last executing test programs: 8m34.449231442s ago: executing program 2 (id=1290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0xffffffffffffff8b, 0x0, 0x0}) 8m34.268482288s ago: executing program 2 (id=1292): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1}, 0x0) 8m34.191415636s ago: executing program 2 (id=1294): socket$inet6(0xa, 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 8m33.185251288s ago: executing program 2 (id=1307): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') 8m33.015195951s ago: executing program 2 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000005900)={&(0x7f0000000000)={0x50, 0x0, 0x2144, {0x7, 0x2d, 0x4, 0x77908ccb7ce11ea8, 0xa8, 0xd, 0x7fc, 0x5554, 0x0, 0x0, 0x100, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m27.348692842s ago: executing program 2 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x28}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8m26.656908243s ago: executing program 32 (id=1354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x28}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m23.977823155s ago: executing program 1 (id=3439): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002240)={0x88, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000280)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) accept(r2, 0x0, &(0x7f0000000040)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x2, 0xfbffffff}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x48083) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000300)) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x7c}}, 0x24008850) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000001800)=0xfffffff9, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076001f0327bdda2f5cffc237092600000000000008000100"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x3, 0x0, 0x1, 0x9, 0x1}, &(0x7f0000000240)=0x20) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000004c0)=0xffffffffffffffff, 0x7, 0x0) 2m22.970154991s ago: executing program 1 (id=3444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$loop(&(0x7f0000001900), 0x4, 0x108701) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11", 0x57}], 0x1, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52", 0x1e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de796", 0x2f}], 0x2, 0x0, 0x0, 0x4000040}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m22.692614877s ago: executing program 1 (id=3445): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 29.33679001s ago: executing program 3 (id=3776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 29.032838801s ago: executing program 3 (id=3780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x72, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) 27.634150515s ago: executing program 3 (id=3783): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x216f}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 27.247124171s ago: executing program 3 (id=3786): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x2, 0x3f, "040040", 0x0, 0x3}) 26.762766489s ago: executing program 3 (id=3788): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 26.112856263s ago: executing program 3 (id=3791): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x662, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, r1, 0x0, 0x8010002b) 25.255406094s ago: executing program 1 (id=3449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) 24.632172385s ago: executing program 1 (id=3797): ioprio_get$uid(0x3, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) 24.275293531s ago: executing program 1 (id=3800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x0) mmap(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) 13.884636491s ago: executing program 0 (id=3825): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 13.47280635s ago: executing program 0 (id=3827): bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 13.291206191s ago: executing program 0 (id=3828): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) 12.182058736s ago: executing program 0 (id=3830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020071797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 10.743280535s ago: executing program 0 (id=3832): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 10.316421895s ago: executing program 0 (id=3835): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xe9, 0x2, 0x1, 0xa7, 0xcb, 0x0, 0x96, 0xfc, 0x84, 0x5, 0x1, 0x2, 0x27, 0x7}, 0xe) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x16, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) close(0x3) 9.114347508s ago: executing program 33 (id=3800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x0) mmap(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) 5.550678719s ago: executing program 5 (id=3845): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001300050026bd7000feffffff07000000", @ANYRES32, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 5.30237754s ago: executing program 5 (id=3847): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.769468193s ago: executing program 5 (id=3848): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000001280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x4}, {0xffbd, 0xff46}}}}, 0x11) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 3.638789241s ago: executing program 5 (id=3850): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x40004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r2, 0x0, 0x21, 0x0, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) 2.214078379s ago: executing program 4 (id=3852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020071797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.890011169s ago: executing program 4 (id=3853): ioprio_get$uid(0x3, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.719508534s ago: executing program 4 (id=3854): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x4436, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x2f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x4, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0xd, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 1.43963675s ago: executing program 4 (id=3855): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001300050026bd7000feffffff07000000", @ANYRES32, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.055632628s ago: executing program 5 (id=3856): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 914.519716ms ago: executing program 4 (id=3857): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, 0x0, &(0x7f00000008c0)=r1}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 94.627783ms ago: executing program 5 (id=3858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9806", @ANYRES32=0x41424344], 0xfce) 0s ago: executing program 4 (id=3859): fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r0 = inotify_init1(0x0) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x94000516) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) kernel console output (not intermixed with test programs): ing dummy_hcd [ 398.069577][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 398.074851][ T5720] usb 6-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 398.074908][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 398.074938][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 398.074961][ T5720] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 398.074984][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.093833][ T5720] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 398.093860][ T5720] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 398.093879][ T5720] usb 6-1: Manufacturer: syz [ 398.139585][ T5720] usb 6-1: config 0 descriptor?? [ 398.541691][ T5720] rc_core: IR keymap rc-hauppauge not found [ 398.541715][ T5720] Registered IR keymap rc-empty [ 398.541882][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.570264][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.596048][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 398.636876][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input42 [ 398.698972][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.709699][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.729720][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.751305][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.779828][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.802330][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.819656][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.839764][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.862121][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.879758][ T5720] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 398.921720][ T5720] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 398.921746][ T5720] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 398.975841][ T5720] usb 6-1: USB disconnect, device number 12 [ 399.604073][T11568] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2286'. [ 401.541568][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 403.211393][ T5858] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 403.360760][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 403.363578][ T5858] usb 6-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 403.363635][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.363664][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.363687][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.363712][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.365950][ T5858] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.365978][ T5858] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.365998][ T5858] usb 6-1: Manufacturer: syz [ 403.483998][ T5858] usb 6-1: config 0 descriptor?? [ 403.669541][ T823] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 403.824496][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 403.827137][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.827196][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.827226][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.827249][ T823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.827272][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.835734][ T823] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.835762][ T823] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.835780][ T823] usb 4-1: Manufacturer: syz [ 403.868819][ T823] usb 4-1: config 0 descriptor?? [ 404.079924][ T5858] rc_core: IR keymap rc-hauppauge not found [ 404.079948][ T5858] Registered IR keymap rc-empty [ 404.080120][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.108042][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.122167][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 404.127512][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 404.157814][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.171515][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.189804][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.209677][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.229674][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.250005][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.269624][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.290143][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.309989][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.329998][ T5858] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 404.373159][T11628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2313'. [ 404.389629][ T823] rc_core: IR keymap rc-hauppauge not found [ 404.389651][ T823] Registered IR keymap rc-empty [ 404.389807][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.410432][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.423853][ T5858] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 404.423879][ T5858] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.450943][ T823] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 404.474173][ T5858] usb 6-1: USB disconnect, device number 13 [ 404.481308][ T823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input44 [ 404.562735][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.596978][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.609923][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.646958][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.666646][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.680084][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.700773][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.719649][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.739611][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.759751][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 404.834567][ T823] mceusb 4-1:0.0: Registered < with mce emulator interface version 1 [ 404.834594][ T823] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.920492][ T823] usb 4-1: USB disconnect, device number 44 [ 407.159770][ T5625] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 407.349626][ T5625] usb 6-1: Using ep0 maxpacket: 16 [ 407.352513][ T5625] usb 6-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 407.352572][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.352602][ T5625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.352624][ T5625] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.352647][ T5625] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.354142][ T5625] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 407.354170][ T5625] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 407.354191][ T5625] usb 6-1: Manufacturer: syz [ 407.512861][ T5858] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 407.560414][ T5625] usb 6-1: config 0 descriptor?? [ 408.269573][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 408.291756][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.291937][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.292031][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.292054][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 408.292078][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.333415][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.333511][ T5858] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.333533][ T5858] usb 4-1: Manufacturer: syz [ 408.450073][ T5858] usb 4-1: config 0 descriptor?? [ 408.851060][ T5858] rc_core: IR keymap rc-hauppauge not found [ 408.851084][ T5858] Registered IR keymap rc-empty [ 408.851255][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 408.860147][ T5625] rc_core: IR keymap rc-hauppauge not found [ 408.860167][ T5625] Registered IR keymap rc-empty [ 408.860332][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 408.869718][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 408.883724][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 408.921503][ T5858] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 408.925335][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 408.957787][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input46 [ 408.979135][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45 [ 