last executing test programs: 8.046181657s ago: executing program 3 (id=3032): socket$kcm(0x10, 0x400000002, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.613591427s ago: executing program 3 (id=3034): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6, 0xfb, 0x1ff, 0x1}, 0x3, 0x400000, 0x0, 0x6, 0x0, 0x9}}) 7.430526589s ago: executing program 3 (id=3036): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x4, 0x4, &(0x7f0000000080)={0x1d, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 5.230369548s ago: executing program 2 (id=3048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x3b2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.149206271s ago: executing program 2 (id=3049): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) readahead(0xffffffffffffffff, 0x800, 0x100000001) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/87, 0x57}, {0x0}], 0x2, 0x10, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000383a00fe8000000000000000000000000000aaff020000000000000000000000000001020090780000000160102dab00002f00fc000000000000000000000000000001000000000000000000000000000000012498a9ecba66320d78e5da323839dfee50976d8e7d9711a8586cbaa561bef456ba9c8e2b0314fbf0a5e86b6b06af99ce632f6c397741f1d53e68c90ae5cccc4931a11d412407e899214ea316c0df9257ae6201965fc89faed4bc57728cdd5d4c78eb9f5fb8479ff647dcdc4a8201fc3c5db771d75cf934c3d482b2e4f78d3eef2eac8861a8fdd800bf2c89a12230335e5a857e"], 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x9, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="d10000000805000000000000a9537934b9d0e81ab71ef97252e83339226550dc6804114fae2b9a6455cac73f2fb7c750f5bf9451c83ce09336f9d3bbd94931f11cbe1a819240b8546594d02543cee8b61ad3b250afe51d4ca8579e7359f713e71e105034b70e5851e2f8f812a4c13d1ada9e4f759a43c1fd8e5df7a38b32283dec107ecfe4aa7bb0054a1af44147da52f2eb5de4fbb94ccecdd9596ae07855e4362237659307255ce3d2a7cbe77465cc8961c5062e4e72b233b03f3cf1b803c682c4ec71e49b5421851766bae8"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 3.867909119s ago: executing program 3 (id=3051): mkdirat(0xffffffffffffff9c, &(0x7f0000002380)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 2.790261502s ago: executing program 2 (id=3052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x1, 0x41, 0x0) 2.610246354s ago: executing program 2 (id=3053): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 2.549845569s ago: executing program 1 (id=3054): socket$kcm(0x10, 0x400000002, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.463784154s ago: executing program 2 (id=3055): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0xa, 0x2f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 2.315298785s ago: executing program 2 (id=3056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)=ANY=[@ANYBLOB="120101026e694b109911039000d7010203010902290001fb0780020904000000ffd36b0505240600000000d10002004000"/59], &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 2.22941495s ago: executing program 0 (id=3057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x3b2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.890734123s ago: executing program 1 (id=3058): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.05174353s ago: executing program 1 (id=3059): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2a, 0x2, 0x1, "9adf4b552fb8af2b8f72f109000000a590d25f7768037daf9623ba17fd815cee", 0x3131354f}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002000/0x2000)=nil], &(0x7f00000000c0), 0x0, 0x0) 1.029559471s ago: executing program 3 (id=3060): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 980.286554ms ago: executing program 0 (id=3061): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x1, 0x41, 0x0) 889.871501ms ago: executing program 0 (id=3062): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6, 0xfb, 0x1ff, 0x1}, 0x3, 0x400000, 0x0, 0x6, 0x0, 0x9}}) 795.649477ms ago: executing program 1 (id=3063): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 630.206628ms ago: executing program 0 (id=3064): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0xa, 0x2f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 389.877064ms ago: executing program 3 (id=3065): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r2, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000088c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[], 0x38, 0x44840}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000500)="549289c4fcf2f968b6180b1d931900e568d30554a7797f0434e84a9d9a2737922b8db4a252135e2118f9f5e9b92ba9b7cf9840393631e1fd73fdf662dae1dd175ec854016054c75e8e8af4ca7856d6d5d6a882d4cc9b0d5a3a791653e49cbed51ad9bddef82110ba8150e835f86f54b815afdfe75202e9762c1a1d6bb174decb37f3f2e87ed7bc63fad2d74f275ba079f19466fb", 0x94}, {&(0x7f0000006300)="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", 0x1000}, {&(0x7f0000007300)="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", 0xc00}, {&(0x7f0000008300)="c51b065489880100926ed5d56ef6", 0xe}, {&(0x7f00000006c0)="6d5b0b4d00610c1e9ee06fe29112904d50c21283131bf4233b83e62b9d7ff7c153d64118cfa4597879922dc769c99da5282efc2d9e3e3beb6b207474d1deedbe2b541e1449caf06a403d33a2e64f8c6138c85beca2c5dd658e5d6ce8b18c066f7c1d64a25bf5bed54690bb9d9c1e337316dc4ea973e2d421f0028b2d34ce996a53c64263a8321516c3cbde952706b5d119adaac2d8d2631acc5fc6044e493464480cadfa9a81df5490bc56dc7e46d7616907306a436ec23b7e497be13385250e8c68a2c648b61d2be9cc7c5c43b7a61ba425b7dd7b2e3cdeb150dd79d039862ca66fbf1cdfabee75a64d4c2b8a2167e548f3460ac3250c6dcaf6151cc4", 0xfd}, {&(0x7f0000008380)}, {&(0x7f0000008400)="287c6f066b26c0f0418f040d9f56f05c988422d69fda8ee49db57ac813d576", 0x1f}, {&(0x7f0000000300)="98f46bef0db69eab670c011a4abeb60a9ecf859c8de8f90c301699ad05aec0ed569f88add65d7e5bf14205f9150cf4cf19c26bf3119d1b4349339f860d7acc93f80001212f25c4f6c6edaa0d1e8772632b43f8a4d9030c82218e76aaa23858fa52d7c1b04a1a2b98238ed8651713c585532e2b2995dc39ad6f9e3f238980d7eb53d738cee7e0f6cb5e4f14f11f1a3979c70d08e5e2433a9ffb8f8590bc3f06b6b940f8a2aeacf0c1894891b1e5deb984a2b15feb03281e60fb972fad89f99923ef203fe81bfa78", 0xc7}, {&(0x7f0000008540)="d40e7dac711a0c33943ff83ef711794efd79ced13591587a4f81bb507869ea63f9742e792ecaf4e094b78e46560e9f85dd2e6f3723365afebfb88d4aa02aa96765cfdb98e8470b4df2b0a19e0af03453b7d6d92bb514b250cba3627ab767dbd05071a003126652530d0de88204ca07c2eb945ff0ca5719f6d8f4e06f12eb5acd81e2b41d61f01ecbc8db520aada28b76ca63d0d7f788838fa60e078d039c93b839637034a5b9bc270a85380c8344696715eac8", 0xb3}, {&(0x7f00000007c0)="522c382a670d485f429afd89e74baa605fb1034593b37029f0d4edac5fbd25aa6ec7f377e7bf3182f676195e9d79d26459957c370bd3c96bea55e760d50056bf5dd1a516aafe3d78e0501190f3f50e47edc2d6807b8d215290eb98bf0aa036c3e620829bd954283cfeb1b9b1b69d4e389f2848fe83e96556eda86dc8aaa0a6b5d2ea42e04ebdf6b2fee79c3e390d56de332e22625765b9150aa3f0c77de9797d2f46b94b2414082ad50d7384a67830247468997df70bcddb90fd81f20d17f7fde1916952e56d6f1e994980b4bdcef808e1b22d78c00c5d59d571", 0xda}, {&(0x7f0000000a40)="226a4ce864372234be652e5ea3d026e403d963e33dbeca7552ae3563eaaa84650f8cb11f4a17551c5af6cf93452751c2e105f2cedfacd2e0fb7f1cb40c82fde6353347a7cf35a15ad14c7919d481e4bfe651dbd9ce0d36657abf8352629ddc88e5196ad19d1a14a1f4132fb5c0a457d0b53f376bf0b1db6a9a59215adacb9a6a9ef8c89ad91a8f5cc6ad32294080b5de7eb59ba2bf0f6d033ec7e01608e25ccc1119dc0dcc51d273ebb0f1fcb7a2ecb4fff6379065197524e58a43db74baeae71b7c66f93be7a8bf114bcd272e04122ba666b0288012a605bf94705d5e54023657c5fe22de8915053b49b8", 0xeb}], 0xc, &(0x7f0000000ec0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r4, r5, r0, r3, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x98, 0x10040880}}, {{0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000008800)="8fa5e6fe938d6ea982e86269e84b7aa88851fdd56973425f0cc7ec492cd4019fe06e17477e34937a26b0a2427827ba10bc538f1aa666", 0x36}], 0x1, &(0x7f0000008600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @cred={{0x1c}}], 0x130, 0x40000}}], 0x3, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002440)=[{&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/164, 0xa4}, {&(0x7f0000000c00)=""/102, 0x66}, {&(0x7f0000000c80)=""/50, 0x32}, {&(0x7f0000001380)=""/4088, 0x1000}, {&(0x7f0000002380)=""/143, 0x8f}], 0x6}, 0x9}, {{&(0x7f00000024c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002540)=""/206, 0xce}, {&(0x7f0000000cc0)=""/129, 0x81}], 0x2, &(0x7f0000002740)=""/48, 0x30}, 0x80000000}, {{&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @local}}, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000640)=""/84}], 0x0, &(0x7f0000000dc0)=""/56}, 0x4}], 0x1, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x2010, r6, 0xffff9000) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x3, 0x0, 0x800010, 0xfffffeff, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000180)=0x6f) 321.364379ms ago: executing program 0 (id=3066): socket$kcm(0x10, 0x400000002, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 135.595482ms ago: executing program 1 (id=3067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 107.148893ms ago: executing program 0 (id=3068): mkdirat(0xffffffffffffff9c, &(0x7f0000002380)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 0s ago: executing program 1 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x3b2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T4327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.794511][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 527.822187][ T5818] usb 4-1: not running at top speed; connect to a high speed hub [ 527.841601][ T5818] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 527.902204][ T5880] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 527.924210][ T5818] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 527.935808][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.945990][ T5818] usb 4-1: Product: syz [ 527.950313][ T5818] usb 4-1: Manufacturer: syz [ 527.955576][ T5818] usb 4-1: SerialNumber: syz [ 528.102234][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 528.133008][ T5880] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 528.176469][ T5880] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.259423][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.322286][ T5818] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 528.338032][ T5818] usb 4-1: USB disconnect, device number 30 [ 528.351031][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.369088][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 210 seconds [ 528.381885][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 210 seconds [ 528.395491][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 210 seconds [ 528.407504][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 210 seconds [ 528.416295][T11476] chnl_net:caif_netlink_parms(): no params data found [ 528.418974][ T5880] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.439200][ T5880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.448622][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.594941][ T5783] Bluetooth: hci3: command tx timeout [ 528.677450][ T5880] usb 3-1: usb_control_msg returned -32 [ 528.684673][ T5880] usbtmc 3-1:16.0: can't read capabilities [ 529.023133][T11488] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 529.033991][ T5880] usb 3-1: USB disconnect, device number 27 [ 529.132558][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.150051][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.160573][T11476] bridge_slave_0: entered allmulticast mode [ 529.189116][T11476] bridge_slave_0: entered promiscuous mode [ 529.309046][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.342376][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.363085][T11476] bridge_slave_1: entered allmulticast mode [ 529.390685][T11476] bridge_slave_1: entered promiscuous mode [ 529.505727][T11476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.563312][T11476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.666449][T11476] team0: Port device team_slave_0 added [ 529.715675][T11476] team0: Port device team_slave_1 added [ 530.634963][T11476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.663850][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.672333][ T5783] Bluetooth: hci3: command tx timeout [ 530.985364][T11476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.806196][T11476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.836040][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.972189][T11476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.752301][ T5783] Bluetooth: hci3: command tx timeout [ 533.191143][T11476] hsr_slave_0: entered promiscuous mode [ 533.272806][T11476] hsr_slave_1: entered promiscuous mode [ 533.289413][T11476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.352157][T11476] Cannot create hsr debugfs directory [ 533.444671][ T4327] hsr_slave_0: left promiscuous mode [ 533.456619][ T4327] hsr_slave_1: left promiscuous mode [ 533.476680][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.496754][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.533371][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.548922][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.698912][ T4327] bridge_slave_1: left allmulticast mode [ 533.781937][ T4327] bridge_slave_1: left promiscuous mode [ 534.101779][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.277346][ T4327] bridge_slave_0: left allmulticast mode [ 534.289981][ T4327] bridge_slave_0: left promiscuous mode [ 534.297309][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.356083][ T4327] veth1_macvtap: left promiscuous mode [ 534.363564][ T4327] veth0_macvtap: left promiscuous mode [ 534.369373][ T4327] veth1_vlan: left promiscuous mode [ 534.376261][ T4327] veth0_vlan: left promiscuous mode [ 534.699106][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801eead800: rx timeout, send abort [ 534.712112][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eead800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 534.832135][ T5783] Bluetooth: hci3: command tx timeout [ 535.697885][T11583] binder: BINDER_SET_CONTEXT_MGR already set [ 535.716303][T11583] binder: 11582:11583 ioctl 4018620d 200000004a80 returned -16 [ 536.012274][ T5816] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 536.214820][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 536.225516][ T5816] usb 4-1: not running at top speed; connect to a high speed hub [ 536.243957][ T5816] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 536.275149][ T5816] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 536.285011][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.294462][ T5816] usb 4-1: Product: syz [ 536.303433][ T5816] usb 4-1: Manufacturer: syz [ 536.309809][ T5816] usb 4-1: SerialNumber: syz [ 536.833652][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 536.948934][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 537.041288][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.077407][ T5816] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 537.088052][ T5816] usb 4-1: USB disconnect, device number 31 [ 537.146352][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.371855][ T4327] bond0 (unregistering): Released all slaves [ 542.923076][ T5880] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 543.134423][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.164756][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 543.189581][T11476] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.195654][ T5880] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 543.219559][ T5880] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 543.241573][T11476] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.248433][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.248463][ T5880] usb 4-1: Product: syz [ 543.248479][ T5880] usb 4-1: Manufacturer: syz [ 543.248495][ T5880] usb 4-1: SerialNumber: syz [ 543.371542][T11476] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.405241][T11476] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.482407][ T5880] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 543.523976][ T5880] usb 4-1: USB disconnect, device number 32 [ 543.673290][T11476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.714764][T11476] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.755556][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.762831][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.774868][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.782273][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.297381][T11476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.803843][T11476] veth0_vlan: entered promiscuous mode [ 545.938185][T11476] veth1_vlan: entered promiscuous mode [ 546.117247][T11476] veth0_macvtap: entered promiscuous mode [ 546.165928][T11476] veth1_macvtap: entered promiscuous mode [ 546.255429][T11476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.362162][T11476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.445793][T11476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.504909][T11476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.579655][T11476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.937400][T11476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.992537][T11476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.022071][T11476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.060966][T11476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.098815][T11476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.168393][T11476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.195576][T11476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.222241][T11476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.231125][T11476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.487580][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.526801][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.648841][ T8836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.673678][ T8836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.132162][ T5838] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 551.344555][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 551.378750][ T5838] usb 3-1: not running at top speed; connect to a high speed hub [ 551.428727][ T5838] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 551.490452][ T5838] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 551.519851][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.548704][ T5838] usb 3-1: Product: syz [ 551.558841][ T5838] usb 3-1: Manufacturer: syz [ 551.574445][ T5838] usb 3-1: SerialNumber: syz [ 551.825449][ T5838] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 551.850928][ T5838] usb 3-1: USB disconnect, device number 28 [ 556.509892][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f32c400: rx timeout, send abort [ 556.522688][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f32c400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 557.385688][ T5838] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 557.690671][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.806481][ T5838] usb 2-1: not running at top speed; connect to a high speed hub [ 557.858020][ T5838] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 557.950267][ T5838] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 557.990787][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.023331][ T5838] usb 2-1: Product: syz [ 558.027692][ T5838] usb 2-1: Manufacturer: syz [ 558.062151][ T5838] usb 2-1: SerialNumber: syz [ 558.352731][ T5838] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 558.390927][ T5838] usb 2-1: USB disconnect, device number 7 [ 558.582769][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 240 seconds [ 558.595210][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 240 seconds [ 558.607865][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 240 seconds [ 558.620199][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 240 seconds [ 561.065204][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ee64000: rx timeout, send abort [ 561.082143][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ee64000: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 563.559083][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.566755][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.022282][ T5838] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 564.297665][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 564.308953][ T5838] usb 3-1: not running at top speed; connect to a high speed hub [ 564.330865][ T5838] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 564.353819][ T5838] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 564.374493][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.421348][ T5838] usb 3-1: Product: syz [ 564.442099][ T5838] usb 3-1: Manufacturer: syz [ 564.447283][ T5838] usb 3-1: SerialNumber: syz [ 564.844233][ T5838] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 564.860314][ T5838] usb 3-1: USB disconnect, device number 29 [ 565.560623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801d3b4800: rx timeout, send abort [ 565.572179][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d3b4800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 568.388816][ T5838] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 568.620015][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.408895][ T5838] usb 2-1: not running at top speed; connect to a high speed hub [ 570.515325][ T5838] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 570.562200][ T5838] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 570.688047][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.696748][ T5838] usb 2-1: Product: syz [ 570.701359][ T5838] usb 2-1: Manufacturer: syz [ 570.706759][ T5838] usb 2-1: SerialNumber: syz [ 570.934054][ T5838] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 570.977777][ T5838] usb 2-1: USB disconnect, device number 8 [ 572.705684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3ab800: rx timeout, send abort [ 572.722094][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801d3ab800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 575.692168][ T5838] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 575.958484][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 576.012794][ T5838] usb 4-1: not running at top speed; connect to a high speed hub [ 576.170409][ T5838] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 576.329400][ T5838] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 576.451006][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.412136][ T5838] usb 4-1: Product: syz [ 577.416407][ T5838] usb 4-1: Manufacturer: syz [ 577.421040][ T5838] usb 4-1: SerialNumber: syz [ 577.771317][ T5838] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 577.803098][ T5838] usb 4-1: USB disconnect, device number 33 [ 578.790137][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c9f9400: rx timeout, send abort [ 578.802095][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c9f9400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 583.242287][ T5819] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 583.464155][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 583.482853][ T5819] usb 1-1: not running at top speed; connect to a high speed hub [ 583.832457][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c1cfc00: rx timeout, send abort [ 583.840885][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c1cfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 585.070423][ T5819] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 585.287240][ T5819] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 585.814777][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.852113][ T5819] usb 1-1: Product: syz [ 585.856379][ T5819] usb 1-1: Manufacturer: syz [ 585.861178][ T5819] usb 1-1: SerialNumber: syz [ 585.910147][ T5819] usb 1-1: can't set config #251, error -71 [ 585.946234][ T5819] usb 1-1: USB disconnect, device number 24 [ 588.626541][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030bf1c00: rx timeout, send abort [ 588.642114][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030bf1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 589.153827][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 270 seconds [ 589.164979][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 270 seconds [ 589.176364][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 270 seconds [ 589.187947][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 270 seconds [ 590.322149][ T5838] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 590.530962][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 590.564482][ T5838] usb 4-1: not running at top speed; connect to a high speed hub [ 590.587087][ T5838] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 590.639796][ T5838] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 590.685865][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.705778][ T5838] usb 4-1: Product: syz [ 590.722669][ T5838] usb 4-1: Manufacturer: syz [ 590.736709][ T5838] usb 4-1: SerialNumber: syz [ 590.989604][ T5838] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 591.024237][ T5838] usb 4-1: USB disconnect, device number 34 [ 593.723317][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c416400: rx timeout, send abort [ 593.731796][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c416400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 596.103031][ T5838] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 596.304770][ T5838] usb 1-1: unable to get BOS descriptor or descriptor too short [ 596.328833][ T5838] usb 1-1: not running at top speed; connect to a high speed hub [ 596.379480][ T5838] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 596.401636][ T5838] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 596.420531][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.436950][ T5838] usb 1-1: Product: syz [ 596.453587][ T5838] usb 1-1: Manufacturer: syz [ 596.458864][ T5838] usb 1-1: SerialNumber: syz [ 596.756033][ T5838] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 596.787079][ T5838] usb 1-1: USB disconnect, device number 