 496.314314][ T2857] usb 2-1: SerialNumber: syz [ 496.340844][ T8391] udc-core: couldn't find an available UDC or it's busy [ 496.348024][ T8391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.377486][ T13] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 496.386949][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.401139][ T13] usb 4-1: Product: syz [ 496.405351][ T13] usb 4-1: Manufacturer: syz [ 496.412584][ T13] usb 4-1: SerialNumber: syz [ 496.434689][ T13] usb 4-1: config 0 descriptor?? [ 496.499020][ T13] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 496.557349][ T8391] udc-core: couldn't find an available UDC or it's busy [ 496.564453][ T8391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.577364][ T8400] udc-core: couldn't find an available UDC or it's busy [ 496.584362][ T8400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.648467][ T4230] opticon 5-1:4.8: opticon converter detected [ 496.658384][ T4230] usb 5-1: opticon converter now attached to ttyUSB0 [ 496.668165][ T4230] usb 5-1: USB disconnect, device number 8 [ 496.690419][ T4230] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 496.699767][ T4230] opticon 5-1:4.8: device disconnected [ 496.713791][ T2857] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 496.715607][ T8402] udc-core: couldn't find an available UDC or it's busy [ 496.729843][ T8402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.747122][ T8402] udc-core: couldn't find an available UDC or it's busy [ 496.754516][ T8402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.764353][ T8402] udc-core: couldn't find an available UDC or it's busy [ 496.771551][ T8402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.781331][ T8402] udc-core: couldn't find an available UDC or it's busy [ 496.789800][ T8402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.811527][ T2857] usb 2-1: USB disconnect, device number 6 [ 496.897627][ T4232] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 496.905258][ T4232] ath9k_htc: Failed to initialize the device [ 496.914170][ T4199] usb 6-1: ath9k_htc: USB layer deinitialized [ 496.999767][ T8402] udc-core: couldn't find an available UDC or it's busy [ 497.007312][ T8402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 497.022783][ T4230] usb 4-1: USB disconnect, device number 10 [ 497.033381][ T4230] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 497.080014][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.242811][ T8414] loop1: detected capacity change from 0 to 4096 [ 497.277357][ T4199] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 497.327160][ T8414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 497.397430][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 497.667459][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 498.724807][ T4199] usb 6-1: device descriptor read/64, error -71 [ 498.877658][ T13] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 498.886494][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 499.057714][ T4199] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 499.937656][ T4199] usb 6-1: Using ep0 maxpacket: 8 [ 500.558280][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 500.572514][ T13] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 500.583834][ T13] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 500.594153][ T13] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.607207][ T13] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.621144][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.657559][ T13] usb 5-1: can't set config #16, error -71 [ 500.664620][ T13] usb 5-1: USB disconnect, device number 9 [ 500.667423][ T4199] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.687766][ T4199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.720924][ T4199] usb 6-1: Product: syz [ 500.746141][ T4199] usb 6-1: config 0 descriptor?? [ 500.787704][ T4199] usb 6-1: can't set config #0, error -71 [ 500.796476][ T4199] usb 6-1: USB disconnect, device number 7 [ 501.107506][ T2857] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 501.242051][ T8452] loop4: detected capacity change from 0 to 4096 [ 501.347327][ T2857] usb 4-1: Using ep0 maxpacket: 32 [ 501.460779][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.482331][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.517544][ T2857] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 501.592780][ T2857] usb 4-1: config 4 has no interface number 0 [ 501.610655][ T8452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.745882][ T2857] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 501.989616][ T2857] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 502.173866][ T2857] usb 4-1: config 4 interface 8 has no altsetting 0 [ 502.347554][ T2857] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 502.356775][ T2857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.415963][ T2857] usb 4-1: Product: syz [ 502.430570][ T2857] usb 4-1: Manufacturer: syz [ 502.445461][ T2857] usb 4-1: SerialNumber: syz [ 502.570741][ T4232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 503.763206][ T8443] udc-core: couldn't find an available UDC or it's busy [ 503.785075][ T8443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 503.802648][ T8443] udc-core: couldn't find an available UDC or it's busy [ 503.815001][ T8443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.129353][ T8443] udc-core: couldn't find an available UDC or it's busy [ 504.152200][ T8443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.408991][ T8443] udc-core: couldn't find an available UDC or it's busy [ 504.445532][ T8443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 504.875099][ T2857] opticon 4-1:4.8: opticon converter detected [ 504.907718][ T2857] usb 4-1: opticon converter now attached to ttyUSB0 [ 504.973521][ T4232] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 504.982342][ T4232] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 504.992769][ T4232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.001889][ T4232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 505.028068][ T4232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 