last executing test programs: 6m29.592560253s ago: executing program 2 (id=3050): socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x2}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m29.026665721s ago: executing program 2 (id=3054): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 6m27.495089262s ago: executing program 2 (id=3059): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000002080)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r3, 0x3b}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 6m25.178679838s ago: executing program 2 (id=3061): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000880)=0x10, 0x1) 6m24.886130073s ago: executing program 2 (id=3062): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x5, 0x30}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000180)="31f4bcfc98cf57c1fa52fae54d97366ae96c20b5b2c37371822edd67875d509b2db821eec2b6dd6deeab1489015dcffdc22bc2c2544d91682d086cef377e75472397d9dc2c29b784241423d5f36480920bebe3c422b7b9f5bdd14eabbe7c6c54e0dbf1b89fe18e10d928e8a875f9daa83edda348b0603e2bfe4a5c2d0161f385252066f44b4a417a714881398e3733e318863132f082f3304d7c997c8360", 0x0, 0x0, &(0x7f0000000400), 0x3, r8, 0x4}, 0x38) syz_clone(0x100000, &(0x7f0000000100)="d55f6d18e28c6d3c35b77319c8200bda810776dc2f59cdc922d1", 0x1a, 0x0, &(0x7f0000000580), &(0x7f0000000600)="19c8336a7665a71a5de8caaf93486675531af1b5dcb583fe98e9e8c686fc46ac4ad28cf3484865cf8b81cf865c5fd1fe483b9ec4eb1ab4bcfc471371fcd9dbf45ea9cdb0a95766dc1e5a50eeeca8c5aea56e13749b1976517620bb4702d106911c4286ee6ceb8d2563561f908ebfcdccf433595f076e65aedd5b0edf14bdae33b4518b10cd4787871f") 6m24.255880197s ago: executing program 2 (id=3065): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800)={0x27, 0x0, 0x1, 0x5, 0x6, 0xc, "486a726ac693d17b958d8de3a9195666e9b9eee0af9f397375ba14b9d9f92b04dadb29b690babea17b19c76ceeec85ad407e2e9dcdedd816ee430daa0401a4", 0x17}, 0x60) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='cpuset\x00') preadv(r4, &(0x7f0000002940)=[{0x0}], 0x1, 0x8e, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 6m9.064907277s ago: executing program 32 (id=3065): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000100)) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800)={0x27, 0x0, 0x1, 0x5, 0x6, 0xc, "486a726ac693d17b958d8de3a9195666e9b9eee0af9f397375ba14b9d9f92b04dadb29b690babea17b19c76ceeec85ad407e2e9dcdedd816ee430daa0401a4", 0x17}, 0x60) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='cpuset\x00') preadv(r4, &(0x7f0000002940)=[{0x0}], 0x1, 0x8e, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m1.107425924s ago: executing program 5 (id=3401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x12, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3m59.285567796s ago: executing program 5 (id=3408): socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m55.292749599s ago: executing program 1 (id=3412): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000240), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m55.160743775s ago: executing program 5 (id=3413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) 3m52.545513145s ago: executing program 5 (id=3416): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3m52.396501312s ago: executing program 1 (id=3417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f7", 0x81}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0x59}, {&(0x7f00000005c0)=""/132, 0x84}], 0x2) 3m51.373801028s ago: executing program 1 (id=3418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3m50.888703332s ago: executing program 5 (id=3420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000580)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m48.435657973s ago: executing program 1 (id=3422): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 3m46.655222203s ago: executing program 5 (id=3424): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3m45.825974184s ago: executing program 1 (id=3427): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m43.939747866s ago: executing program 1 (id=3429): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x12a4079, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='cpuset\x00') preadv(r5, &(0x7f0000002940)=[{0x0}], 0x1, 0x8e, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m30.9972939s ago: executing program 33 (id=3424): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) 3m28.158996082s ago: executing program 34 (id=3429): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x12a4079, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r5 = syz_open_procfs(0x0, &(0x7f0000000680)='cpuset\x00') preadv(r5, &(0x7f0000002940)=[{0x0}], 0x1, 0x8e, 0x100) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0xa71, {"815c01f53ede7560e2cf57e0c4462023", "e0285a9a8697e253fee604c38842ffa6", "d82173682e63dacc724477e1204d3f56"}, 0x2, 0x6}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m12.759163916s ago: executing program 4 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x5e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44046) clock_settime(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) 1m58.821931693s ago: executing program 4 (id=3526): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a00)={0x24, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xc8, 0x0, 0x0, @binary}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x93}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1m56.771602268s ago: executing program 4 (id=3528): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) dup(0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 1m52.149208747s ago: executing program 4 (id=3531): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1m50.841676182s ago: executing program 3 (id=3533): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 1m49.976054711s ago: executing program 4 (id=3534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 1m47.888766456s ago: executing program 3 (id=3536): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x70, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5b1f8b30876fac3c90d9e206b034a83c"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) keyctl$clear(0x7, r3) 1m46.825666669s ago: executing program 4 (id=3537): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d367265", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m41.521666822s ago: executing program 3 (id=3538): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x640, 0x0) r0 = syz_io_uring_setup(0x3ec3, &(0x7f0000000240)={0x0, 0x86a1, 0x20, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="696e6f646533322c61707072616973655f747970653d696d617369672c6673757569643d65333232626362642d656530342d336635622d1cdc7c9b3def0e896058326238382d61006100386236622c00"]) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r3, 0x0, 0x0) close(r3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 1m34.52645747s ago: executing program 3 (id=3541): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="cc00330080000000ffffffffffff080211000000f70b87594b3f00000000000001000100dd068b7668a2"], 0xe8}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 1m31.833819334s ago: executing program 3 (id=3542): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1m31.289289427s ago: executing program 35 (id=3537): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d367265", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m30.49135918s ago: executing program 3 (id=3544): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 1m14.877890622s ago: executing program 36 (id=3544): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 31.550911412s ago: executing program 0 (id=3561): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0x3, 0x2a, "93635527de507fc4976135f52387acd68bedd6dff2ec991fc15bb8ad7f2fd8f922a45ba907bac5077443"}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x20, 0x30}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0}) 26.616462286s ago: executing program 0 (id=3562): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff0a, 0x0) 24.846069521s ago: executing program 0 (id=3563): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r1, 0xb) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 21.849349806s ago: executing program 0 (id=3564): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x3}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x7fff, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1}, @note={0x0, 0x44}}], 0x38) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r0, 0xb4, &(0x7f0000001100)}, 0x10) 19.300327933s ago: executing program 0 (id=3565): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) dup3(r0, r1, 0x80000) 15.736998512s ago: executing program 0 (id=3566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @empty=0x7f000000}}) 0s ago: executing program 37 (id=3566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @empty=0x7f000000}}) kernel console output (not intermixed with test programs): 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1024.782275][ T9631] usb 4-1: string descriptor 0 read error: -22 [ 1024.782451][ T9631] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1024.782475][ T9631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.887971][ T9631] usb 4-1: config 0 descriptor?? [ 1024.889163][T13015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.892181][ T9631] hub 4-1:0.0: bad descriptor, ignoring hub [ 1024.892217][ T9631] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1024.943839][ T9631] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 1025.161088][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 1025.211389][ T9631] usb 4-1: USB disconnect, device number 13 [ 1028.955746][T13084] process 'syz.4.2365' launched './file0' with NULL argv: empty string added [ 1029.016211][ T9631] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1029.086684][ T54] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1029.198690][ T9631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1029.198726][ T9631] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.198764][ T9631] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1029.198785][ T9631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.299474][ T9631] usb 4-1: config 0 descriptor?? [ 1029.401413][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2366'. [ 1030.010849][ T54] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1030.010881][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.010900][ T54] usb 3-1: Product: syz [ 1030.010914][ T54] usb 3-1: Manufacturer: syz [ 1030.010927][ T54] usb 3-1: SerialNumber: syz [ 1030.096165][ T54] usb 3-1: config 0 descriptor?? [ 1030.128650][ T54] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 011 [ 1030.422395][ T9631] hid_parser_main: 3 callbacks suppressed [ 1030.422434][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.422470][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.422496][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.422520][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.422544][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.422569][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.422592][ T9631] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 1030.477327][ T9631] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1030.816814][ T9631] usb 4-1: USB disconnect, device number 14 [ 1030.926877][ T54] i2c i2c-1: failure reading functionality [ 1030.993672][ T54] i2c i2c-1: connected i2c-tiny-usb device [ 1031.023568][ T54] usb 3-1: USB disconnect, device number 11 [ 1033.782483][T13122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2378'. [ 1035.569576][T13130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2379'. [ 1040.241861][T13171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2392'. [ 1040.466171][T13169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1046.523747][ T9631] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1047.260253][ T9631] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1047.260287][ T9631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.260306][ T9631] usb 4-1: Product: syz [ 1047.260319][ T9631] usb 4-1: Manufacturer: syz [ 1047.260332][ T9631] usb 4-1: SerialNumber: syz [ 1047.369376][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2409'. [ 1048.536876][ T9631] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1048.536939][ T9631] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1048.572094][ T9631] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1049.349242][ T9631] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1049.367976][ T9631] usb 4-1: USB disconnect, device number 15 [ 1053.116440][ T9631] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1053.265965][ T9631] usb 4-1: Using ep0 maxpacket: 32 [ 1053.268951][ T9631] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1053.268978][ T9631] usb 4-1: config 0 has no interface number 0 [ 1053.269024][ T9631] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1053.271342][ T9631] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1053.271372][ T9631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.271390][ T9631] usb 4-1: Product: syz [ 1053.271403][ T9631] usb 4-1: Manufacturer: syz [ 1053.271416][ T9631] usb 4-1: SerialNumber: syz [ 1053.516168][ T9631] usb 4-1: config 0 descriptor?? [ 1053.627152][T13271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1055.013818][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.013891][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.449170][ T9631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1055.449228][ T9631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1055.461849][ T9631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1055.461884][ T9631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1055.461902][ T9631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1055.461919][ T9631] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1055.462243][ T9631] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1056.171571][ T9631] usb 4-1: USB disconnect, device number 16 [ 1057.329560][T13298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2437'. [ 1058.492886][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 1059.003619][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1063.056055][T11159] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1063.296787][T11159] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1063.296820][T11159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.296839][T11159] usb 3-1: Product: syz [ 1063.296852][T11159] usb 3-1: Manufacturer: syz [ 1063.296865][T11159] usb 3-1: SerialNumber: syz [ 1063.741939][T11159] usb 3-1: config 0 descriptor?? [ 1063.828040][T11159] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 012 [ 1065.252056][T11159] (null): failure reading functionality [ 1065.279768][T11159] i2c i2c-1: failure reading functionality [ 1065.300260][T11159] i2c i2c-1: connected i2c-tiny-usb device [ 1065.312769][T11159] usb 3-1: USB disconnect, device number 12 [ 1070.597232][ T9631] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1070.995983][ T9631] usb 4-1: Using ep0 maxpacket: 16 [ 1071.000089][ T9631] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.000117][ T9631] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1071.003930][ T9631] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1071.003960][ T9631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.003979][ T9631] usb 4-1: Product: syz [ 1071.003994][ T9631] usb 4-1: Manufacturer: syz [ 1071.004007][ T9631] usb 4-1: SerialNumber: syz [ 1071.069481][ T9631] usb 4-1: config 0 descriptor?? [ 1071.275082][ T9631] usb 4-1: USB disconnect, device number 17 [ 1075.625980][ T9631] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1075.756116][ T9631] usb 4-1: device descriptor read/64, error -71 [ 1077.295987][ T9631] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1080.589747][T13491] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1081.806111][ T54] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1081.936027][ T54] usb 4-1: device descriptor read/64, error -71 [ 1082.185980][ T54] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1082.316131][ T54] usb 4-1: device descriptor read/64, error -71 [ 1082.426494][ T54] usb usb4-port1: attempt power cycle [ 1082.816671][ T54] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1082.836775][ T54] usb 4-1: device descriptor read/8, error -71 [ 1083.151652][T13528] fuse: fd is not a fuse device [ 1083.225219][ T54] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1083.271472][ T54] usb 4-1: device descriptor read/8, error -71 [ 1083.376568][ T54] usb usb4-port1: unable to enumerate USB device [ 1087.222044][T13560] fuse: fd is not a fuse device [ 1087.349670][T13564] fuse: Bad value for 'fd' [ 1088.695179][T13593] fuse: fd is not a fuse device [ 1090.292069][T13635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1090.799425][T13641] binder_alloc: 13640: binder_alloc_buf, no vma [ 1091.350667][T13658] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.2573'. [ 1091.703565][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 1093.434952][T13701] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1093.815346][T13713] fuse: Bad value for 'fd' [ 1094.096032][ T54] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1094.252431][ T54] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1094.252465][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.252482][ T54] usb 3-1: Product: syz [ 