last executing test programs: 27.187028877s ago: executing program 1 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1, 0x7, 0x1fc, 0x972, 0xb, 0xfffffffe}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r1, &(0x7f00000000c0)='./mnt\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mount$9p_fd(0x0, 0x0, 0x0, 0x100000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x14, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) add_key(&(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000200)="00d3b17e76aed8aa0f4e65dd", 0xc, 0xfffffffffffffffb) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000100001000090400"], 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 25.71312378s ago: executing program 1 (id=98): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xc03, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018b"], 0xfdef) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000400)={{r0}, "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"}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x1, 0x4c1b}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x2b, 0x0, [0x9, 0x79, 0x5, 0x6, 0x8, 0xdffffffe, 0xefe2, 0xf8, 0x7ff, 0x7ff, 0x800, 0x1, 0xf, 0x1, 0x0, 0x8]}], r5}}, 0xfcf4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000500)={0x2, @raw_data="0c31a556ddef875e8c45eaf67f1bbd54ea3feb4fd09cc3f32edaeaaeb16a759443e15a5ab2d96e3e93f24a2b0c84532dc733ae1573b8bbf183a44987a13538fd647d4fc13a5753da2555269e5ae4aec163bdc712a5122ffdcb447e2f24b9bb1ae7eb1333b2a8f5e22f738475296ae990d1289d1cdc285a92052167a2ecc9d745a7eb44c78ab9791c867cd312dc8be32a05f227774d22f340f30d866ec0551b66429ebd4e03b0627def5bd04b9197c9c9b614ae5cec7bfa455047281209c2027998088360bded5408"}) socket$inet6(0xa, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x1}, 0x10) 25.353885942s ago: executing program 0 (id=100): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000c00078008000600000000030500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1eed2c0000000000010902240001000030080904002009030003000921feff0101221f0209058103"], 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.497178749s ago: executing program 0 (id=104): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3507}]}, 0x70}, 0x1, 0x7}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000040)={0x40, 0x16, 0x8a, "061736e7a823d0423bec82a63052126ffe43ac68aef62d8f0de9980145e0626fedbf06bf6591692ee3a597877e30ffa13dd94a1b95b9e98e3fcb99dba79e8fcaeb7dec81e768a99ad3847bfe9ef93bc3a05bd54ff6e11a3e2050f9d55d5d3dc1d972fdee5f4a56fc802d13a70b9a64ea518f42b07f60910121cc161ce28319eec20600e64391b7582e29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000800)={0x0, 0x15, 0x2, "91b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.36047831s ago: executing program 3 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000440)=@add_del={0x2, &(0x7f0000000400)='nicvf0\x00'}) 21.177006477s ago: executing program 0 (id=108): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f24, 0x5, 0x2f000000, 0xf0000, 0xc, 0x8, 0x1001, 0x4c95238c, 0xa, 0x1000, 0x802, 0x1600, 0x5, 0x8, 0x809, 0x400e1c6, 0x6, 0x2, 0x402, 0x199, 0xdecf, 0x3, 0xb, 0x4000004, 0x1ff8, 0x3, 0xef, 0x0, 0x2a4, 0x4, 0xdffffffb]}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000600)=[{0xfff, 0x0, 0x0, 0x0}], 0x1}) 20.290813228s ago: executing program 2 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000200)={r2, 0xf585}, 0x8) r5 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)={0x40, 0x9, 0x1a, "c8ec9bbd74f707f2beee35aa37ea3496acd40b0f23d8f868f1be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x40, 0x11, 0xd0, {0xd0, 0x24, "bbf40137cf8583a5af4ed7c8c46ca3592f752a405eb1ced11d00e0e2f7fe27fdd434655d4653dd17fd31df315455065712ea90568c5faa747523fea7897d88397aa21ebbb73c1165fa09b6c3c79a1c2e5d29bdb0e23b45c4d411d99f916c98804c7703ece4c1e244e163f63f3769d8d41aadc4e42ed124577941e70bf46c531f641352b25919b3da5cd3c780822df9e13ed40fccf71485f144a140fd56b0a7028c904ec6ac49a8cffcea57500d24474c94931d2c5941f417a0a5bb1bb1368238e1b6fb2beb7855f63c56d78ca76d"}}, &(0x7f0000000200)={0x0, 0x3, 0x62, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000280)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x9, 0xff0f, 0xfffd, [0x0, 0xf, 0xf0, 0xc0]}, @ssp_cap={0x10, 0x10, 0xa, 0xe5, 0x1, 0x49a72f6, 0xff00, 0x4, [0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0xff, 0x10, 0x8, 0x8}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0xc, 0x0, "080b1d17", "df00b858"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0xec, 0xa, 0x5, 0x9, 0x1}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x40, 0x7, 0xda, "851704c3668abd95cc5b08c39181953749a8193957000a8016aaefc6afce08599cfa118cc45f177105b0b0f8c481d0033b40a296c9eb5cc66f0d153cde77b82500830c89fa48a70c5fb94b5f8c592656292538499b34b034e11cdff50de139015136f07543714d480b70d7a8a001da00827f25be551f8834c1a35112b045ab5f3b8c2c06b97ab47dd936658b5c2b110b0b22ea55f5579ffcf4a778e601dfc95f5d3c85e951b391b27f826166a58a53c56a5e8920f507bf6e55d2b4e21cd8cbfa4dfae639550fe37f997a28bd523d6ca67122d95fc0482e7d55a6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x60, 0x40}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b8e6"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "0106"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xfff7}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x3}}) 20.228419081s ago: executing program 3 (id=112): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="14aa9e5dccb6ea7c2ee0a72744a01fc7eaded6bbe156c4394ea6dc6c8926792adc070b2e40631aa017e5aec35ec2c69e1c2b6c9b8cf348c63c255da06f6d305a91744fd6f032515281d5e788abeceb92b4d94f45af568bcdf569cede51cf8393a16cdde2ecb7", 0x66, 0xfffffffffffffffa) r0 = add_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/213, 0xd5) 20.064544352s ago: executing program 3 (id=113): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1eed2c0000000000010902240001000030080904002009030003000921feff0101221f0209058103"], 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.459858035s ago: executing program 1 (id=114): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_usb_connect(0x5, 0xf2, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000296fdcf084f1712521040010103010902"], 0x0) socket$kcm(0x2, 0x5, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 19.253145232s ago: executing program 1 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 19.241042394s ago: executing program 0 (id=116): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f00000020c0)=[{&(0x7f0000000000)=""/96, 0x60}, {0x0}], 0x2, 0xffff8000, 0x3) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x41) setreuid(0x0, 0xee00) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/resume', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x4) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) setresuid(0xee01, 0xee01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x20) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r6, @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$nci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="e0495877b2b95aaaf097f9a3634748a8ef89b5560b08fc55fb8910b72e206ca07e458ac6d1b098e29c4c2d2d442690af0f237b1a41c383c34932c3c7cf6dba01dae5425c2d5557e3374cf0557517d9d7bb41ac4561de3249e8c746895b66a9739ac131baa2060000000000000073405ea3106b7b3e32f1701e522951e576719e78b4efb55aea51d6464875a6306b373e82843078eb42630b778e495a60210ecae82a042d9f3077af73b87ccbc3876be98d3f1ea1b25705b77514352d1f75c277c4a6f2a2"], 0x4) 19.134112769s ago: executing program 1 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x40, &(0x7f0000000540)={[{@index_off}, {@redirect_dir_off}, {@redirect_dir_follow}], [{@euid_gt={'euid>', r3}}, {@dont_hash}, {@obj_type}, {@uid_eq={'uid', 0x3d, r5}}]}) r6 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0xa67, 0xd964, 0x1, 0x1, 0xfb7, 0xffffffc0, 0x3, 0x9, 0x6, 0x7fffffff, 0x7, 0x8, 0x101, 0x8, 0x1c, 0x8, {0x7fffffff, 0x8}, 0x10, 0x4}}) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x6, 0xd0, 0x85, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x82, 0xa, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x6, 0x9, {0x7, 0x25, 0x1, 0x8, 0x0, 0x2}}}}}}}}]}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$rtl8150(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0xfffffffffffffffc, 0x0, 0x0) setresgid(r10, r9, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003800)={0x30, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}}, 0x0) setfsgid(0xee01) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 18.276947335s ago: executing program 0 (id=118): syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004aaf36207205a5580a2701020301090223000100347a000904010901a37d7e030905000040f82ef1770b0fea745ee9e200020401080b"], 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x2c, 0x34, 0x3, 0x1d, 0x0, 0x4, 0x3, 0x46, 0x1}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="ff46703dff3761e5fca75b416e7c9c4a474805a3a56e140f43f4f6ec506c1bf60a2d8b303a271b411be7de4bd35372f664f3da207cf85ec5d2d3bc57a19f9f836152536c35ccb39479a720a81a0000000000000000000000000000000000000000000000e526f03d61054fa912332da31feaabeccb09934e", 0x78}, {&(0x7f00000001c0)="211baad40b0acb4208c070e69ac45ee57e0f7d99f7ba230a6b5354057aa8d75fc4223da12a729fe3aab5227d5c759e6a2ea036e9a1911ae272ee1090b8b45592ce7570ed8f980641b5ed0318ad8f92ff6801d69861dd85c75ca87d48c856e2", 0x5f}], 0x2, 0x5405, 0x0, 0x9) syz_usb_connect$cdc_ncm(0x1, 0x120, &(0x7f0000002280)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x2, 0x1, 0x9, 0xe0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "8b793ce89c94"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x94d6, 0x5, 0x3, 0xbc}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm_detail={0x9c, 0x24, 0x13, 0x3, "087532bed04e73cb6c83905b0a58126044888bb83302172bc368da1127353c7e200de6a7dfe9294655a8ffb2d94d8f91d4cffa3b791ed255c15df3b30095c637bbdacb457c185fa3bdf4593ab291d75e77c373988dd0f213548c38d56a56b426e5dd85331ba9c593346fe99451b1b862b267bff93528e93bab1efe2c8f9ffd5e70f51666e8b730db215ce8ea1f0b634c1f76e9b0dc35b8c1"}, @dmm={0x7, 0x24, 0x14, 0x8, 0x4b}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0x9, 0xaf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x46, 0xb6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0xe6}}}}}}}]}}, &(0x7f0000002600)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x250, 0x10, 0x6, 0x9, 0x20, 0x1}, 0xc, &(0x7f0000002400)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x8, 0x8}]}, 0x4, [{0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x436}}, {0xe9, &(0x7f0000002480)=@string={0xe9, 0x3, "ecd7481d1decf10ebe289742a0ad5f7497cc7849920127d510ce66a3b75b1c0bb6b7e168d195ec0c784d4871cb7249b281ed528b0552e5d0110bfe7905017d525db02f9d056f032d32796a793578139f234b9450ef9ce4e73a34f0b659d23837bde69ef2422ceeb8741ce8f3825773606d063b825648dffda808fed8aa7e1a1403a56be8bf59dba3572044e6cbaa2e93cd65b92c8684f3107733c4456f9ab862b0c38f500250d6f99cf52cfbbd9d2d4a1a5afc1bfce52d1c0dfd7804d3a785504f94eee659549fd4274eca464459e014c3006eb8e4a1507e31b9fe545988fc0b9162fa52344556"}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000025c0)=@lang_id={0x4, 0x3, 0x5003}}]}) copy_file_range(r1, &(0x7f0000000000)=0x3ff, r1, 0x0, 0x6, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0xfdfe) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) close(r0) 18.029693984s ago: executing program 2 (id=119): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f24, 0x5, 0x0, 0xf0000, 0xc, 0x8, 0x1001, 0x4c95238c, 0xa, 0x1000, 0x802, 0x1600, 0x5, 0x8, 0x809, 0x400e1c6, 0x6, 0x2, 0x402, 0x199, 0xdecf, 0x3, 0xb, 0x4000004, 0x1ff8, 0x3, 0xef, 0x2f000000, 0x2a4, 0x4, 0xdffffffb]}) 17.955168341s ago: executing program 3 (id=120): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x210, 0xf6, 0xea, 0x3b, 0x10, 0x830, 0x80, 0xd7f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x4, 0xa0, 0x6, "", [{{0x9, 0x4, 0xfe, 0x0, 0x0, 0xf7, 0x3, 0x34, 0x4}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0xffffffd8, 0x0}) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)="11212e9d", 0x4}, 0x1, 0x0, 0x0, 0x24048005}, 0x400c880) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40012120, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x40000) 17.776985214s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000500)="be", 0x1}, {&(0x7f0000000540)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957791eb75fc4abb0e20b9846", 0x25}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1adbd444034580ad72631895cae0de08dead4ff8ba8415d727d16357dae99", 0xc9}, {&(0x7f0000000880)="d7076b48f9ce675450cd4dc7a0c72eaa9757f62a28e3c52be4937529b2546422596e0402bfca4214a801e65c5bef8bbd4e35e47b3fa76197e1461cd9d254c5958009966e", 0x44}, {&(0x7f0000000940)="8e454c666f82f1cdb4fc01690302d34f20cb4aabf74c55d2ace0ebceb19748ad076fe405975d01543a204e209ac03302b1273b9a94185109d7de06202b0b2221fe4368f9eeb13abcc9f486f9186f31b8cc15c3b8e0bb118accbe324e0e80c2265ceac4c3a31957e8bf91ad5aca903be5fe4274674d868db593d76f5d7a038baabdb83a99ec5d6f3ca28eadb73aa2652fdead121e336e309596c6c93a16041341c09283b8", 0xa4}, {&(0x7f0000000640)="7a7881cb86185f", 0x7}], 0x6}}], 0x1, 0x42054) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f2}}, 0x30) 16.957473543s ago: executing program 1 (id=122): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xc03, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018b"], 0xfdef) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000400)={{r0}, "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"}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x1, 0x4c1b}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x2b, 0x0, [0x9, 0x79, 0x5, 0x6, 0x8, 0xdffffffe, 0xefe2, 0xf8, 0x7ff, 0x7ff, 0x800, 0x1, 0xf, 0x1, 0x0, 0x8]}], r5}}, 0xfcf4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000500)={0x2, @raw_data="0c31a556ddef875e8c45eaf67f1bbd54ea3feb4fd09cc3f32edaeaaeb16a759443e15a5ab2d96e3e93f24a2b0c84532dc733ae1573b8bbf183a44987a13538fd647d4fc13a5753da2555269e5ae4aec163bdc712a5122ffdcb447e2f24b9bb1ae7eb1333b2a8f5e22f738475296ae990d1289d1cdc285a92052167a2ecc9d745a7eb44c78ab9791c867cd312dc8be32a05f227774d22f340f30d866ec0551b66429ebd4e03b0627def5bd04b9197c9c9b614ae5cec7bfa455047281209c2027998088360bded5408"}) socket$inet6(0xa, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x1}, 0x10) 16.677608886s ago: executing program 0 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="600000000a0603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16.579787902s ago: executing program 2 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) geteuid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',groep_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r7, {0x7, 0x2d, 0x6f, 0x28, 0x2, 0xff, 0x0, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) fchdir(r2) open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080003"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044805) 16.319645787s ago: executing program 2 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 16.161259327s ago: executing program 3 (id=126): r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000280)={&(0x7f0000000240)="f791a95130e308bd79db997a7dd32a4c0b8e9329242628714820e77d59659dac30e406be8a7bd1ef06113ef15e38", 0x2e}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x300}}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r3 = socket(0x1e, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x100, 0x4, 0x0, 0x5}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000540)="527e599a82e99af1262ebf5ce5f0a2480d72809211bd21c1e84929315ffb5925f4c3a0011b1070d3048e8870ebd86c415cdfc6e6f8a127ea81fca60637a2d4edff21605c5b7743fc6e1c27795b5a12fc93e3d30ddfe7d9950e13c7c9c0a8cfaf15400c887c8479eec99f5692ee4da4019ec3c2b84c0090aa6440ac8fc3b642973d8e3cc8599461f2e04118ed2bc1db4ffaf0fce2a603208400f719", 0x9b, r3}, 0x68) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, r9, 0x1, 0x70bd2a, 0x25efdc03, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x400000000000000}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0x3, 0x101, 0x0, 0xd, 0x4, 0x1, 0x8, 0x7fffffff, r6}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa2a80, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000040)={0xfffffffffffffffe, 0x2}) socket$alg(0x26, 0x5, 0x0) 16.020843054s ago: executing program 2 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x48) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)="4fd9611ae6ed127ab99164d712eb", 0xe}], 0x1}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x8, 0x9, 0x5, 0x0, 0x0, [{{r3}}, {{r0}, 0x6}, {{r5}, 0x4}, {{r0}, 0x100000001}, {{}, 0x3}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x490, 0x0, 0x7}]}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x780, 0x4, 0x3, @discrete={0x1, 0x8}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYRESOCT=r6], 0x78}, 0x1, 0x0, 0x0, 0x20044041}, 0x20000000) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x24000004, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.404768246s ago: executing program 3 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x29c, 0x0, 0x2}, {0x231, 0x0, 0x1}]}) syz_open_dev$vcsu(&(0x7f0000000000), 0x61, 0x42) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x29c, 0x0, 0x2}, {0x231, 0x0, 0x1}]}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x61, 0x42) (async) 1.340184498s ago: executing program 32 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="600000000a0603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.252544356s ago: executing program 33 (id=122): syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xc03, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018b"], 0xfdef) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000400)={{r0}, "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"}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x1, 