408.999608][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.047081][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.047495][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.064631][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.066872][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.080088][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.093350][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.099736][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.114576][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.127354][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.136959][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.146918][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.149657][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.159764][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.169673][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.179773][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.197266][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.201439][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.215214][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 409.227067][ T5625] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 409.289291][ T5858] mceusb 4-1:0.0: Registered < with mce emulator interface version 1 [ 409.289319][ T5858] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 409.312594][ T5625] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 409.312620][ T5625] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 409.341544][ T5858] usb 4-1: USB disconnect, device number 45 [ 409.349043][ T5625] usb 6-1: USB disconnect, device number 14 [ 411.579019][T11753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2360'. [ 411.839713][ T5625] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 411.989518][ T5625] usb 2-1: Using ep0 maxpacket: 16 [ 411.992010][ T5625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.992067][ T5625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.992160][ T5625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 411.992184][ T5625] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 411.992208][ T5625] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.994290][ T5625] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.994318][ T5625] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.994338][ T5625] usb 2-1: Manufacturer: syz [ 412.093469][ T5625] usb 2-1: config 0 descriptor?? [ 412.990104][ T5625] rc_core: IR keymap rc-hauppauge not found [ 412.990126][ T5625] Registered IR keymap rc-empty [ 412.990297][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.020878][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 413.337224][ T5625] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 413.367986][ T5625] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47 [ 414.050205][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.070179][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.095275][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.109852][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.131518][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.155462][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.173652][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.189935][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.210486][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.230930][ T5625] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 414.274940][ T5625] mceusb 2-1:0.0: Registered < with mce emulator interface version 1 [ 414.274968][ T5625] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.356352][ T5625] usb 2-1: USB disconnect, device number 68 [ 414.783952][T11797] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2378'. [ 415.989592][ T5858] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 416.139579][ T5858] usb 6-1: Using ep0 maxpacket: 32 [ 416.887090][ T5858] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 416.887124][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.887145][ T5858] usb 6-1: Product: syz [ 416.887160][ T5858] usb 6-1: Manufacturer: syz [ 416.887174][ T5858] usb 6-1: SerialNumber: syz [ 416.972752][ T5858] usb 6-1: config 0 descriptor?? [ 417.102924][ T5858] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 417.593634][T11837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2394'. [ 418.243828][T11848] loop2: detected capacity change from 0 to 7 [ 418.619385][T11848] Dev loop2: unable to read RDB block 7 [ 418.621738][T11848] loop2: unable to read partition table [ 418.621948][T11848] loop2: partition table beyond EOD, truncated [ 418.623511][T11848] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 418.960792][ T5858] gspca_ov534_9: reg_r err -32 [ 419.119339][T11870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2411'. [ 419.219573][ T5858] gspca_ov534_9: Unknown sensor 0000 [ 419.219675][ T5858] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 419.259950][ T5858] usb 6-1: USB disconnect, device number 15 [ 419.838975][T11885] loop2: detected capacity change from 0 to 7 [ 419.929049][T11885] Dev loop2: unable to read RDB block 7 [ 419.929123][T11885] loop2: unable to read partition table [ 419.929256][T11885] loop2: partition table beyond EOD, truncated [ 419.929288][T11885] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.387184][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.387218][T11899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.997379][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.997409][T11899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.609038][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2433'. [ 427.065326][T11937] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2439'. [ 429.058151][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2452'. [ 429.112728][T11968] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2454'. [ 432.082683][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 432.759543][ T5720] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 432.910691][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 432.914631][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 432.914665][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.958047][ T5720] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 432.958080][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.958102][ T5720] usb 6-1: Product: syz [ 432.958116][ T5720] usb 6-1: Manufacturer: syz [ 432.958131][ T5720] usb 6-1: SerialNumber: syz [ 433.006592][ T5720] usb 6-1: config 0 descriptor?? [ 433.022919][ T5720] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 433.022956][ T5720] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 433.704464][ T5720] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 433.705896][ T5720] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 434.080486][T12064] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2496'. [ 434.316558][ T5720] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 434.536149][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 434.536635][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 434.552379][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 434.552911][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 434.556881][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 434.613222][ T5720] usb 6-1: USB disconnect, device number 16 [ 434.959595][ T36] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 435.099613][ T36] usb 4-1: device descriptor read/64, error -71 [ 435.345688][ T36] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 435.469642][ T36] usb 4-1: device descriptor read/64, error -71 [ 435.470614][T12099] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2512'. [ 435.565278][T12103] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.2514'. [ 435.580117][ T36] usb usb4-port1: attempt power cycle [ 435.919731][ T36] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 435.941990][ T36] usb 4-1: device descriptor read/8, error -71 [ 436.110842][T12116] netlink: 64467 bytes leftover after parsing attributes in process `syz.1.2518'. [ 436.189571][ T36] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 436.210288][ T36] usb 4-1: device descriptor read/8, error -71 [ 436.347963][ T36] usb usb4-port1: unable to enumerate USB device [ 437.458456][T12149] dlm: non-version read from control device 8224 [ 438.966855][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 439.006894][T11564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 439.008813][T11564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 439.017783][T11564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 439.026324][T11564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.034104][T12158] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.2526'. [ 439.223842][T11564] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 439.744210][T12170] netlink: 64467 bytes leftover after parsing attributes in process `syz.0.2529'. [ 439.828715][T12174] syz.1.2531 uses obsolete (PF_INET,SOCK_PACKET) [ 440.243451][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243520][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.569601][ T823] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 440.709570][ T823] usb 4-1: device descriptor read/64, error -71 [ 440.864583][ T1060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.969841][ T823] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 441.003716][T11564] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 441.099545][ T823] usb 4-1: device descriptor read/64, error -71 [ 441.201108][T11564] Bluetooth: hci2: command tx timeout [ 441.220073][ T823] usb usb4-port1: attempt power cycle [ 441.582444][ T823] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 441.604367][ T823] usb 4-1: device descriptor read/8, error -71 [ 441.854227][ T823] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 441.871144][ T823] usb 4-1: device descriptor read/8, error -71 [ 441.980348][ T823] usb usb4-port1: unable to enumerate USB device [ 442.079967][T12211] netlink: 64467 bytes leftover after parsing attributes in process `syz.1.2543'. [ 442.128799][T12212] loop2: detected capacity change from 0 to 7 [ 442.133576][T12212] Dev loop2: unable to read RDB block 7 [ 442.133624][T12212] loop2: unable to read partition table [ 442.133843][T12212] loop2: partition table beyond EOD, truncated [ 442.133859][T12212] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 442.276433][ T1060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.891977][T12233] netlink: 64467 bytes leftover after parsing attributes in process `syz.5.2553'. [ 443.067230][ T1060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.281532][T11564] Bluetooth: hci2: command tx timeout [ 443.788606][ T1060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.005640][T12252] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2560'. [ 444.171570][T12265] dlm: non-version read from control device 8224 [ 444.352624][T12269] netlink: 64467 bytes leftover after parsing attributes in process `syz.5.2565'. [ 444.586835][T12276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2570'. [ 445.360475][T11564] Bluetooth: hci2: command tx timeout [ 445.648791][T12291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2572'. [ 446.850543][T12331] binder: BINDER_SET_CONTEXT_MGR already set [ 446.850562][T12331] binder: 12330:12331 ioctl 4018620d 2000000002c0 returned -16 [ 447.154289][ T1060] bridge_slave_1: left allmulticast mode [ 447.154325][ T1060] bridge_slave_1: left promiscuous mode [ 447.154593][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.329580][ T5858] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 447.439805][T11564] Bluetooth: hci2: command tx timeout [ 447.471051][T12348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2583'. [ 447.480302][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 448.057028][ T5858] usb 4-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 448.057102][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.057131][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.057153][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 448.057177][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.119300][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.119332][ T5858] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.119352][ T5858] usb 4-1: Manufacturer: syz [ 448.158336][ T5858] usb 4-1: config 0 descriptor?? [ 448.559678][ T5858] rc_core: IR keymap rc-hauppauge not found [ 448.559703][ T5858] Registered IR keymap rc-empty [ 448.559867][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.579667][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.601686][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 448.640784][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 448.648391][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.668935][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.685794][ T1060] bridge_slave_0: left allmulticast mode [ 448.685829][ T1060] bridge_slave_0: left promiscuous mode [ 448.689707][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.709623][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.740153][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.759625][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.779885][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.799574][ T5720] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 448.799692][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.815698][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.819634][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.840816][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.875466][ T5858] mceusb 4-1:0.0: Registered < with mce emulator interface version 1 [ 448.875877][ T5858] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 448.910809][ T5858] usb 4-1: USB disconnect, device number 54 [ 448.969598][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 448.976507][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 448.976542][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 449.002352][ T5720] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.002381][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.002398][ T5720] usb 1-1: Product: syz [ 449.002411][ T5720] usb 1-1: Manufacturer: syz [ 449.002438][ T5720] usb 1-1: SerialNumber: syz [ 449.085561][ T5720] usb 1-1: config 0 descriptor?? [ 449.150834][ T5720] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 449.150881][ T5720] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 450.395831][ T5720] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 450.398673][ T5720] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 451.039661][ T5720] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 451.251347][ T5720] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 451.252188][ T5720] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 451.258372][ T5720] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 451.259864][ T5720] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 451.261857][ T5720] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 451.327946][ T5720] usb 1-1: USB disconnect, device number 24 [ 454.596915][T12428] netlink: 'syz.0.2599': attribute type 11 has an invalid