1094.252494][ T54] usb 3-1: Manufacturer: syz [ 1094.252507][ T54] usb 3-1: SerialNumber: syz [ 1094.262902][ T54] usb 3-1: config 0 descriptor?? [ 1094.334070][ T54] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 013 [ 1095.107542][ T54] i2c i2c-1: failure reading functionality [ 1095.141932][ T54] i2c i2c-1: connected i2c-tiny-usb device [ 1095.173908][ T54] usb 3-1: USB disconnect, device number 13 [ 1095.719398][T13740] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.2606'. [ 1099.167322][T13779] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.2618'. [ 1099.995754][T13796] autofs: Unknown parameter '0x0000000000000000' [ 1103.866002][ T9631] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1106.144144][ T9631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.144180][ T9631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.144225][ T9631] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1106.144247][ T9631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.151967][ T9631] usb 3-1: config 0 descriptor?? [ 1106.578740][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.578779][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.578804][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.578829][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.578854][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.578877][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.578901][ T9631] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 1106.583614][ T9631] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 1106.939921][T13841] fuse: fd is not a fuse device [ 1106.981185][ T9631] usb 3-1: USB disconnect, device number 14 [ 1107.035299][T13843] autofs: Unknown parameter '0x0000000000000000' [ 1112.212327][T13881] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1112.212454][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1113.094979][T13885] autofs: Unknown parameter '0x0000000000000000' [ 1113.187827][T13887] sctp: [Deprecated]: syz.1.2654 (pid 13887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1113.187827][T13887] Use struct sctp_sack_info instead [ 1115.225938][ T9631] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1115.395922][ T9631] usb 4-1: Using ep0 maxpacket: 32 [ 1116.068739][ T9631] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1116.068783][ T9631] usb 4-1: config 0 has no interface number 0 [ 1116.072777][ T9631] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1116.072808][ T9631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.072828][ T9631] usb 4-1: Product: syz [ 1116.072849][ T9631] usb 4-1: Manufacturer: syz [ 1116.072864][ T9631] usb 4-1: SerialNumber: syz [ 1116.150550][ T9631] usb 4-1: config 0 descriptor?? [ 1116.448611][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.448686][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.829117][T12258] IPVS: starting estimator thread 0... [ 1116.936363][T13916] IPVS: using max 9 ests per chain, 21600 per kthread [ 1117.313427][ T9631] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1117.313462][ T9631] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1117.339049][ T9631] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1117.339368][ T9631] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1117.401977][ T9631] usb 4-1: USB disconnect, device number 24 [ 1117.466031][ T54] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1117.642155][ T54] usb 3-1: Using ep0 maxpacket: 32 [ 1117.643799][ T54] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1117.647252][ T54] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1117.647281][ T54] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1117.647318][ T54] usb 3-1: Product: syz [ 1117.647331][ T54] usb 3-1: Manufacturer: syz [ 1117.647344][ T54] usb 3-1: SerialNumber: syz [ 1117.701755][ T54] usb 3-1: config 0 descriptor?? [ 1117.719676][T13910] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1118.146871][ T9631] usb 3-1: USB disconnect, device number 15 [ 1118.196286][T13929] autofs: Unknown parameter '0x0000000000000000' [ 1118.485982][T12258] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 1118.658728][T12258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1118.658766][T12258] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1118.658808][T12258] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 1118.658829][T12258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.712640][T12258] usb 4-1: config 0 descriptor?? [ 1118.713801][T13931] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1118.994770][T13941] fuse: fd is not a fuse device [ 1119.203461][T12258] kye 0003:0458:5017.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1119.216882][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x2 [ 1119.216922][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x3 [ 1119.216939][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.216954][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.216969][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.216983][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.216998][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.217013][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.217028][T12258] kye 0003:0458:5017.0008: unknown main item tag 0x0 [ 1119.308100][T12258] kye 0003:0458:5017.0008: hidraw0: USB HID v0.74 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 1119.308136][T12258] kye 0003:0458:5017.0008: tablet-enabling feature report not found [ 1119.308150][T12258] kye 0003:0458:5017.0008: tablet enabling failed [ 1119.409738][T12258] usb 4-1: USB disconnect, device number 25 [ 1119.437761][ T5812] IPVS: starting estimator thread 0... [ 1119.506263][T13952] fido_id[13952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1119.527264][T13953] IPVS: using max 9 ests per chain, 21600 per kthread [ 1119.676124][ T54] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1119.676159][T13960] autofs: Unknown parameter '0x0000000000000000' [ 1119.846675][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 1119.849338][ T54] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1119.849367][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.849385][ T54] usb 3-1: config 0 has no interface number 0 [ 1119.849429][ T54] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1119.849452][ T54] usb 3-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1119.853076][ T54] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1119.853107][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.853126][ T54] usb 3-1: Product: syz [ 1119.853139][ T54] usb 3-1: Manufacturer: syz [ 1119.853153][ T54] usb 3-1: SerialNumber: syz [ 1119.870823][ T54] usb 3-1: config 0 descriptor?? [ 1119.872110][T13951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1120.118035][ T54] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 1120.198001][ T54] usb 3-1: USB disconnect, device number 16 [ 1120.675964][T12258] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1120.806132][T12258] usb 4-1: device descriptor read/64, error -71 [ 1121.056070][T12258] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 1121.129485][ T54] IPVS: starting estimator thread 0... [ 1121.196191][T12258] usb 4-1: device descriptor read/64, error -71 [ 1121.219331][T13990] autofs: Unknown parameter 'fd0x0000000000000000' [ 1121.236108][T13988] IPVS: using max 15 ests per chain, 36000 per kthread [ 1121.307646][T12258] usb usb4-port1: attempt power cycle [ 1121.695503][T12258] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1121.875004][T12258] usb 4-1: device descriptor read/8, error -71 [ 1122.141515][T12258] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1122.188859][T12258] usb 4-1: device descriptor read/8, error -71 [ 1122.259586][ T36] audit: type=1326 audit(2000000994.048:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14001 comm="syz.4.2696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb78cace59 code=0x0 [ 1122.296403][T12258] usb usb4-port1: unable to enumerate USB device [ 1123.419453][T14023] autofs: Unknown parameter 'fd0x0000000000000000' [ 1123.794037][ T36] audit: type=1326 audit(2000000995.578:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14032 comm="syz.2.2710" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5917cce59 code=0x0 [ 1124.781925][T14053] autofs: Unknown parameter 'fd0x0000000000000000' [ 1125.786061][T12258] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1125.975999][T12258] usb 3-1: Using ep0 maxpacket: 16 [ 1125.979142][T12258] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1125.979171][T12258] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.979188][T12258] usb 3-1: config 0 has no interface number 0 [ 1125.979214][T12258] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1125.979227][T12258] usb 3-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.981774][T12258] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1125.981803][T12258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.981816][T12258] usb 3-1: Product: syz [ 1125.981824][T12258] usb 3-1: Manufacturer: syz [ 1125.981831][T12258] usb 3-1: SerialNumber: syz [ 1126.063190][T12258] usb 3-1: config 0 descriptor?? [ 1126.064072][T14078] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1126.288043][T12258] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 1126.312102][T12258] usb 3-1: USB disconnect, device number 17 [ 1128.262553][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'. [ 1128.777269][ T5812] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1128.846989][T14135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2758'. [ 1128.847849][T14135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2758'. [ 1130.019722][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1130.037647][ T5812] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1130.037677][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.037689][ T5812] usb 3-1: config 0 has no interface number 0 [ 1130.037716][ T5812] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1130.037730][ T5812] usb 3-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.039916][ T5812] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1130.039942][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.039953][ T5812] usb 3-1: Product: syz [ 1130.039960][ T5812] usb 3-1: Manufacturer: syz [ 1130.039968][ T5812] usb 3-1: SerialNumber: syz [ 1130.043635][ T5812] usb 3-1: config 0 descriptor?? [ 1130.049239][T14129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1130.299885][ T5812] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 1130.320536][ T5812] usb 3-1: USB disconnect, device number 18 [ 1130.613810][T14160] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1130.994540][T14165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2767'. [ 1131.615027][T14171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1131.648853][T14171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1132.936058][ T5812] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1132.972119][T14194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2780'. [ 1133.096022][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 1133.097981][ T5812] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1133.098010][ T5812] usb 3-1: config 0 has no interface number 0 [ 1133.098120][ T5812] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1133.098141][ T5812] usb 3-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1133.101675][ T5812] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1133.101702][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.101713][ T5812] usb 3-1: Product: syz [ 1133.101721][ T5812] usb 3-1: Manufacturer: syz [ 1133.101728][ T5812] usb 3-1: SerialNumber: syz [ 1133.180429][ T5812] usb 3-1: config 0 descriptor?? [ 1133.181337][T14190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1133.404880][ T5812] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 1133.431441][ T5812] usb 3-1: USB disconnect, device number 19 [ 1133.478907][T12417] udevd[12417]: setting owner of /dev/bus/usb/003/019 to uid=0, gid=0 failed: No such file or directory [ 1133.721505][T14201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2784'. [ 1133.721634][T14201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2784'. [ 1134.591888][ T9423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1134.642314][ T9423] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1134.643969][ T9423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1134.651236][ T9423] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1134.659153][ T9423] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1135.345137][T14233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2793'. [ 1135.630613][T14242] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2795'. [ 1135.673579][T14244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1135.753893][T14244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1135.976222][T12258] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1136.356884][T12258] usb 4-1: device descriptor read/64, error -71 [ 1136.616032][T12258] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1136.756079][T12258] usb 4-1: device descriptor read/64, error -71 [ 1136.780811][ T5609] Bluetooth: hci5: command tx timeout [ 1136.872064][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.875364][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.875568][T14212] bridge_slave_0: entered allmulticast mode [ 1136.877077][T12258] usb usb4-port1: attempt power cycle [ 1136.887754][T14212] bridge_slave_0: entered promiscuous mode [ 1136.903161][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.903277][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.903497][T14212] bridge_slave_1: entered allmulticast mode [ 1136.907341][T14212] bridge_slave_1: entered promiscuous mode [ 1137.228118][T12258] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1137.241571][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.265500][T12258] usb 4-1: device descriptor read/8, error -71 [ 1137.289791][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.462219][T14212] team0: Port device team_slave_0 added [ 1137.474685][T14212] team0: Port device team_slave_1 added [ 1137.506258][T12258] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1137.578039][T12258] usb 4-1: device descriptor read/8, error -71 [ 1137.687821][T12258] usb usb4-port1: unable to enumerate USB device [ 1137.694523][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.694541][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.694565][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.699082][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.699099][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.699124][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.772582][T14212] hsr_slave_0: entered promiscuous mode [ 1137.774072][T14212] hsr_slave_1: entered promiscuous mode [ 1137.775071][T14212] debugfs: 'hsr0' already exists in 'hsr' [ 1137.775096][T14212] Cannot create hsr debugfs directory [ 1137.923662][T14272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2805'. [ 1138.441957][T14279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2807'. [ 1138.552087][T14279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2807'. [ 1138.847993][ T5609] Bluetooth: hci5: command tx timeout [ 1140.631730][ T12] bridge_slave_1: left allmulticast mode [ 1140.663717][ T12] bridge_slave_1: left promiscuous mode [ 1140.676007][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.925974][ T5609] Bluetooth: hci5: command tx timeout [ 1141.249635][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2819'. [ 1141.275983][T12258] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1141.405973][T12258] usb 4-1: device descriptor read/64, error -71 [ 1141.666021][T12258] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1141.796086][T12258] usb 4-1: device descriptor read/64, error -71 [ 1141.906450][T12258] usb usb4-port1: attempt power cycle [ 1142.256304][T12258] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1142.276871][T12258] usb 4-1: device descriptor read/8, error -71 [ 1143.282050][T12258] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1143.284463][ T5609] Bluetooth: hci5: command tx timeout [ 1143.306801][T12258] usb 4-1: device descriptor read/8, error -71 [ 1143.416776][T12258] usb usb4-port1: unable to enumerate USB device [ 1143.576799][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 1143.656841][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.696958][ T12] bond0 (unregistering): Released all slaves [ 1143.704249][ T12] bond1 (unregistering): Released all slaves [ 1143.735188][ T12] bond2 (unregistering): Released all slaves [ 1143.803390][T14307] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1143.803456][T14307] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1143.804607][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2819'. [ 1143.829513][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1145.126177][T12258] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1145.286985][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1145.303605][T12258] usb 4-1: Using ep0 maxpacket: 32 [ 1145.306374][T12258] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1145.306407][T12258] usb 4-1: config 0 has no interface number 0 [ 