25 [ 602.622279][ T5819] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 602.814410][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 602.845524][ T5819] usb 3-1: not running at top speed; connect to a high speed hub [ 602.880177][ T5819] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 602.910463][ T5819] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 602.930072][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.962187][ T5819] usb 3-1: Product: syz [ 602.966434][ T5819] usb 3-1: Manufacturer: syz [ 602.983126][ T5819] usb 3-1: SerialNumber: syz [ 603.373576][ T5819] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 603.390617][ T5819] usb 3-1: USB disconnect, device number 30 [ 603.741094][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803177e000: rx timeout, send abort [ 603.750397][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803177e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 606.627279][T12214] binder_alloc: 12213: binder_alloc_buf, no vma [ 606.922578][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 607.165886][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 607.294519][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 607.399425][ T9] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 607.571568][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 607.733063][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.776581][ T9] usb 1-1: Product: syz [ 607.809511][ T9] usb 1-1: Manufacturer: syz [ 608.096446][ T9] usb 1-1: SerialNumber: syz [ 609.820978][ T9] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 609.851888][ T9] usb 1-1: USB disconnect, device number 26 [ 611.441907][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805be2d800: rx timeout, send abort [ 611.450921][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805be2d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 612.937566][T12256] binder_alloc: 12255: binder_alloc_buf, no vma [ 613.242306][ T28] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 613.460090][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.483388][ T28] usb 4-1: not running at top speed; connect to a high speed hub [ 613.515707][ T28] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 613.559608][ T28] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 613.599543][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.640145][ T28] usb 4-1: Product: syz [ 613.656310][ T28] usb 4-1: Manufacturer: syz [ 613.665359][ T28] usb 4-1: SerialNumber: syz [ 613.909086][ T28] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 613.933099][ T28] usb 4-1: USB disconnect, device number 35 [ 616.104909][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030861400: rx timeout, send abort [ 616.122136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030861400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 616.706728][T12291] binder_alloc: 12290: binder_alloc_buf, no vma [ 617.032377][ T5816] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 617.375444][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 617.392610][ T5816] usb 2-1: not running at top speed; connect to a high speed hub [ 617.430432][ T5816] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 617.484465][ T5816] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 617.523344][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.575605][ T5816] usb 2-1: Product: syz [ 617.580033][ T5816] usb 2-1: Manufacturer: syz [ 617.606500][ T5816] usb 2-1: SerialNumber: syz [ 617.872477][ T5816] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 617.922170][ T5816] usb 2-1: USB disconnect, device number 9 [ 619.232245][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 300 seconds [ 619.243652][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 300 seconds [ 619.255065][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 300 seconds [ 619.266591][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 300 seconds [ 619.975115][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c0de000: rx timeout, send abort [ 619.992127][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c0de000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 623.392895][ T5816] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 623.549993][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cba8800: rx timeout, send abort [ 623.562142][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cba8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 623.723960][ T5816] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.742238][ T5816] usb 4-1: not running at top speed; connect to a high speed hub [ 623.761933][ T5816] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 623.782246][ T5816] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 623.798284][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.820976][ T5816] usb 4-1: Product: syz [ 623.832335][ T5816] usb 4-1: Manufacturer: syz [ 623.837092][ T5816] usb 4-1: SerialNumber: syz [ 624.089265][ T5816] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 624.128724][ T5816] usb 4-1: USB disconnect, device number 36 [ 624.997449][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.004137][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.008143][T11480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.032431][T11480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.062320][T11480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.081475][T11480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.092966][T11480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 626.100286][T11480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.249591][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.399547][T12379] lo speed is unknown, defaulting to 1000 [ 626.493684][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.650482][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.840966][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.447117][T12379] chnl_net:caif_netlink_parms(): no params data found [ 628.274973][ T5783] Bluetooth: hci0: command tx timeout [ 628.662525][ T11] bond1: (slave ip6erspan0): Releasing active interface [ 629.121502][T12379] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.168387][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.212338][T12379] bridge_slave_0: entered allmulticast mode [ 629.247200][T12379] bridge_slave_0: entered promiscuous mode [ 629.306774][ T5819] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 629.383242][T12379] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.398558][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.423807][T12379] bridge_slave_1: entered allmulticast mode [ 629.446420][T12379] bridge_slave_1: entered promiscuous mode [ 629.566973][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 629.599161][ T5819] usb 2-1: not running at top speed; connect to a high speed hub [ 629.639700][ T5819] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 629.715830][ T5819] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 629.793315][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.801490][ T5819] usb 2-1: Product: syz [ 629.880670][ T5819] usb 2-1: Manufacturer: syz [ 629.890854][ T5819] usb 2-1: SerialNumber: syz [ 630.101090][T12379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.149753][T12379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.180136][ T5819] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 630.234183][ T5819] usb 2-1: USB disconnect, device number 10 [ 630.352224][ T5783] Bluetooth: hci0: command tx timeout [ 630.481441][T12379] team0: Port device team_slave_0 added [ 630.669929][T12379] team0: Port device team_slave_1 added [ 631.358113][T12379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.389743][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.488505][T12379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.644100][T12379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.651127][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.784948][T12379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.442084][ T5783] Bluetooth: hci0: command tx timeout [ 632.563946][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803012ac00: rx timeout, send abort [ 632.572664][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803012ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 632.817173][T12379] hsr_slave_0: entered promiscuous mode [ 632.952927][T12379] hsr_slave_1: entered promiscuous mode [ 633.002128][T12379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.014844][T12379] Cannot create hsr debugfs directory [ 634.191648][ T11] hsr_slave_0: left promiscuous mode [ 634.236889][ T11] hsr_slave_1: left promiscuous mode [ 634.275988][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.322119][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.346285][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.383570][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.428983][ T11] bridge_slave_1: left allmulticast mode [ 634.450843][ T11] bridge_slave_1: left promiscuous mode [ 634.481585][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.522218][ T5783] Bluetooth: hci0: command tx timeout [ 634.542087][ T28] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 634.558384][ T11] bridge_slave_0: left allmulticast mode [ 634.577944][ T11] bridge_slave_0: left promiscuous mode [ 634.590505][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.770301][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.790919][ T11] team_slave_0: left promiscuous mode [ 634.797035][ T11] team_slave_1: left promiscuous mode [ 634.799351][ T28] usb 1-1: not running at top speed; connect to a high speed hub [ 634.859609][ T11] veth1_macvtap: left promiscuous mode [ 634.887560][ T11] veth0_macvtap: left promiscuous mode [ 634.905152][ T11] veth1_vlan: left promiscuous mode [ 634.917403][ T11] veth0_vlan: left promiscuous mode [ 634.922132][ T28] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 634.965391][ T28] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 635.009099][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.021325][ T28] usb 1-1: Product: syz [ 635.028075][ T28] usb 1-1: Manufacturer: syz [ 635.035885][ T28] usb 1-1: SerialNumber: syz [ 635.319267][ T28] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 635.372760][ T28] usb 1-1: USB disconnect, device number 27 [ 636.525163][ T11] bond1 (unregistering): Released all slaves [ 638.891114][ T5139] udevd[5139]: worker [5787] /devices/virtual/block/nbd0 timeout; kill it [ 638.908838][ T5139] udevd[5139]: seq 12809 '/devices/virtual/block/nbd0' killed [ 639.380523][ T11] team0 (unregistering): Port device team_slave_1 removed [ 639.601243][ T11] team0 (unregistering): Port device team_slave_0 removed [ 639.864166][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.058931][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.326874][ T11] bond0 (unregistering): Released all slaves [ 642.166399][T12513] binder: BINDER_SET_CONTEXT_MGR already set [ 642.202774][T12513] binder: 12512:12513 ioctl 4018620d 200000004a80 returned -16 [ 642.502172][ T28] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 642.711356][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 642.738611][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 642.759919][ T28] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 642.788403][ T28] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 642.809645][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.826850][ T11] IPVS: stop unused estimator thread 0... [ 642.828482][ T28] usb 2-1: Product: syz [ 642.842226][ T28] usb 2-1: Manufacturer: syz [ 642.847200][ T28] usb 2-1: SerialNumber: syz [ 643.100938][ T28] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 643.130419][ T28] usb 2-1: USB disconnect, device number 11 [ 643.289496][T12379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 643.302683][T12379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 643.315224][T12379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 643.417497][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026220800: rx timeout, send abort [ 643.432190][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026220800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 643.536865][T12379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 644.117316][T12379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.183294][T12379] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.221292][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.228501][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.412723][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.419999][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.771377][T12379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.186256][T12379] veth0_vlan: entered promiscuous mode [ 646.281428][T12379] veth1_vlan: entered promiscuous mode [ 646.496424][T12379] veth0_macvtap: entered promiscuous mode [ 646.538247][T12379] veth1_macvtap: entered promiscuous mode [ 