length. [ 455.173850][ T5858] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 456.157076][ T5858] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 456.157115][ T5858] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 456.157141][ T5858] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 456.157185][ T5858] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 456.157210][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.249063][T12430] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 456.502199][ T1060] team0: Port device geneve1 removed [ 456.549525][ T5720] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 456.699653][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 456.701482][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.701538][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.701556][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 456.701568][ T5720] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 456.701581][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.702958][ T5720] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.702985][ T5720] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.703004][ T5720] usb 2-1: Manufacturer: syz [ 456.714756][ T5720] usb 2-1: config 0 descriptor?? [ 456.940941][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.021296][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.064845][ T1060] bond0 (unregistering): Released all slaves [ 457.080304][ T5720] rc_core: IR keymap rc-hauppauge not found [ 457.080324][ T5720] Registered IR keymap rc-empty [ 457.080492][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.100983][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.121641][ T5720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 457.133469][ T5720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 457.144332][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.159663][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.185602][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.218275][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.229722][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.251129][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.331627][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.359869][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.391573][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.409704][ T5720] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 457.432466][T12353] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2584'. [ 457.452182][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 457.469782][T12463] loop2: detected capacity change from 0 to 7 [ 457.486929][ T5720] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 457.486955][ T5720] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 457.550175][ T5720] usb 2-1: USB disconnect, device number 69 [ 457.571413][T12463] Dev loop2: unable to read RDB block 7 [ 457.571461][T12463] loop2: unable to read partition table [ 457.571696][T12463] loop2: partition table beyond EOD, truncated [ 457.571731][T12463] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 457.662760][ T5858] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 457.721780][ T5858] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input49 [ 458.176043][ T5858] usb 4-1: USB disconnect, device number 55 [ 458.176133][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 460.019817][ T5720] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 460.878691][T12150] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.878967][T12150] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.879221][T12150] bridge_slave_0: entered allmulticast mode [ 460.906880][T12150] bridge_slave_0: entered promiscuous mode [ 460.909155][T12489] warning: `syz.5.2621' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 460.938377][T12150] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.938492][T12150] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.938708][T12150] bridge_slave_1: entered allmulticast mode [ 460.964952][T12150] bridge_slave_1: entered promiscuous mode [ 461.109597][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 461.328104][ T9] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.328142][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.328169][ T9] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.328214][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 461.328238][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.439006][T12504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 461.693581][T12150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.734809][T12150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.406459][T12529] dlm: non-version read from control device 8224 [ 463.315890][ T9] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 463.323340][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input51 [ 464.595255][ T9] usb 1-1: USB disconnect, device number 25 [ 464.595361][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 464.939614][T12150] team0: Port device team_slave_0 added [ 465.084902][T12150] team0: Port device team_slave_1 added [ 465.359607][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 465.624900][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 465.628350][ T9] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 465.628408][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.628437][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.628458][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 465.628478][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.632484][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 465.632511][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 465.632530][ T9] usb 1-1: Manufacturer: syz [ 465.642131][ T9] usb 1-1: config 0 descriptor?? [ 465.732093][T12568] dlm: non-version read from control device 8224 [ 466.484359][ T1060] hsr_slave_0: left promiscuous mode [ 466.545066][ T1060] hsr_slave_1: left promiscuous mode [ 466.546141][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.546167][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.559557][ T36] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 466.682996][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.683027][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.554100][ T9] rc_core: IR keymap rc-hauppauge not found [ 467.554124][ T9] Registered IR keymap rc-empty [ 467.555048][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.569642][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.595440][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 467.599739][ T5856] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 467.626865][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52 [ 467.697014][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.719824][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.740031][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.763051][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.763895][ T5856] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.763926][ T5856] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.763953][ T5856] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.764056][ T5856] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 467.764082][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.803831][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.842849][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.885141][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.904847][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.919786][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.944947][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.986455][T12570] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 468.000176][ T9] mceusb 1-1:0.0: Registered < with mce emulator interface version 1 [ 468.000213][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 468.026589][ T1060] veth1_macvtap: left promiscuous mode [ 468.026722][ T1060] veth0_macvtap: left promiscuous mode [ 468.027009][ T1060] veth1_vlan: left promiscuous mode [ 468.027229][ T1060] veth0_vlan: left promiscuous mode [ 468.132078][ T9] usb 1-1: USB disconnect, device number 26 [ 469.400715][ T5856] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 469.428251][ T5856] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input53 [ 469.742338][ T5856] usb 6-1: USB disconnect, device number 17 [ 469.742429][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 470.403060][T12600] netlink: 64475 bytes leftover after parsing attributes in process `syz.0.2654'. [ 470.564029][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 470.801448][T12606] netlink: 'syz.3.2657': attribute type 83 has an invalid length. [ 470.870480][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 470.956155][T12608] dlm: non-version read from control device 8224 [ 471.969663][ T5856] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 472.098419][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 472.112108][T12150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.112125][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.112154][T12150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.119615][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 472.126723][T12150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.126739][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.126764][T12150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.164318][ T5856] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 472.164380][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.164407][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.164428][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.164449][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.181308][ T5617] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 472.216107][ T5856] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.216140][ T5856] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.216160][ T5856] usb 4-1: Manufacturer: syz [ 472.322510][ T5856] usb 4-1: config 0 descriptor?? [ 472.649605][ T5856] rc_core: IR keymap rc-hauppauge not found [ 472.649628][ T5856] Registered IR keymap rc-empty [ 472.649819][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.670062][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.691090][ T5856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 472.694164][ T5856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 472.744314][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.759599][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.779835][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.799793][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.819621][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.839618][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.859650][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.879680][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.899612][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.919625][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.974535][ T5856] mceusb 4-1:0.0: Registered < with mce emulator interface version 1 [ 472.974563][ T5856] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.982540][T12150] hsr_slave_0: entered promiscuous mode [ 472.988739][T12150] hsr_slave_1: entered promiscuous mode [ 473.032837][ T5856] usb 4-1: USB disconnect, device number 56 [ 473.778262][T12634] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2663'. [ 474.896865][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 475.199775][ T5617] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 475.295174][T11564] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 477.936143][T11564] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 478.305194][ T5856] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 478.454007][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 478.456886][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.456913][ T5856] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.496974][ T5856] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 478.497008][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.497028][ T5856] usb 2-1: Product: syz [ 478.497053][ T5856] usb 2-1: Manufacturer: syz [ 478.497148][ T5856] usb 2-1: SerialNumber: syz [ 478.660121][ T5856] usb 2-1: selecting invalid altsetting 1 [ 478.661022][ T5856] usb 2-1: unit 6 not found! [ 479.324080][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 479.355988][T12150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.445892][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.460992][T12150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.477054][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 479.485958][ T9] usb 6-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 479.486014][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.486095][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.486119][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 479.486143][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.521396][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.533037][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 479.537334][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 479.537363][ T9] usb 6-1: Manufacturer: syz [ 479.602013][ T9] usb 6-1: config 0 descriptor?? [ 479.604062][T12150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.661455][ T5856] usb 2-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 479.661552][ T5856] usb 2-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 479.663366][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.666087][T12150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.759326][T12150] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.892945][T12744] tipc: Trying to set illegal importance in message [ 480.040189][ T9] rc_core: IR keymap rc-hauppauge not found [ 480.040212][ T9] Registered IR keymap rc-empty [ 480.040381][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.071543][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.095001][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 480.115406][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input55 [ 480.137676][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.149990][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 480.169855][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.068523][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.079663][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.099634][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.119926][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.140620][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.159650][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.164015][ T5856] usb 2-1: USB disconnect, device number 72 [ 481.179645][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 481.287908][ T9] mceusb 6-1:0.0: Registered < with mce emulator interface version 1 [ 481.287935][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.360781][ T9] usb 6-1: USB disconnect, device number 20 [ 481.441992][ T7028] udevd[7028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.578973][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.737797][T12150] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.864368][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.864528][ T7834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.963319][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.963484][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.700112][T11564] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 483.579541][ T5617] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 483.963107][ T5617] usb 6-1: unable to get BOS descriptor or descriptor too short [ 483.966065][ T5617] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.966092][ T5617] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.981497][ T5617] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 483.981533][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.981551][ T5617] usb 6-1: Product: syz [ 483.981563][ T5617] usb 6-1: Manufacturer: syz [ 483.981576][ T5617] usb 6-1: SerialNumber: syz [ 484.026258][ T5617] usb 6-1: selecting invalid altsetting 1 [ 484.027048][ T5617] usb 6-1: unit 6 not found! [ 484.228806][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 484.470790][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 484.470816][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'. [ 484.470841][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 485.073195][ T5617] usb 6-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 485.073229][ T5617] usb 6-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 485.225273][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 485.225299][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'. [ 485.225324][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 485.227299][ T7829] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.246666][ T7829] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.303614][T12830] tipc: Trying to set illegal importance in message [ 485.319520][ T7829] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.398304][ T7829] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.498080][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 485.498108][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 485.511460][T12150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.837647][ T5617] usb 6-1: USB disconnect, device number 21 [ 487.348737][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.589574][ T5858] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 487.744874][ T5858] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.744938][ T5858] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 487.744964][ T5858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.797499][ T5858] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 487.797532][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.797552][ T5858] usb 6-1: Product: syz [ 487.797568][ T5858] usb 6-1: Manufacturer: syz [ 487.797582][ T5858] usb 6-1: SerialNumber: syz [ 487.861107][ T5858] usb 6-1: config 0 descriptor?? [ 487.881499][T12891] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.884987][ T5858] usb 6-1: ucan: probing device on interface #0 [ 487.885012][ T5858] usb 6-1: ucan: invalid EP count (1) [ 487.885027][ T5858] usb 6-1: ucan: probe failed; try to update the device firmware [ 488.362040][T12150] veth0_vlan: entered promiscuous mode [ 488.401952][T12150] veth1_vlan: entered promiscuous mode [ 488.536304][T12150] veth0_macvtap: entered promiscuous mode [ 488.556653][T12150] veth1_macvtap: entered promiscuous mode [ 488.690658][T12150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.757071][T12150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.885118][ T7832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.886611][ T1060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.886664][ T1060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.886701][ T1060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.617486][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2737'. [ 489.617514][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2737'. [ 489.890448][T11564] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 490.398836][ T5617] usb 6-1: USB disconnect, device number 22 [ 490.638576][T12959] loop2: detected capacity change from 0 to 7 [ 490.672250][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.672273][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.740530][T12959] Dev loop2: unable to read RDB block 7 [ 490.740559][T12959] loop2: AHDI p1 p2 p3 [ 490.740573][T12959] loop2: partition table partially beyond EOD, truncated [ 490.786270][T12959] loop2: p1 start 1601398130 is beyond EOD, truncated [ 490.786301][T12959] loop2: p2 start 1702059890 is beyond EOD, truncated [ 491.239348][T12968] netlink: 64475 bytes leftover after parsing attributes in process `syz.1.2746'. [ 491.337467][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.337489][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.539205][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 491.539233][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 493.091615][T12997] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.2756'. [ 495.761373][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 495.939524][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 495.943089][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.943115][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.943135][ T9] usb 5-1: config 0 has no interface number 0 [ 495.943186][ T9] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.943214][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 495.948797][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 495.948826][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.948846][ T9] usb 5-1: Product: syz [ 495.948861][ T9] usb 5-1: Manufacturer: syz [ 495.948876][ T9] usb 5-1: SerialNumber: syz [ 496.073472][ T9] usb 5-1: config 0 descriptor?? [ 496.324721][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 496.325042][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 497.587625][T13067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2785'. [ 498.838768][ T823] usb 5-1: USB disconnect, device number 45 [ 501.690438][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.690519][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.984110][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2812'. [ 506.579027][T13194] mmap: syz.1.2832 (13194): VmData 37478400 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 506.941691][T13206] nbd: must specify an index to disconnect [ 507.766516][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2843'. [ 507.919254][T13227] netlink: 'syz.3.2845': attribute type 83 has an invalid length. [ 507.945546][T13229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2846'. [ 508.825031][T13252] netlink: 'syz.4.2857': attribute type 83 has an invalid length. [ 508.861381][T13255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2856'. [ 509.480734][T11564] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 510.578750][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2874'. [ 510.931362][T11564] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 513.614397][T13328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2885'. [ 515.338145][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2899'. [ 516.260188][T13377] fuse: Bad value for 'fd' [ 518.949517][ T5861] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 519.009206][T13425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2924'. [ 519.176721][T13426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2924'. [ 519.249524][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 519.252953][ T5861] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 519.252982][ T5861] usb 4-1: config 0 has no interface number 0 [ 519.253032][ T5861] usb 4-1: config 0 interface 184 has no altsetting 0 [ 519.259243][ T5861] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 519.259274][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.259292][ T5861] usb 4-1: Product: syz [ 519.259306][ T5861] usb 4-1: Manufacturer: syz [ 519.259320][ T5861] usb 4-1: SerialNumber: syz [ 519.293338][ T5861] usb 4-1: config 0 descriptor?? [ 519.719675][ T5861] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 519.719707][ T5861] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 519.719725][ T5861] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 519.720060][ T5861] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 520.789297][ T5856] usb 4-1: USB disconnect, device number 57 [ 522.146462][T13468] netlink: 64475 bytes leftover after parsing attributes in process `syz.3.2938'. [ 525.091414][T13518] netlink: 'syz.1.2957': attribute type 83 has an invalid length. [ 526.706376][T13544] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.2967'. [ 528.412862][T13570] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.2978'. [ 528.429841][ T823] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 528.589519][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 528.592477][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.592535][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.592564][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.592594][ T823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 528.592618][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.594555][ T823] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 528.594592][ T823] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 528.594612][ T823] usb 4-1: Manufacturer: syz [ 528.636214][ T823] usb 4-1: config 0 descriptor?? [ 529.252080][T13598] netlink: 64475 bytes leftover after parsing attributes in process `syz.5.2990'. [ 530.004280][T13623] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.3001'. [ 530.909194][T13652] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.3014'. [ 531.281790][T13662] tipc: Trying to set illegal importance in message [ 531.659477][ T823] rc_core: IR keymap rc-hauppauge not found [ 531.659498][ T823] Registered IR keymap rc-empty [ 531.659660][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.680084][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.707513][ T823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 531.714081][ T823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 531.733974][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.749594][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.769615][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.789593][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.819587][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.839521][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.865905][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.890598][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.909564][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.939681][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 531.968100][ T823] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 531.968127][ T823] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.979319][ T823] usb 4-1: USB disconnect, device number 58 [ 533.029515][ T5856] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 533.179579][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 533.182897][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.182954][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.182984][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.183008][ T5856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 533.183039][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.184987][ T5856] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.185015][ T5856] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.185044][ T5856] usb 5-1: Manufacturer: syz [ 533.283822][ T5856] usb 5-1: config 0 descriptor?? [ 533.569555][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 533.736610][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 533.738405][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.738429][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.771081][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 533.771649][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.771673][ T9] usb 4-1: Product: syz [ 533.771687][ T9] usb 4-1: Manufacturer: syz [ 533.771702][ T9] usb 4-1: SerialNumber: syz [ 533.927436][ T9] usb 4-1: selecting invalid altsetting 1 [ 533.938854][ T9] usb 4-1: unit 6 not found! [ 534.912090][ T9] usb 4-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 534.912125][ T9] usb 4-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 535.049031][T13737] netlink: 'syz.0.3049': attribute type 83 has an invalid length. [ 535.125292][T13702] tipc: Trying to set illegal importance in message [ 535.456147][ T9] usb 4-1: USB disconnect, device number 59 [ 535.562189][T13441] udevd[13441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.983409][ T5856] rc_core: IR keymap rc-hauppauge not found [ 535.983433][ T5856] Registered IR keymap rc-empty [ 535.983632][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 536.956800][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.076265][ T5856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 537.079979][ T5856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 537.122240][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.139577][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.159536][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.182257][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.200447][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.219578][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.239572][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.259534][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.279569][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.300448][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 537.336996][ T5856] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 537.337024][ T5856] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 537.371718][ T5856] usb 5-1: USB disconnect, device number 46 [ 537.775594][T13780] tipc: Trying to set illegal importance in message [ 538.279576][ T5856] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 538.429532][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 538.432358][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.432416][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.432446][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.432468][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 538.432492][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.434477][ T5856] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 538.434505][ T5856] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 538.434525][ T5856] usb 4-1: Manufacturer: syz [ 538.454637][ T5856] usb 4-1: config 0 descriptor?? [ 539.537193][ T5861] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 539.704270][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 539.704305][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 539.704331][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 539.707434][ T5861] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 539.707475][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.707496][ T5861] usb 5-1: Product: syz [ 539.707511][ T5861] usb 5-1: Manufacturer: syz [ 539.707525][ T5861] usb 5-1: SerialNumber: syz [ 539.792065][ T5861] usb 5-1: config 0 descriptor?? [ 539.910625][T13822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 539.913071][T13822] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 539.934866][ T5861] usb 5-1: ucan: probing device on interface #0 [ 540.414345][ T5861] usb 5-1: ucan: could not read protocol version, ret=0 [ 540.414374][ T5861] usb 5-1: ucan: probe failed; try to update the device firmware [ 540.669524][T13831] tipc: Trying to set illegal importance in message [ 541.269503][ T5856] rc_core: IR keymap rc-hauppauge not found [ 541.269526][ T5856] Registered IR keymap rc-empty [ 541.270403][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.289568][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.312893][ T5856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 541.329070][ T5856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input58 [ 541.339159][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.360820][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.383332][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.400953][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.419522][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.441601][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.461732][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.479556][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.504202][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.527117][ T5856] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.594295][ T5856] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 541.597085][ T5856] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.654354][ T5856] usb 4-1: USB disconnect, device number 60 [ 542.518487][ T9] usb 5-1: USB disconnect, device number 47 [ 542.888361][T11564] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 543.087337][T13867] tipc: Trying to set illegal importance in message [ 543.569151][T13878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3108'. [ 544.156732][T13894] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 544.156761][T13894] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 545.495479][T13926] netlink: 'syz.5.3117': attribute type 83 has an invalid length. [ 547.713161][T13953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3126'. [ 547.849240][T13958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3127'. [ 548.466809][T13972] netlink: 'syz.5.3129': attribute type 83 has an invalid length. [ 553.306768][T14029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3142'. [ 558.146142][T14095] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3155'. [ 563.460125][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.460192][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.217138][T11564] Bluetooth: hci2: command 0x0406 tx timeout [ 565.566588][T14181] tipc: Trying to set illegal importance in message [ 566.010645][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.062271][T14190] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.210100][ T36] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 568.372444][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 568.373991][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.374016][ T36] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.377011][ T36] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 568.377041][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.377061][ T36] usb 4-1: Product: syz [ 568.377075][ T36] usb 4-1: Manufacturer: syz [ 568.377090][ T36] usb 4-1: SerialNumber: syz [ 568.487160][ T36] usb 4-1: selecting invalid altsetting 1 [ 568.488083][ T36] usb 4-1: unit 6 not found! [ 570.296754][ T36] usb 4-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 570.296791][ T36] usb 4-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 570.512883][T14217] tipc: Trying to set illegal importance in message [ 570.727729][ T36] usb 4-1: USB disconnect, device number 61 [ 570.794819][T14239] udevd[14239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.147146][ T5621] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 576.599539][ T5720] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 576.762966][ T5720] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 576.763002][ T5720] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 576.763028][ T5720] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 576.766405][ T5720] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 576.766433][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.766454][ T5720] usb 5-1: Product: syz [ 576.766468][ T5720] usb 5-1: Manufacturer: syz [ 576.766483][ T5720] usb 5-1: SerialNumber: syz [ 576.847889][ T5720] usb 5-1: config 0 descriptor?? [ 576.858302][T14340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.858877][T14340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 576.883538][ T5720] usb 5-1: ucan: probing device on interface #0 [ 577.083738][ T5720] usb 5-1: ucan: device protocol version 0 is not supported [ 577.083766][ T5720] usb 5-1: ucan: probe failed; try to update the device firmware [ 579.388891][ T5625] usb 5-1: USB disconnect, device number 48 [ 582.696843][T14390] netlink: 'syz.1.3258': attribute type 83 has an invalid length. [ 584.127710][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 584.217700][T14400] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.247963][T14400] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.450034][T14422] netlink: 'syz.5.3270': attribute type 83 has an invalid length. [ 585.137659][T14434] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 586.746770][T14453] netlink: 'syz.4.3281': attribute type 83 has an invalid length. [ 588.424771][ T36] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 588.752832][T14481] tipc: Started in network mode [ 588.752858][T14481] tipc: Node identity 84e, cluster identity 4711 [ 588.752871][T14481] tipc: Node number set to 2126 [ 589.099528][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 589.101994][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.102051][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 589.102079][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 589.102100][ T36] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 589.102123][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.103699][ T36] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 589.103727][ T36] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 589.103747][ T36] usb 4-1: Manufacturer: syz [ 589.124333][ T36] usb 4-1: config 0 descriptor?? [ 589.498257][T14492] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3296'. [ 592.052170][ T36] rc_core: IR keymap rc-hauppauge not found [ 592.052714][ T36] Registered IR keymap rc-empty [ 592.125450][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.155865][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.261120][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 592.479077][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59 [ 592.496398][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.509547][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.529514][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.559667][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.583099][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.600605][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.619564][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.639536][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.659528][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.663579][T14521] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3304'. [ 592.679623][ T36] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 592.710344][ T36] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 592.710371][ T36] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 592.738777][ T36] usb 4-1: USB disconnect, device number 62 [ 593.236780][T14531] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3307'. [ 594.329584][ T36] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 594.490617][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.490663][ T36] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 594.490704][ T36] usb 4-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 594.490732][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 594.490766][ T36] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 594.490789][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.566688][ T36] usb 4-1: config 0 descriptor?? [ 594.615646][ T36] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 596.895026][ T36] usb 4-1: USB disconnect, device number 63 [ 598.879684][T14613] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3320'. [ 599.182490][ T5740] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 599.329482][ T5740] usb 4-1: Using ep0 maxpacket: 16 [ 599.331819][ T5740] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 599.331882][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.331910][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 599.331932][ T5740] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 599.331954][ T5740] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.333444][ T5740] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 599.333470][ T5740] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 599.333490][ T5740] usb 4-1: Manufacturer: syz [ 599.356663][ T5740] usb 4-1: config 0 descriptor?? [ 600.010421][ T5740] rc_core: IR keymap rc-hauppauge not found [ 600.010442][ T5740] Registered IR keymap rc-empty [ 600.010613][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.031312][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.084910][ T5740] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 600.120765][ T5740] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 600.236664][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.249762][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.269851][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.289613][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.310329][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.342403][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.364721][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.379538][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.410957][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.430564][ T5740] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 600.674140][ T5740] mceusb 4-1:0.0: Registered < with mce emulator interface version 1 [ 600.674167][ T5740] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 600.903820][ T5740] usb 4-1: USB disconnect, device number 64 [ 606.657254][T14697] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3336'. [ 606.739473][ T5858] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 607.069497][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 607.072143][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.072201][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 607.072231][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.072253][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 607.072276][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.075446][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 607.075475][ T5858] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 607.075495][ T5858] usb 4-1: Manufacturer: syz [ 607.165790][ T5858] usb 4-1: config 0 descriptor?? [ 610.160395][ T5621] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 610.161093][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 610.161132][ T5621] Tainted: [L]=SOFTLOCKUP [ 610.161139][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 610.161154][ T5621] Workqueue: hci3 hci_rx_work [ 610.161308][ T5621] Call Trace: [ 610.161343][ T5621] [ 610.161385][ T5621] dump_stack_lvl+0xe8/0x150 [ 610.161482][ T5621] sysfs_create_dir_ns+0x271/0x2a0 [ 610.161585][ T5621] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 610.161634][ T5621] kobject_add_internal+0x62c/0xce0 [ 610.161746][ T5621] kobject_add+0x163/0x240 [ 610.161783][ T5621] ? __pfx_kobject_add+0x10/0x10 [ 610.161822][ T5621] ? get_device_parent+0x370/0x3a0 [ 610.161890][ T5621] device_add+0x3fa/0xb80 [ 610.161955][ T5621] hci_conn_add_sysfs+0xd5/0x210 [ 610.162017][ T5621] le_conn_complete_evt+0xfef/0x1580 [ 610.162087][ T5621] ? lockdep_hardirqs_on+0x7a/0x110 [ 610.162168][ T5621] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 610.162203][ T5621] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 610.162254][ T5621] ? hci_le_meta_evt+0xd6/0x5a0 [ 610.162282][ T5621] ? skb_pull_data+0xf0/0x200 [ 610.162386][ T5621] hci_le_conn_complete_evt+0x187/0x470 [ 610.162425][ T5621] hci_event_packet+0x67a/0xf10 [ 610.162461][ T5621] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 610.162490][ T5621] ? __pfx_hci_event_packet+0x10/0x10 [ 610.162517][ T5621] ? preempt_schedule_common+0x82/0xd0 [ 610.162550][ T5621] ? preempt_schedule_thunk+0x16/0x40 [ 610.162590][ T5621] ? hci_send_to_monitor+0xe2/0x590 [ 610.162646][ T5621] hci_rx_work+0x3ee/0x1020 [ 610.162683][ T5621] ? process_scheduled_works+0xa20/0x14e0 [ 610.162785][ T5621] process_scheduled_works+0xa8e/0x14e0 [ 610.162851][ T5621] ? __pfx_process_scheduled_works+0x10/0x10 [ 610.162891][ T5621] ? assign_work+0x3cf/0x5d0 [ 610.162935][ T5621] worker_thread+0xa47/0xfb0 [ 610.163002][ T5621] kthread+0x388/0x470 [ 610.163049][ T5621] ? __pfx_worker_thread+0x10/0x10 [ 610.163079][ T5621] ? __pfx_kthread+0x10/0x10 [ 610.163105][ T5621] ret_from_fork+0x514/0xb70 [ 610.163173][ T5621] ? __pfx_ret_from_fork+0x10/0x10 [ 610.163199][ T5621] ? __switch_to+0xc89/0x1420 [ 610.163243][ T5621] ? __pfx_kthread+0x10/0x10 [ 610.163270][ T5621] ret_from_fork_asm+0x1a/0x30 [ 610.163318][ T5621] [ 610.181241][ T5621] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 610.181362][ T5621] Bluetooth: hci3: failed to register connection device [ 610.999468][ T5858] rc_core: IR keymap rc-hauppauge not found [ 610.999492][ T5858] Registered IR keymap rc-empty [ 610.999665][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.028303][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.043655][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 611.061378][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61 [ 611.279713][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.299527][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.898185][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.909565][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.937329][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 611.949536][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 612.029708][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 612.054220][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 612.069494][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 612.089581][ T5858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 612.120361][ T5858] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 