last executing test programs: 1m38.904308495s ago: executing program 0 (id=303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x8) 1m38.702332167s ago: executing program 0 (id=304): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b001001"], 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000890000/0x2000)=nil, 0x7ffffffa, 0x0, 0x0, 0x40000000000003, 0x40, 0x1e, 0x0, 0x18}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 1m35.961547423s ago: executing program 0 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 1m34.297750787s ago: executing program 0 (id=312): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = syz_clone(0x1000000, &(0x7f00000005c0)="bd7d754ae0137b47f3a5984bfeea307522277efd7907b81dc8fdd7f44fab76664fc450028aa92a524cfaf27853a34d2a0ef865af374f082eb64c9f91a0b5138082d499a135d203701c562f6f8f8ed34cd0ac79", 0x53, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000440)="42cfeda7b738f34d768b64cc5975d59969811f93a4a0d3bdb482b9244a65d8dbef35e0785e5062b53f80ad85eedfa2365db21d667a8c98653f0bde55f9d4fdb921c55f58e9fc59cc78007714626f2eaf91") ioprio_set$pid(0x2, r1, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000600), 0x14, 0x40080) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x7d, 0xffffffffffffffff, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 1m34.297291641s ago: executing program 2 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000180), 0x7fffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1m33.502348467s ago: executing program 2 (id=314): futex(&(0x7f0000004000), 0x5, 0x1, 0x0, &(0x7f0000004000), 0x0) 1m32.121910316s ago: executing program 2 (id=316): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0xfc, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 1m31.870131064s ago: executing program 0 (id=317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000000)=0xb1e0, 0x4) 1m31.846344397s ago: executing program 0 (id=319): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, 0x0, &(0x7f0000000740), &(0x7f0000000280), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r8 = dup3(r3, r2, 0x80000) recvmmsg$unix(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rights={{0xc}}], 0xc}}], 0x4, 0x58ca2280, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000140), 0x0, 0x1) 1m31.686589086s ago: executing program 2 (id=320): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240), 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) pipe(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) getdents64(r1, &(0x7f0000000480)=""/121, 0x79) 1m30.349682097s ago: executing program 2 (id=327): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000002480)=[{0x5, 0x200, 0x22, &(0x7f0000000340)="cd4c7fa8adb6e082101a55960db4042dc6cabede0c6bd1d63f0881a87cb8bb34c0d8"}, {0xf, 0x3000, 0x0, 0x0}], 0x2}) 1m27.269664565s ago: executing program 2 (id=332): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m21.543567205s ago: executing program 1 (id=333): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmmsg$sock(r0, 0x0, 0x0, 0x448c0) 1m18.41720609s ago: executing program 1 (id=335): syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d1010203010902"], 0x0) unshare(0x24060400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fsmount(r0, 0x1, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1m16.061256914s ago: executing program 32 (id=319): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, 0x0, &(0x7f0000000740), &(0x7f0000000280), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r8 = dup3(r3, r2, 0x80000) recvmmsg$unix(r8, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{&(0x7f0000000a40)=@abs, 0x6e, 0x0}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rights={{0xc}}], 0xc}}], 0x4, 0x58ca2280, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000140), 0x0, 0x1) 1m12.420584725s ago: executing program 1 (id=342): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 1m11.07508915s ago: executing program 33 (id=332): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1m11.01145482s ago: executing program 1 (id=344): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x7d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52", 0xa}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456", 0x36}, {&(0x7f0000000800)="38c434", 0x3}], 0x4, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x20044014) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/153, 0x2f}, {&(0x7f0000000840)=""/186, 0xba}], 0x2}, 0x40002002) 1m9.030314864s ago: executing program 1 (id=345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x7, 0xeeef0000, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, {&(0x7f00000000c0)=""/128, 0x80}, &(0x7f0000000140), 0x25}, 0xa0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) writev(0xffffffffffffffff, 0x0, 0xffffffffffffff6a) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(r7, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 1m4.800695726s ago: executing program 1 (id=346): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r2 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) fsync(r1) shmdt(r2) 1m1.116963225s ago: executing program 3 (id=348): r0 = socket$inet6(0xa, 0x3, 0x5) unshare(0x22020600) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x9, 0x4) 56.777397586s ago: executing program 3 (id=349): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}, 0xff}, 0x18) 56.354913574s ago: executing program 3 (id=350): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000680)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000000)="8689070700004100bf52", 0xa, 0x0, 0x0, 0x0) 55.965031702s ago: executing program 3 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}}, 0x0) 51.689913434s ago: executing program 3 (id=352): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) epoll_create1(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) socket$kcm(0xf, 0x3, 0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) write$vhost_msg_v2(r6, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f0000000440)=""/78, 0x4e, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$BLKROSET(r6, 0x125d, &(0x7f00000001c0)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000480)="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", 0x5e0}], 0x1}}], 0x2, 0x11) 49.377597883s ago: executing program 34 (id=346): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) r2 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) fsync(r1) shmdt(r2) 42.623054281s ago: executing program 3 (id=354): unshare(0x28000600) open(0x0, 0x4200, 0x10) r0 = epoll_create(0x400) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r6 = open(0x0, 0x345842, 0x389b0d52417bb201) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r8, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1", 0x67, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r6}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r7, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r10, 0x40045109, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) 24.187414646s ago: executing program 35 (id=354): unshare(0x28000600) open(0x0, 0x4200, 0x10) r0 = epoll_create(0x400) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r6 = open(0x0, 0x345842, 0x389b0d52417bb201) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r8, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1", 0x67, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r6}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r7, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r10, 0x40045109, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) 0s ago: executing program 7 (id=355): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x9, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1009f1, 0x7, 0x1, 0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x40006], [0x2, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfdfffffc, 0x0, 0x10000000, 0x0, 0x0, 0x80000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcf, 0xf81, 0x9, 0x1, 0x0, 0x800005, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4bc2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x800, 0xbd8d, 0x0, 0x10004, 0x0, 0xfffffffd, 0xff, 0x1, 0x4, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0xfffffffc, 0x800000, 0x40000, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffff8, 0x0, 0x2, 0x0, 0x0, 0x1, 0xffffffff, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c, 0x0, 0x6, 0x2, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x6], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x91a, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x101000, 0x0, 0x4, 0x0, 0x2001, 0xfffffffd, 0x80, 0xfffffffc, 0xffffffff, 0x1, 0x0, 0x0, 0x8f4, 0x400000, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xffee0000, 0x4, 0x2]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000b80)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000003000)=[{&(0x7f0000000040)}, {&(0x7f0000001880)}, {&(0x7f0000001980)="5b33c0f673399bcf2f7cb6860dc37f5f5de6376d2530dd5af6a22c0b0673d46a41c99960e5c1af4b9559f2c02b6c19b09da3df0eb68e0af993470ea1bd9ce382932cb1f165c9814072fcd4a0bc65a33cf2067d2ca6bc71428afc043eba51dd68ae44c36b5e32e9f585dfafa5191cf11926aeed2911d893075abbf9630e94c9f90184e33ed0dab9abbaed597ef61a", 0x8e}, {0x0}, {&(0x7f0000001b80)="69e87bb4ddf4f6e4358a22a9c5eaa4d11640f3244aba73cd29c4d7ad0a4a5961b4d8d639df29a32a877084dab80585c4b65c91b8946c714f4df5db88ba4ff0eb9db136e075d3906fb37f5fc7f855612922b6a756561bd42140f4cc51412740ee709dc693a55477e82f53e7c3c36eb58926232ec59ecf4aa4b76999f86ba3ef7447be9fd583883d3e441d304b00c3fb0ce023cb528f19b5", 0x97}, {&(0x7f0000001c40)="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", 0xfb}, {&(0x7f0000001d40)="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", 0xe00}, {&(0x7f0000002d40)="d19962006cf42741639b3773c070aed343970ec2200f96a0846d00bddea0215b453a1bf9bb86d18c50786836324146dd909ceede792d15fd6fce19fb459e963f215a535859ae27404632440673a3da4f143a5824beee7c00ef283881ef59724e024d1feb113d1d1ebba1e46e73f5d36ad8648ed6ffe711256903b317244725d789062b220033f8f9abbdb4d5dffa9ae699ba50c3f459146c9011a2c4859f5c31e7f82bbadd8af6a358ec0feff6fcf242611f9cb3596fd16add543cf97cd90da2d4f4b1c2269e607c98594666014812b6f50a3eab5b095fbacbfe4c86dcfb88cef6f037b3", 0xe4}, {&(0x7f0000002e40)="74b21f7b299e2b6cea54db536362587c2c584ab5e0da25ea8df33fe91de7687bdccbe2c10b597fd79cc4852c487adb25e3976266ecda43c458fc2b34d87e65bad3893d3081d7b20f200ee55ee6f871a0ac7998fe93206a2bbd0f0ef14caa0b36fa656a23b5cac9bdf8dc0b1e24f9a40a57c1b66c8384077eb2a37826763d7ab3ecacd58639a68c6ebdd8e17b6d98c941a16ec69e9861587c91d66943bc271e45cd532c5f064a66054b04c124ade390ba25b898e2961309178ed8e10431ecc43b585760a234c4b2a8060c1e01ee27bd2a892949983959ab0dc7f31448088dd5bed5016c3c1f2e5343300398241a", 0xed}, {&(0x7f0000002f40)="e0022c9429075562cdcf1332715a7bdc3552274da4030302791969db1ddbed13f9dd1be696052a4ddd7ae5efbf410833f14c2ac2e35da2fef5ec373f5f1b25322376e4958768311765c039fe18200ae720816f8ecc010e5312f2d49b696b76c1e0df61f6baf0bee5de54442643c6f5df2e17b4a5ab96db3ca69f126cb3ae8baf9a575add78124b3b08a68f3576dc32574b16c06599", 0x95}], 0xa, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, r8, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x221, 0x4800003e, r9, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f00000001c0)={0x2, 0x0, 0x2009, 0xc0, 0xe8c, 0xc2f89d8c, 0xfffffffc}) r11 = accept4(r7, 0x0, 0x0, 0x0) splice(r5, 0x0, r11, 0x0, 0x2, 0xe) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) sendmsg$nl_generic(r12, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5495000042000400bbe534ba8cfbd5181400000008000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1554}, 0x1, 0x0, 0x0, 0x20}, 0x40830) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) kernel console output (not intermixed with test programs): config index 0 descriptor too short (expected 9, got 0) [ 111.810735][ T5754] usb 1-1: can't read configurations, error -22 [ 111.903829][ T5603] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.933882][ T5754] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 111.957054][ T5754] usb 1-1: Using ep0 maxpacket: 8 [ 111.960774][ T5754] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.975312][ T5754] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 111.975345][ T5754] usb 1-1: can't read configurations, error -22 [ 111.975645][ T5754] usb usb1-port1: unable to enumerate USB device [ 112.068154][ T5603] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 112.068179][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 112.068189][ T5603] usb 3-1: Product: syz [ 112.068196][ T5603] usb 3-1: SerialNumber: syz [ 112.071690][ T5603] usb 3-1: config 0 descriptor?? [ 112.276986][ T5603] hso 3-1:0.0: Failed to find BULK eps [ 112.407875][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.408478][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 112.518091][ T6041] tipc: Enabling of bearer rejected, failed to enable media [ 112.525868][ T6041] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 112.640929][ T5602] usb 3-1: USB disconnect, device number 11 [ 113.323802][ T5754] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 113.473872][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 113.475580][ T5754] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 113.475605][ T5754] usb 4-1: config 2 has no interface number 0 [ 113.475636][ T5754] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 113.475649][ T5754] usb 4-1: config 2 interface 88 has no altsetting 0 [ 113.477711][ T5754] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 113.477735][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.477745][ T5754] usb 4-1: Product: syz [ 113.477752][ T5754] usb 4-1: Manufacturer: syz [ 113.477759][ T5754] usb 4-1: SerialNumber: syz [ 113.553704][ T6052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.633833][ T5602] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 113.771354][ T6052] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.809229][ T5602] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 113.809256][ T5602] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 113.809274][ T5602] usb 3-1: config 150 has no interface number 0 [ 113.809314][ T5602] usb 3-1: config 150 interface 204 has no altsetting 0 [ 113.811687][ T5602] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 113.811712][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.811729][ T5602] usb 3-1: Product: syz [ 113.811742][ T5602] usb 3-1: Manufacturer: syz [ 113.811754][ T5602] usb 3-1: SerialNumber: syz [ 114.157037][ T5602] xr_serial 3-1:150.204: skipping garbage [ 114.157087][ T5602] xr_serial 3-1:150.204: xr_serial converter detected [ 114.769622][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.785177][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.790321][ T5754] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 114.790346][ T5754] asix 4-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 114.790995][ T5754] asix 4-1:2.88: probe with driver asix failed with error -71 [ 114.792018][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 114.814653][ T5754] usb 4-1: USB disconnect, device number 10 [ 114.934313][ T6083] cgroup: Name too long [ 114.996504][ T5602] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 114.996556][ T5602] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 115.046244][ T5602] usb 3-1: USB disconnect, device number 12 [ 115.097915][ T5602] xr_serial 3-1:150.204: device disconnected [ 115.132029][ T6083] bpf: Bad value for 'uid' [ 115.439644][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 115.443253][ T6098] ubi16: attaching mtd0 [ 115.446389][ T6098] ubi16: scanning is finished [ 115.446400][ T6098] ubi16: empty MTD device detected [ 115.624241][ T5754] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 115.639947][ T6102] tipc: Started in network mode [ 115.640113][ T6102] tipc: Node identity aaaaaaaaaa3c, cluster identity 4711 [ 115.663905][ T6102] tipc: Enabled bearer , priority 10 [ 115.695805][ T6098] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.695829][ T6098] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.695852][ T6098] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.695868][ T6098] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 115.695883][ T6098] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.695899][ T6098] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.695914][ T6098] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2001962433 [ 115.695934][ T6098] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.699190][ T6103] ubi16: background thread "ubi_bgt16d" started, PID 6103 [ 115.818892][ T5754] usb 4-1: Invalid ep0 maxpacket: 32 [ 115.931344][ T6108] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 115.946608][ T5754] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 116.047430][ T6112] capability: warning: `syz.2.102' uses deprecated v2 capabilities in a way that may be insecure [ 116.050745][ T6112] program syz.2.