0x4c1b}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x2b, 0x0, [0x9, 0x79, 0x5, 0x6, 0x8, 0xdffffffe, 0xefe2, 0xf8, 0x7ff, 0x7ff, 0x800, 0x1, 0xf, 0x1, 0x0, 0x8]}], r5}}, 0xfcf4) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000500)={0x2, @raw_data="0c31a556ddef875e8c45eaf67f1bbd54ea3feb4fd09cc3f32edaeaaeb16a759443e15a5ab2d96e3e93f24a2b0c84532dc733ae1573b8bbf183a44987a13538fd647d4fc13a5753da2555269e5ae4aec163bdc712a5122ffdcb447e2f24b9bb1ae7eb1333b2a8f5e22f738475296ae990d1289d1cdc285a92052167a2ecc9d745a7eb44c78ab9791c867cd312dc8be32a05f227774d22f340f30d866ec0551b66429ebd4e03b0627def5bd04b9197c9c9b614ae5cec7bfa455047281209c2027998088360bded5408"}) socket$inet6(0xa, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x1}, 0x10) 193.024659ms ago: executing program 34 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') lseek(r1, 0x1, 0x0) getdents(r1, 0x0, 0x48) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)="4fd9611ae6ed127ab99164d712eb", 0xe}], 0x1}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x8, 0x9, 0x5, 0x0, 0x0, [{{r3}}, {{r0}, 0x6}, {{r5}, 0x4}, {{r0}, 0x100000001}, {{}, 0x3}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x490, 0x0, 0x7}]}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x780, 0x4, 0x3, @discrete={0x1, 0x8}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYRESOCT=r6], 0x78}, 0x1, 0x0, 0x0, 0x20044041}, 0x20000000) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0x12, 0x24000004, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 35 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x29c, 0x0, 0x2}, {0x231, 0x0, 0x1}]}) syz_open_dev$vcsu(&(0x7f0000000000), 0x61, 0x42) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x29c, 0x0, 0x2}, {0x231, 0x0, 0x1}]}) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x61, 0x42) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. [ 71.258975][ T5596] cgroup: Unknown subsys name 'net' [ 71.519416][ T5596] cgroup: Unknown subsys name 'cpuset' [ 71.575303][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.232985][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.498697][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.502782][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.505263][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.510230][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.515229][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.591144][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.609014][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.610389][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.614586][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.644411][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.662268][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.685975][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.693847][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.715504][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.737409][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.773040][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.785532][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.805721][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.808910][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.810469][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.466436][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.467680][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.467926][ T5608] bridge_slave_0: entered allmulticast mode [ 77.470399][ T5608] bridge_slave_0: entered promiscuous mode [ 77.520379][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.520725][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.521023][ T5608] bridge_slave_1: entered allmulticast mode [ 77.522890][ T5608] bridge_slave_1: entered promiscuous mode [ 77.557306][ T4925] Bluetooth: hci0: command tx timeout [ 77.666748][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.707575][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.714426][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.714596][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.716032][ T4925] Bluetooth: hci2: command tx timeout [ 77.745441][ T5612] bridge_slave_0: entered allmulticast mode [ 77.748794][ T5612] bridge_slave_0: entered promiscuous mode [ 77.795743][ T4925] Bluetooth: hci1: command tx timeout [ 77.797319][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.797522][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.797676][ T5612] bridge_slave_1: entered allmulticast mode [ 77.801056][ T5612] bridge_slave_1: entered promiscuous mode [ 77.875025][ T4925] Bluetooth: hci3: command tx timeout [ 77.879300][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.879513][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.879665][ T5621] bridge_slave_0: entered allmulticast mode [ 77.881434][ T5621] bridge_slave_0: entered promiscuous mode [ 77.893574][ T5608] team0: Port device team_slave_0 added [ 77.923225][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.923446][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.923634][ T5613] bridge_slave_0: entered allmulticast mode [ 77.929249][ T5613] bridge_slave_0: entered promiscuous mode [ 77.958404][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.958706][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.958975][ T5621] bridge_slave_1: entered allmulticast mode [ 77.960863][ T5621] bridge_slave_1: entered promiscuous mode [ 77.965854][ T5608] team0: Port device team_slave_1 added [ 77.967215][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.967563][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.968120][ T5613] bridge_slave_1: entered allmulticast mode [ 77.971255][ T5613] bridge_slave_1: entered promiscuous mode [ 77.984429][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.152344][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.218533][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.220360][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.220370][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.220384][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.230228][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.261922][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.266553][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.266568][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.266591][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.272902][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.280839][ T5612] team0: Port device team_slave_0 added [ 78.364852][ T5612] team0: Port device team_slave_1 added [ 78.428067][ T5621] team0: Port device team_slave_0 added [ 78.432016][ T5613] team0: Port device team_slave_0 added [ 78.459007][ T5621] team0: Port device team_slave_1 added [ 78.479338][ T5613] team0: Port device team_slave_1 added [ 78.480582][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.480591][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.480605][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.553116][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.553127][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.553142][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.590000][ T5608] hsr_slave_0: entered promiscuous mode [ 78.592404][ T5608] hsr_slave_1: entered promiscuous mode [ 78.625503][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.625514][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.625527][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.630151][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.630161][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.630175][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.637276][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.637290][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.637313][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.641349][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.641362][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.641386][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.879281][ T5621] hsr_slave_0: entered promiscuous mode [ 78.880721][ T5621] hsr_slave_1: entered promiscuous mode [ 78.881771][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 78.881857][ T5621] Cannot create hsr debugfs directory [ 78.891728][ T5612] hsr_slave_0: entered promiscuous mode [ 78.893796][ T5612] hsr_slave_1: entered promiscuous mode [ 78.896341][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 78.896365][ T5612] Cannot create hsr debugfs directory [ 78.923284][ T5613] hsr_slave_0: entered promiscuous mode [ 78.926080][ T5613] hsr_slave_1: entered promiscuous mode [ 78.927787][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 78.927809][ T5613] Cannot create hsr debugfs directory [ 79.636903][ T4925] Bluetooth: hci0: command tx timeout [ 79.796087][ T4925] Bluetooth: hci2: command tx timeout [ 79.877762][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.885771][ T4925] Bluetooth: hci1: command tx timeout [ 79.928043][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.943142][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.954855][ T4925] Bluetooth: hci3: command tx timeout [ 79.979902][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.984000][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.019416][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.040797][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.072490][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.189252][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.231857][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.244972][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.283308][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.292204][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.319944][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.345774][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.390930][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.532778][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.571077][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.580902][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.608392][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.613258][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.648247][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.689611][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.721319][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.866320][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.911182][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.922043][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.951132][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.957229][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.991447][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.004479][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.049178][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.127077][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.254109][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.282820][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.307806][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.308140][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.370338][ T193] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.370825][ T193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.444191][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.501292][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.501685][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.527732][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.573762][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.573903][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.650348][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.702567][ T32] cfg80211: failed to load regulatory.db [ 81.718014][ T4925] Bluetooth: hci0: command tx timeout [ 81.799078][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.799739][ T1552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.838515][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.877901][ T4925] Bluetooth: hci2: command tx timeout [ 81.929233][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.934555][ T1552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.954908][ T4925] Bluetooth: hci1: command tx timeout [ 82.037581][ T4925] Bluetooth: hci3: command tx timeout [ 82.117415][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.254008][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.254154][ T1552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.298584][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.298755][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.012022][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.458680][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.493364][ T5608] veth0_vlan: entered promiscuous mode [ 83.511162][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.573856][ T5608] veth1_vlan: entered promiscuous mode [ 83.797433][ T4925] Bluetooth: hci0: command tx timeout [ 83.821497][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.858128][ T5621] veth0_vlan: entered promiscuous mode [ 83.872141][ T5608] veth0_macvtap: entered promiscuous mode [ 83.905425][ T5613] veth0_vlan: entered promiscuous mode [ 83.910686][ T5608] veth1_macvtap: entered promiscuous mode [ 83.930432][ T5621] veth1_vlan: entered promiscuous mode [ 83.954954][ T4925] Bluetooth: hci2: command tx timeout [ 83.961690][ T5613] veth1_vlan: entered promiscuous mode [ 84.010130][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.032647][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.035853][ T4925] Bluetooth: hci1: command tx timeout [ 84.099334][ T825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.113473][ T825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.115531][ T4925] Bluetooth: hci3: command tx timeout [ 84.140059][ T825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.160381][ T825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.164255][ T5612] veth0_vlan: entered promiscuous mode [ 84.189989][ T5621] veth0_macvtap: entered promiscuous mode [ 84.252357][ T5613] veth0_macvtap: entered promiscuous mode [ 84.276783][ T5621] veth1_macvtap: entered promiscuous mode [ 84.336056][ T5612] veth1_vlan: entered promiscuous mode [ 84.343488][ T5613] veth1_macvtap: entered promiscuous mode [ 84.623849][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.658857][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.685400][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.710038][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.727764][ T825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.727787][ T825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.771396][ T825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.790113][ T825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.803718][ T825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.816338][ T5612] veth0_macvtap: entered promiscuous mode [ 84.841628][ T825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.864516][ T825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.892184][ T825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.901834][ T825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.902818][ T5612] veth1_macvtap: entered promiscuous mode [ 84.908796][ T825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.949376][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.949393][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.555853][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.750256][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.792337][ T1552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.792357][ T1552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.819644][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.919358][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.027116][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.030755][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.068340][ T3045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.068359][ T3045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.198341][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.198359][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.412753][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.412773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.677631][ T1552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.677649][ T1552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.086253][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.086274][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.638715][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.757012][ T37] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 87.890979][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.891019][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.939003][ T9] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 87.939032][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.939051][ T9] usb 1-1: Product: syz [ 87.939074][ T9] usb 1-1: Manufacturer: syz [ 87.939088][ T9] usb 1-1: SerialNumber: syz [ 88.052075][ T37] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.052107][ T37] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.052131][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.052163][ T37] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 88.052185][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.207879][ T5779] FAULT_INJECTION: forcing a failure. [ 88.207879][ T5779] name