612.120388][ T5858] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 612.128013][ T5858] usb 4-1: USB disconnect, device number 65 [ 612.212617][T14783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3353'. [ 612.241937][T11564] Bluetooth: hci3: command 0x0406 tx timeout [ 614.323296][T11564] Bluetooth: hci3: command 0x0406 tx timeout [ 617.246765][T14828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3367'. [ 621.742834][T14905] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3390'. [ 624.566906][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.566988][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.599646][ T823] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 626.899493][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 626.901459][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.901515][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.901544][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.901566][ T823] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.901589][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.905352][ T823] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.905379][ T823] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.905400][ T823] usb 4-1: Manufacturer: syz [ 626.936400][ T823] usb 4-1: config 0 descriptor?? [ 627.270605][T14983] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14984] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14983] [ 627.457275][T14987] tipc: Trying to set illegal importance in message [ 627.499412][ T823] rc_core: IR keymap rc-hauppauge not found [ 627.499434][ T823] Registered IR keymap rc-empty [ 627.499671][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.529588][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.550620][ T823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 627.565114][ T823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 627.585079][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.610141][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.639828][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.659581][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.703731][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.719545][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.739521][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.769817][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.799560][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.819640][ T823] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 627.856366][ T823] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 627.856391][ T823] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 627.900087][ T823] usb 4-1: USB disconnect, device number 66 [ 631.629299][T15010] syz.3.3418 (15010) used greatest stack depth: 16768 bytes left [ 631.914664][T14806] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 632.859582][ T5858] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 633.012323][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 633.013843][ T5858] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.013868][ T5858] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.019577][ T5858] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 633.019608][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.019627][ T5858] usb 5-1: Product: syz [ 633.019642][ T5858] usb 5-1: Manufacturer: syz [ 633.019654][ T5858] usb 5-1: SerialNumber: syz [ 633.080787][ T5858] usb 5-1: selecting invalid altsetting 1 [ 633.081709][ T5858] usb 5-1: unit 6 not found! [ 634.304557][ T5858] usb 5-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 634.304593][ T5858] usb 5-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 634.319491][ T36] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 637.567320][ T5858] usb 5-1: USB disconnect, device number 49 [ 637.720687][T15038] udevd[15038]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.849477][ T5858] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 640.051298][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 640.053775][ T5858] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 640.053803][ T5858] usb 5-1: config 0 has no interface number 0 [ 640.053853][ T5858] usb 5-1: config 0 interface 184 has no altsetting 0 [ 640.056999][ T5858] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 640.057025][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.057046][ T5858] usb 5-1: Product: syz [ 640.057060][ T5858] usb 5-1: Manufacturer: syz [ 640.057074][ T5858] usb 5-1: SerialNumber: syz [ 640.070890][ T5858] usb 5-1: config 0 descriptor?? [ 640.802265][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 640.802298][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 640.818755][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 640.818790][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 640.818809][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 640.818828][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 640.819166][ T5858] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 642.666168][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.747891][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.766845][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.785645][ T5720] usb 5-1: USB disconnect, device number 50 [ 642.803339][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.809052][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 643.399513][ T5720] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 643.592508][ T5720] usb 5-1: unable to get BOS descriptor or descriptor too short [ 643.594056][ T5720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.594080][ T5720] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.597954][ T5720] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 643.597984][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.598004][ T5720] usb 5-1: Product: syz [ 643.598018][ T5720] usb 5-1: Manufacturer: syz [ 643.598032][ T5720] usb 5-1: SerialNumber: syz [ 643.704348][ T5720] usb 5-1: selecting invalid altsetting 1 [ 643.782792][ T5720] usb 5-1: unit 6 not found! [ 643.840036][ T5856] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 644.766049][ T5720] usb 5-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 644.766178][ T5720] usb 5-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 644.977061][T14806] Bluetooth: hci4: command tx timeout [ 647.039660][T14806] Bluetooth: hci4: command tx timeout [ 647.235205][ T5720] usb 5-1: USB disconnect, device number 51 [ 647.322400][T15038] udevd[15038]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.360990][ T156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.361027][ T156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.949518][ T5740] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 649.137139][T14806] Bluetooth: hci4: command tx timeout [ 649.272263][ T5740] usb 5-1: unable to get BOS descriptor or descriptor too short [ 649.273494][ T5740] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.273517][ T5740] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.278086][ T5740] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 649.278115][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.278136][ T5740] usb 5-1: Product: syz [ 649.278151][ T5740] usb 5-1: Manufacturer: syz [ 649.278166][ T5740] usb 5-1: SerialNumber: syz [ 649.356678][ T5740] usb 5-1: selecting invalid altsetting 1 [ 649.357173][ T5740] usb 5-1: unit 6 not found! [ 650.074062][ T156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.074099][ T156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.179495][ T5720] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 650.334311][ T5740] usb 5-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 650.334345][ T5740] usb 5-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 650.339479][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 650.362499][ T5720] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 650.362528][ T5720] usb 4-1: config 0 has no interface number 0 [ 650.362579][ T5720] usb 4-1: config 0 interface 184 has no altsetting 0 [ 650.365754][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 650.365783][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.365804][ T5720] usb 4-1: Product: syz [ 650.365818][ T5720] usb 4-1: Manufacturer: syz [ 650.365833][ T5720] usb 4-1: SerialNumber: syz [ 650.429868][ T5720] usb 4-1: config 0 descriptor?? [ 651.037040][ T5740] usb 5-1: USB disconnect, device number 52 [ 651.117538][T15038] udevd[15038]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.135796][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 651.135816][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 651.138792][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 651.138823][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 651.138841][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 651.138859][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 651.139180][ T5720] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 651.199537][T14806] Bluetooth: hci4: command tx timeout [ 651.402138][ T156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.402178][ T156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.107796][ T156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.107835][ T156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.119716][ T5858] usb 4-1: USB disconnect, device number 69 [ 654.676239][T14806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 654.676270][T14806] CPU: 0 UID: 0 PID: 14806 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 654.676301][T14806] Tainted: [L]=SOFTLOCKUP [ 654.676309][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.676334][T14806] Workqueue: hci2 hci_rx_work [ 654.676370][T14806] Call Trace: [ 654.676379][T14806] [ 654.676388][T14806] dump_stack_lvl+0xe8/0x150 [ 654.676422][T14806] sysfs_create_dir_ns+0x271/0x2a0 [ 654.676452][T14806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 654.676485][T14806] ? rt_spin_unlock+0x163/0x200 [ 654.676584][T14806] kobject_add_internal+0x62c/0xce0 [ 654.676625][T14806] kobject_add+0x163/0x240 [ 654.676651][T14806] ? rt_spin_unlock+0x157/0x200 [ 654.676688][T14806] ? __pfx_kobject_add+0x10/0x10 [ 654.676724][T14806] ? get_device_parent+0x370/0x3a0 [ 654.676753][T14806] device_add+0x3fa/0xb80 [ 654.676787][T14806] hci_conn_add_sysfs+0xd5/0x210 [ 654.676816][T14806] le_conn_complete_evt+0xfef/0x1580 [ 654.676859][T14806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 654.676891][T14806] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.676917][T14806] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 654.676942][T14806] ? rt_mutex_slowunlock+0x219/0x460 [ 654.676976][T14806] ? skb_pull_data+0xf0/0x200 [ 654.677016][T14806] hci_le_conn_complete_evt+0x187/0x470 [ 654.677054][T14806] hci_event_packet+0x67a/0xf10 [ 654.677088][T14806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 654.677114][T14806] ? __pfx_hci_event_packet+0x10/0x10 [ 654.677137][T14806] ? rt_spin_unlock+0x157/0x200 [ 654.677179][T14806] ? hci_send_to_monitor+0xe2/0x590 [ 654.677217][T14806] hci_rx_work+0x3ee/0x1020 [ 654.677259][T14806] ? process_scheduled_works+0xa20/0x14e0 [ 654.677294][T14806] process_scheduled_works+0xa8e/0x14e0 [ 654.677388][T14806] ? __pfx_process_scheduled_works+0x10/0x10 [ 654.677428][T14806] ? assign_work+0x3cf/0x5d0 [ 654.677466][T14806] worker_thread+0xa47/0xfb0 [ 654.677515][T14806] ? __kthread_parkme+0x71/0x1f0 [ 654.677549][T14806] kthread+0x388/0x470 [ 654.677575][T14806] ? __pfx_worker_thread+0x10/0x10 [ 654.677607][T14806] ? __pfx_kthread+0x10/0x10 [ 654.677633][T14806] ret_from_fork+0x514/0xb70 [ 654.677665][T14806] ? __pfx_ret_from_fork+0x10/0x10 [ 654.677691][T14806] ? __switch_to+0xc89/0x1420 [ 654.677716][T14806] ? __pfx_kthread+0x10/0x10 [ 654.677743][T14806] ret_from_fork_asm+0x1a/0x30 [ 654.677789][T14806] [ 654.677846][T14806] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 654.677888][T14806] Bluetooth: hci2: failed to register connection device [ 654.810331][T15100] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.810475][T15100] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.810713][T15100] bridge_slave_0: entered allmulticast mode [ 654.878595][T15100] bridge_slave_0: entered promiscuous mode [ 654.933901][T15100] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.934024][T15100] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.934245][T15100] bridge_slave_1: entered allmulticast mode [ 654.953939][T15100] bridge_slave_1: entered promiscuous mode [ 655.844401][T15100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.874354][T15100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.979920][ T156] bridge_slave_1: left allmulticast mode [ 655.979959][ T156] bridge_slave_1: left promiscuous mode [ 655.981377][ T156] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.119601][ T5858] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 656.361319][ T9] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 656.388968][ T5858] usb 5-1: Using ep0 maxpacket: 32 [ 656.398175][ T5858] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 656.398202][ T5858] usb 5-1: config 0 has no interface number 0 [ 656.398239][ T5858] usb 5-1: config 0 interface 184 has no altsetting 0 [ 656.414563][ T5858] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 656.414582][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.414593][ T5858] usb 5-1: Product: syz [ 656.414601][ T5858] usb 5-1: Manufacturer: syz [ 656.414609][ T5858] usb 5-1: SerialNumber: syz [ 656.725840][T14806] Bluetooth: hci2: command 0x0406 tx timeout [ 657.385154][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 657.388171][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 657.388205][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.388227][ T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 657.388255][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 657.388290][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 657.388322][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.450620][ T156] bridge_slave_0: left allmulticast mode [ 657.450657][ T156] bridge_slave_0: left promiscuous mode [ 657.450968][ T156] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.515405][ T5858] usb 5-1: config 0 descriptor?? [ 657.658705][ T9] usb 4-1: config 0 descriptor?? [ 658.101823][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 658.102022][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 658.257127][ T9] usb 4-1: USB disconnect, device number 70 [ 658.389565][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 658.389599][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 658.394720][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 658.394749][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 658.394768][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 658.394786][ T5858] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 658.395041][ T5858] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 659.039536][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 659.200397][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 659.718772][ T5858] usb 5-1: USB