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.095046][ T5754] usb 4-1: Invalid ep0 maxpacket: 32 [ 116.095539][ T5754] usb usb4-port1: attempt power cycle [ 116.241345][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.249782][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.252896][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.257169][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.420326][ T6122] usb usb9: usbfs: process 6122 (syz.2.105) did not claim interface 0 before use [ 116.443833][ T5754] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 116.464370][ T5754] usb 4-1: Invalid ep0 maxpacket: 32 [ 116.603826][ T5754] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 116.624473][ T5754] usb 4-1: Invalid ep0 maxpacket: 32 [ 116.624771][ T5754] usb usb4-port1: unable to enumerate USB device [ 116.756158][ T5754] tipc: Node number set to 9874090 [ 117.503839][ T5754] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 117.653787][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 117.656072][ T5754] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 117.656095][ T5754] usb 3-1: config 0 has no interface number 0 [ 117.656138][ T5754] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 117.658276][ T5754] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 117.658300][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.658313][ T5754] usb 3-1: Product: syz [ 117.658320][ T5754] usb 3-1: Manufacturer: syz [ 117.658327][ T5754] usb 3-1: SerialNumber: syz [ 117.662202][ T5754] usb 3-1: config 0 descriptor?? [ 117.665558][ T6126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.907231][ T6126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.246290][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.250745][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 118.791874][ T5766] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 118.792216][ T5754] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 118.792238][ T5754] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 118.792599][ T5754] asix 3-1:0.188: probe with driver asix failed with error -32 [ 118.945330][ T5766] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 118.956154][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.957320][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.970632][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.977473][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.983418][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.987536][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.994120][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.034828][ T5766] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.048604][ T5766] usb 1-1: New USB device found, idVendor=04b4, idProduct=3610, bcdDevice=90.6b [ 119.048631][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.048648][ T5766] usb 1-1: Product: syz [ 119.048659][ T5766] usb 1-1: Manufacturer: syz [ 119.048671][ T5766] usb 1-1: SerialNumber: syz [ 119.068558][ T5766] usb 1-1: config 0 descriptor?? [ 119.271786][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 119.368950][ T1040] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.402886][ T6163] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 119.454968][ T5754] usb 1-1: USB disconnect, device number 14 [ 119.645452][ T1040] Bluetooth: hci5: Frame reassembly failed (-84) [ 119.708831][ T6170] FAULT_INJECTION: forcing a failure. [ 119.708831][ T6170] name failslab, interval 1, probability 0, space 0, times 1 [ 119.708873][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.708897][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.708914][ T6170] Call Trace: [ 119.708924][ T6170] [ 119.708931][ T6170] dump_stack_lvl+0xe8/0x150 [ 119.708957][ T6170] should_fail_ex+0x46b/0x600 [ 119.708985][ T6170] should_failslab+0xa8/0x100 [ 119.709009][ T6170] __kmalloc_noprof+0xdf/0x7b0 [ 119.709029][ T6170] ? kfree+0x4d/0x6c0 [ 119.709046][ T6170] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 119.709074][ T6170] tomoyo_realpath_from_path+0xe3/0x5d0 [ 119.709099][ T6170] ? tomoyo_domain+0xd7/0x130 [ 119.709128][ T6170] ? tomoyo_path_number_perm+0x219/0x630 [ 119.709148][ T6170] tomoyo_path_number_perm+0x246/0x630 [ 119.709171][ T6170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.709188][ T6170] ? __lock_acquire+0x6b5/0x2d10 [ 119.709215][ T6170] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.709266][ T6170] ? __fget_files+0x2a/0x420 [ 119.709287][ T6170] ? __fget_files+0x2a/0x420 [ 119.709302][ T6170] ? __fget_files+0x3a6/0x420 [ 119.709318][ T6170] ? __fget_files+0x2a/0x420 [ 119.709342][ T6170] security_file_ioctl+0xc3/0x2a0 [ 119.709363][ T6170] __se_sys_ioctl+0x47/0x170 [ 119.709382][ T6170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.709396][ T6170] do_syscall_64+0x15f/0xf80 [ 119.709413][ T6170] ? trace_irq_disable+0x3b/0x140 [ 119.709435][ T6170] ? clear_bhb_loop+0x40/0x90 [ 119.709452][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.709465][ T6170] RIP: 0033:0x7f17f9a7cdd9 [ 119.709483][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.709494][ T6170] RSP: 002b:00007f17f7cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.709516][ T6170] RAX: ffffffffffffffda RBX: 00007f17f9cf6090 RCX: 00007f17f9a7cdd9 [ 119.709525][ T6170] RDX: 0000200000019080 RSI: 0000000000005412 RDI: 0000000000000003 [ 119.709534][ T6170] RBP: 00007f17f7cad090 R08: 0000000000000000 R09: 0000000000000000 [ 119.709542][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.709550][ T6170] R13: 00007f17f9cf6128 R14: 00007f17f9cf6090 R15: 00007fff1f92d1f8 [ 119.709573][ T6170] [ 119.709820][ T6170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.723876][ T6170] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 120.433800][ T5602] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 120.596167][ T5602] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 120.596193][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.599777][ T5602] usb 4-1: config 0 descriptor?? [ 120.630552][ T5602] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 121.007872][ T5602] gspca_cpia1: usb_control_msg 03, error -32 [ 121.008430][ T5602] gspca_cpia1: usb_control_msg 03, error -32 [ 121.063100][ T6180] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.121'. [ 121.076749][ T5602] gspca_cpia1: usb_control_msg 03, error -71 [ 121.077589][ T5602] gspca_cpia1: usb_control_msg 01, error -71 [ 121.077604][ T5602] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 121.088041][ T5602] usb 4-1: USB disconnect, device number 15 [ 121.210295][ T5766] usb 3-1: USB disconnect, device number 13 [ 121.363799][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.684084][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.740205][ T5766] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 121.746939][ T6195] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 121.915630][ T5766] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 121.915656][ T5766] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 121.915675][ T5766] usb 2-1: config 150 has no interface number 0 [ 121.915715][ T5766] usb 2-1: config 150 interface 204 has no altsetting 0 [ 121.922395][ T5766] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 121.922420][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.922439][ T5766] usb 2-1: Product: syz [ 121.922451][ T5766] usb 2-1: Manufacturer: syz [ 121.922464][ T5766] usb 2-1: SerialNumber: syz [ 122.218651][ T5766] xr_serial 2-1:150.204: skipping garbage [ 122.218699][ T5766] xr_serial 2-1:150.204: xr_serial converter detected [ 122.828879][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.849498][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.903797][ T5754] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 123.111942][ T5754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.111975][ T5754] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.112015][ T5754] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 123.112035][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.145180][ T5754] usb 3-1: config 0 descriptor?? [ 123.153438][ T5766] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 123.162288][ T6223] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 123.187171][ T1040] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.317030][ T5603] usb 2-1: USB disconnect, device number 15 [ 123.352871][ T5603] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 123.373206][ T5603] xr_serial 2-1:150.204: device disconnected [ 123.618828][ T6227] Bluetooth: MGMT ver 1.23 [ 123.721175][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.722164][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.754359][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754382][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x4 [ 123.754436][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754451][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754466][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754484][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x2 [ 123.754499][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754513][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754528][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754543][ T5754] sony 0003:054C:0374.0004: unknown main item tag 0x0 [ 123.754573][ T5754] sony 0003:054C:0374.0004: item fetching failed at offset 40/41 [ 123.754972][ T5754] sony 0003:054C:0374.0004: parse failed [ 123.755028][ T5754] sony 0003:054C:0374.0004: probe with driver sony failed with error -22 [ 123.975261][ T5603] usb 3-1: USB disconnect, device number 14 [ 124.055513][ T3410] Bluetooth: hci5: Frame reassembly failed (-84) [ 124.082077][ T6232] FAULT_INJECTION: forcing a failure. [ 124.082077][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 124.082111][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.3.136 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 124.082134][ T6232] Tainted: [L]=SOFTLOCKUP [ 124.082140][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.082149][ T6232] Call Trace: [ 124.082157][ T6232] [ 124.082164][ T6232] dump_stack_lvl+0xe8/0x150 [ 124.082190][ T6232] should_fail_ex+0x46b/0x600 [ 124.082217][ T6232] should_failslab+0xa8/0x100 [ 124.082242][ T6232] __kmalloc_noprof+0xdf/0x7b0 [ 124.082263][ T6232] ? tomoyo_encode+0x28b/0x550 [ 124.082295][ T6232] tomoyo_encode+0x28b/0x550 [ 124.082322][ T6232] tomoyo_realpath_from_path+0x58d/0x5d0 [ 124.082355][ T6232] ? tomoyo_path_number_perm+0x219/0x630 [ 124.082376][ T6232] tomoyo_path_number_perm+0x246/0x630 [ 124.082398][ T6232] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 124.082416][ T6232] ? __lock_acquire+0x6b5/0x2d10 [ 124.082443][ T6232] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.082495][ T6232] ? __fget_files+0x2a/0x420 [ 124.082516][ T6232] ? __fget_files+0x2a/0x420 [ 124.082532][ T6232] ? __fget_files+0x3a6/0x420 [ 124.082549][ T6232] ? __fget_files+0x2a/0x420 [ 124.082571][ T6232] security_file_ioctl+0xc3/0x2a0 [ 124.082592][ T6232] __se_sys_ioctl+0x47/0x170 [ 124.082614][ T6232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.082634][ T6232] do_syscall_64+0x15f/0xf80 [ 124.082654][ T6232] ? trace_irq_disable+0x3b/0x140 [ 124.082676][ T6232] ? clear_bhb_loop+0x40/0x90 [ 124.082696][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.082711][ T6232] RIP: 0033:0x7f78e6e3cdd9 [ 124.082728][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.082741][ T6232] RSP: 002b:00007f78e508e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.082762][ T6232] RAX: ffffffffffffffda RBX: 00007f78e70b5fa0 RCX: 00007f78e6e3cdd9 [ 124.082775][ T6232] RDX: 0000200000019080 RSI: 0000000000005412 RDI: 0000000000000003 [ 124.082785][ T6232] RBP: 00007f78e508e090 R08: 0000000000000000 R09: 0000000000000000 [ 124.082796][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.082806][ T6232] R13: 00007f78e70b6038 R14: 00007f78e70b5fa0 R15: 00007ffde64d2e08 [ 124.082835][ T6232] [ 124.082918][ T6232] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.082982][ T6232] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 124.175549][ T6239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.140'. [ 124.663797][ T5603] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 124.783850][ T5754] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 124.836225][ T5603] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 124.836253][ T5603] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 124.836270][ T5603] usb 2-1: config 220 has no interface number 2 [ 124.836333][ T5603] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 124.836346][ T5603] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.836356][ T5603] usb 2-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 124.836369][ T5603] usb 2-1: config 220 interface 0 has no altsetting 0 [ 124.836377][ T5603] usb 2-1: config 220 interface 76 has no altsetting 0 [ 124.836386][ T5603] usb 2-1: config 220 interface 1 has no altsetting 0 [ 124.838432][ T5603] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 124.838456][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.838466][ T5603] usb 2-1: Product: syz [ 124.838473][ T5603] usb 2-1: Manufacturer: syz [ 124.838480][ T5603] usb 2-1: SerialNumber: syz [ 124.933790][ T5754] usb 3-1: Using ep0 maxpacket: 16 [ 124.935731][ T5754] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 124.935753][ T5754] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 124.935771][ T5754] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 124.937947][ T5754] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 124.937971][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.937988][ T5754] usb 3-1: Product: syz [ 124.937999][ T5754] usb 3-1: Manufacturer: syz [ 124.938011][ T5754] usb 3-1: SerialNumber: syz [ 124.943117][ T5754] usb 3-1: config 0 descriptor?? [ 125.059236][ T5603] usb 2-1: selecting invalid altsetting 0 [ 125.074513][ T5603] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 125.074545][ T5603] uvcvideo 2-1:220.0: No valid video chain found. [ 125.093300][ T5603] usb 2-1: selecting invalid altsetting 0 [ 125.093334][ T5603] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 125.103565][ T5603] usb 2-1: USB disconnect, device number 16 [ 125.124858][ T5625] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.128020][ T4928] Bluetooth: hci4: command 0x1003 tx timeout [ 125.389698][ T5754] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 125.412118][ T5754] usb 3-1: interface 1 not found [ 125.435816][ T5754] usb 3-1: USB disconnect, device number 15 [ 125.549947][ T6258] netlink: 168 bytes leftover after parsing attributes in process `syz.0.144'. [ 125.666723][ T6264] binder: 6263:6264 ioctl c0306201 2000000001c0 returned -14 [ 125.667761][ T6264] binder: 6263:6264 ioctl ae01 1d returned -22 [ 125.912735][ T6271] netlink: 72 bytes leftover after parsing attributes in process `syz.2.148'. [ 126.083796][ T5628] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.184385][ T5754] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.228847][ T6278] netlink: 'syz.1.151': attribute type 49 has an invalid length. [ 126.310435][ T6278] bond0: (slave bond_slave_0): Releasing backup interface [ 126.343776][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 126.352626][ T5754] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 126.352651][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.393754][ T37] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 126.408009][ T5754] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 126.504375][ T6278] bond_slave_0: entered promiscuous mode [ 126.504398][ T6278] bond_slave_0: entered allmulticast mode [ 126.523768][ T37] usb 4-1: device descriptor read/64, error -71 [ 126.777416][ T37] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.818957][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 126.845189][ T6287] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 126.906006][ T37] usb 4-1: device descriptor read/64, error -71 [ 126.993841][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 127.016413][ T37] usb usb4-port1: attempt power cycle [ 127.027525][ T5754] gspca_nw80x: reg_w err -71 [ 127.027606][ T5754] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 127.051025][ T5754] usb 3-1: USB disconnect, device number 16 [ 127.155919][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.155946][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.155963][ T9] usb 1-1: config 220 has no interface number 2 [ 127.156026][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.156048][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 127.156063][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 127.156078][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 127.162302][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.162328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.162345][ T9] usb 1-1: Product: syz [ 127.162359][ T9] usb 1-1: Manufacturer: syz [ 127.162372][ T9] usb 1-1: SerialNumber: syz [ 127.383773][ T37] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 127.406733][ T37] usb 4-1: device descriptor read/8, error -71 [ 127.644302][ T37] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 127.664834][ T37] usb 4-1: device descriptor read/8, error -71 [ 127.780205][ T37] usb usb4-port1: unable to enumerate USB device [ 128.253773][ T37] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 128.404295][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 128.407392][ T37] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 128.407415][ T37] usb 3-1: config 0 has no interface number 0 [ 128.407451][ T37] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 128.407473][ T37] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 128.407494][ T37] usb 3-1: config 0 interface 200 has no altsetting 0 [ 128.470702][ T37] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 128.470728][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.470745][ T37] usb 3-1: Product: syz [ 128.470757][ T37] usb 3-1: Manufacturer: syz [ 128.470770][ T37] usb 3-1: SerialNumber: syz [ 128.518309][ T37] usb 3-1: config 0 descriptor?? [ 128.741905][ T6325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.752881][ T6325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.817470][ T37] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input7 [ 128.883752][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.927428][ T37] usb 3-1: USB disconnect, device number 17 [ 129.361595][ T6334] FAULT_INJECTION: forcing a failure. [ 129.361595][ T6334] name failslab, interval 1, probability 0, space 0, times 0 [ 129.361623][ T6334] CPU: 1 UID: 0 PID: 6334 Comm: syz.3.158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 129.361641][ T6334] Tainted: [L]=SOFTLOCKUP [ 129.361646][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.361653][ T6334] Call Trace: [ 129.361658][ T6334] [ 129.361664][ T6334] dump_stack_lvl+0xe8/0x150 [ 129.361687][ T6334] should_fail_ex+0x46b/0x600 [ 129.361709][ T6334] should_failslab+0xa8/0x100 [ 129.361730][ T6334] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 129.361747][ T6334] ? __alloc_skb+0x1d0/0x7d0 [ 129.361762][ T6334] ? lockdep_hardirqs_on+0x7a/0x110 [ 129.361785][ T6334] __alloc_skb+0x1d0/0x7d0 [ 129.361804][ T6334] h4_recv_buf+0x28a/0xda0 [ 129.361835][ T6334] ll_recv+0xc8/0x180 [ 129.361853][ T6334] hci_uart_tty_receive+0x1f8/0x570 [ 129.361868][ T6334] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 129.361883][ T6334] tiocsti+0x218/0x2a0 [ 129.361906][ T6334] ? __pfx_tiocsti+0x10/0x10 [ 129.361925][ T6334] ? __fget_files+0x2a/0x420 [ 129.361939][ T6334] ? __fget_files+0x3a6/0x420 [ 129.361952][ T6334] ? __fget_files+0x2a/0x420 [ 129.361968][ T6334] tty_ioctl+0x62c/0xde0 [ 129.361988][ T6334] ? __pfx_tty_ioctl+0x10/0x10 [ 129.362007][ T6334] __se_sys_ioctl+0xff/0x170 [ 129.362027][ T6334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.362043][ T6334] do_syscall_64+0x15f/0xf80 [ 129.362062][ T6334] ? trace_irq_disable+0x3b/0x140 [ 129.362080][ T6334] ? clear_bhb_loop+0x40/0x90 [ 129.362099][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.362114][ T6334] RIP: 0033:0x7f78e6e3cdd9 [ 129.362130][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.362142][ T6334] RSP: 002b:00007f78e506d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.362160][ T6334] RAX: ffffffffffffffda RBX: 00007f78e70b6090 RCX: 00007f78e6e3cdd9 [ 129.362171][ T6334] RDX: 0000200000019080 RSI: 0000000000005412 RDI: 0000000000000003 [ 129.362180][ T6334] RBP: 00007f78e506d090 R08: 0000000000000000 R09: 0000000000000000 [ 129.362189][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.362198][ T6334] R13: 00007f78e70b6128 R14: 00007f78e70b6090 R15: 00007ffde64d2e08 [ 129.362222][ T6334] [ 129.362228][ T6334] Bluetooth: hci4: Frame reassembly failed (-12) [ 129.453978][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 129.787799][ T6341] trusted_key: syz.2.161 sent an empty control message without MSG_MORE. [ 129.922260][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 130.044644][ T37] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 130.201393][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 130.210612][ T37] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 130.210635][ T37] usb 3-1: config 0 has no interface number 0 [ 130.210664][ T37] usb 3-1: too many endpoints for config 0 interface 225 altsetting 197: 47, using maximum allowed: 30 [ 130.210698][ T37] usb 3-1: config 0 interface 225 altsetting 197 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 130.210723][ T37] usb 3-1: config 0 interface 225 has no altsetting 0 [ 130.210753][ T37] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 130.210772][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.291982][ T37] usb 3-1: config 0 descriptor?? [ 130.526538][ T37] usb 3-1: string descriptor 0 read error: -71 [ 130.562109][ T37] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 130.766243][ T6284] syz.0.153 (6284): drop_caches: 2 [ 130.803462][ T37] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 130.803522][ T37] dib0700: firmware download failed at 7 with -22 [ 130.832634][ T37] usb 3-1: USB disconnect, device number 18 [ 130.853914][ T5766] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 130.903061][ T9] usb 1-1: selecting invalid altsetting 0 [ 130.915492][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.915522][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 130.925364][ T9] usb 1-1: selecting invalid altsetting 0 [ 130.925396][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 130.951048][ T9] usb 1-1: USB disconnect, device number 15 [ 131.017267][ T5766] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 131.017292][ T5766] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 131.017311][ T5766] usb 2-1: config 150 has no interface number 0 [ 131.017342][ T5766] usb 2-1: config 150 interface 204 has no altsetting 0 [ 131.019505][ T5766] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 131.019529][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.019539][ T5766] usb 2-1: Product: syz [ 131.019546][ T5766] usb 2-1: Manufacturer: syz [ 131.019552][ T5766] usb 2-1: SerialNumber: syz [ 131.116059][ T6352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.165'. [ 131.236783][ T5766] xr_serial 2-1:150.204: skipping garbage [ 131.236814][ T5766] xr_serial 2-1:150.204: xr_serial converter detected [ 131.364020][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 131.416722][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 131.418849][ T5603] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 131.565547][ T9] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 131.565573][ T9] usb 1-1: config 0 has no interface number 0 [ 131.581869][ T5603] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.581895][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.581911][ T5603] usb 3-1: Product: syz [ 131.582077][ T5603] usb 3-1: Manufacturer: syz [ 131.582140][ T5603] usb 3-1: SerialNumber: syz [ 131.591217][ T5603] usb 3-1: config 0 descriptor?? [ 131.620359][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 131.620384][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.620400][ T9] usb 1-1: Product: syz [ 131.620412][ T9] usb 1-1: Manufacturer: syz [ 131.620425][ T9] usb 1-1: SerialNumber: syz [ 131.698134][ T9] usb 1-1: config 0 descriptor?? [ 131.799212][ T5603] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.845622][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.852373][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.064505][ T5766] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 132.265189][ T5602] usb 2-1: USB disconnect, device number 17 [ 132.311762][ T5602] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 132.341297][ T5602] xr_serial 2-1:150.204: device disconnected [ 132.527827][ T9] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 132.528072][ T9] uvcvideo 1-1:0.64: No valid video chain found. [ 132.764251][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.769643][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.856466][ T5603] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 133.060647][ T6354] kernel profiling enabled (shift: 6) [ 133.081655][ T5603] usb 3-1: USB disconnect, device number 19 [ 133.085881][ T5754] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 133.261791][ T5754] usb 2-1: Using ep0 maxpacket: 16 [ 133.265078][ T5754] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.265101][ T5754] usb 2-1: config 0 has no interface number 0 [ 133.270823][ T5754] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.270848][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.270865][ T5754] usb 2-1: Product: syz [ 133.270877][ T5754] usb 2-1: Manufacturer: syz [ 133.270890][ T5754] usb 2-1: SerialNumber: syz [ 133.276809][ T5754] usb 2-1: config 0 descriptor?? [ 133.284193][ T5754] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.576970][ T6376] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5618] was attempted by " d     ¬  ù @ ’h [ 133.726424][ T6381] netlink: 'syz.3.174': attribute type 2 has an invalid length. [ 133.726442][ T6381] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 134.014579][ T5723] usb 1-1: USB disconnect, device number 16 [ 134.094514][ T5766] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 134.216723][ T5603] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 134.221796][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.221879][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.222007][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.222122][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.222195][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.222318][ T1411] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.246965][ T6387] Bluetooth: hci4: Frame reassembly failed (-12) [ 134.293808][ T5766] usb 3-1: Using ep0 maxpacket: 8 [ 134.296213][ T5766] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.296236][ T5766] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 134.298621][ T5766] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 134.298645][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.298661][ T5766] usb 3-1: Product: syz [ 134.298669][ T5766] usb 3-1: Manufacturer: syz [ 134.298677][ T5766] usb 3-1: SerialNumber: syz [ 134.365583][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 134.373178][ T5603] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 134.373205][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.373223][ T5603] usb 4-1: Product: syz [ 134.373235][ T5603] usb 4-1: Manufacturer: syz [ 134.373248][ T5603] usb 4-1: SerialNumber: syz [ 134.443583][ T5754] gspca_spca1528: reg_w err -110 [ 134.454088][ T5754] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 134.587227][ T5766] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 134.587263][ T5766] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 134.587282][ T5766] usb 3-1: 1:1 : sample bitwidth 236 in over sample bytes 2 [ 134.587309][ T5766] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 134.588380][ T5766] usb 3-1: 0:2 : does not exist [ 134.692514][ T5766] usb 3-1: USB disconnect, device number 20 [ 134.720805][ T5602] usb 2-1: USB disconnect, device number 18 [ 134.984441][ T5603] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 135.263259][ T5603] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.274697][ T6396] mac80211_hwsim hwsim3 4: renamed from wlan1 (while UP) [ 135.277667][ T5603] usb 4-1: USB disconnect, device number 20 [ 135.346726][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.545970][ T5766] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 135.611851][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 135.649594][ T6402] sctp: [Deprecated]: syz.3.182 (pid 6402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.649594][ T6402] Use struct sctp_sack_info instead [ 135.703320][ T5766] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 135.703346][ T5766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.703362][ T5766] usb 3-1: config 0 has no interface number 0 [ 135.703388][ T5766] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 135.703399][ T5766] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 135.703410][ T5766] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.769588][ T5766] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 135.769614][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.769632][ T5766] usb 3-1: Product: syz [ 135.769644][ T5766] usb 3-1: Manufacturer: syz [ 135.769657][ T5766] usb 3-1: SerialNumber: syz [ 135.810956][ T5766] usb 3-1: config 0 descriptor?? [ 135.821663][ T5766] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 135.833541][ T5766] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 135.865808][ T6406] overlayfs: conflicting options: userxattr,metacopy=on [ 135.901274][ T5766] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 136.031020][ T5766] usb 3-1: USB disconnect, device number 21 [ 136.078012][ T5766] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 136.081491][ T5766] cyberjack 3-1:0.69: device disconnected [ 136.135083][ T5603] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 136.245123][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 136.245379][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 136.298022][ T5603] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 136.298050][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.298068][ T5603] usb 4-1: Product: syz [ 136.298080][ T5603] usb 4-1: Manufacturer: syz [ 136.298092][ T5603] usb 4-1: SerialNumber: syz [ 136.366912][ T5603] usb 4-1: config 0 descriptor?? [ 136.387536][ T6417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.390410][ T5603] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 136.573472][ T5603] gspca_stk1135: reg_w 0x2 err -71 [ 136.582081][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582093][ T5603] gspca_stk1135: Sensor write failed [ 136.582127][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582135][ T5603] gspca_stk1135: Sensor write failed [ 136.582155][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582163][ T5603] gspca_stk1135: Sensor read failed [ 136.582183][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582190][ T5603] gspca_stk1135: Sensor read failed [ 136.582194][ T5603] gspca_stk1135: Detected sensor type unknown (0x0) [ 136.582217][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582224][ T5603] gspca_stk1135: Sensor read failed [ 136.582244][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582251][ T5603] gspca_stk1135: Sensor read failed [ 136.582274][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582281][ T5603] gspca_stk1135: Sensor write failed [ 136.582303][ T5603] gspca_stk1135: serial bus timeout: status=0x00 [ 136.582310][ T5603] gspca_stk1135: Sensor write failed [ 136.582383][ T5603] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 136.707227][ T5603] usb 4-1: USB disconnect, device number 21 [ 136.842285][ T6424] capability: warning: `syz.1.191' uses 32-bit capabilities (legacy support in use) [ 136.952627][ T6422] syz.2.190 (6422) used greatest stack depth: 18816 bytes left [ 136.969018][ T37] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 137.183970][ T5766] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.188242][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 137.194576][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 137.194599][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.194616][ T37] usb 1-1: Product: syz [ 137.194628][ T37] usb 1-1: Manufacturer: syz [ 137.194639][ T37] usb 1-1: SerialNumber: syz [ 137.418304][ T37] usb 1-1: config 0 descriptor?? [ 137.438609][ T5766] usb 2-1: Using