646.621654][T12379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.671044][T12379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.720597][T12379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.742126][T12379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.785101][T12379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.820530][T12578] binder: BINDER_SET_CONTEXT_MGR already set [ 646.833972][T12379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.851004][T12578] binder: 12577:12578 ioctl 4018620d 200000004a80 returned -16 [ 646.861154][T12379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.887457][T12379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.902312][T12379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.923929][T12379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.953770][T12379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.968662][T12379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.991883][T12379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.019628][T12379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.162531][ T28] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 647.286135][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.342139][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.496942][ T28] usb 1-1: unable to get BOS descriptor or descriptor too short [ 647.530703][ T28] usb 1-1: not running at top speed; connect to a high speed hub [ 647.565477][ T28] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 647.588855][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.607439][ T28] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 647.629775][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.650390][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.655270][ T28] usb 1-1: Product: syz [ 647.662548][ T28] usb 1-1: Manufacturer: syz [ 647.667196][ T28] usb 1-1: SerialNumber: syz [ 647.886902][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802286bc00: rx timeout, send abort [ 647.895595][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802286bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 647.935951][ T28] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 647.958348][ T28] usb 1-1: USB disconnect, device number 28 [ 649.312383][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 330 seconds [ 649.323637][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 330 seconds [ 649.334986][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 330 seconds [ 649.346493][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 330 seconds [ 652.271192][T12648] binder: BINDER_SET_CONTEXT_MGR already set [ 652.287835][T12648] binder: 12647:12648 ioctl 4018620d 200000004a80 returned -16 [ 652.673665][T11480] Bluetooth: hci3: command 0x0406 tx timeout [ 652.722236][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 652.965765][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 653.064089][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 653.126478][ T9] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 653.219651][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 653.351457][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.489466][ T9] usb 4-1: Product: syz [ 653.600357][ T9] usb 4-1: Manufacturer: syz [ 653.775344][ T9] usb 4-1: SerialNumber: syz [ 654.356691][ T9] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 654.576327][ T9] usb 4-1: USB disconnect, device number 37 [ 656.996684][T12719] binder: BINDER_SET_CONTEXT_MGR already set [ 657.022054][T12719] binder: 12718:12719 ioctl 4018620d 200000004a80 returned -16 [ 658.131221][ T5818] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 658.442935][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 658.504808][ T5818] usb 2-1: not running at top speed; connect to a high speed hub [ 658.544182][ T5818] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 658.587893][ T5818] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 658.622896][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.678324][ T5818] usb 2-1: Product: syz [ 658.712121][ T5818] usb 2-1: Manufacturer: syz [ 658.777261][ T5818] usb 2-1: SerialNumber: syz [ 659.044961][ T5818] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 659.107568][ T5818] usb 2-1: USB disconnect, device number 12 [ 661.230051][T12761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.272132][ T9292] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 661.500564][ T9292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 661.510222][ T9292] usb 3-1: not running at top speed; connect to a high speed hub [ 661.533454][ T5818] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 661.553653][ T9292] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 661.573864][ T9292] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 661.594617][ T9292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.605013][ T9292] usb 3-1: Product: syz [ 661.609503][ T9292] usb 3-1: Manufacturer: syz [ 661.622100][ T9292] usb 3-1: SerialNumber: syz [ 661.744794][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 661.769673][ T5818] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.798356][ T5818] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.818238][ T5818] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 661.875658][ T5818] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 661.897292][ T9292] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 661.912955][ T5818] usb 2-1: Product: syz [ 661.941670][ T5818] usb 2-1: Manufacturer: syz [ 661.949434][ T9292] usb 3-1: USB disconnect, device number 31 [ 661.998352][ T5818] hub 2-1:4.0: USB hub found [ 662.208611][ T5818] hub 2-1:4.0: 2 ports detected [ 662.262899][T12771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2452'. [ 662.431014][ T5818] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 662.507551][ T5818] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 662.607533][ T5818] usb 2-1: USB disconnect, device number 13 [ 662.863571][T12775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2454'. [ 663.372177][ T5818] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 663.609251][ T5818] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 663.631644][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.665905][ T5818] usb 2-1: Product: syz [ 663.675538][ T5818] usb 2-1: Manufacturer: syz [ 663.694393][ T5818] usb 2-1: SerialNumber: syz [ 663.725736][ T5818] usb 2-1: config 0 descriptor?? [ 663.746528][ T5818] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 663.992084][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 664.410693][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 664.419486][ T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 664.438660][ T9] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 664.449819][ T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 664.467184][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 664.482052][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.494671][ T9] usb 1-1: Product: syz [ 664.500205][ T9] usb 1-1: Manufacturer: syz [ 664.521733][ T9] usb 1-1: SerialNumber: syz [ 664.548317][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 664.562570][ T9] imon 1-1:155.0: unable to initialize intf0, err -19 [ 664.569717][ T9] imon:imon_probe: failed to initialize context! [ 664.579924][ T9] imon 1-1:155.0: unable to register, err -19 [ 664.644170][ T5818] gspca_stk1135: reg_w 0x5 err -71 [ 664.656630][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 664.694502][ T5818] gspca_stk1135: Sensor write failed [ 664.699871][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 664.772050][ T5818] gspca_stk1135: Sensor write failed [ 664.788139][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 664.807574][ T5818] gspca_stk1135: Sensor read failed [ 664.829496][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 665.625415][ T5818] gspca_stk1135: Sensor read failed [ 665.637269][ T5818] gspca_stk1135: Detected sensor type unknown (0x0) [ 665.652052][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 665.660341][ T5818] gspca_stk1135: Sensor read failed [ 665.690745][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 665.700235][ T5818] gspca_stk1135: Sensor read failed [ 665.714477][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 665.721115][ T5818] gspca_stk1135: Sensor write failed [ 665.727082][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 665.734093][ T5818] gspca_stk1135: Sensor write failed [ 665.739904][ T5818] stk1135: probe of 2-1:0.0 failed with error -71 [ 665.787813][ T5818] usb 2-1: USB disconnect, device number 14 [ 665.803751][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021492400: rx timeout, send abort [ 665.812423][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021492400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 666.103255][ T9] usb 1-1: USB disconnect, device number 29 [ 666.223555][T12801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 666.342071][ T28] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 666.544714][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 666.565201][ T28] usb 4-1: not running at top speed; connect to a high speed hub [ 666.588226][ T28] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 666.612739][ T28] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 666.632108][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.650488][ T28] usb 4-1: Product: syz [ 666.660614][ T28] usb 4-1: Manufacturer: syz [ 666.676499][ T28] usb 4-1: SerialNumber: syz [ 666.938736][ T28] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 666.976434][ T28] usb 4-1: USB disconnect, device number 38 [ 669.249589][T11480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.279413][T11480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.291898][T11480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.303014][T11480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.312767][T11480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 669.320295][T11480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.388453][T12841] lo speed is unknown, defaulting to 1000 [ 670.445105][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 670.489850][T12853] binder: BINDER_SET_CONTEXT_MGR already set [ 670.517263][T12853] binder: 12852:12853 ioctl 4018620d 200000004a80 returned -16 [ 671.093710][T12844] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 671.205002][ T28] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 671.449840][ T5783] Bluetooth: hci2: command tx timeout [ 671.605407][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 671.623666][ T28] usb 3-1: not running at top speed; connect to a high speed hub [ 671.708480][ T28] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 671.722626][ T5783] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 671.733825][ T5783] Bluetooth: hci0: Injecting HCI hardware error event [ 671.743780][ T5783] Bluetooth: hci0: hardware error 0x00 [ 671.793669][ T28] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 671.819108][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.844060][ T28] usb 3-1: Product: syz [ 671.848329][ T28] usb 3-1: Manufacturer: syz [ 671.870233][ T28] usb 3-1: SerialNumber: syz [ 672.105390][ T28] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 672.132354][ T28] usb 3-1: USB disconnect, device number 32 [ 672.231903][T12875] binder: 12871:12875 ioctl c0306201 2000000003c0 returned -22 [ 672.323565][T12841] chnl_net:caif_netlink_parms(): no params data found [ 672.611003][T12886] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 673.110137][T12841] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.161815][T12841] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.188838][T12841] bridge_slave_0: entered allmulticast mode [ 673.223371][T12841] bridge_slave_0: entered promiscuous mode [ 673.466467][T12841] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.529605][T12878] Bluetooth: hci2: command tx timeout [ 673.595862][T12841] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.640927][T12841] bridge_slave_1: entered allmulticast mode [ 674.314252][ T5783] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 674.353906][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 674.360244][T12841] bridge_slave_1: entered promiscuous mode [ 674.714592][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.795839][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.303379][ T4338] hsr_slave_0: left promiscuous mode [ 675.318189][ T4338] hsr_slave_1: left promiscuous mode [ 675.540184][ T5818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 675.572100][T11480] Bluetooth: hci2: command tx timeout [ 675.633173][T12923] binder: BINDER_SET_CONTEXT_MGR already set [ 675.639731][T12923] binder: 12922:12923 ioctl 4018620d 200000004a80 returned -16 [ 675.825608][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 675.854663][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.870384][ T5818] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.895030][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.928705][ T5818] usb 4-1: config 0 descriptor?? [ 675.958016][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 675.962196][ T5819] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 676.158868][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 676.180740][ T5819] usb 3-1: not running at top speed; connect to a high speed hub [ 676.225309][ T5819] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 676.260528][ T5819] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 676.282036][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.290726][ T5819] usb 3-1: Product: syz [ 676.302449][ T5819] usb 3-1: Manufacturer: syz [ 676.307324][ T5819] usb 3-1: SerialNumber: syz [ 676.562480][ T5819] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 676.592387][ T5819] usb 3-1: USB disconnect, device number 33 [ 676.806703][T12948] x_tables: duplicate underflow at hook 4 [ 677.632331][T11480] Bluetooth: hci2: command tx timeout [ 677.874097][ T4338] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 678.076173][ T4338] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 678.416591][T12862] usb 4-1: USB disconnect, device number 39 [ 678.511606][ T4338] bond0 (unregistering): Released all slaves [ 678.903750][T12862] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 678.934550][T12841] team0: Port device team_slave_0 added [ 678.964909][T12841] team0: Port device team_slave_1 added [ 679.030756][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.047163][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.117735][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.139320][T12862] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 679.160808][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.162272][T12862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.178248][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.191987][T12862] usb 4-1: Product: syz [ 679.220484][T12862] usb 4-1: Manufacturer: syz [ 679.231215][T12862] usb 4-1: SerialNumber: syz [ 679.234256][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.393936][T12841] hsr_slave_0: entered promiscuous mode [ 679.400982][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 360 seconds [ 679.414844][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 360 seconds [ 679.426433][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 360 seconds [ 679.438425][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 360 seconds [ 679.453758][T12841] hsr_slave_1: entered promiscuous mode [ 679.717087][ T4338] IPVS: stop unused estimator thread 0... [ 679.747996][T12862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 679.941469][T12978] binder: BINDER_SET_CONTEXT_MGR already set [ 679.948076][T12978] binder: 12977:12978 ioctl 4018620d 200000004a80 returned -16 [ 680.252084][ T28] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 680.443817][T12841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 680.455718][T12841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.475414][T12841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.493384][T12841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.535268][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.563207][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 680.595811][ T28] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 680.669413][ T28] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 680.708507][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.742592][ T28] usb 2-1: Product: syz [ 680.810168][ T28] usb 2-1: Manufacturer: syz [ 680.822246][ T28] usb 2-1: SerialNumber: syz [ 680.836812][T12841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.919154][T12841] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.941649][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.949211][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.041272][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.048795][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.097391][ T28] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 681.125160][ T28] usb 2-1: USB disconnect, device number 15 [ 681.213752][T12862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 681.261861][T12862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 681.305837][T12862] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 681.343848][T12862] lan78xx: probe of 4-1:1.0 failed with error -71 [ 681.412072][T12862] usb 4-1: USB disconnect, device number 40 [ 682.135400][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.504870][T12841] veth0_vlan: entered promiscuous mode [ 682.648576][T12841] veth1_vlan: entered promiscuous mode [ 682.996303][T12841] veth0_macvtap: entered promiscuous mode [ 683.036063][T13021] tipc: Started in network mode [ 683.041072][T13021] tipc: Node identity ac14140f, cluster identity 4711 [ 683.090999][T13021] tipc: New replicast peer: 255.255.255.255 [ 683.111753][T13021] tipc: Enabled bearer , priority 10 [ 683.150334][T12841] veth1_macvtap: entered promiscuous mode [ 683.348001][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.399501][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.432809][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.500638][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.521299][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.587412][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.653880][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.720345][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.810866][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.861869][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.901987][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.952151][T12841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.968780][T13003] syz.1.2505 (13003): drop_caches: 2 [ 684.002042][T12841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.083583][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.124010][T12862] tipc: Node number set to 2886997007 [ 684.166370][T12841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.212115][T12841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.252206][T12841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.292173][T12841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.587284][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.619622][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.721833][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.736470][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.789298][ T5819] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 686.019452][ T5819] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 686.069465][ T5819] usb 3-1: config 0 has no interface number 0 [ 686.089765][ T5819] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 686.111898][ T5819] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 686.133626][ T5819] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 686.179701][ T5819] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.221605][ T5819] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 686.251644][ T5880] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 686.260101][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.289814][ T5819] usb 3-1: config 0 descriptor?? [ 686.300664][T13042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 686.332381][T13042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 686.364631][ T5819] ldusb 3-1:0.55: Interrupt in endpoint not found [ 686.439372][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.446091][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.459220][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 686.468714][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 686.483632][ T5880] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 686.505206][ T5880] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 686.522332][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.531302][ T5880] usb 4-1: Product: syz [ 686.541453][ T5880] usb 4-1: Manufacturer: syz [ 686.548406][ T5880] usb 4-1: SerialNumber: syz [ 686.601118][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2517'. [ 686.638775][ T967] usb 3-1: USB disconnect, device number 34 [ 686.793972][ T5880] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 686.841423][ T5880] usb 4-1: USB disconnect, device number 41 [ 688.354855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e986000: rx timeout, send abort [ 688.363863][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e986000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 689.368891][T13122] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 689.435309][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.461160][T13122] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 690.883189][T12862] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 691.186015][T12862] usb 2-1: unable to get BOS descriptor or descriptor too short [ 691.213555][T12862] usb 2-1: not running at top speed; connect to a high speed hub [ 691.253121][T12862] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 691.280941][T12862] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 691.322209][T12862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.331892][T12862] usb 2-1: Product: syz [ 691.336796][T12862] usb 2-1: Manufacturer: syz [ 691.342383][T12862] usb 2-1: SerialNumber: syz [ 692.527063][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a30d800: rx timeout, send abort [ 692.542113][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a30d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 692.817594][T12862] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 692.834998][T12862] usb 2-1: USB disconnect, device number 16 [ 693.527724][ T27] audit: type=1326 audit(2000000365.660:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 693.574460][ T27] audit: type=1326 audit(2000000365.660:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 693.725609][T12862] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 693.860766][ T27] audit: type=1326 audit(2000000365.690:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 693.962253][ T27] audit: type=1326 audit(2000000365.690:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 694.024778][T12862] usb 2-1: Using ep0 maxpacket: 16 [ 694.034319][T12862] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 694.049395][ T27] audit: type=1326 audit(2000000365.690:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 694.095820][T12862] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 694.116368][T12862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.131227][T12862] usb 2-1: Product: syz [ 694.136624][ T27] audit: type=1326 audit(2000000365.690:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 694.160629][T12862] usb 2-1: Manufacturer: syz [ 694.168677][T12862] usb 2-1: SerialNumber: syz [ 694.175519][ T27] audit: type=1326 audit(2000000365.690:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 694.213770][ T27] audit: type=1326 audit(2000000365.690:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 694.248297][T12862] usb 2-1: config 0 descriptor?? [ 694.296395][ T27] audit: type=1326 audit(2000000365.690:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 694.384776][ T27] audit: type=1326 audit(2000000365.690:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3d99c819 code=0x7ffc0000 [ 695.492534][T13184] netlink: 'syz.3.2541': attribute type 10 has an invalid length. [ 697.454362][ T967] usb 2-1: USB disconnect, device number 17 [ 697.982390][ T967] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 698.176380][ T967] usb 2-1: config 1 interface 0 has no altsetting 0 [ 698.192316][ T967] usb 2-1: string descriptor 0 read error: -22 [ 698.205885][ T967] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 698.216984][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.675605][ T967] greenasia 0003:0E8F:0012.0011: unknown main item tag 0x0 [ 698.696709][ T967] greenasia 0003:0E8F:0012.0011: unknown main item tag 0x5 [ 698.722053][ T967] greenasia 0003:0E8F:0012.0011: collection stack underflow [ 698.729639][ T967] greenasia 0003:0E8F:0012.0011: item 0 4 0 12 parsing failed [ 698.745091][ T967] greenasia 0003:0E8F:0012.0011: parse failed [ 698.751634][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d2d4800: rx timeout, send abort [ 698.761002][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d2d4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 698.800510][ T967] greenasia: probe of 0003:0E8F:0012.0011 failed with error -22 [ 698.889645][ T967] usb 2-1: USB disconnect, device number 18 [ 701.243427][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.263770][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.271477][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 701.292948][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 701.302596][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 701.310035][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 701.455958][T13223] lo