disconnect, device number 53 [ 660.978617][T15290] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 661.981464][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.950376][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.383652][ T156] bond0 (unregistering): Released all slaves [ 663.972472][T15100] team0: Port device team_slave_0 added [ 663.977534][T15100] team0: Port device team_slave_1 added [ 664.019625][ T5617] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 664.085666][T15100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.085684][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.085712][T15100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.089039][T15100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.089054][T15100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.089081][T15100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.359544][ T5617] usb 5-1: Using ep0 maxpacket: 16 [ 664.365296][ T5617] usb 5-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 664.365354][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.365382][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 664.365401][ T5617] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 664.365424][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.367207][ T5617] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 664.367237][ T5617] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 664.367257][ T5617] usb 5-1: Manufacturer: syz [ 664.374568][ T5617] usb 5-1: config 0 descriptor?? [ 664.597757][T15100] hsr_slave_0: entered promiscuous mode [ 664.618314][T15100] hsr_slave_1: entered promiscuous mode [ 664.626135][T15100] debugfs: 'hsr0' already exists in 'hsr' [ 664.626160][T15100] Cannot create hsr debugfs directory [ 664.829435][ T5617] rc_core: IR keymap rc-hauppauge not found [ 664.829458][ T5617] Registered IR keymap rc-empty [ 664.829632][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 664.849719][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 664.871404][ T5617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 664.885065][ T5617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 664.963441][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 664.982094][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.003244][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 665.969013][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.095284][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.265379][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.289574][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.309479][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.349281][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.369626][ T5617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 666.407174][ T5617] mceusb 5-1:0.0: Registered < with mce emulator interface version 1 [ 666.407199][ T5617] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 666.457369][ T5617] usb 5-1: USB disconnect, device number 54 [ 669.718171][T15341] kthread_run failed with err -4 [ 669.723616][T14806] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 669.908702][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 672.457118][T14806] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 678.062010][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 684.361819][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.362326][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.462634][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.462715][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.588717][T15465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.596612][T15465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.597114][ T7825] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.609742][ T7825] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.371643][ T156] hsr_slave_0: left promiscuous mode [ 688.393628][ T156] hsr_slave_1: left promiscuous mode [ 688.425278][ T156] veth1_macvtap: left promiscuous mode [ 688.426575][ T156] veth0_macvtap: left promiscuous mode [ 688.426921][ T156] veth1_vlan: left promiscuous mode [ 688.427017][ T156] veth0_vlan: left promiscuous mode [ 689.610198][ T156] team0 (unregistering): Port device team_slave_1 removed [ 689.691050][ T156] team0 (unregistering): Port device team_slave_0 removed [ 690.077216][ T7822] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.580002][ T7822] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.858131][T15629] dlm: non-version read from control device 8224 [ 699.332120][T15100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.440493][T15666] dlm: non-version read from control device 8224 [ 701.385058][T15100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.409795][T15100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 701.696487][T15100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.972372][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.056616][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.065935][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.071563][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.078459][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.159683][T14806] Bluetooth: hci0: command tx timeout [ 705.897661][T15683] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.897887][T15683] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.898081][T15683] bridge_slave_0: entered allmulticast mode [ 705.902467][T15683] bridge_slave_0: entered promiscuous mode [ 705.906288][T15683] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.906463][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.907061][T15683] bridge_slave_1: entered allmulticast mode [ 705.910962][T15683] bridge_slave_1: entered promiscuous mode [ 706.010427][T15683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.045515][T15683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.249669][T14806] Bluetooth: hci0: command tx timeout [ 706.347328][T15683] team0: Port device team_slave_0 added [ 706.354068][T15683] team0: Port device team_slave_1 added [ 707.413372][T15683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.413391][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.413419][T15683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.420019][T15683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.420035][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.420058][T15683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.936129][T15683] hsr_slave_0: entered promiscuous mode [ 707.937046][T15683] hsr_slave_1: entered promiscuous mode [ 707.980627][T15683] debugfs: 'hsr0' already exists in 'hsr' [ 707.980659][T15683] Cannot create hsr debugfs directory [ 708.344660][ T5620] Bluetooth: hci0: command tx timeout [ 708.559436][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 710.422838][T14806] Bluetooth: hci0: command tx timeout [ 717.766364][T15914] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3686'. [ 719.800085][ T7838] bridge_slave_1: left allmulticast mode [ 719.800138][ T7838] bridge_slave_1: left promiscuous mode [ 719.800421][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.668443][ T7838] bridge_slave_0: left allmulticast mode [ 721.668481][ T7838] bridge_slave_0: left promiscuous mode [ 721.668775][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.161740][ T7838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.260250][ T7838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.342212][ T7838] bond0 (unregistering): Released all slaves [ 723.266727][T15983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3700'. [ 723.542037][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 723.721078][ T7838] hsr_slave_0: left promiscuous mode [ 724.022502][ T7838] hsr_slave_1: left promiscuous mode [ 724.023829][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.115658][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.490779][ T7838] team0 (unregistering): Port device team_slave_1 removed [ 726.721737][ T7838] team0 (unregistering): Port device team_slave_0 removed [ 730.803081][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3723'. [ 731.159144][T16069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.802666][T16160] tipc: Enabling of bearer rejected, failed to enable media [ 736.883331][T16167] fuse: Bad value for 'fd' [ 737.130111][T15683] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 737.284781][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.309433][T15683] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 737.348436][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.360020][T15683] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 737.413782][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.416784][T15683] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.756151][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.665530][T15683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.839408][T15683] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.072378][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.075644][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.144042][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.144193][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.532855][T15683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 741.532880][T15683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.704206][T16229] Dead loop on virtual device ip6_vti0 (net 117), fix it urgently! [ 748.195274][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.195352][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.846829][T15683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.373280][T15683] veth0_vlan: entered promiscuous mode [ 751.382782][T15683] veth1_vlan: entered promiscuous mode [ 753.630820][T16290] bridge0: port 3(macvlan2) entered blocking state [ 753.637832][T16290] bridge0: port 3(macvlan2) entered disabled state [ 753.638061][T16290] macvlan2: entered allmulticast mode [ 753.638079][T16290] gretap0: entered allmulticast mode [ 753.656479][T16290] macvlan2: entered promiscuous mode [ 753.661186][T16290] bridge0: port 3(macvlan2) entered blocking state [ 753.661352][T16290] bridge0: port 3(macvlan2) entered forwarding state [ 753.752324][ T7835] bridge0: port 3(macvlan2) entered disabled state [ 753.779184][T15683] veth0_macvtap: entered promiscuous mode [ 753.861941][T15683] veth1_macvtap: entered promiscuous mode [ 754.040211][T15683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.054925][T15683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.075268][ T7842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.076001][ T7842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.076043][ T7842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.076081][ T7842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.285284][ T7835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.285308][ T7835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.783026][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.783049][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.987200][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 759.016400][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 759.328966][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 760.455420][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 760.711604][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.960118][T14806] Bluetooth: hci4: command tx timeout [ 765.826253][T14806] Bluetooth: hci4: command tx timeout [ 766.245495][T14806] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 767.877935][ T7825] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.022597][T14806] Bluetooth: hci4: command tx timeout [ 769.932842][ T5856] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 770.522239][T14806] Bluetooth: hci4: command tx timeout [ 770.579364][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 770.581684][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 770.581740][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.581769][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 770.581791][ T5856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 770.581815][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.583315][ T5856] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 770.583342][ T5856] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 770.583362][ T5856] usb 5-1: Manufacturer: syz [ 770.691969][ T5856] usb 5-1: config 0 descriptor?? [ 770.810813][ T7825] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.039437][ T5856] rc_core: IR keymap rc-hauppauge not found [ 772.039462][ T5856] Registered IR keymap rc-empty [ 772.039628][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.059534][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.084549][ T5856] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 772.101273][ T5856] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input65 [ 772.114889][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.138032][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.155091][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.174263][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.189820][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.209721][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.229645][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.249683][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.272555][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.294960][ T5856] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 772.341242][ T5856] mceusb 5-1:0.0: Registered < with mce emulator interface version 1 [ 772.341270][ T5856] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 772.418904][ T5856] usb 5-1: USB disconnect, device number 55 [ 773.333054][T16492] 9p: Bad value for 'rfdno' [ 773.627503][ T7825] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.667950][T16362] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.668162][T16362] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.668422][T16362] bridge_slave_0: entered allmulticast mode [ 773.708540][T16362] bridge_slave_0: entered promiscuous mode [ 773.730985][T16362] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.732487][T16362] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.732694][T16362] bridge_slave_1: entered allmulticast mode [ 773.738726][T16362] bridge_slave_1: entered promiscuous mode [ 773.865123][T16362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.881542][T16362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.944042][T16362] team0: Port device team_slave_0 added [ 773.958351][T16362] team0: Port device team_slave_1 added [ 774.019913][T16362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.019931][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.019958][T16362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.022572][T16362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.022586][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.022612][T16362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.713349][T14806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 774.782655][T14806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 