505.122606][ T2857] usb 4-1: USB disconnect, device number 11 [ 505.133477][ T2857] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 505.148368][ T2857] opticon 4-1:4.8: device disconnected [ 505.604991][ T8481] udc-core: couldn't find an available UDC or it's busy [ 505.678205][ T8481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 505.987652][ T4232] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 507.314322][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 507.401840][ T4232] usb 2-1: Product: syz [ 507.471635][ T4232] usb 2-1: Manufacturer: syz [ 507.811362][ T4232] usb 2-1: can't set config #1, error -71 [ 507.823935][ T4232] usb 2-1: USB disconnect, device number 7 [ 508.664613][ T2857] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 508.686089][ T8493] sctp: failed to load transform for md5: -2 [ 508.907519][ T2857] usb 5-1: Using ep0 maxpacket: 32 [ 509.048800][ T2857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.187110][ T2857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.217671][ T2857] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.439287][ T2857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.457591][ T2857] usb 5-1: config 0 descriptor?? [ 509.500333][ T2857] hub 5-1:0.0: USB hub found [ 509.734605][ T4232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 509.737398][ T2857] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 510.544068][ T2857] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 510.592844][ T2857] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 510.740231][ T8527] loop5: detected capacity change from 0 to 4096 [ 510.797995][ T8527] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 510.933746][ T13] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 511.124650][ T4232] usb 2-1: device not accepting address 8, error -71 [ 511.461047][ T8506] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 511.517729][ T4228] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 511.777467][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 511.917577][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.025077][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.142282][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.286179][ T4228] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 512.313367][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.408279][ T4230] usb 5-1: USB disconnect, device number 10 [ 512.448520][ T4228] usb 6-1: config 0 descriptor?? [ 512.769829][ T8546] udc-core: couldn't find an available UDC or it's busy [ 512.776885][ T8546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.108346][ T4228] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input12 [ 513.367298][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.090377][ T8574] loop4: detected capacity change from 0 to 4096 [ 514.127827][ T4228] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 514.179817][ T4228] usb 6-1: USB disconnect, device number 8 [ 514.207523][ T13] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 514.226046][ T13] usb 4-1: can't read configurations, error -71 [ 514.251751][ T8574] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 514.493002][ T8584] tipc: Enabling of bearer rejected, failed to enable media [ 514.876784][ T8587] fido_id[8587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 516.246829][ T8619] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.130539][ T8621] loop4: detected capacity change from 0 to 4096 [ 517.271694][ T8621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.296521][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.544760][ T8640] device syzkaller0 entered promiscuous mode [ 520.897572][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 520.914351][ T8659] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.923716][ T8659] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.932611][ T8659] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.941385][ T8659] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.117382][ T4659] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 521.128931][ T8659] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.138105][ T8659] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.147013][ T8659] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.156041][ T8659] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.451114][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 522.657364][ T4659] usb 5-1: Using ep0 maxpacket: 32 [ 522.668318][ T8659] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.677511][ T8659] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.686466][ T8659] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.695544][ T8659] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.720883][ T8659] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.730194][ T8659] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.739140][ T8659] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.748925][ T8659] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.827501][ T4659] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 522.837583][ T4659] usb 5-1: config 0 has no interface number 0 [ 522.843808][ T4659] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.868264][ T4659] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 523.070772][ T4659] usb 5-1: config 0 interface 85 has no altsetting 0 [ 523.727665][ T4232] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 523.767399][ T4659] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 523.920223][ T4659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.938288][ T4659] usb 5-1: Product: syz [ 523.948060][ T4659] usb 5-1: Manufacturer: syz [ 523.952726][ T4659] usb 5-1: SerialNumber: syz [ 523.983768][ T4659] usb 5-1: config 0 descriptor?? [ 524.007680][ T4659] usb 5-1: can't set config #0, error -71 [ 524.018240][ T4659] usb 5-1: USB disconnect, device number 11 [ 524.296743][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.307707][ T4232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 524.357377][ T4232] usb 6-1: not running at top speed; connect to a high speed hub [ 524.447717][ T4232] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 524.460363][ T4232] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 524.472924][ T4232] usb 6-1: config 14 has no interface number 0 [ 524.482548][ T4232] usb 6-1: config 14 has no interface number 1 [ 524.493912][ T4232] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 524.512162][ T4232] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 524.526075][ T4232] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 524.545453][ T4232] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 524.559680][ T4232] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 524.575837][ T4232] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.600342][ T4232] usb 6-1: config 14 interface 57 has no altsetting 0 [ 524.616071][ T4232] usb 6-1: config 14 interface 228 has no altsetting 0 [ 524.777455][ T4232] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 524.802106][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.657859][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.677095][ T4232] usb 6-1: Product: syz [ 525.681415][ T4232] usb 6-1: Manufacturer: syz [ 525.686039][ T4232] usb 6-1: SerialNumber: syz [ 525.735533][ T8694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.881500][ T4232] legousbtower 6-1:14.57: interrupt endpoints not found [ 525.968653][ T4232] legousbtower 6-1:14.228: interrupt endpoints not found [ 525.989346][ T4232] usb 6-1: USB disconnect, device number 9 [ 526.430935][ T8694] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.441359][ T8694] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.450678][ T8694] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.459680][ T8694] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.497378][ T4232] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 526.917302][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 527.927392][ T4232] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 527.943241][ T4232] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.953680][ T4232] usb 6-1: config 0 has no interface number 0 [ 527.959824][ T4232] usb 6-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 528.689869][ T4232] usb 6-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 528.703224][ T4232] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 528.712389][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.880383][ T4232] usb 6-1: config 0 descriptor?? [ 528.937549][ T4232] usb 6-1: can't set config #0, error -71 [ 528.948831][ T4232] usb 6-1: USB disconnect, device number 10 [ 528.962619][ T8761] tipc: Enabling of bearer rejected, failed to enable media [ 532.927554][ T8766] loop3: detected capacity change from 0 to 256 [ 532.971972][ T8766] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.983385][ T8766] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 533.007351][ T8766] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 533.146184][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 534.667318][ T4232] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 536.155046][ T4232] usb 5-1: config 3 interface 0 has no altsetting 0 [ 537.591231][ T8830] netlink: 'syz.1.1232': attribute type 1 has an invalid length. [ 537.617403][ T8830] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1232'. [ 537.691498][ T8836] team0: Device xfrm0 is of different type [ 537.867464][ T4232] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 537.886897][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.359763][ T8843] device syzkaller0 entered promiscuous mode [ 539.277518][ T4232] usb 5-1: can't set config #3, error -71 [ 539.337258][ T4232] usb 5-1: USB disconnect, device number 12 [ 540.897395][ T4228] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 541.227321][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 542.086530][ T4228] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 542.094895][ T4228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.106118][ T4228] usb 6-1: config 0 has no interface number 0 [ 542.112652][ T4228] usb 6-1: config 0 interface 126 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 542.123716][ T4228] usb 6-1: config 0 interface 126 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 542.144272][ T4228] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 542.164872][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.371891][ T4228] usb 6-1: config 0 descriptor?? [ 543.654369][ T4228] snd-usb-audio: probe of 6-1:0.126 failed with error -2 [ 543.722278][ T4228] usb 6-1: USB disconnect, device number 11 [ 543.880554][ T8925] device syzkaller0 entered promiscuous mode [ 544.188205][ T8879] udevd[8879]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.607363][ T8937] device syzkaller0 entered promiscuous mode [ 545.722783][ T8957] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 546.106214][ T8975] device syzkaller0 entered promiscuous mode [ 548.094209][ T9018] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 548.109751][ T9018] netdevsim netdevsim5: Falling back to sysfs fallback for: ÿ [ 549.245410][ T9035] device syzkaller0 entered promiscuous mode [ 550.828687][ T4232] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 550.984572][ T9060] device syzkaller1 entered promiscuous mode [ 551.211524][ T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 551.221207][ T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 551.228699][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.238778][ T146] Workqueue: hci3 hci_rx_work [ 551.243507][ T146] Call Trace: [ 551.246799][ T146] [ 551.249770][ T146] dump_stack_lvl+0x188/0x250 [ 551.254478][ T146] ? show_regs_print_info+0x20/0x20 [ 551.259706][ T146] ? load_image+0x410/0x410 [ 551.264244][ T146] sysfs_create_dir_ns+0x26a/0x290 [ 551.269378][ T146] ? sysfs_warn_dup+0xa0/0xa0 [ 551.274084][ T146] ? kthread+0x42e/0x520 [ 551.278356][ T146] ? do_raw_spin_unlock+0x11d/0x230 [ 551.283578][ T146] kobject_add_internal+0x5ba/0xcd0 [ 551.288814][ T146] kobject_add+0x160/0x230 [ 551.293277][ T146] ? kobject_init+0x1c0/0x1c0 [ 551.298098][ T146] ? __raw_spin_lock_init+0x41/0x100 [ 551.303415][ T146] ? klist_children_get+0x50/0x50 [ 551.308498][ T146] ? get_device_parent+0x121/0x3e0 [ 551.313641][ T146] device_add+0x470/0x1050 [ 551.318085][ T146] ? device_initialize+0x2a5/0x4d0 [ 551.323305][ T146] hci_conn_add_sysfs+0xd1/0x1e0 [ 551.328360][ T146] le_conn_complete_evt+0xc2e/0x14d0 [ 551.333766][ T146] ? cs_le_create_conn+0x5e0/0x5e0 [ 551.338907][ T146] ? __mutex_trylock_common+0x15c/0x260 [ 551.344516][ T146] hci_le_meta_evt+0x285/0x3ca0 [ 551.349427][ T146] ? hci_event_packet+0x363/0x1310 [ 551.354561][ T146] ? __lock_acquire+0x7b50/0x7b50 [ 551.359617][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 551.365708][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 551.371361][ T146] ? mark_lock+0x94/0x320 [ 551.375710][ T146] ? mutex_unlock+0x10/0x10 [ 551.380237][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 551.386348][ T146] ? lock_chain_count+0x20/0x20 [ 551.391222][ T146] ? __rwlock_init+0x140/0x140 [ 551.396010][ T146] hci_event_packet+0xe0b/0x1310 [ 551.400976][ T146] ? _raw_spin_unlock+0x40/0x40 [ 551.405846][ T146] ? rcu_lock_release+0x20/0x20 [ 551.410721][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 551.416029][ T146] hci_rx_work+0x255/0xa10 [ 551.420571][ T146] process_one_work+0x867/0xff0 [ 551.425459][ T146] ? worker_detach_from_pool+0x240/0x240 [ 551.431113][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 551.436422][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 551.441492][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 551.447093][ T146] ? wq_worker_running+0x97/0x170 [ 551.452138][ T146] worker_thread+0xad7/0x12a0 [ 551.456982][ T146] kthread+0x42e/0x520 [ 551.461077][ T146] ? rcu_lock_release+0x20/0x20 [ 551.465952][ T146] ? kthread_blkcg+0xd0/0xd0 [ 551.470562][ T146] ret_from_fork+0x1f/0x30 [ 551.475019][ T146] [ 551.488374][ T146] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 551.502030][ T146] Bluetooth: hci3: failed to register connection device [ 551.560712][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 551.632205][ T9072] loop4: detected capacity change from 0 to 4096 [ 551.697426][ T4232] usb 6-1: config 4 has an invalid interface number: 8 but max is 0 [ 551.718270][ T4232] usb 6-1: config 4 has no interface number 0 [ 551.731314][ T9072] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 551.742654][ T4232] usb 6-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 551.787933][ T4232] usb 6-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 551.965344][ T4232] usb 6-1: config 4 interface 8 has no altsetting 0 [ 552.855986][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 552.928166][ C1] Unknown status report in ack skb [ 552.928183][ T4232] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 553.007460][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.032864][ T4232] usb 6-1: Product: syz [ 553.043229][ T4232] usb 6-1: Manufacturer: syz [ 553.048080][ T4232] usb 6-1: SerialNumber: syz [ 553.072149][ T9101] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1313'. [ 553.133742][ T9101] tipc: Invalid UDP bearer configuration [ 553.133787][ T9101] tipc: Enabling of bearer rejected, failed to enable media [ 553.582158][ T4228] Bluetooth: hci3: command 0x2016 tx timeout [ 553.812567][ T9069] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:8393' [ 553.822584][ T9069] CPU: 0 PID: 9069 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 553.830155][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.840325][ T9069] Workqueue: hci3 hci_rx_work [ 553.845049][ T9069] Call Trace: [ 553.848448][ T9069] [ 553.851398][ T9069] dump_stack_lvl+0x188/0x250 [ 553.856105][ T9069] ? show_regs_print_info+0x20/0x20 [ 553.861415][ T9069] ? load_image+0x410/0x410 [ 553.865980][ T9069] sysfs_create_dir_ns+0x26a/0x290 [ 553.871125][ T9069] ? sysfs_warn_dup+0xa0/0xa0 [ 553.875823][ T9069] ? kthread+0x42e/0x520 [ 553.880091][ T9069] ? do_raw_spin_unlock+0x11d/0x230 [ 553.885315][ T9069] kobject_add_internal+0x5ba/0xcd0 [ 553.890544][ T9069] kobject_add+0x160/0x230 [ 553.895001][ T9069] ? kobject_init+0x1c0/0x1c0 [ 553.899709][ T9069] ? __raw_spin_lock_init+0x41/0x100 [ 553.905021][ T9069] ? klist_children_get+0x50/0x50 [ 553.910155][ T9069] ? get_device_parent+0x121/0x3e0 [ 553.915292][ T9069] device_add+0x470/0x1050 [ 553.919729][ T9069] ? device_initialize+0x2a5/0x4d0 [ 553.924972][ T9069] hci_conn_add_sysfs+0xd1/0x1e0 [ 553.929943][ T9069] le_conn_complete_evt+0xc2e/0x14d0 [ 553.935280][ T9069] ? cs_le_create_conn+0x5e0/0x5e0 [ 553.940544][ T9069] ? __mutex_trylock_common+0x15c/0x260 [ 553.946301][ T9069] hci_le_meta_evt+0x285/0x3ca0 [ 553.951192][ T9069] ? hci_event_packet+0x363/0x1310 [ 553.956420][ T9069] ? __lock_acquire+0x7b50/0x7b50 [ 553.961479][ T9069] ? hci_remote_host_features_evt+0x240/0x240 [ 553.967673][ T9069] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 553.973326][ T9069] ? mark_lock+0x94/0x320 [ 553.977675][ T9069] ? mutex_unlock+0x10/0x10 [ 553.982207][ T9069] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 553.988301][ T9069] ? lock_chain_count+0x20/0x20 [ 553.993175][ T9069] ? __rwlock_init+0x140/0x140 [ 553.997969][ T9069] hci_event_packet+0xe0b/0x1310 [ 554.002937][ T9069] ? _raw_spin_unlock+0x40/0x40 [ 554.007821][ T9069] ? rcu_lock_release+0x20/0x20 [ 554.012706][ T9069] ? hci_send_to_monitor+0x9c/0x4a0 [ 554.017929][ T9069] hci_rx_work+0x255/0xa10 [ 554.022388][ T9069] process_one_work+0x867/0xff0 [ 554.027361][ T9069] ? worker_detach_from_pool+0x240/0x240 [ 554.033019][ T9069] ? lockdep_hardirqs_off+0x70/0x100 [ 554.038355][ T9069] ? _raw_spin_lock_irq+0xb7/0xf0 [ 554.043496][ T9069] ? _raw_spin_lock_irqsave+0x100/0x100 [ 554.049189][ T9069] ? wq_worker_running+0x97/0x170 [ 554.054669][ T9069] worker_thread+0xad7/0x12a0 [ 554.059594][ T9069] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 554.065797][ T9069] kthread+0x42e/0x520 [ 554.069906][ T9069] ? rcu_lock_release+0x20/0x20 [ 554.074957][ T9069] ? kthread_blkcg+0xd0/0xd0 [ 554.079857][ T9069] ret_from_fork+0x1f/0x30 [ 554.084510][ T9069] [ 554.089812][ T9049] udc-core: couldn't find an available UDC or it's busy [ 554.101240][ T9069] kobject_add_internal failed for hci3:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 