failslab, interval 1, probability 0, space 0, times 1 [ 88.207925][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 88.207941][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.207957][ T5779] Call Trace: [ 88.207966][ T5779] [ 88.207981][ T5779] dump_stack_lvl+0xe8/0x150 [ 88.208012][ T5779] should_fail_ex+0x46b/0x600 [ 88.208039][ T5779] should_failslab+0xa8/0x100 [ 88.208062][ T5779] __kmalloc_noprof+0xdf/0x7b0 [ 88.208081][ T5779] ? kfree+0x4d/0x6c0 [ 88.208096][ T5779] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 88.208119][ T5779] tomoyo_realpath_from_path+0xe3/0x5d0 [ 88.208140][ T5779] ? tomoyo_domain+0xd7/0x130 [ 88.208163][ T5779] ? tomoyo_path_number_perm+0x219/0x630 [ 88.208184][ T5779] tomoyo_path_number_perm+0x246/0x630 [ 88.208207][ T5779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.208227][ T5779] ? __lock_acquire+0x6b5/0x2d10 [ 88.208250][ T5779] ? do_raw_spin_lock+0x12b/0x2f0 [ 88.208295][ T5779] ? __fget_files+0x2a/0x420 [ 88.208319][ T5779] ? __fget_files+0x2a/0x420 [ 88.208336][ T5779] ? __fget_files+0x3a6/0x420 [ 88.208353][ T5779] ? __fget_files+0x2a/0x420 [ 88.208376][ T5779] security_file_ioctl+0xc3/0x2a0 [ 88.208403][ T5779] __se_sys_ioctl+0x47/0x170 [ 88.208426][ T5779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.208441][ T5779] do_syscall_64+0x174/0x580 [ 88.208462][ T5779] ? trace_irq_disable+0x3b/0x140 [ 88.208478][ T5779] ? clear_bhb_loop+0x40/0x90 [ 88.208498][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.208512][ T5779] RIP: 0033:0x7fc926c4ce59 [ 88.208536][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.208548][ T5779] RSP: 002b:00007fc924ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.208568][ T5779] RAX: ffffffffffffffda RBX: 00007fc926ec5fa0 RCX: 00007fc926c4ce59 [ 88.208578][ T5779] RDX: 0000200000000080 RSI: 00000000c0306201 RDI: 0000000000000004 [ 88.208587][ T5779] RBP: 00007fc924ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.208595][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.208603][ T5779] R13: 00007fc926ec6038 R14: 00007fc926ec5fa0 R15: 00007fff8b2414a8 [ 88.208626][ T5779] [ 88.208717][ T5779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.433340][ T9] usb 1-1: config 0 descriptor?? [ 88.460305][ T37] usb 4-1: config 0 descriptor?? [ 88.732267][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 88.936427][ T5768] random: crng reseeded on system resumption [ 89.020646][ T5788] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 89.154591][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.161928][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 89.170869][ T9] usb 1-1: media controller created [ 89.188266][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188306][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188332][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188358][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188384][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188410][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188435][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188461][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188487][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.188512][ T37] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 89.306353][ T37] kone 0003:1E7D:2CED.0001: hidraw0: USB HID vff.fe Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 89.345890][ T37] usb 4-1: USB disconnect, device number 2 [ 89.418201][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 89.597437][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.723859][ T5806] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.200538][ T5804] fido_id[5804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 90.283949][ T9] DVB: Unable to find symbol tda10046_attach() [ 90.283964][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 90.283986][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 90.494090][ T9] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 90.581562][ T5814] netlink: 'syz.2.14': attribute type 21 has an invalid length. [ 90.689754][ T9] usb 1-1: USB disconnect, device number 2 [ 91.506638][ T5838] sg_write: data in/out 45445/136 bytes for SCSI command 0x0-- guessing data in; [ 91.506638][ T5838] program syz.3.20 not setting count and/or reply_len properly [ 91.946874][ T37] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.105364][ T5846] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22'. [ 92.105386][ T5846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.22'. [ 92.185531][ T37] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.185561][ T37] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.185587][ T37] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.185620][ T37] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 92.185643][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.338884][ T37] usb 2-1: config 0 descriptor?? [ 93.274261][ T37] kone 0003:1E7D:2CED.0002: hidraw0: USB HID vff.fe Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 93.337895][ T37] usb 2-1: USB disconnect, device number 2 [ 93.629969][ T5863] fido_id[5863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.848989][ T5866] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 94.612809][ T5801] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.660644][ T5884] FAULT_INJECTION: forcing a failure. [ 94.660644][ T5884] name failslab, interval 1, probability 0, space 0, times 0 [ 94.660675][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 94.660695][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.660704][ T5884] Call Trace: [ 94.660710][ T5884] [ 94.660718][ T5884] dump_stack_lvl+0xe8/0x150 [ 94.660754][ T5884] should_fail_ex+0x46b/0x600 [ 94.660786][ T5884] should_failslab+0xa8/0x100 [ 94.660810][ T5884] kmem_cache_alloc_noprof+0x87/0x680 [ 94.660831][ T5884] ? alloc_file_pseudo_noaccount+0x15d/0x310 [ 94.660853][ T5884] alloc_file_pseudo_noaccount+0x15d/0x310 [ 94.660875][ T5884] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 94.660899][ T5884] ? ilookup+0x169/0x1c0 [ 94.660932][ T5884] bdev_file_open_by_dev+0x181/0x240 [ 94.660961][ T5884] disk_scan_partitions+0x1c1/0x2c0 [ 94.660983][ T5884] blkdev_common_ioctl+0x1ce4/0x3240 [ 94.661009][ T5884] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 94.661029][ T5884] ? kasan_quarantine_put+0xbb/0x1f0 [ 94.661065][ T5884] ? tomoyo_path_number_perm+0x219/0x630 [ 94.661093][ T5884] ? tomoyo_path_number_perm+0x219/0x630 [ 94.661125][ T5884] ? do_vfs_ioctl+0x117b/0x1540 [ 94.661155][ T5884] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.661216][ T5884] blkdev_ioctl+0x52b/0x750 [ 94.661238][ T5884] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.661255][ T5884] ? __fget_files+0x2a/0x420 [ 94.661280][ T5884] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.661306][ T5884] ? __pfx_blkdev_ioctl+0x10/0x10 [ 94.661324][ T5884] __se_sys_ioctl+0xff/0x170 [ 94.661349][ T5884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.661369][ T5884] do_syscall_64+0x174/0x580 [ 94.661397][ T5884] ? trace_irq_disable+0x3b/0x140 [ 94.661417][ T5884] ? clear_bhb_loop+0x40/0x90 [ 94.661441][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.661460][ T5884] RIP: 0033:0x7fc926c4ce59 [ 94.661477][ T5884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.661493][ T5884] RSP: 002b:00007fc924ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.661512][ T5884] RAX: ffffffffffffffda RBX: 00007fc926ec5fa0 RCX: 00007fc926c4ce59 [ 94.661526][ T5884] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 94.661538][ T5884] RBP: 00007fc924ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.661549][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.661559][ T5884] R13: 00007fc926ec6038 R14: 00007fc926ec5fa0 R15: 00007fff8b2414a8 [ 94.661588][ T5884] [ 94.766601][ T5801] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.766639][ T5801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.795007][ T5801] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 94.795040][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.795060][ T5801] usb 4-1: Product: syz [ 94.795075][ T5801] usb 4-1: Manufacturer: syz [ 94.795090][ T5801] usb 4-1: SerialNumber: syz [ 94.881939][ T5801] usb 4-1: config 0 descriptor?? [ 94.965273][ T5801] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 94.978789][ T5801] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.980392][ T5801] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 94.980486][ T5801] usb 4-1: media controller created [ 95.032548][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.055927][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.098199][ T5871] random: crng reseeded on system resumption [ 95.184968][ T5758] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.209203][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 95.211440][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 95.211465][ T9] usb 1-1: config 0 has no interface number 0 [ 95.211506][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 95.211530][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 95.211712][ T5801] DVB: Unable to find symbol tda10046_attach() [ 95.211723][ T5801] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 95.211735][ T5801] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 95.288969][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 95.288999][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.289018][ T9] usb 1-1: Product: syz [ 95.289032][ T9] usb 1-1: Manufacturer: syz [ 95.289047][ T9] usb 1-1: SerialNumber: syz [ 95.441593][ T5758] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 95.441624][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.441642][ T5758] usb 2-1: Product: syz [ 95.441654][ T5758] usb 2-1: Manufacturer: syz [ 95.441720][ T5758] usb 2-1: SerialNumber: syz [ 95.504839][ T37] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.624222][ T9] usb 1-1: config 0 descriptor?? [ 95.651270][ T5880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.651427][ T5880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.694503][ T37] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 95.694608][ T37] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 95.694637][ T37] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 95.696280][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.696317][ T37] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 95.696339][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.761105][ T37] usb 3-1: config 0 descriptor?? [ 95.761992][ T5889] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 95.869832][ T5880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.870005][ T5880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 95.982602][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.018492][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.022766][ T37] belkin 0003:1020:0006.0003: reserved main item tag 0xe [ 96.022871][ T37] hid_parser_main: 1066 callbacks suppressed [ 96.022888][ T37] belkin 0003:1020:0006.0003: unknown main item tag 0x2 [ 96.088631][ T37] belkin 0003:1020:0006.0003: hidraw0: USB HID v0.0c Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 96.089523][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 96.223597][ T37] usb 3-1: USB disconnect, device number 2 [ 96.339075][ T5758] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 96.339143][ T5758] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 96.340742][ T5758] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 96.340843][ T5758] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 96.472319][ T5758] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 96.473964][ T5898] fido_id[5898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.529314][ T5758] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 96.662447][ T5758] usb 2-1: USB disconnect, device number 3 [ 97.021578][ T5904] FAULT_INJECTION: forcing a failure. [ 97.021578][ T5904] name failslab, interval 1, probability 0, space 0, times 0 [ 97.021600][ T5904] CPU: 0 UID: 0 PID: 5904 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.021612][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.021619][ T5904] Call Trace: [ 97.021623][ T5904] [ 97.021627][ T5904] dump_stack_lvl+0xe8/0x150 [ 97.021645][ T5904] should_fail_ex+0x46b/0x600 [ 97.021663][ T5904] should_failslab+0xa8/0x100 [ 97.021685][ T5904] __kmalloc_noprof+0xdf/0x7b0 [ 97.021706][ T5904] ? tomoyo_encode+0x28b/0x550 [ 97.021732][ T5904] tomoyo_encode+0x28b/0x550 [ 97.021779][ T5904] tomoyo_realpath_from_path+0x58d/0x5d0 [ 97.021799][ T5904] ? tomoyo_domain+0xd7/0x130 [ 97.021813][ T5904] ? tomoyo_path_number_perm+0x219/0x630 [ 97.021829][ T5904] tomoyo_path_number_perm+0x246/0x630 [ 97.021845][ T5904] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.021860][ T5904] ? __lock_acquire+0x6b5/0x2d10 [ 97.021874][ T5904] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.021899][ T5904] ? __fget_files+0x2a/0x420 [ 97.021913][ T5904] ? __fget_files+0x2a/0x420 [ 97.021923][ T5904] ? __fget_files+0x3a6/0x420 [ 97.021934][ T5904] ? __fget_files+0x2a/0x420 [ 97.021947][ T5904] security_file_ioctl+0xc3/0x2a0 [ 97.021965][ T5904] __se_sys_ioctl+0x47/0x170 [ 97.021981][ T5904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.021992][ T5904] do_syscall_64+0x174/0x580 [ 97.022017][ T5904] ? clear_bhb_loop+0x40/0x90 [ 97.022030][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.022040][ T5904] RIP: 0033:0x7fe37c3ace59 [ 97.022050][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.022059][ T5904] RSP: 002b:00007fe37a606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.022070][ T5904] RAX: ffffffffffffffda RBX: 00007fe37c625fa0 RCX: 00007fe37c3ace59 [ 97.022077][ T5904] RDX: 0000200000000180 RSI: 00000000800448d3 RDI: 0000000000000004 [ 97.022084][ T5904] RBP: 00007fe37a606090 R08: 0000000000000000 R09: 0000000000000000 [ 97.022090][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.022096][ T5904] R13: 00007fe37c626038 R14: 00007fe37c625fa0 R15: 00007ffd9f409f28 [ 97.022111][ T5904] [ 97.022165][ T5904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.254796][ T5704] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 97.287057][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.287133][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 97.302737][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 97.434197][ T9] usb 1-1: USB disconnect, device number 3 [ 97.445100][ T5704] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.445135][ T5704] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 97.445161][ T5704] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.445187][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.445219][ T5704] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 97.445241][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.599172][ T5704] usb 3-1: config 0 descriptor?? [ 97.601835][ T5902] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 98.049982][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050015][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050039][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050063][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050085][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050107][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050131][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050155][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050179][ T5704] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 98.050477][ T5704] kone 0003:1E7D:2CED.0004: report_id 0 is invalid [ 98.050493][ T5704] kone 0003:1E7D:2CED.0004: item 0 1 1 8 parsing failed [ 98.054399][ T5704] kone 0003:1E7D:2CED.0004: parse failed [ 98.054468][ T5704] kone 0003:1E7D:2CED.0004: probe with driver kone failed with error -22 [ 98.220447][ T5704] usb 3-1: USB disconnect, device number 3 [ 98.516998][ T5915] FAULT_INJECTION: forcing a failure. [ 98.516998][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 98.517026][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.517045][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.517054][ T5915] Call Trace: [ 98.517062][ T5915] [ 98.517069][ T5915] dump_stack_lvl+0xe8/0x150 [ 98.517097][ T5915] should_fail_ex+0x46b/0x600 [ 98.517126][ T5915] should_failslab+0xa8/0x100 [ 98.517150][ T5915] __kmalloc_cache_noprof+0x84/0x690 [ 98.517170][ T5915] ? cryptomgr_notify+0x85/0x930 [ 98.517193][ T5915] cryptomgr_notify+0x85/0x930 [ 98.517227][ T5915] notifier_call_chain+0x1ad/0x3d0 [ 98.517250][ T5915] blocking_notifier_call_chain+0x6a/0x90 [ 98.517270][ T5915] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 98.517298][ T5915] crypto_alloc_tfm_node+0x13e/0x3f0 [ 98.517325][ T5915] kdf_alloc+0x21/0x100 [ 98.517344][ T5915] __keyctl_dh_compute+0x4f9/0xd10 [ 98.517366][ T5915] ? __lock_acquire+0x6b5/0x2d10 [ 98.517393][ T5915] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 98.517422][ T5915] ? __might_fault+0xaf/0x130 [ 98.517454][ T5915] keyctl_dh_compute+0x124/0x180 [ 98.517475][ T5915] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 98.517502][ T5915] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.517521][ T5915] __se_sys_keyctl+0x44c/0x9e0 [ 98.517545][ T5915] ? __pfx___se_sys_keyctl+0x10/0x10 [ 98.517567][ T5915] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.517590][ T5915] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.517613][ T5915] ? rt_mutex_slowunlock+0x1cb/0x300 [ 98.517631][ T5915] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 98.517658][ T5915] ? fput+0xa0/0xd0 [ 98.517677][ T5915] ? ksys_write+0x248/0x270 [ 98.517701][ T5915] ? __pfx_ksys_write+0x10/0x10 [ 98.517729][ T5915] ? __x64_sys_keyctl+0x20/0xc0 [ 98.517751][ T5915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.517768][ T5915] do_syscall_64+0x174/0x580 [ 98.517792][ T5915] ? trace_irq_disable+0x3b/0x140 [ 98.517810][ T5915] ? clear_bhb_loop+0x40/0x90 [ 98.517831][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.517849][ T5915] RIP: 0033:0x7f66d0c1ce59 [ 98.517866][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.517881][ T5915] RSP: 002b:00007f66cee6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 98.517900][ T5915] RAX: ffffffffffffffda RBX: 00007f66d0e95fa0 RCX: 00007f66d0c1ce59 [ 98.517913][ T5915] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000017 [ 98.517925][ T5915] RBP: 00007f66cee6e090 R08: 0000200000000500 R09: 0000000000000000 [ 98.517937][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.517948][ T5915] R13: 00007f66d0e96038 R14: 00007f66d0e95fa0 R15: 00007ffd8c9acbf8 [ 98.517978][ T5915] [ 98.519282][ T5915] could not allocate digest TFM handle cmac(khazad) [ 98.587669][ T5920] FAULT_INJECTION: forcing a failure. [ 98.587669][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 98.587758][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.1.