1145.306454][T12258] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1145.341953][T12258] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1145.341985][T12258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.342002][T12258] usb 4-1: Product: syz [ 1145.342015][T12258] usb 4-1: Manufacturer: syz [ 1145.342029][T12258] usb 4-1: SerialNumber: syz [ 1145.386632][T12258] usb 4-1: config 0 descriptor?? [ 1148.112866][T12258] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1148.112963][T12258] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1148.113484][T12258] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1148.113508][T12258] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1148.113525][T12258] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1148.113542][T12258] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1148.113885][T12258] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1148.190766][T12258] usb 4-1: USB disconnect, device number 38 [ 1149.909306][T14382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1150.657792][T14382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2833'. [ 1150.736020][T11159] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1150.896062][T11159] usb 3-1: device descriptor read/64, error -71 [ 1151.145995][T11159] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1151.307806][T11159] usb 3-1: device descriptor read/64, error -71 [ 1151.421727][T11159] usb usb3-port1: attempt power cycle [ 1151.915956][T11159] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1151.936729][T11159] usb 3-1: device descriptor read/8, error -71 [ 1152.189198][T11159] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1152.217651][T11159] usb 3-1: device descriptor read/8, error -71 [ 1152.326566][T11159] usb usb3-port1: unable to enumerate USB device [ 1152.580968][ T12] hsr_slave_0: left promiscuous mode [ 1153.011411][ T12] hsr_slave_1: left promiscuous mode [ 1154.103498][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.524797][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.064310][T14461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2846'. [ 1155.253383][T11159] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1155.395983][T11159] usb 4-1: Using ep0 maxpacket: 32 [ 1155.402200][T11159] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1155.402231][T11159] usb 4-1: config 0 has no interface number 0 [ 1155.402277][T11159] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1155.443291][T11159] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1155.443314][T11159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.443325][T11159] usb 4-1: Product: syz [ 1155.443333][T11159] usb 4-1: Manufacturer: syz [ 1155.443341][T11159] usb 4-1: SerialNumber: syz [ 1155.492544][T11159] usb 4-1: config 0 descriptor?? [ 1155.668373][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1155.741648][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1156.351296][T14461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2846'. [ 1156.753786][T11159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1156.753821][T11159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1156.754429][T11159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1156.754455][T11159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1156.754471][T11159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1156.754488][T11159] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1156.754756][T11159] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1156.882084][T11159] usb 4-1: USB disconnect, device number 39 [ 1157.054044][T14212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1157.102044][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.103779][T14212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1157.167119][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.173143][T14212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1157.423691][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.442138][T14212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1157.472912][T14212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.623792][T14489] netlink: 'syz.3.2855': attribute type 1 has an invalid length. [ 1157.857027][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.048195][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.850846][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.851104][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.912297][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.912528][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.149473][ T12] IPVS: stop unused estimator thread 0... [ 1160.163816][T14510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1160.169192][T14510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1160.558967][T14524] No control pipe specified [ 1160.594334][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.278922][T14212] veth0_vlan: entered promiscuous mode [ 1161.305145][T14212] veth1_vlan: entered promiscuous mode [ 1161.420226][T14212] veth0_macvtap: entered promiscuous mode [ 1161.441022][T14212] veth1_macvtap: entered promiscuous mode [ 1161.466645][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.480106][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.554242][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.554539][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.554577][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.554606][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.442207][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.442231][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.713024][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.713047][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.918757][T14560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1162.919180][T14560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1163.423587][T14569] No control pipe specified [ 1164.356382][ T54] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1164.518889][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1164.522929][ T54] usb 5-1: not running at top speed; connect to a high speed hub [ 1164.528896][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.528921][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1164.528968][ T54] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1164.528993][ T54] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1164.534998][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1164.535030][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.535049][ T54] usb 5-1: Product: syz [ 1164.535061][ T54] usb 5-1: Manufacturer: syz [ 1164.535074][ T54] usb 5-1: SerialNumber: syz [ 1164.843900][ T54] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1164.843952][ T54] cdc_ncm 5-1:1.0: bind() failure [ 1164.877075][ T54] usb 5-1: USB disconnect, device number 2 [ 1166.774727][ T9423] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1166.803130][ T9423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1166.813630][ T9423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1166.873434][ T9423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1166.896301][ T9423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1167.885713][T14640] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1169.008430][ T5609] Bluetooth: hci0: command tx timeout [ 1169.535947][T14550] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1169.676096][T14550] usb 3-1: device descriptor read/64, error -71 [ 1169.925940][T14550] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1170.083724][T14550] usb 3-1: device descriptor read/64, error -71 [ 1170.186678][T14550] usb usb3-port1: attempt power cycle [ 1170.527267][T14550] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1170.546759][T14550] usb 3-1: device descriptor read/8, error -71 [ 1170.786105][T14550] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1170.806852][T14550] usb 3-1: device descriptor read/8, error -71 [ 1170.936658][T14550] usb usb3-port1: unable to enumerate USB device [ 1171.085947][ T5609] Bluetooth: hci0: command tx timeout [ 1171.126477][T14675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2910'. [ 1171.126511][T14675] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2910'. [ 1171.126559][T14675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2910'. [ 1171.599856][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.605752][T14619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.606240][T14619] bridge_slave_0: entered allmulticast mode [ 1171.613870][T14619] bridge_slave_0: entered promiscuous mode [ 1171.752001][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.752123][T14619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.752342][T14619] bridge_slave_1: entered allmulticast mode [ 1171.783114][T14619] bridge_slave_1: entered promiscuous mode [ 1172.016897][ T69] bridge_slave_1: left allmulticast mode [ 1172.016934][ T69] bridge_slave_1: left promiscuous mode [ 1172.017199][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.199352][ T69] bridge_slave_0: left allmulticast mode [ 1172.199391][ T69] bridge_slave_0: left promiscuous mode [ 1172.199666][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.119887][T14248] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1173.171039][ T5609] Bluetooth: hci0: command tx timeout [ 1173.289707][T14248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1173.299112][T14248] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1173.299154][T14248] usb 5-1: can't read configurations, error -71 [ 1173.452595][T14714] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2919'. [ 1173.473018][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2920'. [ 1173.473045][T14715] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2920'. [ 1173.473099][T14715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2920'. [ 1173.637505][ T69] bond0 (unregistering): (slave 30): Releasing backup interface [ 1173.717857][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.764200][ T69] bond0 (unregistering): Released all slaves [ 1173.801215][ T69] bond1 (unregistering): Released all slaves [ 1173.844568][ T69] bond2 (unregistering): Released all slaves [ 1173.942625][ T69] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1173.991314][ T69] bond3 (unregistering): Released all slaves [ 1174.127445][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1174.206315][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.253883][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.421305][T14619] team0: Port device team_slave_0 added [ 1174.433832][T14619] team0: Port device team_slave_1 added [ 1174.526233][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.526252][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.526275][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.530506][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.530522][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.530546][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.556018][T14248] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1174.709709][T14619] hsr_slave_0: entered promiscuous mode [ 1174.710844][T14619] hsr_slave_1: entered promiscuous mode [ 1174.711620][T14619] debugfs: 'hsr0' already exists in 'hsr' [ 1174.711643][T14619] Cannot create hsr debugfs directory [ 1174.728719][T14248] usb 5-1: device descriptor read/64, error -71 [ 1174.970100][T14248] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1175.098560][T14248] usb 5-1: device descriptor read/64, error -71 [ 1175.251054][ T5609] Bluetooth: hci0: command tx timeout [ 1175.264396][T14248] usb usb5-port1: attempt power cycle [ 1175.648390][T14248] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1175.676180][T14248] usb 5-1: device descriptor read/8, error -71 [ 1175.980042][T14248] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1176.036908][T14248] usb 5-1: device descriptor read/8, error -71 [ 1176.219695][T14248] usb usb5-port1: unable to enumerate USB device [ 1176.998615][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1177.914707][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.914783][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.316148][T14248] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1178.507873][T14248] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1178.510746][T14248] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1178.510798][T14248] usb 5-1: can't read configurations, error -71 [ 1179.587503][ T69] hsr_slave_0: left promiscuous mode [ 1179.632607][ T69] hsr_slave_1: left promiscuous mode [ 1179.679315][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.718337][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.780888][T14792] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2938'. [ 1180.006008][T14248] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1180.146001][T14248] usb 3-1: device descriptor read/64, error -71 [ 1180.386032][T14248] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1180.486673][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1180.527511][T14248] usb 3-1: device descriptor read/64, error -71 [ 1180.549580][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1180.636514][T14248] usb usb3-port1: attempt power cycle [ 1181.016395][T14248] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1181.036732][T14248] usb 3-1: device descriptor read/8, error -71 [ 1181.276081][T14248] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1181.314383][T14248] usb 3-1: device descriptor read/8, error -71 [ 1181.373250][T14809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1181.478101][T14248] usb usb3-port1: unable to enumerate USB device [ 1183.047022][ T69] IPVS: stop unused estimator thread 0... [ 1183.083983][T14619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1183.458884][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1183.572119][T14619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1183.793915][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1183.807762][T14619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1183.981865][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1183.983632][T14619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1184.031477][T14619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1185.002975][T14619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.487449][T14619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.521949][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.522089][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.644504][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.644740][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.175296][T14874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1188.644512][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.737423][T14906] binder: BINDER_SET_CONTEXT_MGR already set [ 1188.737442][T14906] binder: 14905:14906 ioctl 4018620d 2000000002c0 returned -16 [ 1188.789989][T14906] binder: 14905:14906 ioctl c0306201 200000000680 returned -14 [ 1189.215394][T14619] veth0_vlan: entered promiscuous mode [ 1189.450995][T14619] veth1_vlan: entered promiscuous mode [ 1190.423238][T14619] veth0_macvtap: entered promiscuous mode [ 1190.479658][T14619] veth1_macvtap: entered promiscuous mode [ 1190.611038][T14619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.654194][T14619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.810062][ T1132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.810664][ T1132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.810922][ T1132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.810959][ T1132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.603021][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.603044][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.768063][T14952] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1193.932930][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.932953][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.328686][T14959] binder: 14958:14959 ioctl c0306201 200000000680 returned -14 [ 1200.184992][T14997] binder: 14996:14997 ioctl c0306201 200000000680 returned -14 [ 1204.445952][ T5738] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1204.616106][ T5738] usb 2-1: Using ep0 maxpacket: 16 [ 1204.619015][ T5738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.619079][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.619104][ T5738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1204.619126][ T5738] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1204.619153][ T5738] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.683400][ T9423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1204.709553][ T5738] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1204.709587][ T5738] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1204.709611][ T5738] usb 2-1: Manufacturer: syz [ 1204.742009][ T9423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1204.744149][ T9423] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1204.753999][ T9423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1204.754849][ T9423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1204.789825][ T5738] usb 2-1: config 0 descriptor?? [ 1205.185989][ T5738] rc_core: IR keymap rc-hauppauge not found [ 1205.186018][ T5738] Registered IR keymap rc-empty [ 1205.186920][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1205.218265][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1205.358098][ T5738] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1205.369660][ T5738] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 1205.610110][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1205.628336][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1205.717850][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.206354][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.226082][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.250880][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.266040][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.286163][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.306176][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.326773][ T5738] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1206.361960][ T5738] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1206.362007][ T5738] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1206.395243][ T5738] usb 2-1: USB disconnect, device number 15 [ 1207.151550][ T9423] Bluetooth: hci3: command tx timeout [ 1209.169156][ T9423] Bluetooth: hci3: command tx timeout [ 1211.259282][ T9423] Bluetooth: hci3: command tx timeout [ 1213.377691][T15083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3010'. [ 1213.377801][T15083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3010'. [ 1213.437880][ T9423] Bluetooth: hci3: command tx timeout [ 1218.449255][T15123] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3022'. [ 1218.449646][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 1219.857248][T15026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.857358][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.857886][T15026] bridge_slave_0: entered allmulticast mode [ 1219.864514][T15026] bridge_slave_0: entered promiscuous mode [ 1219.915354][T15026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.915494][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.928538][T15026] bridge_slave_1: entered allmulticast mode [ 1219.949034][T15026] bridge_slave_1: entered promiscuous mode [ 1220.109425][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.202848][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.350796][ T13] bridge_slave_1: left allmulticast mode [ 1220.350833][ T13] bridge_slave_1: left promiscuous mode [ 1220.351115][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.399187][T15150] sctp: [Deprecated]: syz.2.3026 (pid 15150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.399187][T15150] Use struct sctp_sack_info instead [ 1220.641385][ T13] bridge_slave_0: left allmulticast mode [ 1220.641425][ T13] bridge_slave_0: left promiscuous mode [ 1220.641726][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.928923][T15163] fuse: Unknown parameter 'grou00000000000000000000' [ 1221.062687][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1221.062783][T15167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1222.827043][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 1222.976479][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.512199][T15184] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3034'. [ 1223.512234][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 1223.828812][ T13] bond0 (unregistering): Released all slaves [ 1223.840389][ T13] bond1 (unregistering): Released all slaves [ 1223.864948][ T13] bond2 (unregistering): Released all slaves [ 1224.129738][ T13] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1224.226659][ T13] bond3 (unregistering): Released all slaves [ 1224.596578][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1224.651789][T15026] team0: Port device team_slave_0 added [ 1224.658537][T15026] team0: Port device team_slave_1 added [ 1224.734413][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.734432][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.734457][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.783899][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.783918][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.783940][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.033574][T15026] hsr_slave_0: entered promiscuous mode [ 1225.054665][T15026] hsr_slave_1: entered promiscuous mode [ 1225.063844][T15026] debugfs: 'hsr0' already exists in 'hsr' [ 1225.063875][T15026] Cannot create hsr debugfs directory [ 1227.132222][ T36] audit: type=1326 audit(2000001098.918:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15197 comm="syz.3.3038" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cfa4cce59 code=0x0 [ 1227.444100][T15227] fuse: Unknown parameter 'grou00000000000000000000' [ 1229.655446][T15241] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1229.655592][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1230.630992][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1230.644435][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1230.644523][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1233.404431][ T13] hsr_slave_0: left promiscuous mode [ 1233.587758][ T13] hsr_slave_1: left promiscuous mode [ 1233.588847][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.641520][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.123745][T15277] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3057'. [ 1234.123890][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 1235.797621][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1235.797719][T15280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3058'. [ 1235.990417][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1236.056984][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1239.328039][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.328106][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.960503][T15327] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1239.960607][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1242.042103][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3072'. [ 1242.042829][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3072'. [ 1242.411109][T15026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1242.769730][T15026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.772514][T15026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1243.140288][T15026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.147378][T15026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1243.528733][T15026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1243.550662][T15026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1243.606690][T15026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1244.063225][ T13] IPVS: stop unused estimator thread 0... [ 1244.334477][T15026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.602359][T15026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.656571][ T3893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.656684][ T3893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.838207][ T3893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.838342][ T3893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.390952][T15394] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3081'. [ 1247.391132][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 1249.068429][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1249.068528][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1249.526396][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1249.526495][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1250.317428][T12258] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1250.468592][T12258] usb 2-1: Using ep0 maxpacket: 16 [ 1250.477030][T12258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.477085][T12258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.477111][T12258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1250.477131][T12258] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1250.477152][T12258] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.517531][T12258] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1250.517563][T12258] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1250.517581][T12258] usb 2-1: Manufacturer: syz [ 1250.546374][T12258] usb 2-1: config 0 descriptor?? [ 1251.098975][T12258] rc_core: IR keymap rc-hauppauge not found [ 1251.099000][T12258] Registered IR keymap rc-empty [ 1251.099179][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.116092][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.139297][T12258] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1251.205091][T12258] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 1251.309196][T15437] capability: warning: `syz.3.3087' uses 32-bit capabilities (legacy support in use) [ 1251.498284][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.558881][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.585492][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.604010][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.626407][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.646033][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.666162][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.686150][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.706252][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.726173][T12258] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1251.799282][T15026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.851837][T12258] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1251.851867][T12258] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1251.906937][T12258] usb 2-1: USB disconnect, device number 16 [ 1252.303384][T15026] veth0_vlan: entered promiscuous mode [ 1252.354122][T15026] veth1_vlan: entered promiscuous mode [ 1252.542490][T15026] veth0_macvtap: entered promiscuous mode [ 1252.668620][T15026] veth1_macvtap: entered promiscuous mode [ 1252.784798][T15026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.896426][T15026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.992209][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.993240][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.994746][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.994787][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.247404][ T36] audit: type=1326 audit(2000001126.028:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15449 comm="syz.1.3091" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63da3fce59 code=0x0 [ 1254.331794][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1254.379114][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1254.388493][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1254.395470][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1254.412047][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.304756][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.304781][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.477483][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.477506][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.528384][ T9423] Bluetooth: hci1: command tx timeout [ 1258.740740][ T9423] Bluetooth: hci1: command tx timeout [ 1259.041457][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1259.041564][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1259.407884][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1259.408000][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1260.767067][ T9423] Bluetooth: hci1: command tx timeout [ 1261.800142][T15511] input: syz1 as /devices/virtual/input/input12 [ 1262.526225][ T9423] Bluetooth: hci5: command 0x0406 tx timeout [ 1262.605058][T15452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.605201][T15452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.605418][T15452] bridge_slave_0: entered allmulticast mode [ 1262.616505][T15452] bridge_slave_0: entered promiscuous mode [ 1262.774545][T15452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.792077][T15452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.809881][T15452] bridge_slave_1: entered allmulticast mode [ 1262.886619][T15452] bridge_slave_1: entered promiscuous mode [ 1262.940835][ T5609] Bluetooth: hci1: command tx timeout [ 1263.388951][ T5728] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1263.484698][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.549638][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.549675][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.549694][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1263.549730][ T5728] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1263.549747][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.622598][ T5728] usb 1-1: config 0 descriptor?? [ 1264.013037][T15452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.048167][T15452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.078239][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078278][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078304][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078329][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078355][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078380][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078405][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078430][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078457][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.078482][ T5728] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1264.201163][ T5728] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1264.308901][T15452] team0: Port device team_slave_0 added [ 1264.315682][T15452] team0: Port device team_slave_1 added [ 1264.353448][ T5728] usb 1-1: USB disconnect, device number 7 [ 1264.399214][T15537] fido_id[15537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1264.582377][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.761963][T15452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.761977][T15452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.761991][T15452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.763507][T15452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1264.763517][T15452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1264.763531][T15452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.799528][T15452] hsr_slave_0: entered promiscuous mode [ 1265.801117][T15452] hsr_slave_1: entered promiscuous mode [ 1265.802106][T15452] debugfs: 'hsr0' already exists in 'hsr' [ 1265.802132][T15452] Cannot create hsr debugfs directory [ 1266.775861][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.038681][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1267.038789][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1267.951376][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.187947][T12417] udevd[12417]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 1272.752358][T15452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1273.913726][ T36] audit: type=1326 audit(2000001145.698:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15613 comm="syz.0.3129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84ea26ce59 code=0x0 [ 1274.344700][T15452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1274.779252][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3130'. [ 1274.779364][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3130'. [ 1274.906431][ T13] bridge_slave_1: left allmulticast mode [ 1274.906469][ T13] bridge_slave_1: left promiscuous mode [ 1274.906732][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.927353][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3130'. [ 1274.927446][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3130'. [ 1275.333499][ T13] bridge_slave_0: left allmulticast mode [ 1275.333534][ T13] bridge_slave_0: left promiscuous mode [ 1275.333766][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.857096][T15641] overlayfs: workdir and upperdir must reside under the same mount [ 1275.880601][T15641] netlink: 'syz.1.3132': attribute type 1 has an invalid length. [ 1278.936461][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1278.936564][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1279.027927][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 1279.101948][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1279.102045][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1279.125176][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.157742][ T13] bond0 (unregistering): Released all slaves [ 1279.192631][ T13] bond1 (unregistering): Released all slaves [ 1279.266402][T15452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1279.432565][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1279.432679][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1279.463284][T15452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.563811][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1279.735677][T15452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1279.854121][T15452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1280.127269][T15452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1280.299956][T15452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1283.026686][T15452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.457471][T15452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.474450][ T3893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.474591][ T3893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.529287][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.529443][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.664726][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1285.146939][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1285.147058][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1285.401844][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1285.401939][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1285.473172][ T13] hsr_slave_0: left promiscuous mode [ 1285.581809][ T13] hsr_slave_1: left promiscuous mode [ 1285.582854][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.635609][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.695914][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1285.696019][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1286.557838][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1286.596771][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1287.596042][ T5812] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1288.412972][ T5812] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1288.413006][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.413025][ T5812] usb 1-1: Product: syz [ 1288.413039][ T5812] usb 1-1: Manufacturer: syz [ 1288.413052][ T5812] usb 1-1: SerialNumber: syz [ 1288.463190][ T5812] usb 1-1: config 0 descriptor?? [ 1288.481266][ T5812] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 008 [ 1288.896765][ T5812] (null): failure reading functionality [ 1288.931462][ T5812] i2c i2c-1: failure reading functionality [ 1288.945235][ T5812] i2c i2c-1: connected i2c-tiny-usb device [ 1289.008957][ T5812] usb 1-1: USB disconnect, device number 8 [ 1289.604726][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1289.604821][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1289.856028][T12258] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1290.096825][T12258] usb 2-1: Using ep0 maxpacket: 8 [ 1290.102091][T12258] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1290.102126][T12258] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1290.104580][T15452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.104580][T12258] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.104603][T12258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.104630][T12258] usb 2-1: Product: syz [ 1290.104645][T12258] usb 2-1: Manufacturer: syz [ 1290.104659][T12258] usb 2-1: SerialNumber: syz [ 1290.112413][T15795] fuse: fd is not a fuse device [ 1290.501028][T12258] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1290.501075][T12258] cdc_ncm 2-1:1.0: bind() failure [ 1290.534663][T12258] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1290.534713][T12258] cdc_ncm 2-1:1.1: bind() failure [ 1290.585949][T12258] usb 2-1: USB disconnect, device number 17 [ 1291.583726][T15808] syz.0.3170 (15808) used greatest stack depth: 18296 bytes left [ 1292.594628][T15452] veth0_vlan: entered promiscuous mode [ 1292.636335][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 1292.704676][T15452] veth1_vlan: entered promiscuous mode [ 1293.157113][T15452] veth0_macvtap: entered promiscuous mode [ 1293.499196][T11159] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1293.511861][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1293.546457][T15452] veth1_macvtap: entered promiscuous mode [ 1293.675916][T11159] usb 5-1: Using ep0 maxpacket: 32 [ 1293.679869][T11159] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1293.679900][T11159] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.679917][T11159] usb 5-1: config 0 has no interface number 0 [ 1293.679945][T11159] usb 5-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1293.690550][T11159] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1293.690574][T11159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.690584][T11159] usb 5-1: Product: syz [ 1293.690592][T11159] usb 5-1: Manufacturer: syz [ 1293.690599][T11159] usb 5-1: SerialNumber: syz [ 1293.766969][T11159] usb 5-1: config 0 descriptor?? [ 1293.781660][T11159] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1293.796077][T11159] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1293.918288][T15452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.962215][T15452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.026706][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.027157][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.029735][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.076110][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.233606][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.233629][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.296298][T15862] netlink: 'syz.1.3180': attribute type 12 has an invalid length. [ 1295.296318][T15862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1295.561577][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1295.622640][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.622665][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.905004][T15875] fuse: fd is not a fuse device [ 1296.071173][T15851] usb 5-1: USB disconnect, device number 11 [ 1298.638639][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1298.733298][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1298.780647][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1298.804229][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1298.820403][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1300.778399][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.778467][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.866744][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.866864][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.867075][T15894] bridge_slave_0: entered allmulticast mode [ 1300.881238][T15894] bridge_slave_0: entered promiscuous mode [ 1300.898116][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.898413][T15894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.907152][T15894] bridge_slave_1: entered allmulticast mode [ 1300.921542][T15894] bridge_slave_1: entered promiscuous mode [ 1301.006184][ T9423] Bluetooth: hci2: command tx timeout [ 1301.192939][T15894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.231485][T15894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.644518][T15934] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1301.644567][T15934] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1301.644618][T15934] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1301.793094][T15894] team0: Port device team_slave_0 added [ 1301.852774][T15894] team0: Port device team_slave_1 added [ 1301.869997][T15934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1302.282469][T15934] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1303.097552][ T9423] Bluetooth: hci2: command tx timeout [ 1303.492471][T15894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.492491][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.492518][T15894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.553339][T15894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.553358][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.553385][T15894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.852573][T15894] hsr_slave_0: entered promiscuous mode [ 1303.853545][T15894] hsr_slave_1: entered promiscuous mode [ 1303.854172][T15894] debugfs: 'hsr0' already exists in 'hsr' [ 1303.854188][T15894] Cannot create hsr debugfs directory [ 1305.172143][ T9423] Bluetooth: hci2: command tx timeout [ 1306.844242][T15894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1306.844268][T15894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.246230][ T9423] Bluetooth: hci2: command tx timeout [ 1307.878306][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1308.837237][T15894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.837282][T15894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.704415][T15894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.704463][T15894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.987131][T16046] netlink: 'syz.1.3220': attribute type 4 has an invalid length. [ 1310.157477][T15894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.157517][T15894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.629598][T14950] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1312.794725][T14950] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1312.794759][T14950] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1312.794778][T14950] usb 6-1: Product: syz [ 1312.794792][T14950] usb 6-1: SerialNumber: syz [ 1312.862499][T14950] usb 6-1: config 0 descriptor?? [ 1313.267505][T14950] hso 6-1:0.0: Failed to find BULK eps [ 1314.116670][ T5738] usb 6-1: USB disconnect, device number 2 [ 1314.597252][T15894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1314.678343][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1314.681452][T15894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1314.773856][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1314.775644][T15894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1314.842942][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1314.845240][T15894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1314.962615][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1317.079463][T15894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.167145][T15894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.198363][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.198631][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.242664][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.252585][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.642188][T15894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.803417][T15894] veth0_vlan: entered promiscuous mode [ 1318.821544][T15894] veth1_vlan: entered promiscuous mode [ 1318.946778][T15894] veth0_macvtap: entered promiscuous mode [ 1318.953029][T15894] veth1_macvtap: entered promiscuous mode [ 1318.981223][T15894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.009223][T15894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.029073][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.029127][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.029158][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.029188][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.660398][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.660421][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.872973][ T9423] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 1321.050148][T11947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.050173][T11947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.655429][T16252] fuse: Bad value for 'fd' [ 1324.931765][ T9423] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1324.931927][ T9423] Bluetooth: hci0: Injecting HCI hardware error event [ 1324.934921][ T9423] Bluetooth: hci0: hardware error 0x00 [ 1327.245998][ T9423] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1328.543767][T16289] fuse: Bad value for 'fd' [ 1329.565032][T16270] syz.4.3281 (16270) used greatest stack depth: 17816 bytes left [ 1329.865719][ T9423] Bluetooth: hci3: command 0x0406 tx timeout [ 1334.224763][T16325] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1334.380928][T16330] fuse: Unknown parameter 'group_id00000000000000000000' [ 1341.177663][T16364] fuse: fd is not a fuse device [ 1344.036242][T14950] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1344.218223][T14950] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1344.218253][T14950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.218271][T14950] usb 4-1: config 0 has no interface number 0 [ 1344.218316][T14950] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1344.218359][T14950] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1344.218391][T14950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.283906][T14950] usb 4-1: config 0 descriptor?? [ 1345.628446][T14950] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1345.676246][T14950] usb 4-1: USB disconnect, device number 40 [ 1345.705512][ T3893] usb 4-1: Failed to submit usb control message: -71 [ 1345.705546][ T3893] usb 4-1: unable to send the bmi data to the device: -71 [ 1345.705558][ T3893] usb 4-1: unable to get target info from device [ 1345.705580][ T3893] usb 4-1: could not get target info (-71) [ 1345.705689][ T3893] usb 4-1: could not probe fw (-71) [ 1358.275977][T15836] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1358.615988][T15836] usb 4-1: Using ep0 maxpacket: 16 [ 1358.665267][T15836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.665326][T15836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1358.665352][T15836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1358.665373][T15836] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1358.665394][T15836] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1359.065572][T15836] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1359.065764][T15836] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1359.066458][T15836] usb 4-1: Manufacturer: syz [ 1359.671787][T15836] usb 4-1: config 0 descriptor?? [ 1359.985926][T15836] rc_core: IR keymap rc-hauppauge not found [ 1359.985951][T15836] Registered IR keymap rc-empty [ 1359.986115][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.014682][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.060365][T15836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1360.086813][T15836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 1360.157153][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.176639][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.198583][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.216021][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.236007][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.256059][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.276030][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.296140][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.316058][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1360.336026][T15836] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1361.668743][T15836] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1361.668772][T15836] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1361.885587][T15836] usb 4-1: USB disconnect, device number 41 [ 1362.209740][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.209809][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.290177][ T36] audit: type=1326 audit(2000001234.998:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.5.3353" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ab47ce59 code=0x0 [ 1366.145695][T16493] syz.0.3354 (16493) used greatest stack depth: 17632 bytes left [ 1372.700180][ T4598] Bluetooth: hci4: Frame reassembly failed (-84) [ 1372.832940][T16548] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1374.686302][T14216] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1379.696860][T14216] Bluetooth: hci1: command 0x0406 tx timeout [ 1385.411653][ T36] audit: type=1326 audit(2000001257.198:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16622 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da3fce59 code=0x7ffc0000 [ 1385.411714][ T36] audit: type=1326 audit(2000001257.198:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16622 comm="syz.1.3407" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63da3fce59 code=0x7ffc0000 [ 1398.617427][T15851] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1398.798531][T15851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1398.798568][T15851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.798605][T15851] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1398.798627][T15851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.954458][T15851] usb 4-1: config 0 descriptor?? [ 1400.108308][T15851] hid_parser_main: 5 callbacks suppressed [ 1400.108338][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.108366][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.108387][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.108406][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.108429][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.108451][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.108473][T15851] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 1400.295430][T15851] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1400.603786][T15851] isku 0003:1E7D:319C.000A: couldn't init struct isku_device [ 1400.603843][T15851] isku 0003:1E7D:319C.000A: couldn't install keyboard [ 1401.001343][T15851] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -32 [ 1401.150328][T15851] usb 4-1: USB disconnect, device number 42 [ 1403.628942][ T36] audit: type=1326 audit(2000001275.408:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16711 comm="syz.0.3436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84ea26ce59 code=0x0 [ 1413.212211][T14216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1413.259688][T14216] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1413.264098][T14216] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1413.275664][T14216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1413.276781][T14216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1413.645366][T14216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1413.713823][T14216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1413.726194][T14216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1413.754504][T14216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1413.764338][T14216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1415.572396][ T9423] Bluetooth: hci4: command tx timeout [ 1415.886001][ T9423] Bluetooth: hci6: command tx timeout [ 1417.277541][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1417.648190][ T9423] Bluetooth: hci4: command tx timeout [ 1417.966078][ T9423] Bluetooth: hci6: command tx timeout [ 1418.923600][T16749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.941134][T16749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.941459][T16749] bridge_slave_0: entered allmulticast mode [ 1418.998720][T16749] bridge_slave_0: entered promiscuous mode [ 1419.126147][T16749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.126274][T16749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.126593][T16749] bridge_slave_1: entered allmulticast mode [ 1419.184526][T16749] bridge_slave_1: entered promiscuous mode [ 1419.217127][T16806] fuse: Unknown parameter 'fd0x0000000000000003' [ 1419.397856][T16749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.404264][T16749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.627997][T16749] team0: Port device team_slave_0 added [ 1419.652658][T16749] team0: Port device team_slave_1 added [ 1419.726067][ T9423] Bluetooth: hci4: command tx timeout [ 1419.891117][T16749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.891139][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.891164][T16749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.893736][T16749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.893753][T16749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.893777][T16749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.046384][ T9423] Bluetooth: hci6: command tx timeout [ 1421.809126][ T9423] Bluetooth: hci4: command tx timeout [ 1422.127740][ T9423] Bluetooth: hci6: command tx timeout [ 1422.271405][T16749] hsr_slave_0: entered promiscuous mode [ 1422.285651][T16749] hsr_slave_1: entered promiscuous mode [ 1422.308208][T16749] debugfs: 'hsr0' already exists in 'hsr' [ 1422.308240][T16749] Cannot create hsr debugfs directory [ 1422.763799][T16760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.764035][T16760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.764269][T16760] bridge_slave_0: entered allmulticast mode [ 1422.794024][T16760] bridge_slave_0: entered promiscuous mode [ 1422.828318][T16760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.828549][T16760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.828749][T16760] bridge_slave_1: entered allmulticast mode [ 1422.832216][T16760] bridge_slave_1: entered promiscuous mode [ 1423.155572][T16760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.471500][T16760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.663240][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.663315][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.605728][T16760] team0: Port device team_slave_0 added [ 1424.707882][T16840] fuse: Unknown parameter 'fd0x0000000000000003' [ 1424.841940][T16411] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1425.096027][T16411] usb 4-1: Using ep0 maxpacket: 32 [ 1425.098904][T16411] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1425.098932][T16411] usb 4-1: config 0 has no interface number 0 [ 1425.104632][T16411] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1425.104662][T16411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.104679][T16411] usb 4-1: Product: syz [ 1425.104691][T16411] usb 4-1: Manufacturer: syz [ 1425.104702][T16411] usb 4-1: SerialNumber: syz [ 1425.184763][T16411] usb 4-1: config 0 descriptor?? [ 1425.783135][T16411] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1425.783170][T16411] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1425.985763][T16411] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1425.986260][T16411] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1426.828465][T16760] team0: Port device team_slave_1 added [ 1428.141889][T15836] usb 4-1: USB disconnect, device number 43 [ 1428.999777][ T2964] smbdirect: ib_dev[syz1] removed [ 1429.284702][T11159] syz1: Port: 1 Link DOWN [ 1430.686826][T16760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.686846][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.686871][T16760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.749125][T16760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.749145][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.749172][T16760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.675543][T16760] hsr_slave_0: entered promiscuous mode [ 1431.702512][T16760] hsr_slave_1: entered promiscuous mode [ 1431.708793][T16760] debugfs: 'hsr0' already exists in 'hsr' [ 1431.708827][T16760] Cannot create hsr debugfs directory [ 1434.990268][ T3893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.346518][T16877] fuse: Unknown parameter 'fd0x0000000000000003' [ 1441.437199][ T3893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.266110][T16749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1442.901082][T16749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.929152][T16749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1443.014740][T16749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1443.073986][T16749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1443.502983][T16902] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1444.403936][T16749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1444.441744][T16749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1446.455584][T16749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1447.022293][T16760] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1447.905584][T16760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1451.326103][ T9423] Bluetooth: hci2: command 0x0406 tx timeout [ 1452.629224][ T3893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.920480][T16760] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1456.196506][T16760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1456.255010][T16760] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1457.403530][T16760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.424733][T16760] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1459.253006][T16760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.504432][ T3893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.025083][T16749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.462553][T16749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.570585][T12121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.570799][T12121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.745280][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.745400][T16892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.174965][T16760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.884780][T16760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.672137][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.672393][T16892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.715610][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.728724][T16892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.770922][T16987] fuse: Bad value for 'fd' [ 1472.281488][ T9423] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1472.333372][ T9423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1472.346292][ T9423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1472.353794][ T9423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1472.373820][ T9423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1474.525958][ T9423] Bluetooth: hci0: command tx timeout [ 1474.776330][ T3893] bridge_slave_1: left allmulticast mode [ 1474.776374][ T3893] bridge_slave_1: left promiscuous mode [ 1474.776653][ T3893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.164243][T14216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1475.393628][T14216] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1475.511586][T14216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1475.543003][T14216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1475.545130][T14216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1476.610513][T14216] Bluetooth: hci0: command tx timeout [ 1476.905264][T17007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.646035][T14216] Bluetooth: hci1: command tx timeout [ 1477.684970][ T3893] bridge_slave_0: left allmulticast mode [ 1477.685013][ T3893] bridge_slave_0: left promiscuous mode [ 1477.685305][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.686319][T14216] Bluetooth: hci0: command tx timeout [ 1479.734690][T14216] Bluetooth: hci1: command tx timeout [ 1480.765930][T14216] Bluetooth: hci0: command tx timeout [ 1481.806027][T14216] Bluetooth: hci1: command tx timeout [ 1483.902086][T14216] Bluetooth: hci1: command tx timeout [ 1485.165534][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.165610][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.191534][T17030] fuse: fd is not a fuse device [ 1501.919758][ T3893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1502.009831][ T3893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1502.067683][ T3893] bond0 (unregistering): Released all slaves [ 1502.322054][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1512.580200][T17114] fuse: fd is not a fuse device [ 1517.648440][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1521.323618][T17136] virtio-fs: tag not found [ 1531.442315][ T9423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1531.527525][ T9423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1531.531949][ T9423] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1531.591016][ T9423] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1531.758365][ T9423] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1533.992637][T14216] Bluetooth: hci4: command tx timeout [ 1534.459518][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 1535.642625][ T9423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1535.829884][ T9423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1535.846288][ T9423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1535.865173][ T9423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1535.908919][ T9423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1536.047118][ T9423] Bluetooth: hci4: command tx timeout [ 1538.127250][ T9423] Bluetooth: hci4: command tx timeout [ 1538.365285][T15900] Bluetooth: hci6: command tx timeout [ 1539.101291][T14216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1539.309200][T14216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1539.312974][T14216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1539.324218][T14216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1539.357032][T14216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1540.206068][T14216] Bluetooth: hci4: command tx timeout [ 1540.475181][T14216] Bluetooth: hci6: command tx timeout [ 1541.509028][T14216] Bluetooth: hci7: command tx timeout [ 1542.526164][T14216] Bluetooth: hci6: command tx timeout [ 1543.566268][T14216] Bluetooth: hci7: command tx timeout [ 1544.613858][T14216] Bluetooth: hci6: command tx timeout [ 1545.645998][T14216] Bluetooth: hci7: command tx timeout [ 1545.733275][ T36] audit: type=1326 audit(2000001417.518:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17211 comm="syz.0.3546" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84ea26ce59 code=0x0 [ 1546.719813][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.719891][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.644580][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1547.726614][T14216] Bluetooth: hci7: command tx timeout [ 1548.514298][ T9423] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1548.727976][ T9423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1548.729622][ T9423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1548.731138][ T9423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1548.731874][ T9423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1551.733074][T14216] Bluetooth: hci0: command tx timeout [ 1553.806419][T14216] Bluetooth: hci0: command tx timeout [ 1555.891956][T14216] Bluetooth: hci0: command tx timeout [ 1558.216008][T14216] Bluetooth: hci0: command tx timeout [ 1572.204168][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.273506][T17155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.314779][T17155] bridge_slave_0: entered allmulticast mode [ 1572.362294][T17155] bridge_slave_0: entered promiscuous mode [ 1573.565529][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.565685][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.582746][T17155] bridge_slave_1: entered allmulticast mode [ 1573.602551][T17155] bridge_slave_1: entered promiscuous mode [ 1573.863285][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1575.704337][T17155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1576.657529][T17155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.291925][T17155] team0: Port device team_slave_0 added [ 1579.683365][T17155] team0: Port device team_slave_1 added [ 1580.975340][T17170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.975485][T17170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.975946][T17170] bridge_slave_0: entered allmulticast mode [ 1581.048553][T17170] bridge_slave_0: entered promiscuous mode [ 1581.506243][T17306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3559'. [ 1582.514697][T17170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.514918][T17170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.515256][T17170] bridge_slave_1: entered allmulticast mode [ 1582.541500][T17170] bridge_slave_1: entered promiscuous mode [ 1584.682355][T17155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.682375][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.682400][T17155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.297152][T17155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.297172][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1585.297199][T17155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.816723][T17170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.779872][T17170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.385389][T17176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.385531][T17176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.386107][T17176] bridge_slave_0: entered allmulticast mode [ 1591.405157][T17176] bridge_slave_0: entered promiscuous mode [ 1593.200233][T17170] team0: Port device team_slave_0 added [ 1593.663981][T17176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.664112][T17176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.664427][T17176] bridge_slave_1: entered allmulticast mode [ 1593.680038][T17176] bridge_slave_1: entered promiscuous mode [ 1595.924303][T15900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1595.987362][T15900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1595.997580][T15900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1596.004499][T15900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1596.008271][T15900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1596.183724][ T9423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1596.286173][ T9423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1596.294269][ T9423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1596.332843][ T9423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1596.336202][ T9423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1597.011491][T14216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1597.018726][T14216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1597.024178][T14216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1597.043681][T14216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1597.103916][T14216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1598.182334][ T3893] hsr_slave_0: left promiscuous mode [ 1598.208502][T14216] Bluetooth: hci1: command tx timeout [ 1598.447057][T14216] Bluetooth: hci2: command tx timeout [ 1598.449574][ T3893] hsr_slave_1: left promiscuous mode [ 1598.450700][ T3893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.598400][ T3893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.010322][ T3893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1599.010359][ T3893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.249787][T14216] Bluetooth: hci5: command tx timeout [ 1600.286313][T14216] Bluetooth: hci1: command tx timeout [ 1600.504756][ T3893] veth1_macvtap: left promiscuous mode [ 1600.525978][T14216] Bluetooth: hci2: command tx timeout [ 1600.727207][ T3893] veth0_macvtap: left promiscuous mode [ 1600.727491][ T3893] veth1_vlan: left promiscuous mode [ 1600.727990][ T3893] veth0_vlan: left promiscuous mode [ 1601.326380][T14216] Bluetooth: hci5: command tx timeout [ 1602.560113][T14216] Bluetooth: hci1: command tx timeout [ 1602.606073][T14216] Bluetooth: hci2: command tx timeout [ 1603.406467][T14216] Bluetooth: hci5: command tx timeout [ 1604.606123][T14216] Bluetooth: hci1: command tx timeout [ 1604.752482][T14216] Bluetooth: hci2: command tx timeout [ 1605.486688][T14216] Bluetooth: hci5: command tx timeout [ 1607.490328][T17373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3566'. [ 1608.010318][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.010396][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.403893][ T9423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1609.470801][ T9423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1609.488376][ T9423] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1609.503245][ T9423] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1609.507021][ T9423] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1611.646152][T14216] Bluetooth: hci4: command tx timeout [ 1613.726589][T14216] Bluetooth: hci4: command tx timeout [ 1615.805962][T14216] Bluetooth: hci4: command tx timeout [ 1617.961225][T14216] Bluetooth: hci4: command tx timeout [ 1621.122168][ T3893] team0 (unregistering): Port device team_slave_1 removed [ 1622.215352][ T3893] team0 (unregistering): Port device team_slave_0 removed [ 1623.027014][ T9423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1623.180166][ T9423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1623.191859][ T9423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1623.192970][ T9423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1623.193715][ T9423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1625.488468][T14216] Bluetooth: hci6: command tx timeout [ 1627.566128][T14216] Bluetooth: hci6: command tx timeout [ 1628.011614][T17215] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1629.646105][T14216] Bluetooth: hci6: command tx timeout [ 1631.726038][T14216] Bluetooth: hci6: command tx timeout [ 1653.715746][ T9423] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1653.794205][ T9423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1653.894485][ T9423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1653.905663][ T9423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1653.909854][ T9423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1655.709382][ T9423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1655.754264][ T9423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1655.969923][ T9423] Bluetooth: hci0: command tx timeout [ 1656.513892][ T9423] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1656.599451][ T9423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1656.600999][ T9423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1657.165183][T15900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1657.252385][T15900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1657.280127][T15900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1657.296137][T15900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1657.298855][T15900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1658.046221][T17452] Bluetooth: hci0: command tx timeout [ 1658.686001][T17452] Bluetooth: hci3: command tx timeout [ 1659.463170][T17452] Bluetooth: hci7: command tx timeout [ 1660.125998][T17452] Bluetooth: hci0: command tx timeout [ 1660.766042][T17452] Bluetooth: hci3: command tx timeout [ 1661.498655][T17452] Bluetooth: hci7: command tx timeout [ 1662.206019][T17452] Bluetooth: hci0: command tx timeout [ 1662.850432][T17452] Bluetooth: hci3: command tx timeout [ 1663.566014][T17452] Bluetooth: hci7: command tx timeout [ 1664.926033][T17452] Bluetooth: hci3: command tx timeout [ 1665.646208][T15900] Bluetooth: hci7: command tx timeout [ 1669.414816][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.414888][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.238929][T17452] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1670.321803][T17452] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1670.400943][T17452] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1670.437773][T17452] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1670.459600][T17452] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1672.775919][T15900] Bluetooth: hci8: command tx timeout [ 1674.890160][T15900] Bluetooth: hci8: command tx timeout [ 1677.229640][T15900] Bluetooth: hci8: command tx timeout [ 1679.326066][T15900] Bluetooth: hci8: command tx timeout [ 1685.592132][T17452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1685.604314][T17452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1685.649029][T17452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1685.736251][T17452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1685.756227][T17452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1688.132129][T15900] Bluetooth: hci4: command tx timeout [ 1690.446107][T15900] Bluetooth: hci4: command tx timeout [ 1692.575955][T15900] Bluetooth: hci4: command tx timeout [ 1694.605982][T15900] Bluetooth: hci4: command tx timeout [ 1703.667853][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.667986][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.668369][T17455] bridge_slave_0: entered allmulticast mode [ 1703.671248][T17455] bridge_slave_0: entered promiscuous mode [ 1705.833233][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.833361][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.833674][T17455] bridge_slave_1: entered allmulticast mode [ 1705.867202][T17455] bridge_slave_1: entered promiscuous mode [ 1706.267446][T17450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.267619][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.268008][T17450] bridge_slave_0: entered allmulticast mode [ 1706.270832][T17450] bridge_slave_0: entered promiscuous mode [ 1706.885199][T17450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.885367][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.885736][T17450] bridge_slave_1: entered allmulticast mode [ 1706.928597][T17450] bridge_slave_1: entered promiscuous mode [ 1710.444475][T17455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1712.201621][T17455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.428954][T17442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.429085][T17442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.429452][T17442] bridge_slave_0: entered allmulticast mode [ 1712.459687][T17442] bridge_slave_0: entered promiscuous mode [ 1712.702823][T17450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.220936][T17450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.070743][T17452] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1715.126363][T17452] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1715.144074][T17452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1715.209770][T17452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1715.226093][T17452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1717.266520][T17455] team0: Port device team_slave_0 added [ 1719.166089][T17452] Bluetooth: hci6: command tx timeout [ 1721.186542][T17584] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1721.260915][T17584] Bluetooth: hci6: command tx timeout [ 1721.341526][T17584] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1721.350579][T17584] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1721.399777][T17584] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1721.400496][T17584] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1721.818017][T17588] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1721.860830][T17588] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1721.862560][T17588] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1721.881782][T17588] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1721.903151][T17588] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1723.122314][T17588] Bluetooth: hci1: command 0x0406 tx timeout [ 1723.122364][T17588] Bluetooth: hci5: command 0x0406 tx timeout [ 1723.122388][T17588] Bluetooth: hci2: command 0x0406 tx timeout [ 1723.407013][ T9423] Bluetooth: hci6: command tx timeout [ 1723.566044][ T9423] Bluetooth: hci9: command tx timeout [ 1723.969626][ T9423] Bluetooth: hci10: command tx timeout [ 1725.528801][T17452] Bluetooth: hci6: command tx timeout [ 1725.656188][T17452] Bluetooth: hci9: command tx timeout [ 1726.054367][T17452] Bluetooth: hci10: command tx timeout [ 1727.764605][T17452] Bluetooth: hci9: command tx timeout [ 1728.135973][T15900] Bluetooth: hci10: command tx timeout [ 1729.966474][T15900] Bluetooth: hci9: command tx timeout [ 1730.206055][T15900] Bluetooth: hci10: command tx timeout [ 1730.714390][T17452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1730.754383][T17452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1730.774105][T17452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1730.775202][T17452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1730.791675][T17452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1730.853821][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.853907][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.568871][T17502] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1733.575913][T15900] Bluetooth: hci0: command tx timeout [ 1735.646210][T15900] Bluetooth: hci0: command tx timeout [ 1737.751165][T15900] Bluetooth: hci0: command tx timeout [ 1740.135995][T15900] Bluetooth: hci0: command tx timeout [ 1748.773545][T15900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1749.026483][T15900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1749.189516][T15900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1749.210444][T15900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1749.219912][T15900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1751.386197][T17452] Bluetooth: hci3: command tx timeout [ 1753.420209][T15900] Bluetooth: hci3: command tx timeout [ 1755.613683][T15900] Bluetooth: hci3: command tx timeout [ 1757.646133][T15900] Bluetooth: hci3: command tx timeout [ 1776.825359][T17452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1776.884900][T17452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1776.938310][T17452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1777.172285][T17452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1777.186649][T17452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1779.173912][T17581] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1779.489716][T15900] Bluetooth: hci4: command tx timeout [ 1782.009356][T15900] Bluetooth: hci4: command tx timeout [ 1783.702342][T14216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1783.847302][ T9423] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1783.879872][T14216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1783.932011][T14216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1783.938470][T14216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1783.985044][ T9423] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1784.059410][ T9423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1784.061132][ T9423] Bluetooth: hci4: command tx timeout [ 1784.062087][ T9423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1784.063549][T14216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1784.304395][T17452] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1785.886451][ T37] INFO: task syz-executor:17170 blocked for more than 143 seconds. [ 1785.886486][ T37] Tainted: G L syzkaller #0 [ 1785.886497][ T37] Blocked by coredump. [ 1785.886504][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1785.886526][ T37] task:syz-executor state:D stack:19168 pid:17170 tgid:17170 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1785.886578][ T37] Call Trace: [ 1785.886586][ T37] [ 1785.886601][ T37] __schedule+0x16ec/0x5620 [ 1785.886735][ T37] ? __pfx___schedule+0x10/0x10 [ 1785.886772][ T37] rt_mutex_schedule+0x76/0xf0 [ 1785.886794][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1785.886832][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1785.886855][ T37] ? rt_mutex_slowlock+0x1fd/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1785.886874][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1785.886905][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.886930][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.886954][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.886970][ T37] mutex_lock_nested+0x168/0x1d0 [ 1785.886988][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1785.887011][ T37] rcu_barrier+0x4c/0x580 [ 1785.887038][ T37] netdev_run_todo+0x2e0/0xde0 [ 1785.887134][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 1785.887155][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 1785.887175][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1785.887231][ T37] ? netdev_state_change+0x1ca/0x220 [ 1785.887277][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 1785.887350][ T37] tun_chr_close+0x13f/0x1c0 [ 1785.887372][ T37] __fput+0x461/0xa70 [ 1785.887418][ T37] task_work_run+0x1d9/0x270 [ 1785.887447][ T37] ? __pfx_task_work_run+0x10/0x10 [ 1785.887471][ T37] ? do_exit+0x70a/0x22c0 [ 1785.887493][ T37] ? kmem_cache_free+0x187/0x6c0 [ 1785.887513][ T37] ? put_net+0x191/0x260 [ 1785.887531][ T37] ? do_exit+0x70a/0x22c0 [ 1785.887556][ T37] do_exit+0x70f/0x22c0 [ 1785.887582][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1785.887632][ T37] ? __pfx_do_exit+0x10/0x10 [ 1785.887651][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1785.887670][ T37] ? reacquire_held_locks+0x104/0x190 [ 1785.887696][ T37] ? rt_spin_lock+0x1e0/0x400 [ 1785.887727][ T37] do_group_exit+0x21b/0x2d0 [ 1785.887748][ T37] ? rt_spin_unlock+0x160/0x200 [ 1785.887771][ T37] get_signal+0x1284/0x1330 [ 1785.887812][ T37] arch_do_signal_or_restart+0xbc/0x840 [ 1785.887844][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1785.887878][ T37] ? fput_close_sync+0x11f/0x240 [ 1785.887912][ T37] exit_to_user_mode_loop+0x8c/0x4d0 [ 1785.887934][ T37] ? rcu_is_watching+0x15/0xb0 [ 1785.887959][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.887979][ T37] do_syscall_64+0x33e/0xf8[ 1785.887979][ T37] do_syscall_64+0x33e/0xf80 [ 1785.888030][ T37] ? clear_bhb_loop+0x40/0x90 [ 1785.888052][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.888076][ T37] RIP: 0033:0x7f10289fd68e [ 1785.888094][ T37] RSP: 002b:00007ffe0bcef158 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1785.888115][ T37] RAX: 0000000000000028 RBX: 000055557bc39500 RCX: 00007f10289fd68e [ 1785.888127][ T37] RDX: 0000000000000028 RSI: 00007f10297e4670 RDI: 0000000000000003 [ 1785.888139][ T37] RBP: 0000000000000001 R08: 00007ffe0bcef1d4 R09: 000000000000000c [ 1785.888151][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1785.888161][ T37] R13: 0000000000000000 R14: 00007f10297e4670 R15: 0000000000000000 [ 1785.888191][ T37] [ 1785.888200][ T37] INFO: task syz-executor:17176 blocked for more than 143 seconds. [ 1785.888217][ T37] Tainted: G L syzkaller #0 [ 1785.888227][ T37] Blocked by coredump. [ 1785.888233][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1785.888241][ T37] task:syz-executor state:D stack:19112 pid:17176 tgid:17176 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1785.888299][ T37] Call Trace: [ 1785.888307][ T37] [ 1785.888317][ T37] __schedule+0x16ec/0x5620 [ 1785.888339][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1785.888391][ T37] ? __pfx___schedule+0x10/0x10 [ 1785.888435][ T37] rt_mutex_schedule+0x76/0xf0 [ 1785.888453][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1785.888492][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1785.888512][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 1785.888532][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1785.888560][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.888583][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.888607][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.888622][ T37] mutex_lock_nested+0x168/0x1d0 [ 1785.888640][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1785.888663][ T37] rcu_barrier+0x4c/0x580 [ 1785.888693][ T37] netdev_run_todo+0x2e0/0xde0 [ 1785.888724][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 1785.888747][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 1785.888766][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1785.888795][ T37] ? netdev_state_change+0x1ca/0x220 [ 1785.888815][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 1785.888834][ T37] tun_chr_close+0x13f/0x1c0 [ 1785.888856][ T37] __fput+0x461/0xa70 [ 1785.888890][ T37] task_work_run+0x1d9/0x270 [ 1785.888918][ T37] ? __pfx_task_work_run+0x10/0x10 [ 1785.888943][ T37] ? do_exit+0x70a/0x22c0 [ 1785.888963][ T37] ? kmem_cache_free+0x187/0x6c0 [ 1785.888982][ T37] ? put_net+0x191/0x260 [ 1785.888999][ T37] ? do_exit+0x70a/0x22c0 [ 1785.889025][ T37] do_exit+0x70f/0x22c0 [ 1785.889050][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1785.889078][ T37] ? __pfx_do_exit+0x10/0x10 [ 1785.889097][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1785.889117][ T37] ? reacquire_held_locks+0x104/0x190 [ 1785.889141][ T37] ? rt_spin_lock+0x1e0/0x400 [ 1785.889170][ T37] do_group_exit+0x21b/0x2d0 [ 1785.889193][ T37] ? rt_spin_unlock+0x160/0x200 [ 1785.889215][ T37] get_signal+0x1284/0x1330 [ 1785.889254][ T37] arch_do_signal_or_restart+0xbc/0x840 [ 1785.889283][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1785.889328][ T37] exit_to_user_mode_loop+0x8c/0x4d0 [ 1785.889349][ T37] ? rcu_is_watching+0x15/0xb0 [ 1785.889374][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.889393][ T37] do_syscall_64+0x33e/0xf80 [ 1785.889421][ T37] ? trace_irq_disable+0x3b/0x140 [ 1785.889443][ T37] ? clear_bhb_loop+0x40/0x90 [ 1785.889464][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.889483][ T37] RIP: 0033:0x7fb8f342d68e [ 1785.889498][ T37] RSP: 002b:00007ffc960f9008 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1785.889517][ T37] RAX: 0000000000000088 