554.115847][ T9069] Bluetooth: hci3: failed to register connection device [ 554.127159][ T9049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 554.148232][ T9049] udc-core: couldn't find an available UDC or it's busy [ 554.173230][ T9049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 554.431999][ T9049] udc-core: couldn't find an available UDC or it's busy [ 554.450536][ T9049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 554.721315][ T9049] udc-core: couldn't find an available UDC or it's busy [ 554.755448][ T9049] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 554.990372][ T4232] opticon 6-1:4.8: opticon converter detected [ 555.099416][ T4232] usb 6-1: opticon converter now attached to ttyUSB0 [ 555.195984][ T4232] usb 6-1: USB disconnect, device number 12 [ 555.252992][ T4232] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 555.282924][ T4232] opticon 6-1:4.8: device disconnected [ 555.948064][ T9148] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1324'. [ 556.362263][ T4232] Bluetooth: hci3: command 0x2016 tx timeout [ 557.747683][ T9069] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:8393' [ 557.757557][ T9069] CPU: 1 PID: 9069 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 557.765130][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 557.775204][ T9069] Workqueue: hci4 hci_rx_work [ 557.779916][ T9069] Call Trace: [ 557.783217][ T9069] [ 557.786252][ T9069] dump_stack_lvl+0x188/0x250 [ 557.790963][ T9069] ? show_regs_print_info+0x20/0x20 [ 557.796201][ T9069] ? load_image+0x410/0x410 [ 557.800841][ T9069] sysfs_create_dir_ns+0x26a/0x290 [ 557.805982][ T9069] ? sysfs_warn_dup+0xa0/0xa0 [ 557.810673][ T9069] ? kthread+0x42e/0x520 [ 557.814942][ T9069] ? do_raw_spin_unlock+0x11d/0x230 [ 557.820169][ T9069] kobject_add_internal+0x5ba/0xcd0 [ 557.825419][ T9069] kobject_add+0x160/0x230 [ 557.829879][ T9069] ? kobject_init+0x1c0/0x1c0 [ 557.834960][ T9069] ? __raw_spin_lock_init+0x41/0x100 [ 557.840284][ T9069] ? klist_children_get+0x50/0x50 [ 557.845342][ T9069] ? get_device_parent+0x121/0x3e0 [ 557.850486][ T9069] device_add+0x470/0x1050 [ 557.854916][ T9069] ? device_initialize+0x2a5/0x4d0 [ 557.860021][ T9069] hci_conn_add_sysfs+0xd1/0x1e0 [ 557.865058][ T9069] le_conn_complete_evt+0xc2e/0x14d0 [ 557.870491][ T9069] ? cs_le_create_conn+0x5e0/0x5e0 [ 557.875613][ T9069] ? __mutex_trylock_common+0x15c/0x260 [ 557.881275][ T9069] hci_le_meta_evt+0x285/0x3ca0 [ 557.886220][ T9069] ? hci_event_packet+0x363/0x1310 [ 557.891330][ T9069] ? __lock_acquire+0x7b50/0x7b50 [ 557.896444][ T9069] ? hci_remote_host_features_evt+0x240/0x240 [ 557.902506][ T9069] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 557.908136][ T9069] ? mark_lock+0x94/0x320 [ 557.912456][ T9069] ? mutex_unlock+0x10/0x10 [ 557.916948][ T9069] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 557.922923][ T9069] ? lock_chain_count+0x20/0x20 [ 557.927853][ T9069] ? __rwlock_init+0x140/0x140 [ 557.932622][ T9069] hci_event_packet+0xe0b/0x1310 [ 557.937588][ T9069] ? _raw_spin_unlock+0x40/0x40 [ 557.942454][ T9069] ? rcu_lock_release+0x20/0x20 [ 557.947300][ T9069] ? hci_send_to_monitor+0x9c/0x4a0 [ 557.952504][ T9069] hci_rx_work+0x255/0xa10 [ 557.956919][ T9069] process_one_work+0x867/0xff0 [ 557.961787][ T9069] ? worker_detach_from_pool+0x240/0x240 [ 557.967412][ T9069] ? lockdep_hardirqs_off+0x70/0x100 [ 557.972745][ T9069] ? _raw_spin_lock_irq+0xb7/0xf0 [ 557.977778][ T9069] ? _raw_spin_lock_irqsave+0x100/0x100 [ 557.983407][ T9069] ? wq_worker_running+0x97/0x170 [ 557.988448][ T9069] worker_thread+0xad7/0x12a0 [ 557.993574][ T9069] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 557.999480][ T9069] kthread+0x42e/0x520 [ 558.003556][ T9069] ? rcu_lock_release+0x20/0x20 [ 558.008411][ T9069] ? kthread_blkcg+0xd0/0xd0 [ 558.013005][ T9069] ret_from_fork+0x1f/0x30 [ 558.017469][ T9069] [ 558.020526][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.032261][ T9069] kobject_add_internal failed for hci4:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 558.045848][ T9069] Bluetooth: hci4: failed to register connection device [ 558.724367][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1335'. [ 558.962950][ T9185] team0: Port device team_slave_0 removed [ 559.911459][ T9205] device syzkaller0 entered promiscuous mode [ 560.097322][ T21] Bluetooth: hci4: command 0x2016 tx timeout [ 561.231823][ T9239] xt_hashlimit: size too large, truncated to 1048576 [ 561.239291][ T9236] device syzkaller0 entered promiscuous mode [ 561.699322][ T9183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.931080][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.937499][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.230555][ T9264] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 565.897552][ T9266] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 565.952877][ T9266] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 565.990579][ T9266] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 566.019667][ T9266] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 566.030214][ T9266] bond1: (slave geneve2): making interface the new active one [ 566.039575][ T9266] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 566.061972][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1359'. [ 566.075924][ T9267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.141502][ T9280] tc action pedit 'at' offset 6 out of bounds [ 567.467442][ T9303] netlink: 'syz.5.1368': attribute type 1 has an invalid length. [ 567.475241][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1368'. [ 571.760956][ T9346] netlink: 'syz.5.1381': attribute type 5 has an invalid length. [ 572.027652][ T2857] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 574.456245][ T9366] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 574.465470][ T2857] usb 4-1: Using ep0 maxpacket: 32 [ 574.484742][ T9366] netlink: 'syz.4.1387': attribute type 2 has an invalid length. [ 575.107371][ T2857] usb 4-1: device descriptor read/all, error -71 [ 576.188230][ T9387] fuse: Bad value for 'fd' [ 576.398246][ T9391] loop5: detected capacity change from 0 to 