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.587780][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.587791][ T5920] Call Trace: [ 98.587798][ T5920] [ 98.587805][ T5920] dump_stack_lvl+0xe8/0x150 [ 98.587833][ T5920] should_fail_ex+0x46b/0x600 [ 98.587869][ T5920] should_failslab+0xa8/0x100 [ 98.587894][ T5920] __kmalloc_noprof+0xdf/0x7b0 [ 98.587916][ T5920] ? iovec_from_user+0x87/0x250 [ 98.587942][ T5920] iovec_from_user+0x87/0x250 [ 98.587966][ T5920] __import_iovec+0x163/0x7e0 [ 98.587995][ T5920] import_iovec+0x73/0xa0 [ 98.588018][ T5920] ___sys_recvmsg+0x4bd/0x590 [ 98.588043][ T5920] ? __pfx____sys_recvmsg+0x10/0x10 [ 98.588065][ T5920] ? __fget_files+0x2a/0x420 [ 98.588101][ T5920] ? __fget_files+0x3a6/0x420 [ 98.588131][ T5920] do_recvmmsg+0x33a/0x800 [ 98.588157][ T5920] ? __pfx_do_recvmmsg+0x10/0x10 [ 98.588187][ T5920] ? _copy_from_user+0x94/0xb0 [ 98.588220][ T5920] __x64_sys_recvmmsg+0x1b7/0x250 [ 98.588241][ T5920] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 98.588268][ T5920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.588288][ T5920] do_syscall_64+0x174/0x580 [ 98.588313][ T5920] ? trace_irq_disable+0x3b/0x140 [ 98.588335][ T5920] ? clear_bhb_loop+0x40/0x90 [ 98.588357][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.588375][ T5920] RIP: 0033:0x7fe37c3ace59 [ 98.588392][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.588407][ T5920] RSP: 002b:00007fe37a606028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 98.588426][ T5920] RAX: ffffffffffffffda RBX: 00007fe37c625fa0 RCX: 00007fe37c3ace59 [ 98.588439][ T5920] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 98.588452][ T5920] RBP: 00007fe37a606090 R08: 0000200000003700 R09: 0000000000000000 [ 98.588463][ T5920] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 98.588475][ T5920] R13: 00007fe37c626038 R14: 00007fe37c625fa0 R15: 00007ffd9f409f28 [ 98.588503][ T5920] [ 99.187529][ T5926] process 'syz.2.44' launched './file1' with NULL argv: empty string added [ 99.204876][ T5755] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.354826][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 99.356730][ T5755] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 99.359071][ T5755] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 99.359088][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.359098][ T5755] usb 2-1: Product: syz [ 99.359109][ T5755] usb 2-1: Manufacturer: syz [ 99.359116][ T5755] usb 2-1: SerialNumber: syz [ 99.374180][ T5755] usb 2-1: config 0 descriptor?? [ 99.456767][ T5755] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 99.456832][ T5755] usb 2-1: setting power ON [ 99.470138][ T5755] dvb-usb: bulk message failed: -22 (2/0) [ 99.534476][ T5755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.535788][ T5755] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.535912][ T5755] usb 2-1: media controller created [ 99.654092][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.746615][ T5755] usb 2-1: selecting invalid altsetting 6 [ 99.746631][ T5755] usb 2-1: digital interface selection failed (-22) [ 99.746640][ T5755] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 99.755927][ T5755] usb 2-1: setting power OFF [ 99.763582][ T5755] dvb-usb: bulk message failed: -22 (2/0) [ 99.763608][ T5755] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 99.763620][ T5755] (NULL device *): no alternate interface [ 99.945466][ T5755] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 99.960578][ T5755] usb 2-1: USB disconnect, device number 4 [ 100.021780][ T5609] udevd[5609]: setting mode of /dev/bus/usb/002/004 to 020664 failed: No such file or directory [ 100.022029][ T5609] udevd[5609]: setting owner of /dev/bus/usb/002/004 to uid=0, gid=0 failed: No such file or directory [ 100.184891][ T5704] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.297055][ T5801] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 100.316605][ T5871] Restarting kernel threads ... [ 100.354860][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 100.370953][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 100.370987][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.371009][ T5704] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.371030][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 100.371052][ T5704] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 100.371086][ T5704] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 100.371107][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.420957][ T5871] Done restarting kernel threads. [ 100.457992][ T5704] usb 3-1: config 0 descriptor?? [ 100.460208][ T5932] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.703668][ C1] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 100.710026][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 100.710181][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 100.710248][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 100.710312][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 100.710378][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 100.710443][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 100.710505][ T61] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 101.203658][ T5817] usb 4-1: USB disconnect, device number 3 [ 101.345692][ T4925] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 101.357203][ T5801] usb 3-1: USB disconnect, device number 4 [ 101.374558][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.504825][ T32] usb 1-1: device descriptor read/64, error -71 [ 101.754874][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.765129][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.854861][ T5817] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 101.884867][ T32] usb 1-1: device descriptor read/64, error -71 [ 101.914825][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 101.916640][ T37] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 101.918927][ T37] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 101.918955][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.918973][ T37] usb 2-1: Product: syz [ 101.918984][ T37] usb 2-1: Manufacturer: syz [ 101.918991][ T37] usb 2-1: SerialNumber: syz [ 101.976340][ T37] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 101.976450][ T37] imon 2-1:155.0: unable to initialize intf0, err -19 [ 101.976465][ T37] imon:imon_probe: failed to initialize context! [ 101.976477][ T37] imon 2-1:155.0: unable to register, err -19 [ 102.006893][ T5817] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.006927][ T5817] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 102.006952][ T5817] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.006976][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.007008][ T5817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 102.007029][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.051470][ T5817] usb 4-1: config 0 descriptor?? [ 102.052913][ T5952] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 102.085613][ T32] usb usb1-port1: attempt power cycle [ 102.152314][ T5755] usb 2-1: USB disconnect, device number 5 [ 102.445070][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.469807][ T32] usb 1-1: device descriptor read/8, error -71 [ 102.491529][ T5817] hid_parser_main: 27 callbacks suppressed [ 102.491552][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491581][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491597][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491611][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491626][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491640][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491654][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491669][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491683][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491697][ T5817] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 102.491894][ T5817] kone 0003:1E7D:2CED.0005: report_id 0 is invalid [ 102.491902][ T5817] kone 0003:1E7D:2CED.0005: item 0 1 1 8 parsing failed [ 102.501964][ T5817] kone 0003:1E7D:2CED.0005: parse failed [ 102.502054][ T5817] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -22 [ 102.667709][ T37] usb 4-1: USB disconnect, device number 4 [ 102.734866][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.758989][ T32] usb 1-1: device descriptor read/8, error -71 [ 102.875665][ T32] usb usb1-port1: unable to enumerate USB device [ 103.176145][ T5970] netlink: 'syz.2.60': attribute type 8 has an invalid length. [ 103.284877][ T5817] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.438218][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.438258][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.440324][ T5817] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 103.440351][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.440370][ T5817] usb 2-1: Product: syz [ 103.440383][ T5817] usb 2-1: Manufacturer: syz [ 103.440393][ T5817] usb 2-1: SerialNumber: syz [ 103.449055][ T5817] usb 2-1: config 0 descriptor?? [ 103.470233][ T5817] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 103.546027][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.546639][ T5817] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 103.546681][ T5817] usb 2-1: media controller created [ 103.599668][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.666487][ T5966] random: crng reseeded on system resumption [ 103.667322][ T5817] DVB: Unable to find symbol tda10046_attach() [ 103.667330][ T5817] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 103.667337][ T5817] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 104.136152][ T5992] bpf: Bad value for 'gid' [ 104.234834][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.404317][ T32] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 104.404348][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.404368][ T32] usb 4-1: Product: syz [ 104.404382][ T32] usb 4-1: Manufacturer: syz [ 104.404395][ T32] usb 4-1: SerialNumber: syz [ 104.456437][ T32] usb 4-1: config 0 descriptor?? [ 104.528703][ T4925] Bluetooth: hci4: urb ffff88802b42d400 submission failed (2) [ 104.741861][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.760095][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.845540][ T5704] usb 4-1: USB disconnect, device number 5 [ 105.065673][ T32] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 105.234600][ T32] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.234634][ T32] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 105.236587][ T32] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.236618][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.236653][ T32] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 105.236675][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.265098][ T32] usb 1-1: config 0 descriptor?? [ 105.266037][ T6004] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 105.551175][ T6015] netlink: 'syz.3.72': attribute type 40 has an invalid length. [ 105.697597][ T32] kone 0003:1E7D:2CED.0006: report_id 0 is invalid [ 105.697630][ T32] kone 0003:1E7D:2CED.0006: item 0 1 1 8 parsing failed [ 105.698304][ T32] kone 0003:1E7D:2CED.0006: parse failed [ 105.698444][ T32] kone 0003:1E7D:2CED.0006: probe with driver kone failed with error -22 [ 105.906240][ T32] usb 1-1: USB disconnect, device number 8 [ 106.714921][ T5755] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.782269][ T6033] warning: `syz.2.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.914055][ T5755] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 106.914305][ T5755] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 106.951286][ T5755] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 106.951315][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.951331][ T5755] usb 4-1: Product: syz [ 106.951342][ T5755] usb 4-1: Manufacturer: syz [ 106.951393][ T5755] usb 4-1: SerialNumber: syz [ 107.013670][ T5755] usb 4-1: config 0 descriptor?? [ 107.025501][ T6026] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.025763][ T6026] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.227982][ T6026] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.228091][ T6026] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.630051][ T5755] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 107.950633][ T6041] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 108.040958][ T5755] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 108.067814][ T5755] usb 4-1: USB disconnect, device number 6 [ 108.099891][ T5619] udevd[5619]: setting mode of /dev/bus/usb/004/006 to 020664 failed: No such file or directory [ 108.100030][ T5619] udevd[5619]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory [ 108.234796][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.384771][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 108.386743][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.389278][ T32] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 108.389307][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.389327][ T32] usb 3-1: Product: syz [ 108.389341][ T32] usb 3-1: Manufacturer: syz [ 108.389355][ T32] usb 3-1: SerialNumber: syz [ 108.393882][ T32] usb 3-1: config 0 descriptor?? [ 108.411229][ T32] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 108.680937][ T5817] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 108.975506][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.83'. [ 109.306254][ T32] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 109.415057][ T5966] Restarting kernel threads ... [ 109.418378][ T5966] Done restarting kernel threads. [ 109.526436][ T5817] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 109.676996][ T5817] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.677031][ T5817] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 109.677058][ T5817] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.677085][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.677116][ T5817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 109.677136][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.756399][ T5817] usb 4-1: config 0 descriptor?? [ 109.757436][ T6062] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.881334][ T37] usb 3-1: USB disconnect, device number 5 [ 110.168958][ T5817] hid_parser_main: 62 callbacks suppressed [ 110.168982][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169029][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169051][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169076][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169106][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169130][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169155][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169179][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169201][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169226][ T5817] kone 0003:1E7D:2CED.0007: unknown main item tag 0x0 [ 110.169520][ T5817] kone 0003:1E7D:2CED.0007: report_id 0 is invalid [ 110.169537][ T5817] kone 0003:1E7D:2CED.0007: item 0 1 1 8 parsing failed [ 110.170637][ T5817] kone 0003:1E7D:2CED.0007: parse failed [ 110.170704][ T5817] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -22 [ 110.230806][ T32] usb 2-1: USB disconnect, device number 6 [ 110.344852][ T5755] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 110.370867][ T6069] capability: warning: `syz.1.90' uses 32-bit capabilities (legacy support in use) [ 110.380061][ T5757] usb 4-1: USB disconnect, device number 7 [ 110.497880][ T5755] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.497908][ T5755] usb 1-1: config 0 has no interface number 0 [ 110.497952][ T5755] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.497976][ T5755] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.497997][ T5755] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.498022][ T5755] usb 1-1: config 0 interface 1 has no altsetting 0 [ 110.498051][ T5755] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 110.498073][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.556734][ T6041] syz.2.81 (6041) used greatest stack depth: 16320 bytes left [ 110.588137][ T5755] usb 1-1: config 0 descriptor?? [ 110.764829][ T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 110.916057][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 110.921742][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.924201][ T32] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 110.924229][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.924248][ T32] usb 2-1: Product: syz [ 110.924262][ T32] usb 2-1: Manufacturer: syz [ 110.924276][ T32] usb 2-1: SerialNumber: syz [ 110.963982][ T32] usb 2-1: config 0 descriptor?? [ 110.982836][ T32] gs_usb 2-1:0.0: Required endpoints not found [ 111.060750][ T6074] FAULT_INJECTION: forcing a failure. [ 111.060750][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.060783][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.060803][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.060814][ T6074] Call Trace: [ 111.060821][ T6074] [ 111.060829][ T6074] dump_stack_lvl+0xe8/0x150 [ 111.060861][ T6074] should_fail_ex+0x46b/0x600 [ 111.060892][ T6074] _copy_to_user+0x31/0xb0 [ 111.060917][ T6074] simple_read_from_buffer+0xe1/0x170 [ 111.060945][ T6074] proc_fail_nth_read+0x1be/0x230 [ 111.060970][ T6074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.060995][ T6074] ? rw_verify_area+0x2ac/0x4e0 [ 111.061020][ T6074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.061040][ T6074] vfs_read+0x212/0xa80 [ 111.061071][ T6074] ? __pfx_vfs_read+0x10/0x10 [ 111.061094][ T6074] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.061118][ T6074] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.061145][ T6074] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 111.061171][ T6074] ? mutex_lock_nested+0x152/0x1d0 [ 111.061189][ T6074] ? fdget_pos+0x252/0x320 [ 111.061218][ T6074] ksys_read+0x156/0x270 [ 111.061244][ T6074] ? __pfx_ksys_read+0x10/0x10 [ 111.061275][ T6074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.061294][ T6074] do_syscall_64+0x174/0x580 [ 111.061328][ T6074] ? trace_irq_disable+0x3b/0x140 [ 111.061351][ T6074] ? clear_bhb_loop+0x40/0x90 [ 111.061373][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.061391][ T6074] RIP: 0033:0x7f1e0a87d68e [ 111.061409][ T6074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.061423][ T6074] RSP: 002b:00007f1e08b0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.061442][ T6074] RAX: ffffffffffffffda RBX: 00007f1e08b0e6c0 RCX: 00007f1e0a87d68e [ 111.061454][ T6074] RDX: 000000000000000f RSI: 00007f1e08b0e0a0 RDI: 0000000000000004 [ 111.061465][ T6074] RBP: 00007f1e08b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 111.061476][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.061486][ T6074] R13: 00007f1e0ab36038 R14: 00007f1e0ab35fa0 R15: 00007fff309505f8 [ 111.061515][ T6074] [ 111.191187][ T32] usb 2-1: USB disconnect, device number 7 [ 111.448105][ T5755] usbhid 1-1:0.1: can't add hid device: -71 [ 111.448227][ T5755] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 111.484442][ T5755] usb 1-1: USB disconnect, device number 9 [ 111.654892][ T5801] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 111.807684][ T5801] usb 3-1: config 21 has an invalid interface number: 183 but max is 0 [ 111.807713][ T5801] usb 3-1: config 21 has no interface number 0 [ 111.807738][ T5801] usb 3-1: config 21 interface 183 has no altsetting 0 [ 111.809973][ T5801] usb 3-1: New USB device found, idVendor=0403, idProduct=6044, bcdDevice=38.7c [ 111.810002][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.810022][ T5801] usb 3-1: Product: syz [ 111.810037][ T5801] usb 3-1: Manufacturer: syz [ 111.810048][ T5801] usb 3-1: SerialNumber: syz [ 111.846371][ T5817] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.029439][ T5758] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 112.051940][ T5817] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 112.051992][ T5817] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 112.052066][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.122647][ T5817] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 112.152658][ T5801] ftdi_sio 3-1:21.183: FTDI USB Serial Device converter detected [ 112.171055][ T5801] ftdi_sio ttyUSB0: unknown device type: 0x387c [ 112.182357][ T5801] usb 3-1: USB disconnect, device number 6 [ 112.184350][ T5801] ftdi_sio 3-1:21.183: device disconnected [ 112.197766][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.197805][ T5758] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.199956][ T5758] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 112.199983][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.200002][ T5758] usb 2-1: Product: syz [ 112.200016][ T5758] usb 2-1: Manufacturer: syz [ 112.200026][ T5758] usb 2-1: SerialNumber: syz [ 112.203086][ T5758] usb 2-1: config 0 descriptor?? [ 112.209364][ T5758] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 112.230904][ T5758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.239139][ T5758] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 112.239194][ T5758] usb 2-1: media controller created [ 112.279629][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.412882][ T6087] random: crng reseeded on system resumption [ 112.440936][ T5758] DVB: Unable to find symbol tda10046_attach() [ 112.440944][ T5758] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 112.440952][ T5758] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 112.445326][ T37] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 112.619124][ T37] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.619166][ T37] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 112.619192][ T37] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.619222][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.619241][ T37] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 112.619253][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.624046][ T37] usb 1-1: config 0 descriptor?? [ 112.627138][ T6091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.694003][ T6099] dlm: plock device version mismatch: kernel (1.2.0), user (44.192.8192) [ 113.000910][ T4925] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 113.010065][ T4925] Bluetooth: hci2: Injecting HCI hardware error event [ 113.025348][ T61] Bluetooth: hci2: hardware error 0x00 [ 113.048669][ T6107] FAULT_INJECTION: forcing a failure. [ 113.048669][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 113.048696][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.048713][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.048724][ T6107] Call Trace: [ 113.048730][ T6107] [ 113.048737][ T6107] dump_stack_lvl+0xe8/0x150 [ 113.048761][ T6107] should_fail_ex+0x46b/0x600 [ 113.048808][ T6107] should_failslab+0xa8/0x100 [ 113.048832][ T6107] __kmalloc_cache_noprof+0x84/0x690 [ 113.048851][ T6107] ? tomoyo_init_log+0x195/0x1fb0 [ 113.048867][ T6107] ? number+0xd26/0xf80 [ 113.048886][ T6107] tomoyo_init_log+0x195/0x1fb0 [ 113.048904][ T6107] ? __pfx_number+0x10/0x10 [ 113.048919][ T6107] ? __pfx_kasan_save_alloc_info+0x1/0x10 [ 113.048946][ T6107] ? format_decode+0xd4/0xdb0 [ 113.048970][ T6107] ? __pfx_tomoyo_init_log+0x10/0x10 [ 113.048987][ T6107] ? tomoyo_profile+0x11/0x50 [ 113.049004][ T6107] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 113.049031][ T6107] tomoyo_supervisor+0x353/0x1570 [ 113.049060][ T6107] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 113.049086][ T6107] ? rcu_is_watching+0x15/0xb0 [ 113.049109][ T6107] ? trace_kmalloc+0x2a/0xf0 [ 113.049131][ T6107] ? __kmalloc_noprof+0x408/0x7b0 [ 113.049150][ T6107] ? tomoyo_encode+0x28b/0x550 [ 113.049169][ T6107] ? tomoyo_check_acl+0x386/0x400 [ 113.049191][ T6107] ? __pfx_tomoyo_check_mount_acl+0x10/0x10 [ 113.049213][ T6107] tomoyo_mount_permission+0x624/0x9d0 [ 113.049233][ T6107] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 113.049247][ T6107] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 113.049300][ T6107] security_sb_mount+0xe4/0x320 [ 113.049319][ T6107] path_mount+0xbc/0x10e0 [ 113.049336][ T6107] ? user_path_at+0xd4/0x160 [ 113.049358][ T6107] ? user_path_at+0xd4/0x160 [ 113.049378][ T6107] __se_sys_mount+0x31d/0x420 [ 113.049401][ T6107] ? __pfx___se_sys_mount+0x10/0x10 [ 113.049422][ T6107] ? __x64_sys_mount+0x20/0xc0 [ 113.049437][ T6107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.049451][ T6107] do_syscall_64+0x174/0x580 [ 113.049472][ T6107] ? trace_irq_disable+0x3b/0x140 [ 113.049489][ T6107] ? clear_bhb_loop+0x40/0x90 [ 113.049507][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.049523][ T6107] RIP: 0033:0x7fc926c4ce59 [ 113.049538][ T6107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.049551][ T6107] RSP: 002b:00007fc924ea6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.049577][ T6107] RAX: ffffffffffffffda RBX: 00007fc926ec5fa0 RCX: 00007fc926c4ce59 [ 113.049587][ T6107] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 113.049598][ T6107] RBP: 00007fc924ea6090 R08: 0000200000000380 R09: 0000000000000000 [ 113.049608][ T6107] R10: 0000000000208001 R11: 0000000000000246 R12: 0000000000000002 [ 113.049617][ T6107] R13: 00007fc926ec6038 R14: 00007fc926ec5fa0 R15: 00007fff8b2414a8 [ 113.049643][ T6107] [ 113.085201][ T6107] bpf: Bad value for 'gid' [ 113.408730][ T37] kone 0003:1E7D:2CED.0008: report_id 0 is invalid [ 113.408754][ T37] kone 0003:1E7D:2CED.0008: item 0 1 1 8 parsing failed [ 113.411417][ T37] kone 0003:1E7D:2CED.0008: parse failed [ 113.411498][ T37] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -22 [ 113.478982][ T5817] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 113.492151][ T5817] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 113.492175][ T5817] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 113.578614][ T37] usb 1-1: USB disconnect, device number 10 [ 113.643247][ T5817] usb 4-1: USB disconnect, device number 8 [ 114.054911][ T5817] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 114.227041][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.227061][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.227086][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.227098][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.288468][ T37] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 114.434972][ T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 114.457102][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.457859][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 114.459012][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.459034][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.462440][ T37] usb 1-1: string descriptor 0 read error: -22 [ 114.462665][ T37] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.462689][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.507115][ T5817] usb 3-1: usb_control_msg returned -32 [ 114.507161][ T5817] usbtmc 3-1:16.0: can't read capabilities [ 114.597977][ T37] usb 1-1: 0:2 : does not exist [ 114.623404][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.642454][ T32] usb 4-1: string descriptor 0 read error: -22 [ 114.642670][ T32] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 114.642757][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.928808][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.931177][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.118100][ T5704] usb 3-1: USB disconnect, device number 7 [ 115.646730][ T37] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.669000][ T37] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 115.795530][ T61] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.818403][ T37] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 115.859885][ T37] usb 1-1: USB disconnect, device number 11 [ 116.502999][ T6132] netlink: 61 bytes leftover after parsing attributes in process `syz.2.107'. [ 116.665506][ T5817] usb 4-1: USB disconnect, device number 9 [ 116.684958][ T5801] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 116.845175][ T5801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.845201][ T5801] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 116.845306][ T5801] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 116.845330][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.911357][ T5801] usb 1-1: config 0 descriptor?? [ 116.966735][ T5801] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 116.966873][ T5801] dvb-usb: bulk message failed: -22 (3/0) [ 117.011522][ T5801] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 117.014255][ T5801] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 117.014292][ T5801] usb 1-1: media controller created [ 117.031643][ T5801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.198622][ T6138] comedi comedi3: 8255: I/O port conflict (0x40404f24,4) [ 117.220107][ T5801] dvb-usb: bulk message failed: -22 (6/0) [ 117.220340][ T5801] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 117.289154][ T5801] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 117.440464][ T5801] dvb-usb: schedule remote query interval to 150 msecs. [ 117.440489][ T5801] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 117.479144][ T5758] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 117.521961][ T6087] Restarting kernel threads ... [ 117.522644][ T6087] Done restarting kernel threads. [ 117.593317][ T1374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.597841][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 117.597894][ T9] dvb-usb: error while querying for an remote control event. [ 117.650229][ T32] usb 1-1: USB disconnect, device number 12 [ 117.762535][ T1374] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 117.762563][ T1374] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 117.762576][ T1374] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 117.780874][ T1374] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 117.780904][ T1374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.780932][ T1374] usb 3-1: Product: syz [ 117.780945][ T1374] usb 3-1: Manufacturer: syz [ 117.780958][ T1374] usb 3-1: SerialNumber: syz [ 117.793810][ T1374] usb 3-1: config 0 descriptor?? [ 117.796223][ T6140] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.796404][ T6140] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.799441][ T1374] usb 3-1: ucan: probing device on interface #0 [ 117.909472][ T32] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 118.000817][ T5704] usb 2-1: USB disconnect, device number 8 [ 118.044902][ T5817] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 118.205104][ T5817] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.205220][ T5817] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.205243][ T5817] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.205277][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.205310][ T5817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 118.205386][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.282937][ T5817] usb 4-1: config 0 descriptor?? [ 118.491693][ T6159] fuse: Bad value for 'fd' [ 118.836867][ T5817] hid_parser_main: 62 callbacks suppressed [ 118.836892][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.836920][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.836945][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.836967][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.836992][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.837017][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.837040][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.837063][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.837085][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 118.837107][ T5817] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 119.045677][ T32] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.070363][ T1374] ucan 3-1:0.0 can0: registered device [ 119.070799][ T1374] ucan 3-1:0.0 can0: firmware string: unknown [ 119.114536][ T5817] kone 0003:1E7D:2CED.0009: hidraw0: USB HID vff.fe Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 119.178263][ T1374] usb 3-1: USB disconnect, device number 8 [ 119.178763][ T5817] usb 4-1: USB disconnect, device number 10 [ 119.194830][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 119.196955][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 119.199437][ T32] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 119.199463][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.199482][ T32] usb 2-1: Product: syz [ 119.199496][ T32] usb 2-1: Manufacturer: syz [ 119.199510][ T32] usb 2-1: SerialNumber: syz [ 119.533235][ T6165] comedi comedi3: 8255: I/O port conflict (0x40404f24,4) [ 119.577373][ T37] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 119.735767][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 119.747908][ T37] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.747935][ T37] usb 1-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 119.747954][ T37] usb 1-1: config 0 has no interface number 0 [ 119.748047][ T37] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 119.748068][ T37] usb 1-1: config 0 interface 1 has no altsetting 0 [ 119.797105][ T37] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 119.797132][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.797147][ T37] usb 1-1: Product: syz [ 119.797158][ T37] usb 1-1: Manufacturer: syz [ 119.797170][ T37] usb 1-1: SerialNumber: syz [ 119.819644][ T37] usb 1-1: config 0 descriptor?? [ 119.859037][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 119.892649][ T32] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 119.898386][ T32] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.082146][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.125712][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.188950][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 120.195935][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.197854][ T5817] usb 4-1: config 211 has an invalid interface number: 254 but max is 0 [ 120.197878][ T5817] usb 4-1: config 211 has no interface number 0 [ 120.206656][ T5817] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d7.f8 [ 120.206683][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.206702][ T5817] usb 4-1: Product: syz [ 120.206715][ T5817] usb 4-1: Manufacturer: syz [ 120.206728][ T5817] usb 4-1: SerialNumber: syz [ 120.282792][ T37] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 120.282825][ T37] cx231xx 1-1:0.1: Not found matching IAD interface [ 120.317170][ T37] usb 1-1: USB disconnect, device number 13 [ 120.352451][ T32] usb 2-1: USB disconnect, device number 9 [ 120.486190][ T5782] udevd[5782]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 120.688272][ T5817] kl5kusb105 4-1:211.254: KL5KUSB105D / PalmConnect converter detected [ 120.695725][ T5817] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 120.702934][ T5817] usb 4-1: USB disconnect, device number 11 [ 120.747470][ T5817] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 120.748432][ T5817] kl5kusb105 4-1:211.254: device disconnected [ 121.308530][ T5817] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.458158][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.458198][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.512704][ T5817] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 121.512734][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.512754][ T5817] usb 2-1: Product: syz [ 121.512768][ T5817] usb 2-1: Manufacturer: syz [ 121.512783][ T5817] usb 2-1: SerialNumber: syz [ 121.576038][ T6185] binder: 6184:6185 ioctl c0306201 200000000380 returned -22 [ 121.595665][ T5817] usb 2-1: config 0 descriptor?? [ 121.625185][ T5817] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 121.729375][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.759990][ T5817] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 121.760048][ T5817] usb 2-1: media controller created [ 121.859449][ T6181] random: crng reseeded on system resumption [ 121.919868][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.206527][ T5817] DVB: Unable to find symbol tda10046_attach() [ 122.206542][ T5817] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 122.206554][ T5817] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 127.235188][ T5817] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 127.240808][ T6191] Restarting kernel threads ... [ 127.242070][ T6191] Done restarting kernel threads. [ 136.586122][ T4925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.648283][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.650412][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.652397][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.653201][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.760087][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.792775][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.861728][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.886396][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.887941][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.913934][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.028660][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.032038][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.059354][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.081272][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 138.112201][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.152734][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.169264][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.201650][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.202495][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 138.755230][ T4925] Bluetooth: hci4: command tx timeout [ 139.004931][ T4925] Bluetooth: hci5: command tx timeout [ 140.274959][ T4925] Bluetooth: hci7: command tx timeout [ 140.834819][ T4925] Bluetooth: hci4: command tx timeout [ 141.000695][ T4925] Bluetooth: hci6: command tx timeout [ 141.075156][ T4925] Bluetooth: hci5: command tx timeout [ 142.064310][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.073074][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.073398][ T6211] bridge_slave_0: entered allmulticast mode [ 142.093181][ T6211] bridge_slave_0: entered promiscuous mode [ 142.170068][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.170405][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.171007][ T6211] bridge_slave_1: entered allmulticast mode [ 142.198257][ T6211] bridge_slave_1: entered promiscuous mode [ 142.324313][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.334136][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.342885][ T6207] bridge_slave_0: entered allmulticast mode [ 142.352660][ T6207] bridge_slave_0: entered promiscuous mode [ 142.365766][ T4925] Bluetooth: hci7: command tx timeout [ 142.451940][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.452503][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.452807][ T6207] bridge_slave_1: entered allmulticast mode [ 142.467064][ T6207] bridge_slave_1: entered promiscuous mode [ 142.475001][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.547052][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.650671][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.651292][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.651569][ T6228] bridge_slave_0: entered allmulticast mode [ 142.675732][ T6228] bridge_slave_0: entered promiscuous mode [ 142.723549][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.767526][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.767854][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.768129][ T6228] bridge_slave_1: entered allmulticast mode [ 142.772822][ T6228] bridge_slave_1: entered promiscuous mode [ 142.824455][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.848113][ T6211] team0: Port device team_slave_0 added [ 142.971893][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.971994][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.900263][ T6211] team0: Port device team_slave_1 added [ 144.091977][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.108083][ T6207] team0: Port device team_slave_0 added [ 144.150392][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.165006][ T6207] team0: Port device team_slave_1 added [ 144.189509][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.189524][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.189548][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.325855][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.325871][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.325895][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.500697][ T6228] team0: Port device team_slave_0 added [ 144.503771][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.503785][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.503808][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.577879][ T6228] team0: Port device team_slave_1 added [ 144.582737][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.582751][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.582775][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.827602][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.827619][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.827642][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.936604][ T6211] hsr_slave_0: entered promiscuous mode [ 144.938841][ T6211] hsr_slave_1: entered promiscuous mode [ 144.940658][ T6211] debugfs: 'hsr0' already exists in 'hsr' [ 144.940680][ T6211] Cannot create hsr debugfs directory [ 144.943660][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.943673][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.943697][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.050225][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.050860][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.051125][ T6226] bridge_slave_0: entered allmulticast mode [ 145.079607][ T6226] bridge_slave_0: entered promiscuous mode [ 145.164881][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.165203][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.165871][ T6226] bridge_slave_1: entered allmulticast mode [ 145.170555][ T6226] bridge_slave_1: entered promiscuous mode [ 145.226036][ T6207] hsr_slave_0: entered promiscuous mode [ 145.228415][ T6207] hsr_slave_1: entered promiscuous mode [ 145.232133][ T6207] debugfs: 'hsr0' already exists in 'hsr' [ 145.232157][ T6207] Cannot create hsr debugfs directory [ 145.419770][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.522232][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.565226][ T6228] hsr_slave_0: entered promiscuous mode [ 145.567506][ T6228] hsr_slave_1: entered promiscuous mode [ 145.569254][ T6228] debugfs: 'hsr0' already exists in 'hsr' [ 145.569282][ T6228] Cannot create hsr debugfs directory [ 145.762958][ T6226] team0: Port device team_slave_0 added [ 145.834476][ T6226] team0: Port device team_slave_1 added [ 146.070830][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.070847][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.070870][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.180541][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.180557][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.180582][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.428636][ T61] Bluetooth: hci6: command tx timeout [ 146.428669][ T61] Bluetooth: hci5: command tx timeout [ 146.428688][ T61] Bluetooth: hci7: command tx timeout [ 146.428853][ T4925] Bluetooth: hci4: command tx timeout [ 148.436119][ T4925] Bluetooth: hci7: command tx timeout [ 148.436152][ T4925] Bluetooth: hci5: command tx timeout [ 148.436172][ T4925] Bluetooth: hci6: command tx timeout [ 148.436271][ T5614] Bluetooth: hci4: command tx timeout [ 150.515831][ T5614] Bluetooth: hci6: command tx timeout [ 196.877634][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 196.910702][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 196.914408][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 196.962474][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 196.983734][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 197.312595][ T5614] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 197.352251][ T5614] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 197.366720][ T5614] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 197.381846][ T5614] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 197.406453][ T5614] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.131505][ T5614] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 198.189446][ T4925] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 198.223517][ T4925] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 198.227680][ T4925] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 198.240479][ T4925] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 198.244346][ T4925] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 198.300939][ T4925] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 198.302694][ T4925] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 198.319162][ T4925] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 198.319899][ T4925] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 199.074839][ T61] Bluetooth: hci8: command tx timeout [ 199.475018][ T61] Bluetooth: hci9: command tx timeout [ 200.274845][ T61] Bluetooth: hci11: command tx timeout [ 200.435800][ T61] Bluetooth: hci10: command tx timeout [ 201.154799][ T61] Bluetooth: hci8: command tx timeout [ 201.484988][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 201.485151][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 201.555005][ T5610] Bluetooth: hci9: command tx timeout [ 203.371907][ T5610] Bluetooth: hci11: command tx timeout [ 203.378190][ T5610] Bluetooth: hci10: command tx timeout [ 203.380256][ T5610] Bluetooth: hci8: command tx timeout [ 203.637494][ T5610] Bluetooth: hci9: command tx timeout [ 205.395364][ T61] Bluetooth: hci10: command tx timeout [ 205.395396][ T61] Bluetooth: hci11: command tx timeout [ 205.403514][ T5610] Bluetooth: hci8: command tx timeout [ 205.714824][ T61] Bluetooth: hci9: command tx timeout [ 207.475631][ T5610] Bluetooth: hci10: command tx timeout [ 207.475680][ T61] Bluetooth: hci11: command tx timeout [ 209.792276][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.792375][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.834801][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 257.191670][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.239329][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.240540][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.276805][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.277689][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.410266][ T5618] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 257.450043][ T5618] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 257.451199][ T5618] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 257.452441][ T5618] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 257.469654][ T5618] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 258.180074][ T6325] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 258.217829][ T6325] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 258.219056][ T6325] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 258.222759][ T6325] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 258.224117][ T6325] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 258.417314][ T6336] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 258.451472][ T6336] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 258.452671][ T6336] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 258.454073][ T6336] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 258.481998][ T6336] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 262.928796][ T6347] Bluetooth: hci4: command 0x0406 tx timeout [ 262.928839][ T6347] Bluetooth: hci5: command 0x0406 tx timeout [ 262.928862][ T6347] Bluetooth: hci7: command 0x0406 tx timeout [ 262.928987][ T6347] Bluetooth: hci6: command 0x0406 tx timeout [ 291.094666][ C1] sched: DL replenish lagged too much [ 296.035012][ T39] INFO: task syz.1.122:6179 blocked for more than 143 seconds. [ 296.035037][ T39] Not tainted syzkaller #0 [ 296.035047][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.035056][ T39] task:syz.1.122 state:D stack:23640 pid:6179 tgid:6179 ppid:5612 task_flags:0x400040 flags:0x00080002 [ 296.035127][ T39] Call Trace: [ 296.035134][ T39] [ 296.035149][ T39] __schedule+0x16f9/0x5500 [ 296.035209][ T39] ? __pfx___schedule+0x10/0x10 [ 296.035248][ T39] rt_mutex_schedule+0x76/0xf0 [ 296.035274][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 296.035329][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 296.035354][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 296.035377][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.035416][ T39] ? tun_chr_close+0x41/0x1c0 [ 296.035450][ T39] ? tun_chr_close+0x41/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 296.035475][ T39] mutex_lock_nested+0x168/0x1d0 [ 296.035500][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 296.035529][ T39] tun_chr_close+0x41/0x1c0 [ 296.035557][ T39] __fput+0x461/0xa70 [ 296.035597][ T39] task_work_run+0x1d9/0x270 [ 296.035623][ T39] ? __pfx_task_work_run+0x10/0x10 [ 296.035654][ T39] exit_to_user_mode_loop+0x193/0x680 [ 296.035676][ T39] ? rcu_is_watching+0x15/0xb0 [ 296.035703][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.035724][ T39] do_syscall_64+0x353/0x580 [ 296.035754][ T39] ? clear_bhb_loop+0x40/0x90 [ 296.035778][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.035795][ T39] RIP: 0033:0x7fe37c3ace59 [ 296.035813][ T39] RSP: 002b:00007ffd9f40a088 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 296.035833][ T39] RAX: 0000000000000000 RBX: 00007fe37c627da0 RCX: 00007fe37c3ace59 [ 296.035846][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 296.035857][ T39] RBP: 00007fe37c627da0 R08: 0000000000000006 R09: 0000000000000000 [ 296.035869][ T39] R10: 00007fe37c627cb0 R11: 0000000000000246 R12: 000000000001e8dd [ 296.035882][ T39] R13: 00007fe37c62636c R14: 000000000001dd55 R15: 00007fe37c626360 [ 296.035912][ T39] [ 296.035922][ T39] INFO: task syz-executor:6207 blocked for more than 143 seconds. [ 296.035936][ T39] Not tainted syzkaller #0 [ 296.035945][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.035953][ T39] task:syz-executor state:D stack:21560 pid:6207 tgid:6207 ppid:1 task_flags:0x400140 flags:0x00080002 [ 296.036002][ T39] Call Trace: [ 296.036008][ T39] [ 296.036019][ T39] __schedule+0x16f9/0x5500 [ 296.036044][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 296.036080][ T39] ? kernel_text_address+0xa5/0xe0 [ 296.036112][ T39] ? __pfx___schedule+0x10/0x10 [ 296.036148][ T39] rt_mutex_schedule+0x76/0xf0 [ 296.036174][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 296.036213][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 296.036235][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 296.036260][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.037867][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.038100][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.038141][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.038166][ T39] mutex_lock_nested+0x168/0x1d0 [ 296.038198][ T39] rtnl_newlink+0x883/0x1bb0 [ 296.038240][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.038266][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.038300][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.038325][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.038357][ T39] ? unwind_next_frame+0xa6/0x2550 [ 296.038389][ T39] ? unwind_next_frame+0xa6/0x2550 [ 296.038418][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 296.038458][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.038487][ T39] ? kernel_text_address+0xa5/0xe0 [ 296.038512][ T39] ? __kernel_text_address+0xd/0x30 [ 296.038534][ T39] ? unwind_get_return_address+0x4d/0x90 [ 296.038559][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.038581][ T39] ? arch_stack_walk+0xfb/0x150 [ 296.038614][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 296.038654][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.038680][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 296.038711][ T39] ? kasan_save_track+0x3e/0x80 [ 296.038733][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 296.038758][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 296.038783][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.038811][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.038846][ T39] netlink_rcv_skb+0x232/0x4b0 [ 296.038878][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.038906][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.038947][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.038974][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.039008][ T39] netlink_unicast+0x780/0x920 [ 296.039056][ T39] netlink_sendmsg+0x813/0xb40 [ 296.039085][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.039106][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 296.039137][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 296.039159][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.039178][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 296.039204][ T39] __sys_sendto+0x402/0x590 [ 296.039236][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 296.039293][ T39] ? rcu_is_watching+0x15/0xb0 [ 296.039325][ T39] __x64_sys_sendto+0xde/0x100 [ 296.039352][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.039374][ T39] do_syscall_64+0x174/0x580 [ 296.039421][ T39] ? clear_bhb_loop+0x40/0x90 [ 296.039446][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.039465][ T39] RIP: 0033:0x7f83728ed68e [ 296.039483][ T39] RSP: 002b:00007ffdc7bd36e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.039504][ T39] RAX: ffffffffffffffda RBX: 000055559256f500 RCX: 00007f83728ed68e [ 296.039518][ T39] RDX: 0000000000000060 RSI: 00007f83736d4670 RDI: 0000000000000003 [ 296.039531][ T39] RBP: 0000000000000001 R08: 00007ffdc7bd3764 R09: 000000000000000c [ 296.134890][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 296.134911][ T39] R13: 0000000000000000 R14: 00007f83736d4670 R15: 0000000000000000 [ 296.134943][ T39] [ 296.134954][ T39] INFO: task syz-executor:6211 blocked for more than 143 seconds. [ 296.134969][ T39] Not tainted syzkaller #0 [ 296.134979][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.134987][ T39] task:syz-executor state:D stack:21336 pid:6211 tgid:6211 ppid:1 task_flags:0x400140 flags:0x00080002 [ 296.135039][ T39] Call Trace: [ 296.135045][ T39] [ 296.135057][ T39] __schedule+0x16f9/0x5500 [ 296.135127][ T39] ? __pfx___schedule+0x10/0x10 [ 296.135168][ T39] rt_mutex_schedule+0x76/0xf0 [ 296.135195][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 296.135236][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 296.135261][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 296.135285][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.135338][ T39] ? register_nexthop_notifier+0x88/0x290 [ 296.135363][ T39] ? register_nexthop_notifier+0x88/0x290 [ 296.135389][ T39] ? register_nexthop_notifier+0x88/0x290 [ 296.135406][ T39] mutex_lock_nested+0x168/0x1d0 [ 296.135434][ T39] register_nexthop_notifier+0x88/0x290 [ 296.135454][ T39] ? __devlink_resource_find+0xab/0xe0 [ 296.135482][ T39] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 296.135505][ T39] ? __devlink_resource_find+0xb5/0xe0 [ 296.135536][ T39] nsim_fib_create+0x807/0xa00 [ 296.163217][ T39] ? __pfx_nsim_fib_create+0x10/0x10 [ 296.163264][ T39] nsim_drv_probe+0x7e3/0xc20 [ 296.163285][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.163322][ T39] ? __pfx_nsim_drv_probe+0x10/0x10 [ 296.163358][ T39] ? driver_sysfs_add+0x1fe/0x210 [ 296.163385][ T39] ? __pfx_nsim_bus_probe+0x10/0x10 [ 296.163411][ T39] really_probe+0x267/0xaf0 [ 296.163443][ T39] __driver_probe_device+0x1e2/0x350 [ 296.163470][ T39] driver_probe_device+0x4f/0x240 [ 296.163499][ T39] __device_attach_driver+0x270/0x410 [ 296.163528][ T39] bus_for_each_drv+0x25b/0x2f0 [ 296.163559][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 296.163584][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 296.163612][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 296.163640][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 296.163676][ T39] __device_attach+0x2c8/0x450 [ 296.163702][ T39] ? __pfx___device_attach+0x10/0x10 [ 296.163726][ T39] ? rt_spin_unlock+0x160/0x200 [ 296.163757][ T39] device_initial_probe+0xa1/0xd0 [ 296.163783][ T39] bus_probe_device+0x12d/0x220 [ 296.163806][ T39] device_add+0x7ec/0xb90 [ 296.163833][ T39] new_device_store+0x37b/0x710 [ 296.163864][ T39] ? __pfx_new_device_store+0x10/0x10 [ 296.163891][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 296.244668][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 296.244701][ T39] ? sysfs_kf_write+0x166/0x260 [ 296.244722][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 296.244739][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 296.244783][ T39] vfs_write+0x629/0xba0 [ 296.244818][ T39] ? __pfx_vfs_write+0x10/0x10 [ 296.244845][ T39] ? do_sys_openat2+0x14e/0x200 [ 296.244864][ T39] ? kmem_cache_free+0x187/0x6c0 [ 296.244903][ T39] ksys_write+0x156/0x270 [ 296.244930][ T39] ? __pfx_ksys_write+0x10/0x10 [ 296.244953][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.244981][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.245000][ T39] do_syscall_64+0x174/0x580 [ 296.245028][ T39] ? trace_irq_disable+0x3b/0x140 [ 296.245048][ T39] ? clear_bhb_loop+0x40/0x90 [ 296.245080][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.245098][ T39] RIP: 0033:0x7fdbbd43d68e [ 296.245116][ T39] RSP: 002b:00007fff4fef5a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.245136][ T39] RAX: ffffffffffffffda RBX: 000055557ff00500 RCX: 00007fdbbd43d68e [ 296.245150][ T39] RDX: 0000000000000003 RSI: 00007fff4fef5b10 RDI: 0000000000000005 [ 296.245162][ T39] RBP: 00007fdbbd513616 R08: 0000000000000000 R09: 0000000000000000 [ 296.245174][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 296.245185][ T39] R13: 00007fff4fef5b10 R14: 00007fdbbe224620 R15: 0000000000000003 [ 296.245214][ T39] [ 296.245226][ T39] INFO: task syz-executor:6226 blocked for more than 143 seconds. [ 296.245241][ T39] Not tainted syzkaller #0 [ 296.245250][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.245259][ T39] task:syz-executor state:D stack:21560 pid:6226 tgid:6226 ppid:1 task_flags:0x400140 flags:0x00080002 [ 296.245309][ T39] Call Trace: [ 296.245315][ T39] [ 296.245326][ T39] __schedule+0x16f9/0x5500 [ 296.245349][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 296.245385][ T39] ? kernel_text_address+0xa5/0xe0 [ 296.245424][ T39] ? __pfx___schedule+0x10/0x10 [ 296.245462][ T39] rt_mutex_schedule+0x76/0xf0 [ 296.245487][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 296.245526][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 296.245550][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 296.245573][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.245614][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.245644][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.245667][ T39] mutex_lock_nested+0x168/0x1d0 [ 296.245688][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.245716][ T39] rtnl_newlink+0x883/0x1bb0 [ 296.245752][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.245776][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.245805][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.245829][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.245858][ T39] ? unwind_next_frame+0xa6/0x2550 [ 296.245889][ T39] ? unwind_next_frame+0xa6/0x2550 [ 296.245916][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 296.245954][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.245981][ T39] ? kernel_text_address+0xa5/0xe0 [ 296.246004][ T39] ? __kernel_text_address+0xd/0x30 [ 296.246039][ T39] ? unwind_get_return_address+0x4d/0x90 [ 296.246063][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.247685][ T39] ? arch_stack_walk+0xfb/0x150 [ 296.247726][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 296.247765][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.247790][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 296.247814][ T39] ? kasan_save_track+0x3e/0x80 [ 296.247834][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 296.247858][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 296.247882][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.247908][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.247942][ T39] netlink_rcv_skb+0x232/0x4b0 [ 296.247972][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.247999][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.248039][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.248071][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.248105][ T39] netlink_unicast+0x780/0x920 [ 296.248141][ T39] netlink_sendmsg+0x813/0xb40 [ 296.248168][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.248188][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 296.248217][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 296.248239][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.248256][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 296.248281][ T39] __sys_sendto+0x402/0x590 [ 296.248313][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 296.248362][ T39] ? fput_close_sync+0x11f/0x240 [ 296.248383][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 296.248414][ T39] __x64_sys_sendto+0xde/0x100 [ 296.248440][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.248460][ T39] do_syscall_64+0x174/0x580 [ 296.248486][ T39] ? trace_irq_disable+0x3b/0x140 [ 296.248512][ T39] ? clear_bhb_loop+0x40/0x90 [ 296.248535][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.248553][ T39] RIP: 0033:0x7fa8b9aad68e [ 296.248570][ T39] RSP: 002b:00007ffe7b529a78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.248589][ T39] RAX: ffffffffffffffda RBX: 000055557dd31500 RCX: 00007fa8b9aad68e [ 296.248603][ T39] RDX: 0000000000000020 RSI: 00007fa8ba894670 RDI: 0000000000000003 [ 296.248615][ T39] RBP: 0000000000000001 R08: 00007ffe7b529af4 R09: 000000000000000c [ 296.248627][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 296.248638][ T39] R13: 0000000000000000 R14: 00007fa8ba894670 R15: 0000000000000000 [ 296.248667][ T39] [ 296.248675][ T39] INFO: task syz-executor:6228 blocked for more than 143 seconds. [ 296.248688][ T39] Not tainted syzkaller #0 [ 296.248697][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.248706][ T39] task:syz-executor state:D stack:21464 pid:6228 tgid:6228 ppid:1 task_flags:0x400140 flags:0x00080002 [ 296.248757][ T39] Call Trace: [ 296.248763][ T39] [ 296.248773][ T39] __schedule+0x16f9/0x5500 [ 296.248798][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 296.248833][ T39] ? kernel_text_address+0xa5/0xe0 [ 296.248872][ T39] ? __pfx___schedule+0x10/0x10 [ 296.248910][ T39] rt_mutex_schedule+0x76/0xf0 [ 296.248936][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 296.248974][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 296.248998][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 296.249021][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 296.249062][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 296.576919][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.576955][ T39] mutex_lock_nested+0x168/0x1d0 [ 296.576982][ T39] ? rtnl_newlink+0x883/0x1bb0 [ 296.577011][ T39] rtnl_newlink+0x883/0x1bb0 [ 296.577049][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.577081][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.577111][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.577137][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.577168][ T39] ? unwind_next_frame+0xa6/0x2550 [ 296.577201][ T39] ? unwind_next_frame+0xa6/0x2550 [ 296.577230][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 296.577271][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.577299][ T39] ? kernel_text_address+0xa5/0xe0 [ 296.577324][ T39] ? __kern[ 296.577324][ T39] ? __kernel_text_address+0xd/0x30 [ 296.577347][ T39] ? unwind_get_return_address+0x4d/0x90 [ 296.577372][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.577393][ T39] ? arch_stack_walk+0xfb/0x150 [ 296.577427][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 296.577467][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.577493][ T39] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 296.577517][ T39] ? kasan_save_track+0x3e/0x80 [ 296.577539][ T39] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 296.577563][ T39] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 296.577582][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.577603][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 296.577630][ T39] netlink_rcv_skb+0x232/0x4b0 [ 296.577659][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.577686][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.577729][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.577757][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.577791][ T39] netlink_unicast+0x780/0x920 [ 296.577829][ T39] netlink_sendmsg+0x813/0xb40 [ 296.577858][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.577879][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 296.577908][ T39] ? aa_sock_msg_perm+0x122/0x200 [ 296.577930][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.577948][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 296.577976][ T39] __sys_sendto+0x402/0x590 [ 296.578009][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 296.578067][ T39] ? fput_close_sync+0x11f/0x240 [ 296.578090][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 296.578122][ T39] __x64_sys_sendto+0xde/0x100 [ 296.578149][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.578171][ T39] do_syscall_64+0x174/0x580 [ 296.578198][ T39] ? trace_irq_disable+0x3b/0x140 [ 296.578220][ T39] ? clear_bhb_loop+0x40/0x90 [ 296.578244][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.578264][ T39] RIP: 0033:0x7f6dd5dcd68e [ 296.578282][ T39] RSP: 002b:00007ffc5bf50348 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.578303][ T39] RAX: ffffffffffffffda RBX: 000055555f31a500 RCX: 00007f6dd5dcd68e [ 296.578317][ T39] RDX: 0000000000000068 RSI: 00007f6dd6bb4670 RDI: 0000000000000003 [ 296.704703][ T39] RBP: 0000000000000001 R08: 00007ffc5bf503c4 R09: 000000000000000c [ 296.704723][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 296.704735][ T39] R13: 0000000000000000 R14: 00007f6dd6bb4670 R15: 0000000000000000 [ 296.704767][ T39] [ 296.704814][ T39] [ 296.704814][ T39] Showing all locks held in the system: [ 296.704823][ T39] 2 locks held by kworker/u8:0/12: [ 296.704834][ T39] #0: ffff88803275a938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.704894][ T39] #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.704947][ T39] 4 locks held by pr/legacy/17: [ 296.704957][ T39] #0: ffffffff8e1bccc0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 296.705004][ T39] #1: ffffffff8e0a45b8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 296.705050][ T39] #2: ffffffff99e10018 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50 [ 296.705099][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 296.705148][ T39] 3 locks held by kworker/1:1/37: [ 296.705158][ T39] #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.705216][ T39] #1: ffffc90000ac7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.705267][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x10d0 [ 296.705321][ T39] 1 lock held by khungtaskd/39: [ 296.705332][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 296.705389][ T39] 4 locks held by kworker/u9:0/61: [ 296.705399][ T39] #0: ffff888031a18938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.705454][ T39] #1: ffffc9000127fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.705505][ T39] #2: ffff8880399640b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 296.705556][ T39] #3: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 296.705615][ T39] 3 locks held by kworker/u8:8/1033: [ 296.705626][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.705682][ T39] #1: ffffc90005f57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.705733][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 296.705779][ T39] 3 locks held by kworker/u8:12/1233: [ 296.705790][ T39] #0: ffff888032491138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.705841][ T39] #1: ffffc90006637c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.705892][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 296.705958][ T39] 4 locks held by kworker/u9:1/4925: [ 296.705969][ T39] #0: ffff888035678138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.706025][ T39] #1: ffffc90007977c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.706076][ T39] #2: ffff888032090f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 296.706126][ T39] #3: ffff8880320900b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 296.890360][ T39] 5 locks held by klogd/4965: [ 296.890373][ T39] #0: ffffffff8e311470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.890421][ T39] #1: ffff8880b8642d18 (&pcp->lock){+.