ep0 maxpacket: 32 [ 137.440738][ T5766] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 137.440760][ T5766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.453073][ T5766] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 137.453098][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.453114][ T5766] usb 2-1: Product: syz [ 137.453126][ T5766] usb 2-1: Manufacturer: syz [ 137.453138][ T5766] usb 2-1: SerialNumber: syz [ 137.639053][ T37] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.820006][ T5766] usb 2-1: config 0 descriptor?? [ 137.959520][ T6426] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 137.959543][ T6426] CIFS mount error: No usable UNC path provided in device string! [ 137.959543][ T6426] [ 138.002430][ T6426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.224748][ T5766] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 138.781902][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 138.781991][ T6435] bridge_slave_1: left allmulticast mode [ 138.782016][ T6435] bridge_slave_1: left promiscuous mode [ 138.913461][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.372769][ T37] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 139.379749][ T37] usb 1-1: USB disconnect, device number 17 [ 139.592125][ T6435] bridge_slave_0: left allmulticast mode [ 139.592155][ T6435] bridge_slave_0: left promiscuous mode [ 139.592393][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.705856][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.706921][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.716340][ T5766] gspca_sunplus: reg_r err -71 [ 139.716420][ T5766] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 139.789885][ T5766] usb 2-1: USB disconnect, device number 19 [ 139.943768][ T5603] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 140.063169][ T3288] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.122519][ T6447] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 140.122905][ T6447] FAULT_INJECTION: forcing a failure. [ 140.122905][ T6447] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.133463][ T5603] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 140.133490][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.133507][ T5603] usb 3-1: Product: syz [ 140.133519][ T5603] usb 3-1: Manufacturer: syz [ 140.133531][ T5603] usb 3-1: SerialNumber: syz [ 140.133921][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: syz.0.196 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.133947][ T6447] Tainted: [L]=SOFTLOCKUP [ 140.133953][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.133963][ T6447] Call Trace: [ 140.133970][ T6447] [ 140.133978][ T6447] dump_stack_lvl+0xe8/0x150 [ 140.134006][ T6447] should_fail_ex+0x46b/0x600 [ 140.134072][ T6447] _copy_to_user+0x31/0xb0 [ 140.134099][ T6447] simple_read_from_buffer+0xe1/0x170 [ 140.134122][ T6447] proc_fail_nth_read+0x1be/0x230 [ 140.134145][ T6447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.134167][ T6447] ? rw_verify_area+0x2ac/0x4e0 [ 140.134187][ T6447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.134207][ T6447] vfs_read+0x212/0xa80 [ 140.134235][ T6447] ? __pfx_vfs_read+0x10/0x10 [ 140.134258][ T6447] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 140.134281][ T6447] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.134304][ T6447] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.134325][ T6447] ? mutex_lock_nested+0x152/0x1d0 [ 140.134342][ T6447] ? fdget_pos+0x252/0x320 [ 140.134368][ T6447] ksys_read+0x156/0x270 [ 140.134391][ T6447] ? __pfx_ksys_read+0x10/0x10 [ 140.134419][ T6447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.134439][ T6447] do_syscall_64+0x15f/0xf80 [ 140.134460][ T6447] ? trace_irq_disable+0x3b/0x140 [ 140.134482][ T6447] ? clear_bhb_loop+0x40/0x90 [ 140.134503][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.134521][ T6447] RIP: 0033:0x7f17f9a3d60e [ 140.134538][ T6447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.134552][ T6447] RSP: 002b:00007f17f7cacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.134573][ T6447] RAX: ffffffffffffffda RBX: 00007f17f7cad6c0 RCX: 00007f17f9a3d60e [ 140.134585][ T6447] RDX: 000000000000000f RSI: 00007f17f7cad0a0 RDI: 0000000000000004 [ 140.134596][ T6447] RBP: 00007f17f7cad090 R08: 0000000000000000 R09: 0000000000000000 [ 140.134607][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.134617][ T6447] R13: 00007f17f9cf6128 R14: 00007f17f9cf6090 R15: 00007fff1f92d1f8 [ 140.134646][ T6447] [ 140.403118][ T5603] usb 3-1: config 0 descriptor?? [ 140.526120][ T5624] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 140.613775][ T5603] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.673777][ T5624] usb 4-1: Using ep0 maxpacket: 32 [ 140.677976][ T5624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.688385][ T5624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.688405][ T5624] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.693517][ T5624] usb 4-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 140.693542][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.693559][ T5624] usb 4-1: Product: syz [ 140.693571][ T5624] usb 4-1: Manufacturer: syz [ 140.693583][ T5624] usb 4-1: SerialNumber: syz [ 140.994348][ T5766] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.191099][ T5766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.191138][ T5766] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.210808][ T5766] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 141.210834][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.210851][ T5766] usb 2-1: Product: syz [ 141.210917][ T5766] usb 2-1: Manufacturer: syz [ 141.210929][ T5766] usb 2-1: SerialNumber: syz [ 141.296956][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.313942][ T5603] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 141.401020][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.410426][ T5766] usb 2-1: config 0 descriptor?? [ 141.420131][ T5603] usb 3-1: USB disconnect, device number 22 [ 141.520716][ T5624] usb 4-1: 0:1 : does not exist [ 141.520731][ T5624] usb 4-1: 0:2 : does not exist [ 141.534386][ T5766] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 141.636333][ T5766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.639032][ T5766] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 141.639064][ T5766] usb 2-1: media controller created [ 141.660833][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.859860][ T5624] usb 4-1: USB disconnect, device number 22 [ 141.996808][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.085105][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 142.108883][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.223847][ T5766] DVB: Unable to find symbol tda10046_attach() [ 142.223860][ T5766] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 142.223871][ T5766] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 142.224301][ T5766] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 142.235925][ T5766] usb 2-1: USB disconnect, device number 20 [ 142.393741][ T37] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 142.441209][ T3281] Bluetooth: hci4: Frame reassembly failed (-84) [ 142.441240][ T3281] Bluetooth: hci4: Frame reassembly failed (-84) [ 142.443971][ T6486] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 142.549400][ T37] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 142.549428][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.597180][ T37] usb 3-1: config 0 descriptor?? [ 142.609837][ T37] cp210x 3-1:0.0: cp210x converter detected [ 142.725872][ T5766] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 142.853814][ T5766] usb 4-1: device descriptor read/64, error -71 [ 143.043974][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 143.099425][ T5766] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 143.195225][ T5602] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 143.223787][ T5766] usb 4-1: device descriptor read/64, error -71 [ 143.340223][ T5766] usb usb4-port1: attempt power cycle [ 143.350549][ T5602] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 143.350574][ T5602] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 143.350594][ T5602] usb 2-1: config 150 has no interface number 0 [ 143.350634][ T5602] usb 2-1: config 150 interface 204 has no altsetting 0 [ 143.352846][ T5602] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 143.352871][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.352888][ T5602] usb 2-1: Product: syz [ 143.352900][ T5602] usb 2-1: Manufacturer: syz [ 143.352912][ T5602] usb 2-1: SerialNumber: syz [ 143.642102][ T5602] xr_serial 2-1:150.204: skipping garbage [ 143.642153][ T5602] xr_serial 2-1:150.204: xr_serial converter detected [ 143.685463][ T5766] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 143.708279][ T5766] usb 4-1: device descriptor read/8, error -71 [ 143.943740][ T5766] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 143.965088][ T5766] usb 4-1: device descriptor read/8, error -71 [ 144.080030][ T5766] usb usb4-port1: unable to enumerate USB device [ 144.250572][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.252446][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.459431][ T5602] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 144.483898][ T5625] Bluetooth: hci4: command 0x1003 tx timeout [ 144.528076][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 144.715420][ T5602] usb 2-1: USB disconnect, device number 21 [ 144.767993][ T5602] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 144.769034][ T5602] xr_serial 2-1:150.204: device disconnected [ 144.937704][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 145.265475][ T5766] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.316277][ T37] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 145.316785][ T37] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 145.316832][ T37] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 145.322945][ T37] usb 3-1: cp210x converter now attached to ttyUSB0 [ 145.357782][ T37] usb 3-1: USB disconnect, device number 23 [ 145.384601][ T37] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 145.385400][ T37] cp210x 3-1:0.0: device disconnected [ 145.423780][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 145.428576][ T5766] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.428653][ T5766] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 145.431326][ T5766] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.431357][ T5766] usb 1-1: can't read configurations, error -61 [ 145.594305][ T5766] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.632229][ T6520] program syz.3.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.653779][ T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 145.743799][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 145.750142][ T5766] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.750204][ T5766] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 145.752003][ T5766] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.752034][ T5766] usb 1-1: can't read configurations, error -61 [ 145.752385][ T5766] usb usb1-port1: attempt power cycle [ 145.803751][ T5603] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 145.803754][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 145.825332][ T32] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 145.837492][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 145.837509][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.837518][ T32] usb 2-1: Product: syz [ 145.837525][ T32] usb 2-1: Manufacturer: syz [ 145.837532][ T32] usb 2-1: SerialNumber: syz [ 145.865474][ T32] usb 2-1: config 0 descriptor?? [ 145.888312][ T32] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 145.973799][ T5603] usb 3-1: Using ep0 maxpacket: 16 [ 145.977463][ T5603] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.977483][ T5603] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.981995][ T5603] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.982020][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.982038][ T5603] usb 3-1: Product: syz [ 145.982050][ T5603] usb 3-1: Manufacturer: syz [ 145.982063][ T5603] usb 3-1: SerialNumber: syz [ 146.053077][ T5603] usb 3-1: 0:2 : does not exist [ 146.115820][ T5766] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 146.136167][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 146.145480][ T5766] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.145555][ T5766] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 146.148271][ T5766] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.148301][ T5766] usb 1-1: can't read configurations, error -61 [ 146.256649][ T5603] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 146.295288][ T5766] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 146.315700][ T5766] usb 1-1: Using ep0 maxpacket: 8 [ 146.320344][ T5766] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.320480][ T5766] usb 1-1: too many configurations: 119, using maximum allowed: 8 [ 146.343198][ T5766] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.343230][ T5766] usb 1-1: can't read configurations, error -61 [ 146.347269][ T5766] usb usb1-port1: unable to enumerate USB device [ 146.399404][ T5603] usb 3-1: USB disconnect, device number 24 [ 146.468414][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.137913][ T32] gspca_zc3xx: reg_w_i err -71 [ 147.190876][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 147.743782][ T32] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 147.743878][ T32] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 147.752712][ T32] usb 2-1: USB disconnect, device number 22 [ 148.058117][ T6532] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 148.072574][ T6532] team0: Device vxcan1 is of different type [ 148.104455][ T6532] netlink: 'syz.0.216': attribute type 10 has an invalid length. [ 148.106637][ T6532] team0: Device vxcan1 is of different type [ 148.413800][ T32] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 148.563765][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 148.570679][ T32] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 148.570704][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.586907][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 148.990028][ T32] gspca_nw80x: reg_r err -71 [ 148.990099][ T32] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 149.004671][ T32] usb 1-1: USB disconnect, device number 22 [ 149.085542][ T5766] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 149.205872][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.253474][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.253567][ T5766] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.253744][ T5766] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 149.253764][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.274207][ T5766] usb 2-1: config 0 descriptor?? [ 149.315450][ T32] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 149.467726][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 149.475564][ T32] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 149.475590][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.557408][ T32] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 149.654192][ T5603] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 149.750593][ T5766] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 149.806105][ T5766] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 149.833723][ T5603] usb 3-1: Using ep0 maxpacket: 8 [ 149.838570][ T5603] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 149.838595][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.838613][ T5603] usb 3-1: Product: syz [ 149.838625][ T5603] usb 3-1: Manufacturer: syz [ 149.838638][ T5603] usb 3-1: SerialNumber: syz [ 149.885561][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 149.887038][ T5603] usb 3-1: config 0 descriptor?? [ 149.939416][ T32] gspca_nw80x: reg_r err -32 [ 149.939508][ T32] nw80x 1-1:3.0: probe with driver nw80x failed with error -32 [ 150.078505][ T5766] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 150.088151][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 150.088178][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.088195][ T10] usb 4-1: Product: syz [ 150.088270][ T10] usb 4-1: Manufacturer: syz [ 150.088282][ T10] usb 4-1: SerialNumber: syz [ 150.180359][ T5603] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 150.207688][ T5603] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 150.269282][ T10] usb 