RBX: 00005555706fa500 RCX: 00007fb8f342d68e [ 1785.889529][ T37] RDX: 0000000000000088 RSI: 00007fb8f4214670 RDI: 0000000000000003 [ 1785.889541][ T37] RBP: 0000000000000001 R08: 00007ffc960f9084 R09: 000000000000000c [ 1785.889552][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1785.889563][ T37] R13: 0000000000000000 R14: 00007fb8f4214670 R15: 0000000000000000 [ 1785.889593][ T37] [ 1785.889602][ T37] INFO: task syz-executor:17215 blocked for more than 143 seconds. [ 1785.889618][ T37] Tainted: G L syzkaller #0 [ 1785.889627][ T37] Blocked by coredump. [ 1785.889632][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1785.889640][ T37] task:syz-executor state:D stack:19968 pid:17215 tgid:17215 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1785.889681][ T37] Call Trace: [ 1785.889687][ T37] [ 1785.889697][ T37] __schedule+0x16ec/0x5620 [ 1785.889717][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1785.889769][ T37] ? __pfx___schedule+0x10/0x10 [ 1785.889807][ T37] rt_mutex_schedule+0x76/0xf0 [ 1785.889825][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1785.889862][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1785.889883][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 1785.889903][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1785.889933][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.889956][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.889976][ T37] ? rcu_barrier+0x4c/0x580 [ 1785.889992][ T37] mutex_lock_nested+0x168/0x1d0 [ 1785.890009][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1785.890033][ T37] rcu_barrier+0x4c/0x580 [ 1785.890060][ T37] netdev_run_todo+0x2e0/0xde0 [ 1785.890090][ T37] ? __pfx_netdev_run_todo+0x10/0x10 [ 1785.890112][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 1785.890130][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1785.890159][ T37] ? netdev_state_change+0x1ca/0x220 [ 1785.890181][ T37] ? __pfx_tun_chr_close+0x10/0x10 [ 1785.890201][ T37] tun_chr_close+0x13f/0x1c0 [ 1785.890221][ T37] __fput+0x461/0xa70 [ 1785.890255][ T37] task_work_run+0x1d9/0x270 [ 1785.890281][ T37] ? __pfx_task_work_run+0x10/0x10 [ 1785.890305][ T37] ? do_exit+0x70a/0x22c0 [ 1785.890324][ T37] ? kmem_cache_free+0x187/0x6c0 [ 1785.890342][ T37] ? put_net+0x191/0x260 [ 1785.890359][ T37] ? do_exit+0x70a/0x22c0 [ 1785.890385][ T37] do_exit+0x70f/0x22c0 [ 1785.890416][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1785.890443][ T37] ? __pfx_do_exit+0x10/0x10 [ 1785.890463][ T37] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1785.890483][ T37] ? reacquire_held_locks+0x104/0x190 [ 1785.890506][ T37] ? rt_spin_lock+0x1e0/0x400 [ 1785.890536][ T37] do_group_exit+0x21b/0x2d0 [ 1785.890559][ T37] ? rt_spin_unlock+0x160/0x200 [ 1785.890580][ T37] get_signal+0x1284/0x1330 [ 1785.890619][ T37] arch_do_signal_or_restart+0xbc/0x840 [ 1785.890648][ T37] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1785.890692][ T37] exit_to_user_mode_loop+0x8c/0x4d0 [ 1785.890713][ T37] ? rcu_is_watching+0x15/0xb0 [ 1785.890738][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.890758][ T37] do_syscall_64+0x33e/0xf80 [ 1785.890779][ T37] ? trace_irq_disable+0x3b/0x140 [ 1785.890810][ T37] ? clear_bhb_loop+0x40/0x90 [ 1785.890831][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.890849][ T37] RIP: 0033:0x7f3adf55d68e [ 1785.890865][ T37] RSP: 002b:00007ffcc6a26b48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1785.890883][ T37] RAX: 000000000000004c RBX: 000055556848a500 RCX: 00007f3adf55d68e [ 1785.890896][ T37] RDX: 000000000000004c RSI: 00007f3ae0344670 RDI: 0000000000000003 [ 1785.890907][ T37] RBP: 0000000000000001 R08: 00007ffcc6a26bc4 R09: 000000000000000c [ 1785.890919][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1785.890930][ T37] R13: 0000000000000000 R14: 00007f3ae0344670 R15: 0000000000000000 [ 1785.890959][ T37] [ 1785.891048][ T37] [ 1785.891048][ T37] Showing all locks held in the system: [ 1785.891070][ T37] 1 lock held by khungtaskd/37: [ 1785.891081][ T37] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1785.891141][ T37] 8 locks held by kworker/u8:4/67: [ 1785.891152][ T37] 3 locks held by kworker/u8:6/93: [ 1785.891162][ T37] #0: ffff888031bf4938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1785.891207][ T37] #1: ffffc900015efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1785.891248][ T37] #2: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 1785.891350][ T37] 2 locks held by kworker/u8:10/1183: [ 1785.891360][ T37] #0: ffff88801a074938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1785.891656][ T37] #1: ffffc9000642fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1785.891730][ T37] 8 locks held by kworker/u8:14/2964: [ 1785.891743][ T37] 5 locks held by kworker/u8:18/3893: [ 1785.891754][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1785.891797][ T37] #1: ffffc9000f797c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1785.891839][ T37] #2: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1785.891924][ T37] #3: ffff888039549878 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1785.891971][ T37] #4: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892018][ T37] 2 locks held by getty/5358: [ 1785.892028][ T37] #0: ffff8880294e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1785.892074][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1785.892127][ T37] 5 locks held by kworker/u8:8/11947: [ 1785.892153][ T37] 3 locks held by kworker/u8:12/16891: [ 1785.892163][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1785.892205][ T37] #1: ffffc9000626fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1785.892247][ T37] #2: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1785.892344][ T37] 6 locks held by kworker/u8:13/16892: [ 1785.892358][ T37] 1 lock held by syz-executor/17155: [ 1785.892368][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892417][ T37] 1 lock held by syz-executor/17170: [ 1785.892428][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892469][ T37] 1 lock held by syz-executor/17176: [ 1785.892479][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892520][ T37] 1 lock held by syz-executor/17215: [ 1785.892530][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892576][ T37] 2 locks held by syz-executor/17332: [ 1785.892586][ T37] #0: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1785.892627][ T37] #1: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892668][ T37] 2 locks held by syz-executor/17338: [ 1785.892678][ T37] #0: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1785.892719][ T37] #1: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892759][ T37] 2 locks held by syz-executor/17346: [ 1785.892770][ T37] #0: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1785.892810][ T37] #1: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892844][ T37] 1 lock held by syz.0.3566/17373: [ 1785.892853][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892894][ T37] 1 lock held by syz-executor/17374: [ 1785.892902][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892934][ T37] 1 lock held by syz-executor/17381: [ 1785.892943][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.892989][ T37] 1 lock held by syz-executor/17442: [ 1785.892999][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.893037][ T37] 1 lock held by syz-executor/17450: [ 1785.893047][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.893084][ T37] 1 lock held by syz-executor/17455: [ 1785.893093][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.893134][ T37] 1 lock held by syz-executor/17502: [ 1785.893143][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.893178][ T37] 1 lock held by syz-executor/17527: [ 1785.893188][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.893225][ T37] 1 lock held by syz-executor/17563: [ 1785.893235][ T37] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1785.893273][ T37] 4 locks held by syz-executor/17579: [ 1785.893281][ T37] #0: ffff88807e5f0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1785.893411][ T37] #1: ffff88807e5f00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1785.893477][ T37] #2: ffffffff8f4d8a78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1785.893520][ T37] #3: ffff888063b97370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1785.893592][ T37] 2 locks held by syz-executor/17581: [ 1785.893604][ T37] #0: ffff8880370b4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1785.893646][ T37] #1: ffff8880370b40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1785.893714][ T37] 2 locks held by syz-executor/17606: [ 1785.893722][ T37] #0: ffffffff8eacdbe8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1785.893770][ T37] #1: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1785.893811][ T37] 4 locks held by syz-executor/17634: [ 1785.893821][ T37] 2 locks held by kworker/0:1/17636: [ 1785.893831][ T37] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1785.893871][ T37] #1: ffffc900042b7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1785.893916][ T37] 1 lock held by syz-executor/17666: [ 1785.893929][ T37] #0: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1785.894025][ T37] 6 locks held by modprobe/17689: [ 1785.894039][ T37] [ 1785.894044][ T37] ============================================= [ 1785.894044][ T37] [ 1785.894059][ T37] NMI backtrace for cpu 0 [ 1785.894080][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1785.894100][ T37] Tainted: [L]=SOFTLOCKUP [ 1785.894104][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.894112][ T37] Call Trace: [ 1785.894118][ T37] [ 1785.894125][ T37] dump_stack_lvl+0xe8/0x150 [ 1785.894141][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1785.894187][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1785.894204][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1785.894218][ T37] sys_info+0x135/0x170 [ 1785.894235][ T37] watchdog+0xfd3/0x1030 [ 1785.894256][ T37] ? watchdog+0x1c9/0x1030 [ 1785.894273][ T37] kthread+0x388/0x470 [ 1785.894290][ T37] ? __pfx_watchdog+0x10/0x10 [ 1785.894303][ T37] ? __pfx_kthread+0x10/0x10 [ 1785.894319][ T37] ret_from_fork+0x514/0xb70 [ 1785.894336][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1785.894349][ T37] ? __switch_to+0xc79/0x1410 [ 1785.894371][ T37] ? __pfx_kthread+0x10/0x10 [ 1785.894391][ T37] ret_from_fork_asm+0x1a/0x30 [ 1785.894435][ T37] [ 1785.894441][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1785.894471][ C1] NMI backtrace for cpu 1 [ 1785.894487][ C1] CPU: 1 UID: 0 PID: 2964 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1785.894509][ C1] Tainted: [L]=SOFTLOCKUP [ 1785.894515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.894526][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1785.894586][ C1] RIP: 0010:__lock_acquire+0x14ac/0x2cf0 [ 1785.894609][ C1] Code: 08 89 da 41 8b b6 f0 0b 00 00 4c 63 fb 83 fb 31 0f 83 27 10 00 00 4b 8d 1c bf 41 8b 44 dc f8 a9 00 00 04 00 0f 84 df 0e 00 00 <25> ff 1f 00 00 48 0f a3 05 57 56 d2 11 48 89 54 24 28 41 89 f7 73 [ 1785.894623][ C1] RSP: 0000:ffffc9000e366b00 EFLAGS: 00000006 [ 1785.894636][ C1] RAX: 00000000000c006e RBX: 000000000000002d RCX: ffff888030e80d60 [ 1785.894654][ C1] RDX: 0000000000000009 RSI: 0000000000000009 RDI: 00000000002459ed [ 1785.894665][ C1] RBP: 1dde93662b116254 R08: ffffffff84ac2b02 R09: ffffffff99a6dc88 [ 1785.894676][ C1] R10: dffffc0000000000 R11: fffffbfff1f1209f R12: ffff888030e80bf8 [ 1785.894687][ C1] R13: ffff888030e80d60 R14: ffff888030e80000 R15: 0000000000000009 [ 1785.894698][ C1] FS: 0000000000000000(0000) GS:ffff888126271000(0000) knlGS:0000000000000000 [ 1785.894711][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1785.894722][ C1] CR2: 00007efc6508e368 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 1785.894736][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1785.894746][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1785.894756][ C1] Call Trace: [ 1785.894762][ C1] [ 1785.894769][ C1] ? check_noncircular+0xda/0x150 [ 1785.894791][ C1] ? add_lock_to_list+0xc7/0x100 [ 1785.894816][ C1] ? lockdep_unlock+0x5d/0xd0 [ 1785.894832][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 1785.894853][ C1] ? debug_object_activate+0x72/0x520 [ 1785.894867][ C1] lock_acquire+0x106/0x350 [ 1785.894884][ C1] ? debug_object_activate+0x72/0x520 [ 1785.894901][ C1] ? pwq_tryinc_nr_active+0x2c5/0x9b0 [ 1785.894917][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1785.894937][ C1] ? debug_object_activate+0x72/0x520 [ 1785.894951][ C1] debug_object_activate+0x72/0x520 [ 1785.894965][ C1] ? __pfx_pwq_tryinc_nr_active+0x10/0x10 [ 1785.894981][ C1] insert_work+0x35/0x330 [ 1785.894996][ C1] __queue_work+0xd1d/0x1090 [ 1785.895015][ C1] ? __queue_work+0x1dc/0x1090 [ 1785.895030][ C1] ? rcu_is_watching+0x15/0xb0 [ 1785.895052][ C1] queue_work_on+0x106/0x1d0 [ 1785.895070][ C1] wg_packet_receive+0x11c8/0x2420 [ 1785.895092][ C1] ? wg_packet_receive+0x962/0x2420 [ 1785.895113][ C1] ? __pfx_wg_packet_receive+0x10/0x10 [ 1785.895134][ C1] ? __udp4_lib_lookup+0x6a6/0xdf0 [ 1785.895180][ C1] ? __udp4_lib_lookup+0x76c/0xdf0 [ 1785.895202][ C1] wg_receive+0x75/0xa0 [ 1785.895221][ C1] udp_queue_rcv_one_skb+0xe83/0xf90 [ 1785.895238][ C1] ? __pfx_wg_receive+0x10/0x10 [ 1785.895258][ C1] udp_unicast_rcv_skb+0x21a/0x3b0 [ 1785.895272][ C1] ? udp_rcv+0xdd3/0x1db0 [ 1785.895285][ C1] udp_rcv+0xde3/0x1db0 [ 1785.895304][ C1] ? __pfx_udp_rcv+0x10/0x10 [ 1785.895320][ C1] ? __pfx_udp_rcv+0x10/0x10 [ 1785.895333][ C1] ip_protocol_deliver_rcu+0x282/0x440 [ 1785.895374][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 1785.895391][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 1785.895409][ C1] NF_HOOK+0x336/0x3c0 [ 1785.895424][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1785.895439][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1785.895453][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1785.895466][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1785.895482][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1785.895500][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1785.895516][ C1] NF_HOOK+0x336/0x3c0 [ 1785.895529][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1785.895547][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1785.895562][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1785.895575][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1785.895590][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1785.895607][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1785.895620][ C1] ? process_backlog+0x271/0xc60 [ 1785.895636][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1785.895656][ C1] process_backlog+0x569/0xc60 [ 1785.895678][ C1] __napi_poll+0xab/0x550 [ 1785.895693][ C1] net_rx_action+0x696/0xe00 [ 1785.895761][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1785.895778][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1785.895797][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1785.895817][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1785.895838][ C1] handle_softirqs+0x1de/0x6d0 [ 1785.895860][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1785.895877][ C1] batadv_iv_ogm_schedule+0xb1f/0xf60 [ 1785.895895][ C1] ? pskb_expand_head+0xd62/0x1390 [ 1785.895969][ C1] ? batadv_iv_ogm_schedule+0x8bb/0xf60 [ 1785.895989][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 1785.896007][ C1] ? batadv_send_skb_packet+0x426/0x690 [ 1785.896073][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x68d/0x7a0 [ 1785.896095][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1785.896112][ C1] process_scheduled_works+0xb5d/0x1860 [ 1785.896139][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1785.896157][ C1] ? assign_work+0x3d5/0x5e0 [ 1785.896174][ C1] worker_thread+0xa53/0xfc0 [ 1785.896200][ C1] kthread+0x388/0x470 [ 1785.896218][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1785.896233][ C1] ? __pfx_kthread+0x10/0x10 [ 1785.896251][ C1] ret_from_fork+0x514/0xb70 [ 1785.896269][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1785.896285][ C1] ? __switch_to+0xc79/0x1410 [ 1785.896306][ C1] ? __pfx_kthread+0x10/0x10 [ 1785.896324][ C1] ret_from_fork_asm+0x1a/0x30 [ 1785.896349][ C1] [ 1786.125895][T17452] Bluetooth: hci4: command tx timeout [ 1786.210939][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1786.210968][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1786.210995][ T37] Tainted: [L]=SOFTLOCKUP [ 1786.211002][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1786.211013][ T37] Call Trace: [ 1786.211022][ T37] [ 1786.211029][ T37] vpanic+0x56c/0xa60 [ 1786.211059][ T37] ? __pfx___schedule+0x10/0x10 [ 1786.211082][ T37] ? __pfx_vpanic+0x10/0x10 [ 1786.211113][ T37] panic+0xc5/0xd0 [ 1786.211132][ T37] ? __pfx_panic+0x10/0x10 [ 1786.211153][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 1786.211183][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1786.211207][ T37] watchdog+0x102c/0x1030 [ 1786.211237][ T37] ? watchdog+0x1c9/0x1030 [ 1786.211262][ T37] kthread+0x388/0x470 [ 1786.211286][ T37] ? __pfx_watchdog+0x10/0x10 [ 1786.211304][ T37] ? __pfx_kthread+0x10/0x10 [ 1786.211327][ T37] ret_from_fork+0x514/0xb70 [ 1786.211352][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1786.211378][ T37] ? __switch_to+0xc79/0x1410 [ 1786.211406][ T37] ? __pfx_kthread+0x10/0x10 [ 1786.211428][ T37] ret_from_fork_asm+0x1a/0x30 [ 1786.211465][ T37] [ 1786.211612][ T37] Kernel Offset: disabled