+.}-{3:3}, at: free_frozen_page_commit+0x81c/0x1840 [ 296.890470][ T39] #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 296.890519][ T39] #3: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x520 [ 296.890566][ T39] #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 296.890614][ T39] 2 locks held by getty/5365: [ 296.890625][ T39] #0: ffff8880288e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 296.890679][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 296.890733][ T39] 2 locks held by syz-executor/5596: [ 296.890744][ T39] #0: ffff88803a8d91b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 296.890791][ T39] #1: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 296.890838][ T39] 4 locks held by kworker/u9:2/5610: [ 296.890849][ T39] #0: ffff888031a1a138 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.890906][ T39] #1: ffffc900048cfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.890957][ T39] #2: ffff8880399600b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 296.891008][ T39] #3: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 296.891059][ T39] 1 lock held by syz-executor/5613: [ 296.891070][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 296.891122][ T39] 6 locks held by kworker/u9:3/5614: [ 296.891133][ T39] #0: ffff88803567c938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.891183][ T39] #1: ffffc9000490fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.891234][ T39] #2: ffff888059dc0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 296.891283][ T39] #3: ffff888059dc00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 296.891327][ T39] #4: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 296.891371][ T39] #5: ffff888036bbeb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 296.891422][ T39] 4 locks held by kworker/u9:4/5618: [ 296.891432][ T39] #0: ffff88806e9a6138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.891487][ T39] #1: ffffc9000493fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.891538][ T39] #2: ffff88803a4d00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 296.891588][ T39] #3: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 296.891645][ T39] 3 locks held by kworker/0:5/5755: [ 296.891656][ T39] #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.891714][ T39] #1: ffffc9000513fc40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.968012][ T39] #2: ffffffff8ececcf8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x480 [ 296.968071][ T39] 2 locks held by kworker/0:7/5801: [ 296.968082][ T39] #0: ffff88813fe17938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 296.968134][ T39] #1: ffffc9000526fc40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 296.968186][ T39] 3 locks held by syz.0.123/6176: [ 296.968197][ T39] #0: ffffffff9a7c0788 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x18c/0xa20 [ 296.968249][ T39] #1: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 296.968301][ T39] #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 296.968353][ T39] 1 lock held by syz.1.122/6179: [ 296.968364][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 296.968417][ T39] 1 lock held by syz.2.127/6186: [ 296.968428][ T39] #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 296.968481][ T39] 2 locks held by syz-executor/6207: [ 296.968497][ T39] #0: ffffffff8faef2a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 296.968555][ T39] #1: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 296.968606][ T39] 7 locks held by syz-executor/6211: [ 296.968616][ T39] #0: ffff888031eba480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 296.968678][ T39] #1: ffff888033af8478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 296.968731][ T39] #2: ffff888028ef34b8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 296.968788][ T39] #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 296.968842][ T39] #4: ffff888021ad6160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 296.968890][ T39] #5: ffff888039cd2310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_probe+0xcf/0xc20 [ 296.968939][ T39] #6: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 296.968985][ T39] 1 lock held by syz-executor/6226: [ 296.968996][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 296.969046][ T39] 2 locks held by syz-executor/6228: [ 296.969057][ T39] #0: ffffffff8ece7b88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 296.969112][ T39] #1: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 296.969167][ T39] 1 lock held by syz-executor/6289: [ 296.969177][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 296.969226][ T39] 1 lock held by syz-executor/6295: [ 296.969237][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 296.969283][ T39] 1 lock held by syz-executor/6302: [ 296.969294][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 296.969341][ T39] 1 lock held by syz-executor/6303: [ 296.969351][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 297.156085][ T39] 1 lock held by dhcpcd/6312: [ 297.156103][ T39] #0: ffff888037842358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 297.156169][ T39] 1 lock held by dhcpcd/6313: [ 297.156179][ T39] #0: ffff8880379ac358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 297.156228][ T39] 1 lock held by dhcpcd/6314: [ 297.156239][ T39] #0: ffff88803d7b2358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 297.156287][ T39] 1 lock held by dhcpcd/6315: [ 297.156297][ T39] #0: ffff888034c3a358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 297.156344][ T39] 1 lock held by dhcpcd/6316: [ 297.156355][ T39] #0: ffff888039f64358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 297.156402][ T39] 1 lock held by dhcpcd/6317: [ 297.156412][ T39] #0: ffff88806fda4358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe70 [ 297.156461][ T39] 1 lock held by syz-executor/6320: [ 297.156471][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 297.156520][ T39] 1 lock held by syz-executor/6321: [ 297.156531][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 297.156579][ T39] 4 locks held by kworker/u9:5/6325: [ 297.156590][ T39] #0: ffff88803f560938 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.156647][ T39] #1: ffffc9000e147c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.156699][ T39] #2: ffff88806e6bc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 297.156751][ T39] #3: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950 [ 297.156804][ T39] 1 lock held by syz-executor/6334: [ 297.156814][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 297.156862][ T39] 5 locks held by kworker/u9:6/6336: [ 297.156873][ T39] #0: ffff88802ad78138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.156925][ T39] #1: ffffc9000e1bfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.156977][ T39] #2: ffff88805d72cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 297.157036][ T39] #3: ffff88805d72c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 297.157082][ T39] #4: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 297.157137][ T39] 1 lock held by syz-executor/6338: [ 297.157148][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 297.157195][ T39] 5 locks held by kworker/u9:7/6339: [ 297.157206][ T39] #0: ffff888041e8b138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.157266][ T39] #1: ffffc9000e1cfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.157319][ T39] #2: ffff88805dd78f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 297.157368][ T39] #3: ffff88805dd780b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 297.157412][ T39] #4: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 297.157457][ T39] 5 locks held by kworker/u9:9/6345: [ 297.157467][ T39] #0: ffff888041c73938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.157518][ T39] #1: ffffc9000e1dfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.208840][ T39] #2: ffff88805d670f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 297.364792][ T39] #3: ffff88805d6700b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 297.364856][ T39] #4: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 297.364904][ T39] 5 locks held by kworker/u9:10/6346: [ 297.364914][ T39] #0: ffff88803f566138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.364966][ T39] #1: ffffc9000e1ffc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.365028][ T39] #2: ffff88805d768f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 297.365077][ T39] #3: ffff88805d7680b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 297.365120][ T39] #4: ffffffff8f72fe18 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 297.365165][ T39] [ 297.365170][ T39] ============================================= [ 297.365170][ T39] [ 297.365200][ T39] NMI backtrace for cpu 0 [ 297.365215][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.365236][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.365247][ T39] Call Trace: [ 297.365254][ T39] [ 297.365263][ T39] dump_stack_lvl+0xe8/0x150 [ 297.365285][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 297.365308][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.365333][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 297.365361][ T39] sys_info+0x135/0x170 [ 297.365381][ T39] watchdog+0xfd3/0x1030 [ 297.365409][ T39] ? watchdog+0x1c9/0x1030 [ 297.365435][ T39] kthread+0x388/0x470 [ 297.365456][ T39] ? __pfx_watchdog+0x10/0x10 [ 297.365474][ T39] ? __pfx_kthread+0x10/0x10 [ 297.365494][ T39] ret_from_fork+0x514/0xb70 [ 297.365519][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 297.365541][ T39] ? __switch_to+0xc79/0x1410 [ 297.365562][ T39] ? __pfx_kthread+0x10/0x10 [ 297.365584][ T39] ret_from_fork_asm+0x1a/0x30 [ 297.365624][ T39] [ 297.365631][ T39] Sending NMI from CPU 0 to CPUs 1: [ 297.365660][ C1] NMI backtrace for cpu 1 [ 297.365672][ C1] CPU: 1 UID: 0 PID: 6176 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.365690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.365699][ C1] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 297.365717][ C1] Code: 40 04 2a 8e 4c 89 f6 e8 7e 02 bb f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c7 20 21 ac 8b 48 c7 c6 60 21 ac 8b eb 1c 66 66 [ 297.365729][ C1] RSP: 0018:ffffc900067067f0 EFLAGS: 00000283 [ 297.365743][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 297.365753][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e1cac60 [ 297.365764][ C1] RBP: ffffffff8188090c R08: 0000000000000000 R09: 0000000000000000 [ 297.365773][ C1] R10: dffffc0000000000 R11: ffffffff8988dac0 R12: 0000000000000002 [ 297.365785][ C1] R13: ffffffff8e1cac60 R14: 0000000000000000 R15: 0000000000000000 [ 297.365795][ C1] FS: 00007f66cee6e6c0(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000 [ 297.365809][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.365821][ C1] CR2: 00007ffd576a8cfc CR3: 000000005c254000 CR4: 00000000003526f0 [ 297.365842][ C1] Call Trace: [ 297.365848][ C1] [ 297.365853][ C1] rcu_is_watching+0x15/0xb0 [ 297.365875][ C1] lock_acquire+0x5f/0x350 [ 297.365895][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 297.365919][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 297.365948][ C1] __local_bh_disable_ip+0x205/0x420 [ 297.365969][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 297.365990][ C1] ? hash_ipportip4_del+0x84/0x1740 [ 297.366008][ C1] ? hash_ipportip4_del+0x84/0x1740 [ 297.366026][ C1] hash_ipportip4_del+0x91/0x1740 [ 297.366045][ C1] ? ip_set_get_ipaddr4+0x17d/0x2d0 [ 297.366065][ C1] ? __pfx_ip_set_get_extensions+0x10/0x10 [ 297.366084][ C1] ? __pfx_ip_set_get_ipaddr4+0x10/0x10 [ 297.366102][ C1] ? hash_ipportip4_del+0x84/0x1740 [ 297.366124][ C1] hash_ipportip4_uadt+0xa69/0xdd0 [ 297.366152][ C1] ? __pfx_hash_ipportip4_del+0x10/0x10 [ 297.366170][ C1] ? __pfx_hash_ipportip4_uadt+0x10/0x10 [ 297.366194][ C1] ? __local_bh_enable+0x1e1/0x2f0 [ 297.366217][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 297.366238][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.366262][ C1] call_ad+0x2e4/0xa20 [ 297.366288][ C1] ? __pfx_call_ad+0x10/0x10 [ 297.366307][ C1] ? ip_set_pernet+0x23/0x240 [ 297.366332][ C1] ? __nla_parse+0x40/0x60 [ 297.366349][ C1] ip_set_ad+0x82a/0x9d0 [ 297.366374][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 297.366405][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.366428][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.366449][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.366481][ C1] nfnetlink_rcv_msg+0xbc9/0x1260 [ 297.366504][ C1] ? nfnetlink_rcv_msg+0x230/0x1260 [ 297.366533][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 297.366568][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 297.366586][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 297.366603][ C1] ? sock_sendmsg_nosec+0x13a/0x180 [ 297.366624][ C1] netlink_rcv_skb+0x232/0x4b0 [ 297.366647][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 297.366670][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.366697][ C1] ? bpf_lsm_capable+0x9/0x20 [ 297.366711][ C1] ? security_capable+0x7e/0x2c0 [ 297.366729][ C1] nfnetlink_rcv+0x2c0/0x27b0 [ 297.366750][ C1] ? sock_sendmsg_nosec+0x13a/0x180 [ 297.366768][ C1] ? __pfx_snprintf+0x10/0x10 [ 297.366788][ C1] ? unwind_get_return_address+0x4d/0x90 [ 297.366809][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.366829][ C1] ? trim_netdev_trace+0x7ac/0x840 [ 297.366848][ C1] ? __pfx_trim_netdev_trace+0x10/0x10 [ 297.366864][ C1] ? stack_trace_save+0xa9/0x100 [ 297.366881][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 297.366902][ C1] ? save_netdev_trace_buffer+0x18f/0x5f0 [ 297.366920][ C1] ? save_netdev_trace_buffer+0x4cf/0x5f0 [ 297.366950][ C1] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 297.366966][ C1] ? ref_tracker_free+0x673/0x820 [ 297.366988][ C1] ? __netlink_deliver_tap+0x636/0x8b0 [ 297.367011][ C1] ? netlink_deliver_tap+0x19c/0x1b0 [ 297.367036][ C1] ? netlink_unicast+0x754/0x920 [ 297.367056][ C1] ? netlink_sendmsg+0x813/0xb40 [ 297.367069][ C1] ? sock_sendmsg_nosec+0x13a/0x180 [ 297.367086][ C1] ? ____sys_sendmsg+0x55c/0x870 [ 297.367108][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 297.367128][ C1] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 297.367150][ C1] ? do_syscall_64+0x174/0x580 [ 297.367171][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.367193][ C1] ? skb_clone+0x246/0x3a0 [ 297.367209][ C1] ? __netlink_deliver_tap+0x866/0x8b0 [ 297.367232][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.367258][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.367280][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.367305][ C1] netlink_unicast+0x780/0x920 [ 297.367330][ C1] netlink_sendmsg+0x813/0xb40 [ 297.367349][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.367365][ C1] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 297.367386][ C1] ? aa_sock_msg_perm+0x122/0x200 [ 297.367403][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.367417][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 297.367436][ C1] ____sys_sendmsg+0x55c/0x870 [ 297.367461][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.367495][ C1] ? import_iovec+0x73/0xa0 [ 297.367513][ C1] ___sys_sendmsg+0x2a5/0x360 [ 297.367534][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 297.367553][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.367579][ C1] ? futex_wait+0x2a2/0x390 [ 297.367606][ C1] ? __fget_files+0x2a/0x420 [ 297.367624][ C1] ? __fget_files+0x3a6/0x420 [ 297.367645][ C1] __x64_sys_sendmsg+0x1c3/0x2a0 [ 297.367669][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.367696][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.367720][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.367736][ C1] do_syscall_64+0x174/0x580 [ 297.367765][ C1] ? trace_irq_disable+0x3b/0x140 [ 297.367788][ C1] ? clear_bhb_loop+0x40/0x90 [ 297.367806][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.367821][ C1] RIP: 0033:0x7f66d0c1ce59 [ 297.367841][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.367854][ C1] RSP: 002b:00007f66cee6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.367871][ C1] RAX: ffffffffffffffda RBX: 00007f66d0e95fa0 RCX: 00007f66d0c1ce59 [ 297.367882][ C1] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 297.367893][ C1] RBP: 00007f66d0cb2d6f R08: 0000000000000000 R09: 0000000000000000 [ 297.367902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.367913][ C1] R13: 00007f66d0e96038 R14: 00007f66d0e95fa0 R15: 00007ffd8c9acbf8 [ 297.367932][ C1] [ 297.674715][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 297.674737][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.674760][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.674772][ T39] Call Trace: [ 297.674781][ T39] [ 297.674790][ T39] vpanic+0x56c/0xa60 [ 297.674822][ T39] ? __pfx___schedule+0x10/0x10 [ 297.674848][ T39] ? __pfx_vpanic+0x10/0x10 [ 297.674882][ T39] panic+0xc5/0xd0 [ 297.674907][ T39] ? __pfx_panic+0x10/0x10 [ 297.674933][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 297.674967][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 297.675002][ T39] watchdog+0x102c/0x1030 [ 297.675029][ T39] ? watchdog+0x1c9/0x1030 [ 297.675054][ T39] kthread+0x388/0x470 [ 297.675076][ T39] ? __pfx_watchdog+0x10/0x10 [ 297.675093][ T39] ? __pfx_kthread+0x10/0x10 [ 297.675114][ T39] ret_from_fork+0x514/0xb70 [ 297.675139][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 297.675161][ T39] ? __switch_to+0xc79/0x1410 [ 297.675182][ T39] ? __pfx_kthread+0x10/0x10 [ 297.675223][ T39] ret_from_fork_asm+0x1a/0x30 [ 297.675261][ T39] [ 297.675591][ T39] Kernel Offset: disabled