774.784232][T14806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 774.785552][T14806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 775.753742][T14806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.752081][ T7825] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.215655][T16362] hsr_slave_0: entered promiscuous mode [ 777.228782][T16362] hsr_slave_1: entered promiscuous mode [ 777.239450][T16362] debugfs: 'hsr0' already exists in 'hsr' [ 777.239481][T16362] Cannot create hsr debugfs directory [ 778.011518][T16535] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3847'. [ 778.045094][T16535] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3847'. [ 778.800023][ T5620] Bluetooth: hci1: command tx timeout [ 779.610641][ T7825] bridge_slave_1: left allmulticast mode [ 779.610848][ T7825] bridge_slave_1: left promiscuous mode [ 779.612211][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.588306][T16553] netlink: 64467 bytes leftover after parsing attributes in process `syz.4.3851'. [ 780.651277][ T7825] bridge_slave_0: left allmulticast mode [ 780.651314][ T7825] bridge_slave_0: left promiscuous mode [ 780.651632][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.879880][ T5620] Bluetooth: hci1: command tx timeout [ 781.671391][ T7825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.729996][ T7825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.752320][ T7825] bond0 (unregistering): Released all slaves [ 781.883835][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 782.007185][T16576] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3856'. [ 782.707440][T16576] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3856'. [ 782.867176][T16361] ================================================================== [ 782.867253][T16361] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 782.867342][T16361] Read of size 1 at addr ffff88804f17e7e8 by task syz.1.3800/16361 [ 782.867358][T16361] [ 782.867393][T16361] CPU: 1 UID: 0 PID: 16361 Comm: syz.1.3800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 782.867442][T16361] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 782.867449][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.867460][T16361] Call Trace: [ 782.867468][T16361] [ 782.867477][T16361] dump_stack_lvl+0xe8/0x150 [ 782.867504][T16361] print_address_description+0x55/0x1e0 [ 782.867538][T16361] ? rt_spin_lock+0x83/0x400 [ 782.867563][T16361] print_report+0x58/0x70 [ 782.867583][T16361] kasan_report+0x117/0x150 [ 782.867679][T16361] ? rt_spin_lock+0x83/0x400 [ 782.867708][T16361] ? bt_accept_unlink+0x7d/0x2f0 [ 782.867756][T16361] __kasan_check_byte+0x2a/0x40 [ 782.867781][T16361] lock_acquire+0x84/0x350 [ 782.867831][T16361] ? __local_bh_disable_ip+0x3c/0x420 [ 782.867899][T16361] rt_spin_lock+0x83/0x400 [ 782.867924][T16361] ? bt_accept_unlink+0x7d/0x2f0 [ 782.867947][T16361] ? __pfx_rt_spin_lock+0x10/0x10 [ 782.867971][T16361] ? rcu_is_watching+0x15/0xb0 [ 782.868030][T16361] ? __local_bh_disable_ip+0x3c/0x420 [ 782.868057][T16361] ? bt_accept_unlink+0x61/0x2f0 [ 782.868083][T16361] bt_accept_unlink+0x7d/0x2f0 [ 782.868106][T16361] ? bt_accept_unlink+0x61/0x2f0 [ 782.868130][T16361] l2cap_sock_teardown_cb+0x17e/0x490 [ 782.868172][T16361] l2cap_chan_del+0x98/0x600 [ 782.868196][T16361] l2cap_conn_del+0x343/0x570 [ 782.868213][T16361] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 782.868240][T16361] hci_conn_hash_flush+0x105/0x260 [ 782.868258][T16361] hci_dev_close_sync+0x7fc/0x10a0 [ 782.868306][T16361] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 782.868325][T[ 782.868325][T16361] ? lockdep_hardirqs_on+0x7a/0x110 [ 782.868344][T16361] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 782.868362][T16361] ? mutex_lock_nested+0x152/0x1d0 [ 782.868383][T16361] ? hci_unregister_dev+0x22a/0x5b0 [ 782.868402][T16361] hci_unregister_dev+0x232/0x5b0 [ 782.868421][T16361] vhci_release+0x170/0x1c0 [ 782.868491][T16361] ? __pfx_vhci_release+0x10/0x10 [ 782.868509][T16361] __fput+0x42a/0xa80 [ 782.868562][T16361] task_work_run+0x1d9/0x270 [ 782.868585][T16361] ? __pfx_task_work_run+0x10/0x10 [ 782.868682][T16361] ? do_exit+0x735/0x2360 [ 782.868699][T16361] ? kmem_cache_free+0x187/0x6c0 [ 782.868784][T16361] ? put_net+0x191/0x260 [ 782.868822][T16361] ? do_exit+0x735/0x2360 [ 782.868841][T16361] do_exit+0x73a/0x2360 [ 782.868858][T16361] ? lockdep_hardirqs_on+0x7a/0x110 [ 782.868877][T16361] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 782.868897][T16361] ? __pfx_do_exit+0x10/0x10 [ 782.868914][T16361] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 782.868936][T16361] ? rt_spin_lock+0x1e0/0x400 [ 782.868960][T16361] ? rt_spin_unlock+0x157/0x200 [ 782.868983][T16361] do_group_exit+0x22d/0x2f0 [ 782.869000][T16361] ? rt_spin_unlock+0x163/0x200 [ 782.869023][T16361] get_signal+0x121b/0x12c0 [ 782.869081][T16361] arch_do_signal_or_restart+0xbb/0x860 [ 782.869102][T16361] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 782.869127][T16361] exit_to_user_mode_loop+0x104/0x730 [ 782.869186][T16361] ? rcu_is_watching+0x15/0xb0 [ 782.869208][T16361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.869263][T16361] do_syscall_64+0x353/0x580 [ 782.869301][T16361] ? trace_irq_disable+0x3b/0x140 [ 782.869362][T16361] ? clear_bhb_loop+0x40/0x90 [ 782.869380][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.869396][T16361] RIP: 0033:0x7fd1584bce59 [ 782.869411][T16361] Code: Unable to access opcode bytes at 0x7fd1584bce2f. [ 782.869442][T16361] RSP: 002b:00007fd15670e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.869483][T16361] RAX: 0000000000000003 RBX: 00007fd158735fa0 RCX: 00007fd1584bce59 [ 782.869498][T16361] RDX: 0000000000000048 RSI: 0000200000003940 RDI: 0000000000000000 [ 782.869513][T16361] RBP: 00007fd158552e6f R08: 0000000000000000 R09: 0000000000000000 [ 782.869525][T16361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.869537][T16361] R13: 00007fd158736038 R14: 00007fd158735fa0 R15: 00007ffeeca55bc8 [ 782.869559][T16361] [ 782.869567][T16361] [ 782.869572][T16361] Allocated by task 7825: [ 782.869606][T16361] kasan_save_track+0x3e/0x80 [ 782.869627][T16361] __kasan_kmalloc+0x93/0xb0 [ 782.869645][T16361] __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 782.869665][T16361] __alloc_skb+0x2bd/0x7a0 [ 782.869694][T16361] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 782.869740][T16361] process_scheduled_works+0xa8e/0x14e0 [ 782.869764][T16361] worker_thread+0xa47/0xfb0 [ 782.869784][T16361] kthread+0x388/0x470 [ 782.869797][T16361] ret_from_fork+0x514/0xb70 [ 782.869813][T16361] ret_from_fork_asm+0x1a/0x30 [ 782.869830][T16361] [ 782.869834][T16361] Freed by task 7825: [ 782.869840][T16361] kasan_save_track+0x3e/0x80 [ 782.869856][T16361] kasan_save_free_info+0x40/0x50 [ 782.869868][T16361] __kasan_slab_free+0x5c/0x80 [ 782.869885][T16361] kfree+0x1c5/0x6c0 [ 782.869899][T16361] skb_release_data+0x85e/0xab0 [ 782.869918][T16361] __kfree_skb+0x5d/0x210 [ 782.869934][T16361] nsim_dev_trap_report_work+0x879/0xcb0 [ 782.869948][T16361] process_scheduled_works+0xa8e/0x14e0 [ 782.869967][T16361] worker_thread+0xa47/0xfb0 [ 782.869986][T16361] kthread+0x388/0x470 [ 782.870000][T16361] ret_from_fork+0x514/0xb70 [ 782.870015][T16361] ret_from_fork_asm+0x1a/0x30 [ 782.870031][T16361] [ 782.870046][T16361] The buggy address belongs to the object at ffff88804f17e000 [ 782.870046][T16361] which belongs to the cache kmalloc-4k of size 4096 [ 782.870061][T16361] The buggy address is located 2024 bytes inside of [ 782.870061][T16361] freed 4096-byte region [ffff88804f17e000, ffff88804f17f000) [ 782.870079][T16361] [ 782.870083][T16361] The buggy address belongs to the physical page: [ 782.870122][T16361] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f178 [ 782.870138][T16361] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 782.870153][T16361] flags: 0x80000000000040(head|node=0|zone=1) [ 782.870166][T16361] page_type: f5(slab) [ 782.870183][T16361] raw: 0080000000000040 ffff88801a01c140 dead000000000100 dead000000000122 [ 782.870196][T16361] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 782.870211][T16361] head: 0080000000000040 ffff88801a01c140 dead000000000100 dead000000000122 [ 782.870225][T16361] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 782.870240][T16361] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 782.870254][T16361] head: 00000007f714f0c0 0000000000000000 00000000ffffffff 0000000000000008 [ 782.870262][T16361] page dumped because: kasan: bad access detected [ 782.870271][T16361] page_owner tracks the page as allocated [ 782.870278][T16361] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5804, tgid 5804 (udevd), ts 269845344061, free_ts 269673056238 [ 782.870308][T16361] post_alloc_hook+0x1f9/0x250 [ 782.870361][T16361] get_page_from_freelist+0x262a/0x26a0 [ 782.870397][T16361] __alloc_frozen_pages_noprof+0x18d/0x380 [ 782.870416][T16361] allocate_slab+0x79/0x5e0 [ 782.870430][T16361] refill_objects+0x2d8/0x350 [ 782.870442][T16361] __pcs_replace_empty_main+0x330/0x690 [ 782.870463][T16361] __kmalloc_noprof+0x544/0x780 [ 782.870480][T16361] tomoyo_realpath_from_path+0xef/0x640 [ 782.870549][T16361] tomoyo_path_perm+0x283/0x560 [ 782.870590][T16361] security_inode_getattr+0x12b/0x310 [ 782.870626][T16361] __x64_sys_newfstat+0x133/0x270 [ 782.870665][T16361] do_syscall_64+0x174/0x580 [ 782.870683][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.870699][T16361] page last free pid 4971 tgid 4971 stack trace: [ 782.870708][T16361] __free_frozen_pages+0x10e7/0x11c0 [ 782.870727][T16361] __slab_free+0x252/0x2a0 [ 782.870746][T16361] qlist_free_all+0x99/0x100 [ 782.870781][T16361] kasan_quarantine_reduce+0x148/0x160 [ 782.870796][T16361] __kasan_slab_alloc+0x22/0x80 [ 782.870813][T16361] __kmalloc_noprof+0x3b6/0x780 [ 782.870829][T16361] tomoyo_realpath_from_path+0xef/0x640 [ 782.870843][T16361] tomoyo_path_perm+0x283/0x560 [ 782.870861][T16361] security_inode_getattr+0x12b/0x310 [ 782.870878][T16361] __x64_sys_newfstat+0x133/0x270 [ 782.870894][T16361] do_syscall_64+0x174/0x580 [ 782.870909][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.870923][T16361] [ 782.870926][T16361] Memory state around the buggy address: [ 782.870956][T16361] ffff88804f17e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.870967][T16361] ffff88804f17e700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.870978][T16361] >ffff88804f17e780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.870985][T16361] ^ [ 782.870995][T16361] ffff88804f17e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.871005][T16361] ffff88804f17e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 782.871013][T16361] ================================================================== [ 782.959984][ T5620] Bluetooth: hci1: command tx timeout [ 783.064090][T16361] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 783.064116][T16361] CPU: 1 UID: 0 PID: 16361 Comm: syz.1.3800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 783.064145][T16361] Tainted: [L]=SOFTLOCKUP [ 783.064153][T16361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 783.064166][T16361] Call Trace: [ 783.064174][T16361] [ 783.064183][T16361] vpanic+0x56c/0xa60 [ 783.064216][T16361] ? __pfx_vpanic+0x10/0x10 [ 783.064241][T16361] ? __pfx___schedule+0x10/0x10 [ 783.064266][T16361] panic+0xc5/0xd0 [ 783.064290][T16361] ? __pfx_panic+0x10/0x10 [ 783.064316][T16361] ? preempt_schedule_common+0x82/0xd0 [ 783.064340][T16361] ? rt_spin_lock+0x83/0x400 [ 783.064369][T16361] check_panic_on_warn+0x89/0xb0 [ 783.064449][T16361] ? rt_spin_lock+0x83/0x400 [ 783.064476][T16361] end_report+0x73/0x170 [ 783.064503][T16361] ? rt_spin_lock+0x83/0x400 [ 783.064531][T16361] kasan_report+0x128/0x150 [ 783.064577][T16361] ? rt_spin_lock+0x83/0x400 [ 783.064609][T16361] ? bt_accept_unlink+0x7d/0x2f0 [ 783.064634][T16361] __kasan_check_byte+0x2a/0x40 [ 783.064661][T16361] lock_acquire+0x84/0x350 [ 783.064688][T16361] ? __local_bh_disable_ip+0x3c/0x420 [ 783.064721][T16361] rt_spin_lock+0x83/0x400 [ 783.064748][T16361] ? bt_accept_unlink+0x7d/0x2f0 [ 783.064773][T16361] ? __pfx_rt_spin_lock+0x10/0x10 [ 783.064801][T16361] ? rcu_is_watching+0x15/0xb0 [ 783.064828][T16361] ? __local_bh_disable_ip+0x3c/0x420 [ 783.064857][T16361] ? bt_accept_unlink+0x61/0x2f0 [ 783.064882][T16361] bt_accept_unlink+0x7d/0x2f0 [ 783.064908][T16361] ? bt_accept_unlink+0x61/0x2f0 [ 783.064934][T16361] l2cap_sock_teardown_cb+0x17e/0x490 [ 783.064959][T16361] l2cap_chan_del+0x98/0x600 [ 783.064983][T16361] l2cap_conn_del+0x343/0x570 [ 783.065010][T16361] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 783.065040][T16361] hci_conn_hash_flush+0x105/0x260 [ 783.065061][T16361] hci_dev_close_sync+0x7fc/0x10a0 [ 783.065090][T16361] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 783.065114][T16361] ? lockdep_hardirqs_on+0x7a/0x110 [ 783.065136][T16361] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 783.065159][T16361] ? mutex_lock_nested+0x152/0x1d0 [ 783.065187][T16361] ? hci_unregister_dev+0x22a/0x5b0 [ 783.065213][T16361] hci_unregister_dev+0x232/0x5b0 [ 783.065239][T16361] vhci_release+0x170/0x1c0 [ 783.065264][T16361] ? __pfx_vhci_release+0x10/0x10 [ 783.065286][T16361] __fput+0x42a/0xa80 [ 783.065314][T16361] task_work_run+0x1d9/0x270 [ 783.065341][T16361] ? __pfx_task_work_run+0x10/0x10 [ 783.065364][T16361] ? do_exit+0x735/0x2360 [ 783.065386][T16361] ? kmem_cache_free+0x187/0x6c0 [ 783.065412][T16361] ? put_net+0x191/0x260 [ 783.065438][T16361] ? do_exit+0x735/0x2360 [ 783.065461][T16361] do_exit+0x73a/0x2360 [ 783.065481][T16361] ? lockdep_hardirqs_on+0x7a/0x110 [ 783.065508][T16361] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 783.065534][T16361] ? __pfx_do_exit+0x10/0x10 [ 783.065564][T16361] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 783.065593][T16361] ? rt_spin_lock+0x1e0/0x400 [ 783.065626][T16361] ? rt_spin_unlock+0x157/0x200 [ 783.065656][T16361] do_group_exit+0x22d/0x2f0 [ 783.065680][T16361] ? rt_spin_unlock+0x163/0x200 [ 783.065710][T16361] get_signal+0x121b/0x12c0 [ 783.065749][T16361] arch_do_signal_or_restart+0xbb/0x860 [ 783.065773][T16361] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 783.065803][T16361] exit_to_user_mode_loop+0x104/0x730 [ 783.065829][T16361] ? rcu_is_watching+0x15/0xb0 [ 783.065858][T16361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.065880][T16361] do_syscall_64+0x353/0x580 [ 783.065903][T16361] ? trace_irq_disable+0x3b/0x140 [ 783.065927][T16361] ? clear_bhb_loop+0x40/0x90 [ 783.065951][T16361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.065971][T16361] RIP: 0033:0x7fd1584bce59 [ 783.065990][T16361] Code: Unable to access opcode bytes at 0x7fd1584bce2f. [ 783.066001][T16361] RSP: 002b:00007fd15670e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.066026][T16361] RAX: 0000000000000003 RBX: 00007fd158735fa0 RCX: 00007fd1584bce59 [ 783.066040][T16361] RDX: 0000000000000048 RSI: 0000200000003940 RDI: 0000000000000000 [ 783.066053][T16361] RBP: 00007fd158552e6f R08: 0000000000000000 R09: 0000000000000000 [ 783.066066][T16361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.066078][T16361] R13: 00007fd158736038 R14: 00007fd158735fa0 R15: 00007ffeeca55bc8 [ 783.066100][T16361] [ 783.066362][T16361] Kernel Offset: disabled