4-1: config 0 descriptor?? [ 150.270921][ T5603] usb 3-1: USB disconnect, device number 25 [ 150.301035][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 150.321352][ T5766] usb 2-1: USB disconnect, device number 23 [ 150.475569][ T5766] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 150.532102][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.534250][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.550824][ T10] usb 4-1: failed to receive control message: -71 [ 150.550880][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 150.584938][ T10] usb 4-1: USB disconnect, device number 27 [ 150.587285][ T10] ch341 4-1:0.0: device disconnected [ 150.894321][ T6565] team_slave_0: entered allmulticast mode [ 150.919068][ T6565] team_slave_0: entered promiscuous mode [ 150.998772][ T6570] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 151.166477][ T3281] Bluetooth: hci4: Frame reassembly failed (-84) [ 151.212981][ T6579] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 151.343060][ T6581] trusted_key: encrypted_key: master key parameter 'user0000000000000064' is invalid [ 151.360147][ T5624] usb 1-1: USB disconnect, device number 23 [ 151.484230][ T5603] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 151.604438][ T5754] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 151.646883][ T5603] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 151.646909][ T5603] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 151.646928][ T5603] usb 3-1: config 150 has no interface number 0 [ 151.646956][ T5603] usb 3-1: config 150 interface 204 has no altsetting 0 [ 151.649031][ T5603] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 151.649054][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.649072][ T5603] usb 3-1: Product: syz [ 151.649087][ T5603] usb 3-1: Manufacturer: syz [ 151.649094][ T5603] usb 3-1: SerialNumber: syz [ 151.743737][ T5754] usb 2-1: device descriptor read/64, error -71 [ 151.824986][ T5624] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 151.861662][ T5603] xr_serial 3-1:150.204: skipping garbage [ 151.861704][ T5603] xr_serial 3-1:150.204: xr_serial converter detected [ 151.976014][ T5624] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 151.976067][ T5624] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.976088][ T5624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.978638][ T5624] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.978663][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.978681][ T5624] usb 1-1: Product: syz [ 151.978693][ T5624] usb 1-1: Manufacturer: syz [ 151.978706][ T5624] usb 1-1: SerialNumber: syz [ 151.983409][ T5624] usb 1-1: config 0 descriptor?? [ 151.983878][ T5754] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 152.058348][ T5624] hub 1-1:0.0: bad descriptor, ignoring hub [ 152.058383][ T5624] hub 1-1:0.0: probe with driver hub failed with error -5 [ 152.065160][ T5624] usb 1-1: selecting invalid altsetting 0 [ 152.118547][ T5754] usb 2-1: device descriptor read/64, error -71 [ 152.228448][ T5754] usb usb2-port1: attempt power cycle [ 152.476130][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.479456][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.554546][ T5624] usb 1-1: USB disconnect, device number 24 [ 152.599260][ T5754] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 152.618659][ T5754] usb 2-1: device descriptor read/8, error -71 [ 152.716607][ T5603] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 152.863748][ T5754] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 152.886237][ T5754] usb 2-1: device descriptor read/8, error -71 [ 152.901747][ T5766] usb 3-1: USB disconnect, device number 26 [ 152.932257][ T5766] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 152.936501][ T5766] xr_serial 3-1:150.204: device disconnected [ 153.001447][ T5754] usb usb2-port1: unable to enumerate USB device [ 153.038836][ T6590] netlink: 'syz.0.236': attribute type 6 has an invalid length. [ 153.038849][ T6590] netlink: 76 bytes leftover after parsing attributes in process `syz.0.236'. [ 153.207922][ T5628] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.293794][ T5754] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 153.446502][ T5754] usb 1-1: device descriptor read/64, error -71 [ 153.553758][ T32] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 153.683863][ T5754] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 153.705369][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.705400][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.705421][ T32] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 153.705432][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.709476][ T32] usb 4-1: config 0 descriptor?? [ 153.713826][ T5766] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 153.813798][ T5754] usb 1-1: device descriptor read/64, error -71 [ 153.863797][ T5766] usb 3-1: Using ep0 maxpacket: 32 [ 153.866253][ T5766] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 153.866275][ T5766] usb 3-1: config 0 has no interface number 0 [ 153.866301][ T5766] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 153.868754][ T5766] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.868769][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.868778][ T5766] usb 3-1: Product: syz [ 153.868786][ T5766] usb 3-1: Manufacturer: syz [ 153.868793][ T5766] usb 3-1: SerialNumber: syz [ 153.874424][ T5766] usb 3-1: config 0 descriptor?? [ 153.900725][ T5766] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 153.901083][ T5766] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 153.925053][ T5754] usb usb1-port1: attempt power cycle [ 154.172418][ T32] hid_parser_main: 2 callbacks suppressed [ 154.172432][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172450][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172465][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172480][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172495][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172509][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172526][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172541][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172556][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.172570][ T32] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 154.233910][ T32] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 154.263801][ T5754] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 154.284708][ T5754] usb 1-1: device descriptor read/8, error -71 [ 154.351372][ T37] usb 4-1: USB disconnect, device number 28 [ 154.523885][ T5754] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 154.550675][ T5754] usb 1-1: device descriptor read/8, error -71 [ 154.654074][ T5754] usb usb1-port1: unable to enumerate USB device [ 154.797837][ T37] usb 3-1: USB disconnect, device number 27 [ 154.805676][ T5628] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 154.805844][ T5628] Bluetooth: hci1: Injecting HCI hardware error event [ 154.807814][ T5625] Bluetooth: hci1: hardware error 0x00 [ 155.143803][ T5603] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 155.203789][ T5754] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 155.311115][ T5603] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 155.311143][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 155.311155][ T5603] usb 2-1: Product: syz [ 155.311162][ T5603] usb 2-1: Manufacturer: syz [ 155.311169][ T5603] usb 2-1: SerialNumber: syz [ 155.347861][ T5603] usb 2-1: config 0 descriptor?? [ 155.353205][ T5603] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 155.353253][ T5603] dvb-usb: bulk message failed: -22 (2/0) [ 155.366981][ T5754] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.367010][ T5754] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.367029][ T5754] usb 4-1: config 2 interface 0 has no altsetting 0 [ 155.367057][ T5754] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 155.367076][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.429197][ T5603] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.430146][ T5603] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 155.430198][ T5603] usb 2-1: media controller created [ 155.501767][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.574661][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.575808][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.585152][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.587032][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.614290][ T5603] cxusb: set interface failed [ 155.614306][ T5603] dvb-usb: bulk message failed: -22 (1/0) [ 155.660612][ T5603] DVB: Unable to find symbol mt352_attach() [ 155.661408][ T5603] dvb-usb: bulk message failed: -22 (5/0) [ 155.661423][ T5603] zl10353_read_register: readreg error (reg=127, ret==-121) [ 155.661454][ T5603] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 155.753846][ T5603] rc_core: IR keymap rc-dvico-mce not found [ 155.753860][ T5603] Registered IR keymap rc-empty [ 155.756123][ T5603] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 155.759082][ T5603] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 155.796224][ T5603] dvb-usb: schedule remote query interval to 100 msecs. [ 155.796243][ T5603] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 155.816609][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 155.825921][ T5603] usb 2-1: USB disconnect, device number 28 [ 155.857329][ T5754] elo 0003:04E7:0009.0008: item fetching failed at offset 3/5 [ 155.857892][ T5754] elo 0003:04E7:0009.0008: parse failed [ 155.888246][ T5754] elo 0003:04E7:0009.0008: probe with driver elo failed with error -22 [ 155.962108][ T5603] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 155.984475][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 156.002077][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 156.002189][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.002207][ T10] usb 3-1: Product: syz [ 156.002220][ T10] usb 3-1: Manufacturer: syz [ 156.002232][ T10] usb 3-1: SerialNumber: syz [ 156.039592][ T10] usb 3-1: config 0 descriptor?? [ 156.061954][ T5754] usb 4-1: USB disconnect, device number 29 [ 156.075874][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 156.473766][ T32] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 156.473908][ T37] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 156.610476][ T6626] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 156.625650][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 156.625789][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 156.630695][ T37] usb 1-1: config 162 has an invalid interface number: 84 but max is 2 [ 156.630719][ T37] usb 1-1: config 162 has an invalid interface number: 3 but max is 2 [ 156.630736][ T37] usb 1-1: config 162 has no interface number 0 [ 156.630751][ T37] usb 1-1: config 162 has no interface number 1 [ 156.630876][ T37] usb 1-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.630911][ T37] usb 1-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 156.631510][ T37] usb 1-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 156.631542][ T37] usb 1-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 156.631565][ T37] usb 1-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 156.631586][ T37] usb 1-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 156.631609][ T37] usb 1-1: config 162 interface 84 has no altsetting 0 [ 156.631624][ T37] usb 1-1: config 162 interface 2 has no altsetting 0 [ 156.641826][ T37] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 156.641850][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.642303][ T37] usb 1-1: Product: syz [ 156.642316][ T37] usb 1-1: Manufacturer: syz [ 156.642329][ T37] usb 1-1: SerialNumber: syz [ 156.663165][ T32] usb 2-1: config 129 has an invalid interface number: 155 but max is 3 [ 156.663189][ T32] usb 2-1: config 129 has an invalid interface number: 177 but max is 3 [ 156.663207][ T32] usb 2-1: config 129 has an invalid interface number: 42 but max is 3 [ 156.663224][ T32] usb 2-1: config 129 contains an unexpected descriptor of type 0x2, skipping [ 156.663240][ T32] usb 2-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 156.663255][ T32] usb 2-1: config 129 has an invalid interface number: 120 but max is 3 [ 156.663272][ T32] usb 2-1: config 129 has no interface number 0 [ 156.663286][ T32] usb 2-1: config 129 has no interface number 1 [ 156.663298][ T32] usb 2-1: config 129 has no interface number 2 [ 156.663311][ T32] usb 2-1: config 129 has no interface number 3 [ 156.663380][ T32] usb 2-1: config 129 interface 155 altsetting 74 has an invalid descriptor for endpoint zero, skipping [ 156.663398][ T32] usb 2-1: config 129 interface 155 altsetting 74 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 156.663435][ T32] usb 2-1: config 129 interface 155 altsetting 74 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 156.663457][ T32] usb 2-1: config 129 interface 155 altsetting 74 has a duplicate endpoint with address 0x8, skipping [ 156.666290][ T32] usb 2-1: config 129 interface 155 altsetting 74 has a duplicate endpoint with address 0xD, skipping [ 156.666314][ T32] usb 2-1: config 129 interface 155 altsetting 74 has an endpoint descriptor with address 0x99, changing to 0x89 [ 156.666337][ T32] usb 2-1: config 129 interface 155 altsetting 74 has a duplicate endpoint with address 0x89, skipping [ 156.666357][ T32] usb 2-1: config 129 interface 155 altsetting 74 has an invalid descriptor for endpoint zero, skipping [ 156.666375][ T32] usb 2-1: config 129 interface 155 altsetting 74 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 156.666414][ T32] usb 2-1: config 129 interface 42 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 156.666435][ T32] usb 2-1: config 129 interface 42 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 156.666472][ T32] usb 2-1: config 129 interface 120 altsetting 17 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 156.666495][ T32] usb 2-1: config 129 interface 120 altsetting 17 has a duplicate endpoint with address 0xD, skipping [ 156.666522][ T32] usb 2-1: config 129 interface 155 has no altsetting 0 [ 156.666538][ T32] usb 2-1: config 129 interface 177 has no altsetting 0 [ 156.666553][ T32] usb 2-1: config 129 interface 42 has no altsetting 0 [ 156.666568][ T32] usb 2-1: config 129 interface 120 has no altsetting 0 [ 156.673991][ T32] usb 2-1: New USB device found, idVendor=19d2, idProduct=000b, bcdDevice=b9.37 [ 156.674015][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.674033][ T32] usb 2-1: Product: syz [ 156.674045][ T32] usb 2-1: Manufacturer: syz [ 156.674057][ T32] usb 2-1: SerialNumber: syz [ 156.943688][ T5602] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 157.049186][ T5625] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 157.173719][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 157.226154][ T5602] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.226188][ T5602] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.263464][ T5625] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 157.272042][ T5602] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 157.272071][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.272090][ T5602] usb 4-1: Product: syz [ 157.272102][ T5602] usb 4-1: Manufacturer: syz [ 157.272115][ T5602] usb 4-1: SerialNumber: syz [ 157.346453][ T32] option 2-1:129.155: GSM modem (1-port) converter detected [ 157.349872][ T37] usb 1-1: USB disconnect, device number 29 [ 157.382623][ T5602] usb 4-1: config 0 descriptor?? [ 157.439200][ T32] option 2-1:129.42: GSM modem (1-port) converter detected [ 157.484877][ T32] usb 2-1: USB disconnect, device number 29 [ 157.555941][ T32] option 2-1:129.155: device disconnected [ 157.671064][ T32] option 2-1:129.42: device disconnected [ 157.822302][ T10] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 158.230281][ T10] usb 3-1: device firmware changed [ 158.439551][ T5602] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 158.460873][ T10] gspca_se401: read req failed req 0x06 error -19 [ 158.507640][ T10] usb 3-1: USB disconnect, device number 28 [ 158.553364][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 158.637775][ T5602] imon:send_packet: packet tx failed (-71) [ 158.653784][ T5602] imon 4-1:0.0: panel buttons/knobs setup failed [ 158.743724][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 158.744044][ T5602] rc_core: IR keymap rc-imon-pad not found [ 158.744058][ T5602] Registered IR keymap rc-empty [ 158.746066][ T5602] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 158.746089][ T5602] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 158.749253][ T5602] imon:send_packet: packet tx failed (-71) [ 158.797902][ T5602] imon 4-1:0.0: remote input dev register failed [ 158.798048][ T5602] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 158.898830][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 158.918409][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 158.918458][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.918478][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.918499][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.918518][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.918555][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.918574][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.929219][ T6647] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.255'. [ 158.929314][ T6647] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.255'. [ 159.047798][ T38] audit: type=1326 audit(1777788642.276:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.1.254" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa18ddfcdd9 code=0x0 [ 159.318161][ T5602] imon 4-1:0.0: unable to initialize intf0, err 0 [ 159.318182][ T5602] imon:imon_probe: failed to initialize context! [ 159.318257][ T5602] imon 4-1:0.0: unable to register, err -19 [ 159.352395][ T5602] usb 4-1: USB disconnect, device number 30 [ 159.673780][ T5602] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 159.826697][ T5602] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 159.826725][ T5602] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 159.826743][ T5602] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 159.826776][ T5602] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 159.826812][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 159.826832][ T5602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 159.900049][ T5602] usb 4-1: string descriptor 0 read error: -22 [ 159.900186][ T5602] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 159.900207][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.905203][ T6655] usbtmc 3-1:16.0: simple usb_control_msg returned 0 [ 159.911497][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.912064][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.962644][ T5602] usb 4-1: config 0 descriptor?? [ 159.964193][ T6652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.983866][ T5602] hub 4-1:0.0: bad descriptor, ignoring hub [ 159.983897][ T5602] hub 4-1:0.0: probe with driver hub failed with error -5 [ 160.035400][ T5602] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 160.108556][ T5602] usb 3-1: USB disconnect, device number 29 [ 160.204292][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.204862][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.210242][ T32] usb 4-1: USB disconnect, device number 31 [ 161.121563][ T6677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 161.121591][ T6677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.216969][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 161.229816][ T6677] vhci_hcd vhci_hcd.0: Device attached [ 161.403832][ T37] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 161.463751][ T37] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 161.606023][ T6678] vhci_hcd: connection reset by peer [ 161.640216][ T13] vhci_hcd vhci_hcd.2: stop threads [ 161.641080][ T13] vhci_hcd vhci_hcd.2: release socket [ 161.685191][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 162.045033][ T6647] syz.0.255 (6647) used greatest stack depth: 18752 bytes left [ 162.864989][ T5754] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 163.016313][ T5754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 163.016341][ T5754] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 163.018084][ T5754] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.018100][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.018110][ T5754] usb 3-1: Product: syz [ 163.018116][ T5754] usb 3-1: Manufacturer: syz [ 163.018123][ T5754] usb 3-1: SerialNumber: syz [ 163.023391][ T6701] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.326770][ T6715] fuse: Unknown parameter 'ÿ' [ 163.455184][ T6701] netlink: 'syz.2.276': attribute type 4 has an invalid length. [ 163.901185][ T5602] IPVS: starting estimator thread 0... [ 164.072220][ T6727] fuse: Invalid rootmode [ 164.104134][ T6726] IPVS: using max 15 ests per chain, 36000 per kthread [ 165.996270][ T5754] cdc_ncm 3-1:1.0: bind() failure [ 166.086801][ T5754] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 166.086894][ T5754] cdc_ncm 3-1:1.1: bind() failure [ 166.154062][ T5754] usb 3-1: USB disconnect, device number 30 [ 167.373833][ T37] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 169.080969][ T10] hid_parser_main: 439 callbacks suppressed [ 169.080991][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081022][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081047][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081071][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081095][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081118][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081143][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081168][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081192][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.081226][ T10] hid-generic 0006:0008:0001.0009: unknown main item tag 0x0 [ 169.303733][ T5602] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 169.345596][ T10] hid-generic 0006:0008:0001.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 169.593821][ T5602] usb 1-1: Using ep0 maxpacket: 32 [ 169.602372][ T5602] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 169.602401][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.602419][ T5602] usb 1-1: Product: syz [ 169.602432][ T5602] usb 1-1: Manufacturer: syz [ 169.602445][ T5602] usb 1-1: SerialNumber: syz [ 169.655302][ T5602] usb 1-1: config 0 descriptor?? [ 169.879754][ T5602] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 030 [ 173.379751][ T5754] usb 1-1: USB disconnect, device number 30 [ 173.743637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.863642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.933813][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 176.094535][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 176.100575][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.100628][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 176.100667][ T10] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 176.100687][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.171999][ T10] usb 1-1: config 0 descriptor?? [ 176.277354][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 177.178086][ T10] usb 1-1: USB disconnect, device number 31 [ 178.353642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.413644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.500531][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 180.500661][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 180.500759][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 180.500855][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 181.973635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.028145][ T6832] i2c i2c-0: Invalid block write size 34 [ 183.208833][ T6854] netlink: 'syz.1.323': attribute type 15 has an invalid length. [ 185.013725][ T10] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 185.556535][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.556562][ T10] usb 3-1: config 0 has no interface number 0 [ 185.693373][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 185.693401][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.693419][ T10] usb 3-1: Product: syz [ 185.693432][ T10] usb 3-1: Manufacturer: syz [ 185.693445][ T10] usb 3-1: SerialNumber: syz [ 185.753533][ T10] usb 3-1: config 0 descriptor?? [ 185.765358][ T10] usb 3-1: selecting invalid altsetting 1 [ 185.768305][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 185.768322][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 186.550304][ T10] DVB: Unable to find symbol stv0299_attach() [ 186.584641][ T6874] netlink: 'syz.1.331': attribute type 3 has an invalid length. [ 186.712890][ T10] DVB: Unable to find symbol tda8083_attach() [ 186.712906][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 186.818460][ T10] usb 3-1: USB disconnect, device number 31 [ 186.875664][ T5723] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 187.062395][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.420496][ T5723] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 187.420526][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.420544][ T5723] usb 2-1: Product: syz [ 187.420557][ T5723] usb 2-1: Manufacturer: syz [ 187.420569][ T5723] usb 2-1: SerialNumber: syz [ 189.133611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 189.193626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 189.283614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 189.433612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 189.893614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 192.815380][ T38] audit: type=1326 audit(1777788676.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18ddfcdd9 code=0x7ffc0000 [ 192.815416][ T38] audit: type=1326 audit(1777788676.196:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18ddfcdd9 code=0x7ffc0000 [ 192.815443][ T38] audit: type=1326 audit(1777788676.196:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa18ddfdbc9 code=0x7ffc0000 [ 192.815464][ T38] audit: type=1326 audit(1777788676.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa18ddb9b3b code=0x7ffc0000 [ 192.816052][ T38] audit: type=1326 audit(1777788676.206:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa18ddb922c code=0x7ffc0000 [ 192.816076][ T38] audit: type=1326 audit(1777788676.206:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa18ddb928e code=0x7ffc0000 [ 192.816097][ T38] audit: type=1326 audit(1777788676.206:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa18ddfca6b code=0x7ffc0000 [ 192.816134][ T38] audit: type=1326 audit(1777788676.206:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa18ddfcdd9 code=0x7ffc0000 [ 192.816154][ T38] audit: type=1326 audit(1777788676.206:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18ddfcdd9 code=0x7ffc0000 [ 192.816175][ T38] audit: type=1326 audit(1777788676.206:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.1.333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18ddfcdd9 code=0x7ffc0000 [ 194.882343][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.882441][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.940350][ T5723] usb 2-1: USB disconnect, device number 30 [ 197.182766][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.135322][ T5723] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 198.217140][ T6901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.338'. [ 198.310403][ T5723] usb 2-1: config 0 has no interfaces? [ 198.323674][ T5723] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 198.323751][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.323769][ T5723] usb 2-1: Product: syz [ 198.323781][ T5723] usb 2-1: Manufacturer: syz [ 198.323793][ T5723] usb 2-1: SerialNumber: syz [ 198.332720][ T5723] usb 2-1: config 0 descriptor?? [ 200.930318][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.476191][ T5754] usb 2-1: USB disconnect, device number 31 [ 201.510841][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.548239][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.549116][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.550501][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.030334][ T5625] Bluetooth: hci4: command tx timeout [ 205.544971][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.583301][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.615784][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.642000][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.654087][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.071395][ T6926] mmap: syz.1.345 (6926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.483706][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 206.501910][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 207.267986][ T5628] Bluetooth: hci4: command tx timeout [ 207.790110][ T4928] Bluetooth: hci3: command tx timeout [ 209.284008][ T5625] Bluetooth: hci4: command tx timeout [ 209.853730][ T5625] Bluetooth: hci3: command tx timeout [ 211.365269][ T5625] Bluetooth: hci4: command tx timeout [ 212.573953][ T5625] Bluetooth: hci3: command tx timeout [ 214.670721][ T5625] Bluetooth: hci3: command tx timeout [ 217.522011][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.352406][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.709069][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.762440][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.764815][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.977235][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.978030][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.084150][ T5625] Bluetooth: hci5: command tx timeout [ 232.164056][ T5625] Bluetooth: hci5: command tx timeout [ 234.245352][ T5625] Bluetooth: hci5: command tx timeout [ 235.659992][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.324096][ T5625] Bluetooth: hci5: command tx timeout [ 249.920394][ T6980] input: syz0 as /devices/virtual/input/input12 [ 258.441353][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.441452][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.966254][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 265.393139][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.569242][ T4928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 266.228987][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 266.314700][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 266.341512][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 266.352279][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.396801][ T6992] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 268.496845][ T4928] Bluetooth: hci1: command tx timeout [ 269.468929][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.533301][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.541958][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.543533][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.584133][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.563864][ T4928] Bluetooth: hci1: command tx timeout [ 271.684121][ T4928] Bluetooth: hci6: command tx timeout [ 272.652986][ T4928] Bluetooth: hci1: command tx timeout [ 274.564463][ T4928] Bluetooth: hci6: command tx timeout [ 274.778887][ T4928] Bluetooth: hci1: command tx timeout [ 275.908498][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.968375][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.970835][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.987686][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.212064][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.643684][ T4928] Bluetooth: hci6: command tx timeout [ 278.723764][ T5625] Bluetooth: hci6: command tx timeout [ 280.244280][ T5625] Bluetooth: hci0: command tx timeout [ 282.324269][ T5625] Bluetooth: hci0: command tx timeout [ 284.404264][ T4928] Bluetooth: hci0: command tx timeout [ 284.479485][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.376856][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.421551][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.451750][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.466708][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.468056][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.531831][ T5625] Bluetooth: hci0: command tx timeout [ 287.523827][ T5625] Bluetooth: hci2: command tx timeout [ 289.603730][ T5625] Bluetooth: hci2: command tx timeout [ 291.683694][ T5625] Bluetooth: hci2: command tx timeout [ 294.232623][ T5625] Bluetooth: hci2: command tx timeout [ 305.677437][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.680722][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.681012][ T6996] bridge_slave_0: entered allmulticast mode [ 305.708621][ T6996] bridge_slave_0: entered promiscuous mode [ 305.816503][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.816799][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.817022][ T6996] bridge_slave_1: entered allmulticast mode [ 305.820340][ T6996] bridge_slave_1: entered promiscuous mode [ 306.052772][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.135395][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.352866][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.353167][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.353948][ T7010] bridge_slave_0: entered allmulticast mode [ 306.356949][ T7010] bridge_slave_0: entered promiscuous mode [ 306.492820][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.493188][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.511789][ T7010] bridge_slave_1: entered allmulticast mode [ 306.540823][ T7010] bridge_slave_1: entered promiscuous mode [ 306.573510][ T6996] team0: Port device team_slave_0 added [ 306.628973][ T6996] team0: Port device team_slave_1 added [ 306.777425][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.777810][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.778074][ T7023] bridge_slave_0: entered allmulticast mode [ 306.781331][ T7023] bridge_slave_0: entered promiscuous mode [ 306.834294][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.871149][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.871478][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.871731][ T7023] bridge_slave_1: entered allmulticast mode [ 306.900176][ T7023] bridge_slave_1: entered promiscuous mode [ 306.943778][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.946208][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.946222][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.946247][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.376875][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.376893][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.376928][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.537078][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.573198][ T7010] team0: Port device team_slave_0 added [ 313.590681][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.623903][ T7010] team0: Port device team_slave_1 added [ 313.879956][ T7023] team0: Port device team_slave_0 added [ 313.936149][ T6996] hsr_slave_0: entered promiscuous mode [ 313.938376][ T6996] hsr_slave_1: entered promiscuous mode [ 313.940056][ T6996] debugfs: 'hsr0' already exists in 'hsr' [ 313.940081][ T6996] Cannot create hsr debugfs directory [ 313.982005][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.982021][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.982047][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.041946][ T7023] team0: Port device team_slave_1 added [ 314.042330][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.042719][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.066363][ T7001] bridge_slave_0: entered allmulticast mode [ 314.069742][ T7001] bridge_slave_0: entered promiscuous mode [ 314.099774][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.099789][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.099815][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.195210][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.195508][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.196092][ T7001] bridge_slave_1: entered allmulticast mode [ 314.199730][ T7001] bridge_slave_1: entered promiscuous mode [ 314.369320][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.369338][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.369362][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.479385][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.479402][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.479428][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.971188][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.177389][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.177491][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.238864][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.242839][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.258902][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.261293][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.197492][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.300095][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.492944][ T7010] hsr_slave_0: entered promiscuous mode [ 323.524330][ T7010] hsr_slave_1: entered promiscuous mode [ 323.526123][ T7010] debugfs: 'hsr0' already exists in 'hsr' [ 323.526146][ T7010] Cannot create hsr debugfs directory [ 323.648050][ T7001] team0: Port device team_slave_0 added [ 323.741612][ T7001] team0: Port device team_slave_1 added [ 323.809588][ T7023] hsr_slave_0: entered promiscuous mode [ 323.811637][ T7023] hsr_slave_1: entered promiscuous mode [ 323.813432][ T7023] debugfs: 'hsr0' already exists in 'hsr' [ 323.813455][ T7023] Cannot create hsr debugfs directory [ 324.040824][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.040841][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.040867][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.197886][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.197902][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.197927][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.404567][ T4928] Bluetooth: hci4: command tx timeout [ 325.999693][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.058304][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.059693][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.101037][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.102001][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.483840][ T5625] Bluetooth: hci4: command tx timeout [ 328.243990][ T5625] Bluetooth: hci5: command tx timeout [ 328.564366][ T5628] Bluetooth: hci4: command tx timeout [ 329.380131][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 330.325949][ T5625] Bluetooth: hci5: command tx timeout [ 330.643814][ T5625] Bluetooth: hci4: command tx timeout [ 332.411495][ T4928] Bluetooth: hci5: command tx timeout [ 334.494730][ T4928] Bluetooth: hci5: command tx timeout [ 338.899155][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.947635][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.951844][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.998309][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.000687][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.027633][ T7023] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.123945][ T4928] Bluetooth: hci1: command tx timeout [ 342.700095][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.730158][ T7023] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.942133][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.995178][ T7023] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 343.203875][ T4928] Bluetooth: hci1: command tx timeout [ 343.892417][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.987087][ T7023] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.279764][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.284704][ T4928] Bluetooth: hci1: command tx timeout [ 346.019152][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.065616][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.114496][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.116073][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.116917][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.364153][ T4928] Bluetooth: hci1: command tx timeout [ 348.243746][ T4928] Bluetooth: hci0: command tx timeout [ 350.324529][ T4928] Bluetooth: hci0: command tx timeout [ 352.403814][ T5625] Bluetooth: hci0: command tx timeout [ 352.732645][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.733368][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.752550][ T7087] bridge_slave_0: entered allmulticast mode [ 352.762624][ T7087] bridge_slave_0: entered promiscuous mode [ 352.849132][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.849428][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.849719][ T7087] bridge_slave_1: entered allmulticast mode [ 352.878796][ T7087] bridge_slave_1: entered promiscuous mode [ 353.048127][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.087341][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.270901][ T7087] team0: Port device team_slave_0 added [ 353.272582][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.272855][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.273169][ T7101] bridge_slave_0: entered allmulticast mode [ 353.312168][ T7101] bridge_slave_0: entered promiscuous mode [ 353.641683][ T7087] team0: Port device team_slave_1 added [ 353.643239][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.656965][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.657279][ T7101] bridge_slave_1: entered allmulticast mode [ 353.683654][ T7101] bridge_slave_1: entered promiscuous mode [ 354.484725][ T5625] Bluetooth: hci0: command tx timeout [ 363.767515][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.767535][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.767561][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.838789][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.953934][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.953950][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.953976][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.036042][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.349212][ T7101] team0: Port device team_slave_0 added [ 364.405295][ T7101] team0: Port device team_slave_1 added [ 364.524270][ T7087] hsr_slave_0: entered promiscuous mode [ 364.528847][ T7087] hsr_slave_1: entered promiscuous mode [ 364.530692][ T7087] debugfs: 'hsr0' already exists in 'hsr' [ 364.530718][ T7087] Cannot create hsr debugfs directory [ 364.682739][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.682756][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.682781][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.772357][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.772373][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.772398][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.261991][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.263026][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.263288][ T7113] bridge_slave_0: entered allmulticast mode [ 372.292244][ T7113] bridge_slave_0: entered promiscuous mode [ 372.343380][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.351645][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.351923][ T7113] bridge_slave_1: entered allmulticast mode [ 372.369361][ T7113] bridge_slave_1: entered promiscuous mode [ 372.387455][ T7101] hsr_slave_0: entered promiscuous mode [ 372.389466][ T7101] hsr_slave_1: entered promiscuous mode [ 372.391033][ T7101] debugfs: 'hsr0' already exists in 'hsr' [ 372.391057][ T7101] Cannot create hsr debugfs directory [ 372.538329][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.649478][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.848289][ T7113] team0: Port device team_slave_0 added [ 372.991905][ T7113] team0: Port device team_slave_1 added [ 377.496623][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.496639][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.496664][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.637205][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.637222][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.637247][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.440008][ T7113] hsr_slave_0: entered promiscuous mode [ 378.442115][ T7113] hsr_slave_1: entered promiscuous mode [ 378.459812][ T7113] debugfs: 'hsr0' already exists in 'hsr' [ 378.459837][ T7113] Cannot create hsr debugfs directory [ 380.765604][ T7087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.977311][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.059380][ T7087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.231917][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.374167][ T7087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.051504][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.131844][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.133342][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.152615][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.171403][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.790842][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.995521][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.995795][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.996093][ T7134] bridge_slave_0: entered allmulticast mode [ 384.030341][ T7134] bridge_slave_0: entered promiscuous mode [ 384.194226][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.196095][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.196444][ T7134] bridge_slave_1: entered allmulticast mode [ 384.201257][ T7134] bridge_slave_1: entered promiscuous mode [ 384.298573][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.298744][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.343058][ T4928] Bluetooth: hci2: command tx timeout [ 385.256283][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.366936][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.539352][ T7101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.792864][ T7101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.842108][ T7134] team0: Port device team_slave_0 added [ 385.857332][ T7101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 386.403775][ T4928] Bluetooth: hci2: command tx timeout [ 386.691876][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.767519][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.788572][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.798518][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.799381][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.892663][ T7101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.036938][ T7134] team0: Port device team_slave_1 added [ 388.975216][ T5625] Bluetooth: hci2: command tx timeout [ 390.085588][ T5625] Bluetooth: hci6: command tx timeout [ 391.044940][ T5625] Bluetooth: hci2: command tx timeout [ 392.164866][ T5625] Bluetooth: hci6: command tx timeout [ 394.247260][ T5625] Bluetooth: hci6: command tx timeout [ 396.323774][ T5625] Bluetooth: hci6: command tx timeout [ 399.428194][ T4928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 399.470571][ T4928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 399.471851][ T4928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 399.512617][ T4928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 399.541870][ T4928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.764043][ T5625] Bluetooth: hci4: command tx timeout [ 403.844229][ T5625] Bluetooth: hci4: command tx timeout [ 404.780156][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.780173][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.780198][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.868949][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.868965][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.868991][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.845339][ T7134] hsr_slave_0: entered promiscuous mode [ 405.857512][ T7134] hsr_slave_1: entered promiscuous mode [ 405.866222][ T7134] debugfs: 'hsr0' already exists in 'hsr' [ 405.866248][ T7134] Cannot create hsr debugfs directory [ 405.929631][ T5625] Bluetooth: hci4: command tx timeout [ 406.792591][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.829611][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.831389][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.876509][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.908306][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.014958][ T5625] Bluetooth: hci4: command tx timeout [ 409.078707][ T5625] Bluetooth: hci5: command tx timeout [ 411.136032][ T5625] Bluetooth: hci5: command tx timeout [ 411.168602][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.169007][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.169327][ T7180] bridge_slave_0: entered allmulticast mode [ 411.172672][ T7180] bridge_slave_0: entered promiscuous mode [ 411.252589][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.252933][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.253310][ T7180] bridge_slave_1: entered allmulticast mode [ 411.310312][ T7180] bridge_slave_1: entered promiscuous mode [ 411.805106][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.856403][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.856691][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.857012][ T7195] bridge_slave_0: entered allmulticast mode [ 