4096 [ 576.465362][ T9396] device syzkaller0 entered promiscuous mode [ 578.933768][ T9391] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 579.971244][ T9069] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:8393' [ 579.985219][ T9069] CPU: 1 PID: 9069 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 579.992834][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.002925][ T9069] Workqueue: hci1 hci_rx_work [ 580.007737][ T9069] Call Trace: [ 580.011041][ T9069] [ 580.013994][ T9069] dump_stack_lvl+0x188/0x250 [ 580.018761][ T9069] ? show_regs_print_info+0x20/0x20 [ 580.024113][ T9069] ? load_image+0x410/0x410 [ 580.028664][ T9069] sysfs_create_dir_ns+0x26a/0x290 [ 580.033812][ T9069] ? sysfs_warn_dup+0xa0/0xa0 [ 580.038599][ T9069] ? kthread+0x42e/0x520 [ 580.042869][ T9069] ? do_raw_spin_unlock+0x11d/0x230 [ 580.048097][ T9069] kobject_add_internal+0x5ba/0xcd0 [ 580.053332][ T9069] kobject_add+0x160/0x230 [ 580.057781][ T9069] ? kobject_init+0x1c0/0x1c0 [ 580.062487][ T9069] ? __raw_spin_lock_init+0x41/0x100 [ 580.067797][ T9069] ? klist_children_get+0x50/0x50 [ 580.072844][ T9069] ? get_device_parent+0x121/0x3e0 [ 580.077988][ T9069] device_add+0x470/0x1050 [ 580.082434][ T9069] ? device_initialize+0x2a5/0x4d0 [ 580.087569][ T9069] hci_conn_add_sysfs+0xd1/0x1e0 [ 580.092537][ T9069] le_conn_complete_evt+0xc2e/0x14d0 [ 580.097995][ T9069] ? cs_le_create_conn+0x5e0/0x5e0 [ 580.103138][ T9069] ? __mutex_trylock_common+0x15c/0x260 [ 580.109020][ T9069] hci_le_meta_evt+0x285/0x3ca0 [ 580.113910][ T9069] ? hci_event_packet+0x363/0x1310 [ 580.119054][ T9069] ? __lock_acquire+0x7b50/0x7b50 [ 580.124118][ T9069] ? hci_remote_host_features_evt+0x240/0x240 [ 580.130217][ T9069] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 580.136074][ T9069] ? mark_lock+0x94/0x320 [ 580.140452][ T9069] ? mutex_unlock+0x10/0x10 [ 580.145075][ T9069] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 580.151101][ T9069] ? lock_chain_count+0x20/0x20 [ 580.156000][ T9069] ? __rwlock_init+0x140/0x140 [ 580.160790][ T9069] hci_event_packet+0xe0b/0x1310 [ 580.165764][ T9069] ? _raw_spin_unlock+0x40/0x40 [ 580.170646][ T9069] ? rcu_lock_release+0x20/0x20 [ 580.175533][ T9069] ? hci_send_to_monitor+0x9c/0x4a0 [ 580.180755][ T9069] hci_rx_work+0x255/0xa10 [ 580.185219][ T9069] process_one_work+0x867/0xff0 [ 580.190130][ T9069] ? worker_detach_from_pool+0x240/0x240 [ 580.195801][ T9069] ? lockdep_hardirqs_off+0x70/0x100 [ 580.201219][ T9069] ? _raw_spin_lock_irq+0xb7/0xf0 [ 580.206374][ T9069] ? _raw_spin_lock_irqsave+0x100/0x100 [ 580.213029][ T9069] ? wq_worker_running+0x97/0x170 [ 580.218109][ T9069] worker_thread+0xad7/0x12a0 [ 580.222931][ T9069] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 580.228883][ T9069] kthread+0x42e/0x520 [ 580.233157][ T9069] ? rcu_lock_release+0x20/0x20 [ 580.238034][ T9069] ? kthread_blkcg+0xd0/0xd0 [ 580.242754][ T9069] ret_from_fork+0x1f/0x30 [ 580.247330][ T9069] [ 580.270659][ T9069] kobject_add_internal failed for hci1:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 580.284399][ T9069] Bluetooth: hci1: failed to register connection device [ 580.310048][ T9410] chnl_net:caif_netlink_parms(): no params data found [ 581.032122][ T2857] Bluetooth: hci5: command 0x0409 tx timeout [ 582.186811][ T9464] device syzkaller0 entered promiscuous mode [ 582.205400][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.232441][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.253108][ T9410] device bridge_slave_0 entered promiscuous mode [ 582.265662][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.276845][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.294485][ T9410] device bridge_slave_1 entered promiscuous mode [ 582.438430][ T8716] Bluetooth: hci1: command 0x2016 tx timeout [ 582.460617][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.468521][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.480124][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.487826][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.101168][ T2857] Bluetooth: hci5: command 0x041b tx timeout [ 583.177834][ T9410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.255108][ T9410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.270087][ T4230] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 583.376425][ T9410] team0: Port device team_slave_0 added [ 583.384815][ T9069] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:8393' [ 583.396181][ T9069] CPU: 0 PID: 9069 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 583.403787][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.413872][ T9069] Workqueue: hci2 hci_rx_work [ 583.418601][ T9069] Call Trace: [ 583.421906][ T9069] [ 583.424953][ T9069] dump_stack_lvl+0x188/0x250 [ 583.429683][ T9069] ? show_regs_print_info+0x20/0x20 [ 583.437065][ T9069] ? load_image+0x410/0x410 [ 583.445246][ T9069] sysfs_create_dir_ns+0x26a/0x290 [ 583.450410][ T9069] ? sysfs_warn_dup+0xa0/0xa0 [ 583.455228][ T9069] ? kthread+0x42e/0x520 [ 583.459512][ T9069] ? do_raw_spin_unlock+0x11d/0x230 [ 583.464840][ T9069] kobject_add_internal+0x5ba/0xcd0 [ 583.470180][ T9069] kobject_add+0x160/0x230 [ 583.474693][ T9069] ? kobject_init+0x1c0/0x1c0 [ 583.479407][ T9069] ? __raw_spin_lock_init+0x41/0x100 [ 583.484736][ T9069] ? klist_children_get+0x50/0x50 [ 583.489783][ T9069] ? get_device_parent+0x121/0x3e0 [ 583.494916][ T9069] device_add+0x470/0x1050 [ 583.499361][ T9069] ? device_initialize+0x2a5/0x4d0 [ 583.504510][ T9069] hci_conn_add_sysfs+0xd1/0x1e0 [ 583.509570][ T9069] le_conn_complete_evt+0xc2e/0x14d0 [ 583.514945][ T9069] ? cs_le_create_conn+0x5e0/0x5e0 [ 583.520091][ T9069] ? __mutex_trylock_common+0x15c/0x260 [ 583.525677][ T9069] hci_le_meta_evt+0x285/0x3ca0 [ 583.530571][ T9069] ? hci_event_packet+0x363/0x1310 [ 583.535814][ T9069] ? __lock_acquire+0x7b50/0x7b50 [ 583.541063][ T9069] ? hci_remote_host_features_evt+0x240/0x240 [ 583.547173][ T9069] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 583.552883][ T9069] ? mark_lock+0x94/0x320 [ 583.557378][ T9069] ? mutex_unlock+0x10/0x10 [ 583.561925][ T9069] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 583.567992][ T9069] ? lock_chain_count+0x20/0x20 [ 583.572892][ T9069] ? __rwlock_init+0x140/0x140 [ 583.577700][ T9069] hci_event_packet+0xe0b/0x1310 [ 583.579462][ T9410] team0: Port device team_slave_1 added [ 583.582673][ T9069] ? _raw_spin_unlock+0x40/0x40 [ 583.593086][ T9069] ? rcu_lock_release+0x20/0x20 [ 583.597981][ T9069] ? hci_send_to_monitor+0x9c/0x4a0 [ 583.603222][ T9069] hci_rx_work+0x255/0xa10 [ 583.607961][ T9069] process_one_work+0x867/0xff0 [ 583.612874][ T9069] ? worker_detach_from_pool+0x240/0x240 [ 583.618668][ T9069] ? lockdep_hardirqs_off+0x70/0x100 [ 583.624002][ T9069] ? _raw_spin_lock_irq+0xb7/0xf0 [ 583.629069][ T9069] ? _raw_spin_lock_irqsave+0x100/0x100 [ 583.634662][ T9069] ? wq_worker_running+0x97/0x170 [ 583.639817][ T9069] worker_thread+0xad7/0x12a0 [ 583.644636][ T9069] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 583.650592][ T9069] kthread+0x42e/0x520 [ 583.654699][ T9069] ? rcu_lock_release+0x20/0x20 [ 583.659674][ T9069] ? kthread_blkcg+0xd0/0xd0 [ 583.664305][ T9069] ret_from_fork+0x1f/0x30 [ 583.668783][ T9069] [ 583.686794][ T9069] kobject_add_internal failed for hci2:8393 with -EEXIST, don't try to register things with the same name in the same directory. [ 583.700917][ T9069] Bluetooth: hci2: failed to register connection device [ 583.714384][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.731820][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.774492][ T9410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.786567][ T154] tipc: Left network mode [ 583.794457][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.802055][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.829522][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 583.845287][ T9410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.903180][ T9410] device hsr_slave_0 entered promiscuous mode [ 583.916716][ T9410] device hsr_slave_1 entered promiscuous mode [ 583.931426][ T9410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.946949][ T9410] Cannot create hsr debugfs directory [ 583.957436][ T4230] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 583.968750][ T4230] usb 5-1: config 4 has no interface number 0 [ 583.979072][ T4230] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 584.005952][ T4230] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 584.027613][ T4230] usb 5-1: config 4 interface 8 has no altsetting 0 [ 584.202346][ T4230] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 584.251361][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.285686][ T4230] usb 5-1: Product: syz [ 584.297334][ T4230] usb 5-1: Manufacturer: syz [ 584.307525][ T4230] usb 5-1: SerialNumber: syz [ 584.632466][ T9469] udc-core: couldn't find an available UDC or it's busy [ 584.922862][ T9469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.015469][ T9469] udc-core: couldn't find an available UDC or it's busy [ 585.187494][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 585.216839][ T9469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.498624][ T9469] udc-core: couldn't find an available UDC or it's busy [ 585.509929][ T9469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.524311][ T9410] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 585.581190][ T9410] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 585.601257][ T9521] tipc: Enabling of bearer rejected, failed to enable media [ 585.628470][ T9410] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 585.664594][ T9410] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 585.764037][ T9469] udc-core: couldn't find an available UDC or it's busy [ 585.777315][ T4232] Bluetooth: hci2: command 0x2016 tx timeout [ 585.792831][ T9469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 585.902500][ T154] device hsr_slave_0 left promiscuous mode [ 585.908271][ T4230] opticon 5-1:4.8: opticon converter detected [ 585.914908][ T154] device hsr_slave_1 left promiscuous mode [ 585.925988][ T4230] usb 5-1: opticon converter now attached to ttyUSB0 [ 585.936620][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.966167][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.987126][ T4230] usb 5-1: USB disconnect, device number 13 [ 586.014476][ T154] device bridge_slave_1 left promiscuous mode [ 586.030824][ T4230] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 586.039074][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.057258][ T154] device bridge_slave_0 left promiscuous mode [ 586.063605][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.209944][ T4230] opticon 5-1:4.8: device disconnected [ 587.188661][ T9564] loop4: detected capacity change from 0 to 256 [ 587.220320][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 587.321514][ T9564] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 587.332550][ T9564] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 587.375394][ T9564] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 588.154643][ T154] team0 (unregistering): Port device team_slave_1 removed [ 588.208961][ T154] team0 (unregistering): Port device team_slave_0 removed [ 588.283124][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.305209][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.650907][ T154] bond0 (unregistering): Released all slaves [ 588.836731][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.916354][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.943186][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.985184][ T9410] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.055508][ T9584] syz.5.1442 sent an empty control message without MSG_MORE. [ 589.069653][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 589.107659][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 589.152192][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.159432][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.205096][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 589.351150][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 589.441823][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.449011][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.287752][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.325559][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.437636][ T9604] loop5: detected capacity change from 0 to 256 [ 590.670107][ T9604] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 590.681011][ T9604] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 590.718747][ T9604] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 591.022583][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 591.269717][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 591.306975][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 591.327505][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 591.336471][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 591.366673][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 591.457036][ T9410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.524336][ T9410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.579713][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 591.618882][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 591.639266][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 591.647911][ T9616] loop5: detected capacity change from 0 to 4096 [ 591.668135][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 591.694204][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.815559][ T9616] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 592.670866][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.727469][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.795337][ T9410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.636245][ T9667] device syzkaller0 entered promiscuous mode [ 594.807403][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.845663][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.876600][ T9410] device veth0_vlan entered promiscuous mode [ 594.941648][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.958303][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.978581][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.997650][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 595.070582][ T9410] device veth1_vlan entered promiscuous mode [ 595.560410][ T9410] device veth0_macvtap entered promiscuous mode [ 595.634690][ T9410] device veth1_macvtap entered promiscuous mode [ 595.754989][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.850399][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.903196][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.924260][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.952510][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.977384][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.000799][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.021493][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.034515][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.053651][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 596.086049][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 596.106372][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 596.168217][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 596.308483][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.348362][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.382694][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.403853][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.434750][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.465322][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.502307][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.778897][ T9569] Set syz1 is full, maxelem 65536 reached [ 596.779927][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.798013][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.817681][ T9410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.865022][ T9410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.899009][ T26] audit: type=1326 audit(1783763215.986:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 596.933221][ T26] audit: type=1326 audit(1783763215.986:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 596.964118][ T26] audit: type=1326 audit(1783763215.986:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 597.084308][ T9410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.107259][ T9410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.128625][ T26] audit: type=1326 audit(1783763215.986:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 597.164400][ T26] audit: type=1326 audit(1783763215.986:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 597.195403][ T26] audit: type=1326 audit(1783763215.986:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 597.272919][ T9713] device syzkaller0 entered promiscuous mode [ 597.353240][ T26] audit: type=1326 audit(1783763215.986:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9705 comm="syz.3.1468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc6e99e7e59 code=0x7ffc0000 [ 597.405593][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.427363][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.466051][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 597.552809][ T9718] loop5: detected capacity change from 0 to 256 [ 597.692582][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.832852][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.311885][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 598.329361][ T9718] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 598.340255][ T9718] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 598.362284][ T9718] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 599.325645][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 599.335007][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.342906][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.615818][ T9729] loop3: detected capacity change from 0 to 4096 [ 599.972765][ T9729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 601.248888][ T9768] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1486'. [ 602.743986][ T9785] binder: 9784:9785 ioctl c0306201 200000000080 returned -14 [ 602.755782][ T9785] binder: 9784:9785 ioctl c0306201 2000000003c0 returned -14 Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.