411.863104][ T7195] bridge_slave_0: entered promiscuous mode [ 411.941690][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.993130][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.993409][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.010589][ T7195] bridge_slave_1: entered allmulticast mode [ 412.030073][ T7195] bridge_slave_1: entered promiscuous mode [ 413.203953][ T5625] Bluetooth: hci5: command tx timeout [ 415.285482][ T5625] Bluetooth: hci5: command tx timeout [ 426.494312][ T39] INFO: task syz-executor:6925 blocked for more than 143 seconds. [ 426.494341][ T39] Tainted: G L syzkaller #0 [ 426.494351][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.494360][ T39] task:syz-executor state:D stack:22344 pid:6925 tgid:6925 ppid:1 task_flags:0x400140 flags:0x00080002 [ 426.494519][ T39] Call Trace: [ 426.494529][ T39] [ 426.494542][ T39] __schedule+0x169e/0x54f0 [ 426.494599][ T39] ? __pfx___schedule+0x10/0x10 [ 426.494634][ T39] rt_mutex_schedule+0x76/0xf0 [ 426.494655][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 426.494691][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 426.494711][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 426.494731][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 426.494761][ T39] ? rcu_barrier+0x4c/0x580 [ 426.494784][ T39] ? rcu_barrier+0x4c/0x580 [ 426.494808][ T39] ? rcu_barrier+0x4c/0x580 [ 426.494824][ T39] mutex_lock_nested+0x168/0x1d0 [ 426.494842][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 426.494865][ T39] rcu_barrier+0x4c/0x580 [ 426.494894][ T39] netdev_run_todo+0x333/0x1130 [ 426.494927][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 426.494960][ T39] ? __pfx_ipmr_free_table+0x10/0x10 [ 426.494984][ T39] ? net_generic+0x1e/0x240 [ 426.495010][ T39] ? net_generic+0x1e/0x240 [ 426.495036][ T39] ? nexthop_net_exit_rtnl+0x232/0x270 [ 426.495056][ T39] ? ipmr_net_exit_rtnl+0x17d/0x1a0 [ 426.495080][ T39] ops_undo_list+0x3d8/0x940 [ 426.495107][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 426.495124][ T39] ? ops_init+0x469/0x5c0 [ 426.495152][ T39] setup_net+0x2f0/0x340 [ 426.495173][ T39] ? __pfx_setup_net+0x10/0x10 [ 426.495192][ T39] ? mutex_rt_init_lockdep+0x66/0x80 [ 426.495215][ T39] ? preinit_net+0x4b5/0x7d0 [ 426.495236][ T39] copy_net_ns+0x50e/0x730 [ 426.495259][ T39] create_new_namespaces+0x3e7/0x6a0 [ 426.495285][ T39] ? security_capable+0x7e/0x2c0 [ 426.495313][ T39] unshare_nsproxy_namespaces+0x149/0x190 [ 426.495337][ T39] ksys_unshare+0x57d/0x9f0 [ 426.495370][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 426.495402][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.495423][ T39] __x64_sys_unshare+0x38/0x50 [ 426.495445][ T39] do_syscall_64+0x15f/0xf80 [ 426.495469][ T39] ? trace_irq_disable+0x3b/0x140 [ 426.495491][ T39] ? clear_bhb_loop+0x40/0x90 [ 426.495513][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.495532][ T39] RIP: 0033:0x7fe895aae0a7 [ 426.495557][ T39] RSP: 002b:00007fff871a3958 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 426.495615][ T39] RAX: ffffffffffffffda RBX: 00007fe895d25f40 RCX: 00007fe895aae0a7 [ 426.495629][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 426.495640][ T39] RBP: 00007fe895d267b8 R08: 0000000000000000 R09: 0000000000000000 [ 426.495651][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 426.495662][ T39] R13: 0000000000000003 R14: 00007fff871a3b98 R15: 0000000000000000 [ 426.495689][ T39] [ 426.495744][ T39] [ 426.495744][ T39] Showing all locks held in the system: [ 426.495753][ T39] 3 locks held by kworker/u8:1/13: [ 426.495763][ T39] #0: ffff88813fe4c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 426.495813][ T39] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 426.495858][ T39] #2: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 426.495908][ T39] 1 lock held by rcub/0/19: [ 426.495918][ T39] #0: ffffffff8e1cdd48 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0 [ 426.495985][ T39] 4 locks held by rcuc/1/29: [ 426.495994][ T39] #0: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 426.496041][ T39] #1: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 426.496083][ T39] #2: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 426.496125][ T39] #3: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 426.496174][ T39] 1 lock held by khungtaskd/39: [ 426.496184][ T39] #0: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 426.496228][ T39] 6 locks held by kworker/u8:3/56: [ 426.496238][ T39] #0: ffff88801b6d6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 426.496282][ T39] #1: ffffc9000122fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 426.496325][ T39] #2: ffffffff8f580da0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 426.496370][ T39] #3: ffff88805ba93160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 426.496414][ T39] #4: ffff8880398d0310 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 426.496462][ T39] #5: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.496516][ T39] 2 locks held by kworker/u8:10/1411: [ 426.496526][ T39] #0: ffff88813fe4c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 426.496570][ T39] #1: ffffc9000655fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 426.496614][ T39] 3 locks held by kworker/u8:12/1446: [ 426.496624][ T39] #0: ffff8880327d0938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 426.496669][ T39] #1: ffffc9000661fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 426.496712][ T39] #2: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 426.496773][ T39] 2 locks held by getty/5369: [ 426.496783][ T39] #0: ffff8880363a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 426.496831][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 426.496878][ T39] 7 locks held by kworker/1:4/5624: [ 426.496888][ T39] #0: ffff88813fe0b138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 426.496933][ T39] #1: ffffc90004c97c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 426.496988][ T39] #2: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 426.497034][ T39] #3: ffff8880b8724368 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x610 [ 426.497080][ T39] #4: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 426.497122][ T39] #5: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd3/0x3e0 [ 426.497165][ T39] #6: ffffffff8e05f300 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 426.497215][ T39] 1 lock held by syz.2.332/6885: [ 426.497226][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497269][ T39] 1 lock held by syz-executor/6903: [ 426.497278][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497322][ T39] 2 locks held by syz-executor/6925: [ 426.497332][ T39] #0: ffffffff8f580da0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 426.497376][ T39] #1: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497420][ T39] 1 lock held by syz.3.354/6980: [ 426.497430][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497474][ T39] 1 lock held by syz-executor/6996: [ 426.497484][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497527][ T39] 1 lock held by syz-executor/7001: [ 426.497537][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497578][ T39] 1 lock held by syz-executor/7010: [ 426.497588][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497631][ T39] 1 lock held by syz-executor/7023: [ 426.497642][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497687][ T39] 1 lock held by syz-executor/7087: [ 426.497697][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497738][ T39] 1 lock held by syz-executor/7101: [ 426.497748][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497791][ T39] 1 lock held by syz-executor/7113: [ 426.497800][ T39] #0: ffffffff8e1ce370 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 426.497845][ T39] 1 lock held by syz-executor/7134: [ 426.497855][ T39] #0: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 426.497901][ T39] 1 lock held by syz-executor/7180: [ 426.497912][ T39] #0: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 426.497965][ T39] 1 lock held by syz-executor/7195: [ 426.497975][ T39] #0: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 426.498018][ T39] 2 locks held by syz-executor/7205: [ 426.498028][ T39] #0: ffffffff8facb3e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 426.498077][ T39] #1: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 426.498120][ T39] 1 lock held by syz-executor/7219: [ 426.498131][ T39] #0: ffffffff8f590278 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 426.498176][ T39] [ 426.498180][ T39] ============================================= [ 426.498180][ T39] [ 426.498200][ T39] NMI backtrace for cpu 0 [ 426.498221][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.498276][ T39] Tainted: [L]=SOFTLOCKUP [ 426.498281][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.498292][ T39] Call Trace: [ 426.498298][ T39] [ 426.498305][ T39] dump_stack_lvl+0xe8/0x150 [ 426.498329][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 426.498348][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 426.498372][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 426.498393][ T39] sys_info+0x135/0x170 [ 426.498417][ T39] watchdog+0xfd3/0x1030 [ 426.498446][ T39] ? watchdog+0x1c9/0x1030 [ 426.498472][ T39] kthread+0x388/0x470 [ 426.498496][ T39] ? __pfx_watchdog+0x10/0x10 [ 426.498514][ T39] ? __pfx_kthread+0x10/0x10 [ 426.498538][ T39] ret_from_fork+0x514/0xb70 [ 426.498562][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 426.498582][ T39] ? __switch_to+0xc79/0x1410 [ 426.498602][ T39] ? __pfx_kthread+0x10/0x10 [ 426.498627][ T39] ret_from_fork_asm+0x1a/0x30 [ 426.498664][ T39] [ 426.498697][ T39] Sending NMI from CPU 0 to CPUs 1: [ 426.498730][ C1] NMI backtrace for cpu 1 [ 426.498746][ C1] CPU: 1 UID: 0 PID: 29 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.498767][ C1] Tainted: [L]=SOFTLOCKUP [ 426.498773][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.498781][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 426.498801][ C1] Code: 8b 3d c4 98 dc 0b 48 89 de 5b e9 c3 4c 5e 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d a8 e8 cf 10 65 8b 35 c9 e8 cf 10 81 e6 00 00 ff 00 ba [ 426.498815][ C1] RSP: 0018:ffffc90000a3ed98 EFLAGS: 00000287 [ 426.498828][ C1] RAX: ffffffff890ec9a0 RBX: 00000000000c0f00 RCX: ffff88801dec3d80 [ 426.498840][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 426.498850][ C1] RBP: ffffc90000a3ef38 R08: 0000000000000000 R09: 0000000000000100 [ 426.498860][ C1] R10: ffffc90000a3ed00 R11: fffff52000147da4 R12: e00000000cb32be3 [ 426.498871][ C1] R13: e00000000cb32be2 R14: 1ffffffff34cd41c R15: e00000000cb32be2 [ 426.498882][ C1] FS: 0000000000000000(0000) GS:ffff888125dd3000(0000) knlGS:0000000000000000 [ 426.498894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.498905][ C1] CR2: 00007f1db0e97e9c CR3: 0000000036402000 CR4: 00000000003526f0 [ 426.498918][ C1] Call Trace: [ 426.498923][ C1] [ 426.498929][ C1] save_dst_trace_buffer+0x1e0/0x5b0 [ 426.498954][ C1] ? __pfx_save_dst_trace_buffer+0x10/0x10 [ 426.498973][ C1] ? dst_release+0x28/0x1b0 [ 426.498991][ C1] ? skb_release_head_state+0x71/0x360 [ 426.499008][ C1] ? __kfree_skb+0x24/0x210 [ 426.499023][ C1] ? nft_synproxy_eval_v4+0x352/0x4e0 [ 426.499043][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 426.499062][ C1] ? nft_do_chain+0x467/0x19f0 [ 426.499075][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 426.499096][ C1] ? nf_hook_slow+0xc5/0x220 [ 426.499113][ C1] ? NF_HOOK+0x21f/0x3c0 [ 426.499128][ C1] ? NF_HOOK+0x336/0x3c0 [ 426.499140][ C1] ? process_backlog+0x569/0xc60 [ 426.499154][ C1] ? __napi_poll+0xab/0x550 [ 426.499167][ C1] ? net_rx_action+0x696/0xe00 [ 426.499181][ C1] ? handle_softirqs+0x1de/0x6d0 [ 426.499196][ C1] ? __local_bh_enable_ip+0x170/0x2b0 [ 426.499212][ C1] ? rcu_cpu_kthread+0x9e8/0x1470 [ 426.499232][ C1] ? smpboot_thread_fn+0x541/0xa50 [ 426.499250][ C1] ? kthread+0x388/0x470 [ 426.499267][ C1] ? ret_from_fork+0x514/0xb70 [ 426.499283][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 426.499301][ C1] ? synproxy_send_client_synack+0x8c1/0xe30 [ 426.499325][ C1] dst_release+0x28/0x1b0 [ 426.499346][ C1] skb_release_head_state+0x71/0x360 [ 426.499364][ C1] __kfree_skb+0x24/0x210 [ 426.499381][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 426.499403][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 426.499424][ C1] ? nf_ip_checksum+0x13c/0x510 [ 426.499440][ C1] nft_synproxy_do_eval+0x305/0x580 [ 426.499459][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 426.499480][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 426.499503][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 426.499524][ C1] nft_do_chain+0x467/0x19f0 [ 426.499544][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 426.499562][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 426.499586][ C1] ? ip_vs_in_hook+0xc50/0x1bf0 [ 426.499599][ C1] ? ip_vs_in_hook+0xc84/0x1bf0 [ 426.499618][ C1] nft_do_chain_inet+0x360/0x4b0 [ 426.499639][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 426.499663][ C1] ? NF_HOOK+0x9e/0x3c0 [ 426.499677][ C1] ? NF_HOOK+0x9e/0x3c0 [ 426.499691][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 426.499717][ C1] nf_hook_slow+0xc5/0x220 [ 426.499737][ C1] NF_HOOK+0x21f/0x3c0 [ 426.499752][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 426.499768][ C1] ? NF_HOOK+0x9e/0x3c0 [ 426.499782][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 426.499795][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 426.499812][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 426.499830][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 426.499846][ C1] NF_HOOK+0x336/0x3c0 [ 426.499860][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 426.499879][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 426.499893][ C1] ? NF_HOOK+0x9e/0x3c0 [ 426.499907][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 426.499922][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 426.499939][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 426.499954][ C1] ? process_backlog+0x271/0xc60 [ 426.499968][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 426.499982][ C1] process_backlog+0x569/0xc60 [ 426.499998][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 426.500022][ C1] __napi_poll+0xab/0x550 [ 426.500036][ C1] net_rx_action+0x696/0xe00 [ 426.500058][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 426.500071][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 426.500093][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 426.500115][ C1] handle_softirqs+0x1de/0x6d0 [ 426.500136][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 426.500153][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 426.500172][ C1] rcu_cpu_kthread+0x9e8/0x1470 [ 426.500195][ C1] ? rcu_cpu_kthread+0x205/0x1470 [ 426.500219][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 426.500239][ C1] ? schedule+0x90/0x360 [ 426.500258][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 426.500275][ C1] smpboot_thread_fn+0x541/0xa50 [ 426.500293][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 426.500314][ C1] kthread+0x388/0x470 [ 426.500332][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 426.500349][ C1] ? __pfx_kthread+0x10/0x10 [ 426.500368][ C1] ret_from_fork+0x514/0xb70 [ 426.500386][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 426.500403][ C1] ? __switch_to+0xc79/0x1410 [ 426.500418][ C1] ? __pfx_kthread+0x10/0x10 [ 426.500437][ C1] ret_from_fork_asm+0x1a/0x30 [ 426.500462][ C1] [ 426.500737][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 426.500753][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 426.500776][ T39] Tainted: [L]=SOFTLOCKUP [ 426.500783][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 426.500793][ T39] Call Trace: [ 426.500800][ T39] [ 426.500807][ T39] vpanic+0x56c/0xa60 [ 426.500835][ T39] ? __pfx_vpanic+0x10/0x10 [ 426.500866][ T39] panic+0xc5/0xd0 [ 426.500889][ T39] ? __pfx_panic+0x10/0x10 [ 426.500920][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 426.500942][ T39] watchdog+0x102c/0x1030 [ 426.500978][ T39] ? watchdog+0x1c9/0x1030 [ 426.501003][ T39] kthread+0x388/0x470 [ 426.501027][ T39] ? __pfx_watchdog+0x10/0x10 [ 426.501045][ T39] ? __pfx_kthread+0x10/0x10 [ 426.501070][ T39] ret_from_fork+0x514/0xb70 [ 426.501094][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 426.501115][ T39] ? __switch_to+0xc79/0x1410 [ 426.501135][ T39] ? __pfx_kthread+0x10/0x10 [ 426.501160][ T39] ret_from_fork_asm+0x1a/0x30 [ 426.501196][ T39] [ 426.501574][ T39] Kernel Offset: disabled