speed is unknown, defaulting to 1000 [ 702.314480][T13223] chnl_net:caif_netlink_parms(): no params data found [ 702.538083][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.547611][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.560344][T13223] bridge_slave_0: entered allmulticast mode [ 702.578876][T13223] bridge_slave_0: entered promiscuous mode [ 702.590105][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.609536][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.617118][T13223] bridge_slave_1: entered allmulticast mode [ 702.625495][T13223] bridge_slave_1: entered promiscuous mode [ 702.665861][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.679754][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.737939][T13223] team0: Port device team_slave_0 added [ 702.754557][T13223] team0: Port device team_slave_1 added [ 702.809336][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.817022][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.852731][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.866861][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.874899][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.903767][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.987880][T13223] hsr_slave_0: entered promiscuous mode [ 703.017105][T13223] hsr_slave_1: entered promiscuous mode [ 703.033571][T13223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.048995][T13223] Cannot create hsr debugfs directory [ 703.378088][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c9fa400: rx timeout, send abort [ 703.389947][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c9fa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 704.152112][ T5783] Bluetooth: hci1: command tx timeout [ 704.525964][T13223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.826768][T13223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.993689][T13223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.188201][T13265] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 705.295097][T13223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.751867][T13223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 705.804543][T13223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 705.842673][T13223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 705.884723][T13223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 706.192403][ T5783] Bluetooth: hci1: command tx timeout [ 706.326419][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.443032][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.523248][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.533563][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.724140][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.732240][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.272791][ T5783] Bluetooth: hci1: command tx timeout [ 708.335838][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2570'. [ 708.657368][T13223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.800855][T13223] veth0_vlan: entered promiscuous mode [ 708.872547][T13223] veth1_vlan: entered promiscuous mode [ 708.950083][T13223] veth0_macvtap: entered promiscuous mode [ 709.133600][T13223] veth1_macvtap: entered promiscuous mode [ 709.163641][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.187853][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.216468][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.249827][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.276042][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.306706][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.340968][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.364026][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.388446][T13223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.468180][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.473889][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 390 seconds [ 709.492201][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 390 seconds [ 709.505147][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 390 seconds [ 709.517269][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 390 seconds [ 709.545508][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.557240][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.569290][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.582947][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.627447][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.709959][T13223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.795932][T13223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.843573][T13223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.879225][T13223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.890955][T13223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.903489][T13223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.914090][T13223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.054356][T13110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.085028][T13110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.156381][ T4995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.197856][ T4995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.352742][ T5783] Bluetooth: hci1: command tx timeout [ 711.052195][ T5838] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 711.252706][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 711.260487][ T5838] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 711.260580][ T5838] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 711.260615][ T5838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 711.260642][ T5838] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 711.260664][ T5838] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.260709][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 711.260733][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.585131][ T5838] usb 4-1: usb_control_msg returned -32 [ 712.585209][ T5838] usbtmc 4-1:16.0: can't read capabilities [ 712.898260][T13310] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 712.905699][T12862] usb 4-1: USB disconnect, device number 42 [ 713.022130][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 713.218495][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x64, skipping [ 713.248613][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 713.268514][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 713.298992][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.311434][ T9] usb 1-1: Product: syz [ 713.319302][ T9] usb 1-1: Manufacturer: syz [ 713.325422][ T9] usb 1-1: SerialNumber: syz [ 713.339015][ T9] usb 1-1: config 0 descriptor?? [ 713.346548][ T9] usb 1-1: ucan: probing device on interface #0 [ 713.355490][ T9] usb 1-1: ucan: invalid EP count (0) [ 713.360906][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 713.555302][T12862] usb 1-1: USB disconnect, device number 30 [ 717.092216][ T5818] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 717.346799][ T5818] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 717.428341][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.459622][ T5818] usb 2-1: Product: syz [ 717.480653][ T5818] usb 2-1: Manufacturer: syz [ 717.490716][ T5818] usb 2-1: SerialNumber: syz [ 717.516021][ T5818] usb 2-1: config 0 descriptor?? [ 717.544526][ T5818] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 717.669558][T13401] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 717.783422][T13401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.821671][T13401] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 718.412154][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 718.642276][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 718.660322][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.684278][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 718.696485][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 718.710778][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 718.730155][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 718.740154][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.775717][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 718.814667][ T9] hub: probe of 4-1:1.0 failed with error -5 [ 718.872833][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 718.903328][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 718.928004][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 718.940367][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 718.977073][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.004559][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.192481][ T9] usb 4-1: USB disconnect, device number 43 [ 719.572162][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 719.772833][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 719.781008][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 719.794119][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 719.805828][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 719.818358][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 719.831196][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 719.844803][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 719.864547][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 719.875734][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.884705][ T9] usb 4-1: Product: syz [ 719.889793][ T9] usb 4-1: Manufacturer: syz [ 719.894692][ T9] usb 4-1: SerialNumber: syz [ 719.908094][ T9] usb 4-1: config 0 descriptor?? [ 719.925695][T13421] fuse: Bad value for 'fd' [ 719.959437][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 719.989967][ T9] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 719.990092][ C0] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 720.229455][ C0] mcba_usb 4-1:0.0 can0: format error [ 720.432045][ T9] usb 4-1: USB disconnect, device number 44 [ 720.504216][ T9] mcba_usb 4-1:0.0 can0: device disconnected [ 720.776993][ T5818] gspca_stk1135: reg_w 0x353 err -71 [ 720.795022][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 720.836689][ T5818] gspca_stk1135: Sensor write failed [ 720.862141][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 720.890017][ T5818] gspca_stk1135: Sensor write failed [ 720.912419][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 720.938350][ T5818] gspca_stk1135: Sensor read failed [ 720.955378][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 720.985904][ T5818] gspca_stk1135: Sensor read failed [ 721.002919][ T5818] gspca_stk1135: Detected sensor type unknown (0x0) [ 721.030366][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 721.072656][ T5818] gspca_stk1135: Sensor read failed [ 721.096748][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 721.122799][ T5818] gspca_stk1135: Sensor read failed [ 721.142656][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 721.158481][ T5818] gspca_stk1135: Sensor write failed [ 721.178110][ T5818] gspca_stk1135: serial bus timeout: status=0x00 [ 721.212087][ T5818] gspca_stk1135: Sensor write failed [ 721.252108][ T5818] stk1135: probe of 2-1:0.0 failed with error -71 [ 721.313893][ T5818] usb 2-1: USB disconnect, device number 19 [ 721.582569][T13452] x_tables: duplicate underflow at hook 4 [ 724.656219][T13502] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 724.738968][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.780649][T13502] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 725.172146][ T5818] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 726.852187][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 726.888837][ T5818] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 726.905895][T13517] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 726.937303][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.965017][ T5818] usb 2-1: config 0 descriptor?? [ 727.234995][ T5818] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 727.256924][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 727.288956][ T5818] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 727.322836][ T5818] usb 2-1: media controller created [ 727.369721][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.467659][ T5818] az6027: usb out operation failed. (-71) [ 727.489502][ T5818] az6027: usb out operation failed. (-71) [ 727.500726][ T5818] stb0899_attach: Driver disabled by Kconfig [ 727.514604][ T5818] az6027: no front-end attached [ 727.514604][ T5818] [ 727.542634][ T5818] az6027: usb out operation failed. (-71) [ 727.562664][ T5818] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 727.611441][ T5818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 727.637620][ T5818] dvb-usb: schedule remote query interval to 400 msecs. [ 727.655328][ T5818] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 727.712969][ T5818] usb 2-1: USB disconnect, device number 20 [ 727.817982][ T5818] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 730.224450][T13583] syzkaller0: entered promiscuous mode [ 730.230374][T13583] syzkaller0: entered allmulticast mode [ 730.238990][T13583] simple: basic_1 [ 730.243287][T13583] simple: basic_2 [ 730.247053][T13583] simple: basic_3 [ 730.250720][T13583] simple: basic_4 [ 730.254630][T13583] simple: basic_5 [ 730.258297][T13583] simple: basic_6 [ 730.262130][T13583] simple: basic_7 [ 730.265984][T13583] simple: basic_8 [ 730.269657][T13583] simple: basic_9 [ 730.273482][T13583] simple: basic_10 [ 730.277253][T13583] simple: basic_11 [ 730.281101][T13583] simple: basic_12 [ 730.285081][T13583] simple: basic_13 [ 730.289037][T13583] simple: basic_14 [ 730.292959][T13583] simple: basic_15 [ 730.296819][T13583] simple: basic_16 [ 730.300673][T13583] simple: basic_17 [ 730.304602][T13583] 0: reclassify loop, rule prio 0, protocol 800 [ 731.300029][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e647400: rx timeout, send abort [ 731.309228][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e647400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 731.477159][T13611] bond1: entered promiscuous mode [ 731.499943][T13611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.782547][ T5880] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 732.873156][T13651] random: crng reseeded on system resumption [ 732.998194][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 733.045779][ T5880] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 733.079853][ T5880] usb 1-1: config 0 has no interface number 0 [ 733.093699][ T5880] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 733.105807][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.114726][ T5880] usb 1-1: Product: syz [ 733.119016][ T5880] usb 1-1: Manufacturer: syz [ 733.123901][ T5880] usb 1-1: SerialNumber: syz [ 733.161400][ T5880] usb 1-1: config 0 descriptor?? [ 733.210141][ T5880] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 733.254044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d2c4400: rx timeout, send abort [ 733.263546][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d2c4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 733.440177][ T5880] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 733.467276][ T5880] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 734.383455][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 734.384679][T12862] usb 1-1: USB disconnect, device number 31 [ 734.407594][T12862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 734.450628][T12862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 734.544491][T12862] quatech2 1-1:0.51: device disconnected [ 735.883408][T13705] netlink: 'syz.3.2711': attribute type 10 has an invalid length. [ 736.170105][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.196152][T13705] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 736.453457][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806617cc00: rx timeout, send abort [ 736.470022][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806617cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 736.772122][ T5880] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 736.982079][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 736.997999][ T5880] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 737.022261][ T5880] usb 3-1: config 0 has no interface number 0 [ 737.059706][ T5880] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 737.144368][ T5880] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 737.212152][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.220380][ T5880] usb 3-1: Product: syz [ 737.277310][ T5880] usb 3-1: Manufacturer: syz [ 737.287672][ T5880] usb 3-1: SerialNumber: syz [ 737.381517][ T5880] usb 3-1: config 0 descriptor?? [ 737.407154][T13707] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 737.711658][T13707] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.957724][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 420 seconds [ 740.969001][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 420 seconds [ 740.988701][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 420 seconds [ 741.000347][ T5880] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 741.016942][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 420 seconds [ 741.029224][ T5880] asix: probe of 3-1:0.188 failed with error -71 [ 741.042014][ T5880] usb 3-1: USB disconnect, device number 35 [ 743.309872][T13701] Set syz1 is full, maxelem 65536 reached [ 743.621889][ T9] IPVS: starting estimator thread 0... [ 743.675775][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d1b2c00: rx timeout, send abort [ 743.684728][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d1b2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 743.732075][T13763] IPVS: using max 15 ests per chain, 36000 per kthread [ 743.834769][T13759] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 746.566823][T13778] xt_connbytes: Forcing CT accounting to be enabled [ 746.595058][T13778] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 747.240672][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2741'. [ 747.583007][T13802] netlink: 'syz.3.2743': attribute type 10 has an invalid length. [ 747.875500][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.885116][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.513546][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801eb7d000: rx timeout, send abort [ 748.522504][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801eb7d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 750.653820][T12862] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 750.934739][T12862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.007111][T12862] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 751.105049][T12862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.149717][T12862] usb 3-1: config 0 descriptor?? [ 751.414705][T12862] usbhid 3-1:0.0: can't add hid device: -71 [ 751.437304][T12862] usbhid: probe of 3-1:0.0 failed with error -71 [ 751.445448][T13825] netlink: 'syz.3.2752': attribute type 8 has an invalid length. [ 751.453909][T12862] usb 3-1: USB disconnect, device number 36 [ 752.842545][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020faa400: rx timeout, send abort [ 752.851417][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888020faa400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 753.352044][ T5880] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 753.375014][ T5818] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 753.614112][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 753.639692][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 753.679131][ T5818] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 753.748044][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.776802][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2761'. [ 753.795261][T13849] --map-set only usable from mangle table [ 753.833295][ T5818] usb 1-1: Product: syz [ 753.841990][ T5818] usb 1-1: Manufacturer: syz [ 753.847337][ T5818] usb 1-1: SerialNumber: syz [ 753.942700][ T5818] usb 1-1: config 0 descriptor?? [ 755.172030][ T5818] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 755.288079][T12862] usb 1-1: USB disconnect, device number 32 [ 755.406675][ T5818] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 755.420724][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.433483][ T5818] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 755.444119][ T5818] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 755.453543][ T5818] usb 4-1: Manufacturer: syz [ 755.471200][ T5818] usb 4-1: config 0 descriptor?? [ 755.632199][ T5818] rc_core: IR keymap rc-hauppauge not found [ 755.640972][ T5818] Registered IR keymap rc-empty [ 755.653109][ T5818] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 755.672972][ T5818] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 755.967832][ T5818] usb 4-1: USB disconnect, device number 45 [ 756.752110][ T5880] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 756.810322][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f328400: rx timeout, send abort [ 756.819439][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f328400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 756.969882][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.993288][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.011502][ T5880] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 757.030955][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.058825][ T5880] usb 1-1: config 0 descriptor?? [ 757.151073][T13890] libceph: resolve '0..' (ret=-3): failed [ 757.689851][ T5880] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 757.792120][ T5880] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 757.904912][ T5880] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0012/input/input22 [ 758.062845][ T5880] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 758.139025][ T5880] usb 1-1: USB disconnect, device number 33 [ 758.410692][T13904] fido_id[13904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 758.492031][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 758.764374][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.775697][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 758.793598][ T9] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 758.813250][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 758.827134][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.851670][ T9] usb 2-1: Product: syz [ 758.867123][ T9] usb 2-1: Manufacturer: syz [ 758.884306][ T9] usb 2-1: SerialNumber: syz [ 759.128524][ T9] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 759.198385][ T9] usb 2-1: USB disconnect, device number 21 [ 759.810846][T13925] syzkaller0: entered promiscuous mode [ 759.817949][T13925] syzkaller0: entered allmulticast mode [ 759.830208][T13927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2786'. [ 760.544828][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c801800: rx timeout, send abort [ 760.553890][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c801800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 760.983451][ T9] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 761.206594][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 761.234964][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 761.258623][ T9] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 761.325213][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 761.355696][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.387526][ T9] usb 1-1: Product: syz [ 761.401051][ T9] usb 1-1: Manufacturer: syz [ 761.419945][ T9] usb 1-1: SerialNumber: syz [ 761.684072][ T9] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 761.728274][ T9] usb 1-1: USB disconnect, device number 34 [ 761.973593][T13969] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 762.584224][T13983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'. [ 763.071270][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c06c400: rx timeout, send abort [ 763.081132][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c06c400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 763.567173][T14000] binder: BINDER_SET_CONTEXT_MGR already set [ 763.591689][T14000] binder: 13997:14000 ioctl 4018620d 200000004a80 returned -16 [ 763.914154][ T5819] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 764.130396][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 764.140846][ T5819] usb 1-1: not running at top speed; connect to a high speed hub [ 764.177644][ T5819] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 764.252638][ T5819] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 764.276106][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.305330][ T5819] usb 1-1: Product: syz [ 764.311037][ T5819] usb 1-1: Manufacturer: syz [ 764.322072][ T5819] usb 1-1: SerialNumber: syz [ 764.553699][ T5819] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 764.588943][ T5819] usb 1-1: USB disconnect, device number 35 [ 765.082649][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880638d9800: rx timeout, send abort [ 765.091281][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880638d9800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 765.464615][T14033] syzkaller0: entered promiscuous mode [ 765.470448][T14033] syzkaller0: entered allmulticast mode [ 765.702491][T14041] sg_write: data in/out 393189/56 bytes for SCSI command 0x0-- guessing data in; [ 765.702491][T14041] program syz.1.2836 not setting count and/or reply_len properly [ 766.062174][ T5818] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 766.269233][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 766.292813][ T5818] usb 3-1: not running at top speed; connect to a high speed hub [ 766.308977][ T5818] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 766.341770][ T5818] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 766.372169][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.380435][ T5818] usb 3-1: Product: syz [ 766.402616][ T5818] usb 3-1: Manufacturer: syz [ 766.407886][ T5818] usb 3-1: SerialNumber: syz [ 766.629489][T14067] syzkaller0: entered promiscuous mode [ 766.637125][T14067] syzkaller0: entered allmulticast mode [ 766.653587][ T5818] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 766.666860][ T5818] usb 3-1: USB disconnect, device number 38 [ 767.059582][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024cfa400: rx timeout, send abort [ 767.068872][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024cfa400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 767.652626][T12862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 767.862844][T12862] usb 2-1: Using ep0 maxpacket: 16 [ 767.910429][T12862] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 768.011035][T12862] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 768.051519][T12862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.074609][T12862] usb 2-1: Product: syz [ 768.090732][T12862] usb 2-1: Manufacturer: syz [ 768.110392][T12862] usb 2-1: SerialNumber: syz [ 768.164250][T12862] usb 2-1: config 0 descriptor?? [ 768.852232][T12862] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 769.035145][T12862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 769.044105][T12862] usb 4-1: not running at top speed; connect to a high speed hub [ 769.053273][T12862] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 769.067526][T12862] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 769.076921][T12862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.085104][T12862] usb 4-1: Product: syz [ 769.089321][T12862] usb 4-1: Manufacturer: syz [ 769.094466][T12862] usb 4-1: SerialNumber: syz [ 769.323764][T12862] qmi_wwan: probe of 4-1:251.0 failed with error -22 [ 769.335270][T12862] usb 4-1: USB disconnect, device number 46 [ 769.741667][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cbb7c00: rx timeout, send abort [ 769.750840][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cbb7c00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 770.442497][T12862] usb 2-1: USB disconnect, device number 22 [ 770.812077][ T967] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 771.000018][ T967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 771.032687][ T967] usb 1-1: not running at top speed; connect to a high speed hub [ 771.051162][ T967] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 771.080077][ T967] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 771.098157][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.111756][ T967] usb 1-1: Product: syz [ 771.127111][ T967] usb 1-1: Manufacturer: syz [ 771.135477][ T967] usb 1-1: SerialNumber: syz [ 771.402571][ T967] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 771.446993][ T967] usb 1-1: USB disconnect, device number 36 [ 771.552463][ T96] block nbd0: Possible stuck request ffff888021f00000: control (read@0,1024B). Runtime 450 seconds [ 771.565317][ T96] block nbd0: Possible stuck request ffff888021f00200: control (read@1024,1024B). Runtime 450 seconds [ 771.579016][ T96] block nbd0: Possible stuck request ffff888021f00400: control (read@2048,1024B). Runtime 450 seconds [ 771.592191][ T96] block nbd0: Possible stuck request ffff888021f00600: control (read@3072,1024B). Runtime 450 seconds [ 772.100411][T14196] syzkaller0: entered promiscuous mode [ 772.106846][T14196] syzkaller0: entered allmulticast mode [ 773.062139][ T5818] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 773.333848][ T5818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 773.352811][ T5818] usb 3-1: not running at top speed; connect to a high speed hub [ 773.372185][ T5818] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 773.410464][ T5818] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 773.430416][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.452365][ T5818] usb 3-1: Product: syz [ 773.456790][ T5818] usb 3-1: Manufacturer: syz [ 773.461501][ T5818] usb 3-1: SerialNumber: syz [ 773.721035][ T5818] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 773.747579][ T5818] usb 3-1: USB disconnect, device number 39 [ 773.812453][ T967] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 773.940552][T14230] syzkaller0: entered promiscuous mode [ 773.953149][T14230] syzkaller0: entered allmulticast mode [ 774.045922][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 774.082504][ T967] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 774.108982][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.137837][ T967] usb 2-1: Product: syz [ 774.143915][ T967] usb 2-1: Manufacturer: syz [ 774.148831][ T967] usb 2-1: SerialNumber: syz [ 774.170339][ T967] usb 2-1: config 0 descriptor?? [ 774.432124][ T967] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 774.504324][T14247] syz.2.2907: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 774.541273][T14247] CPU: 1 PID: 14247 Comm: syz.2.2907 Not tainted syzkaller #0 [ 774.549500][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.561702][T14247] Call Trace: [ 774.561758][T14247] [ 774.561769][T14247] dump_stack_lvl+0x18c/0x250 [ 774.561812][T14247] ? show_regs_print_info+0x20/0x20 [ 774.561843][T14247] ? load_image+0x400/0x400 [ 774.561875][T14247] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 774.561900][T14247] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 774.561925][T14247] warn_alloc+0x246/0x340 [ 774.561954][T14247] ? stack_trace_save+0xaa/0x100 [ 774.561981][T14247] ? zone_watermark_ok_safe+0x230/0x230 [ 774.562019][T14247] ? kasan_set_track+0x5f/0x70 [ 774.562038][T14247] ? kasan_set_track+0x4e/0x70 [ 774.562056][T14247] ? __kasan_kmalloc+0x8f/0xa0 [ 774.562076][T14247] ? xsk_init_queue+0xad/0x100 [ 774.562099][T14247] ? xsk_setsockopt+0x42e/0x760 [ 774.562121][T14247] ? do_sock_setsockopt+0x175/0x1a0 [ 774.562139][T14247] ? __x64_sys_setsockopt+0x182/0x200 [ 774.562161][T14247] __vmalloc_node_range+0x126/0x1330 [ 774.562218][T14247] ? free_vm_area+0x50/0x50 [ 774.562255][T14247] vmalloc_user+0x74/0x80 [ 774.562279][T14247] ? xskq_create+0xbf/0x170 [ 774.562302][T14247] xskq_create+0xbf/0x170 [ 774.562330][T14247] xsk_init_queue+0xad/0x100 [ 774.562359][T14247] xsk_setsockopt+0x42e/0x760 [ 774.562399][T14247] ? xsk_poll+0x680/0x680 [ 774.562427][T14247] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 774.562457][T14247] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 774.562483][T14247] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 774.562507][T14247] ? security_socket_setsockopt+0x7e/0xa0 [ 774.562530][T14247] ? xsk_poll+0x680/0x680 [ 774.562558][T14247] do_sock_setsockopt+0x175/0x1a0 [ 774.562577][T14247] ? __fdget+0x180/0x210 [ 774.562606][T14247] __x64_sys_setsockopt+0x182/0x200 [ 774.562631][T14247] do_syscall_64+0x55/0xa0 [ 774.562659][T14247] ? clear_bhb_loop+0x40/0x90 [ 774.562683][T14247] ? clear_bhb_loop+0x40/0x90 [ 774.562709][T14247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.562731][T14247] RIP: 0033:0x7fbf70b9c819 [ 774.562752][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.562768][T14247] RSP: 002b:00007fbf719c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 774.562794][T14247] RAX: ffffffffffffffda RBX: 00007fbf70e15fa0 RCX: 00007fbf70b9c819 [ 774.562811][T14247] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 774.562822][T14247] RBP: 00007fbf70c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 774.562835][T14247] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.562847][T14247] R13: 00007fbf70e16038 R14: 00007fbf70e15fa0 R15: 00007ffd1c5ba1c8 [ 774.562877][T14247] [ 774.622559][T14247] Mem-Info: [ 774.622577][T14247] active_anon:6739 inactive_anon:0 isolated_anon:0 [ 774.622577][T14247] active_file:17675 inactive_file:40633 isolated_file:0 [ 774.622577][T14247] unevictable:0 dirty:78 writeback:0 [ 774.622577][T14247] slab_reclaimable:10475 slab_unreclaimable:96345 [ 774.622577][T14247] mapped:25146 shmem:1373 pagetables:630 [ 774.622577][T14247] sec_pagetables:0 bounce:0 [ 774.622577][T14247] kernel_misc_reclaimable:0 [ 774.622577][T14247] free:1334159 free_pcp:14589 free_cma:0 [ 774.622635][T14247] Node 0 active_anon:25420kB inactive_anon:0kB active_file:70700kB inactive_file:162328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100584kB dirty:312kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10692kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no [ 774.622691][T14247] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 774.622739][T14247] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.622801][T14247] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 774.622850][T14247] Node 0 DMA32 free:1430656kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25380kB inactive_anon:0kB active_file:70700kB inactive_file:161508kB unevictable:0kB writepending:312kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:34088kB local_pcp:17044kB free_cma:0kB [ 774.622918][T14247] lowmem_reserve[]: 0 0 0 0 0 [ 774.622963][T14247] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 774.623017][T14247] lowmem_reserve[]: 0 0 0 0 0 [ 774.623056][T14247] Node 1 Normal free:3890620kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24256kB local_pcp:7808kB free_cma:0kB [ 774.623127][T14247] lowmem_reserve[]: 0 0 0 0 0 [ 774.623602][T14247] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 774.623827][T14247] Node 0 DMA32: 4*4kB (UME) 0*8kB 803*16kB (UME) 816*32kB (UME) 309*64kB (UME) 112*128kB (ME) 67*256kB (UM) 52*512kB (UM) 25*1024kB (ME) 15*2048kB (UM) 307*4096kB (M) = 1430656kB [ 774.627825][T14247] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 774.627962][T14247] Node 1 Normal: 239*4kB (UME) 52*8kB (UME) 30*16kB (UME) 134*32kB (UME) 29*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3890620kB [ 774.628177][T14247] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.628196][T14247] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 774.628213][T14247] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.628232][T14247] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 774.628249][T14247] 59681 total pagecache pages [ 774.628258][T14247] 0 pages in swap cache [ 774.628267][T14247] Free swap = 124668kB [ 774.628275][T14247] Total swap = 124996kB [ 774.628285][T14247] 2097051 pages RAM [ 774.628293][T14247] 0 pages HighMem/MovableOnly [ 774.628301][T14247] 416926 pages reserved [ 774.628308][T14247] 0 pages cma reserved [ 775.165867][T14261] syzkaller0: entered promiscuous mode [ 775.583797][T14261] syzkaller0: entered allmulticast mode [ 776.002197][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 776.204989][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 776.224480][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 776.244460][ T9] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 776.269765][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 776.288003][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.312433][ T9] usb 3-1: Product: syz [ 776.323577][ T9] usb 3-1: Manufacturer: syz [ 776.332378][ T9] usb 3-1: SerialNumber: syz [ 776.589203][ T9] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 776.618445][ T967] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 776.633642][ T967] usb 2-1: USB disconnect, device number 23 [ 776.651020][ T9] usb 3-1: USB disconnect, device number 40 [ 776.905162][T14294] syzkaller0: entered promiscuous mode [ 776.910978][T14294] syzkaller0: entered allmulticast mode [ 777.500559][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 777.975589][T14325] binder: 14324:14325 ioctl 4018620d 0 returned -22 [ 777.993419][T14323] syzkaller0: entered promiscuous mode [ 778.018968][T14323] syzkaller0: entered allmulticast mode [ 778.056053][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2933'. [ 778.272385][ T9292] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 778.525841][ T9292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 778.540222][ T9292] usb 3-1: not running at top speed; connect to a high speed hub [ 778.563363][ T9292] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 778.611035][ T9292] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 778.679031][ T9292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.729435][ T9292] usb 3-1: Product: syz [ 778.739328][ T9292] usb 3-1: Manufacturer: syz [ 778.749449][ T9292] usb 3-1: SerialNumber: syz [ 778.997455][ T9292] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 779.036302][ T9292] usb 3-1: USB disconnect, device number 41 [ 779.455893][T14344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2940'. [ 779.462038][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 779.692189][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 779.720331][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.745029][ T9] usb 2-1: config 0 has no interfaces? [ 779.756103][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 779.787869][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.809480][ T9] usb 2-1: Product: syz [ 779.816994][ T9] usb 2-1: Manufacturer: syz [ 779.833758][ T9] usb 2-1: SerialNumber: syz [ 779.857064][ T9] usb 2-1: config 0 descriptor?? [ 780.015029][T14355] syzkaller0: entered promiscuous mode [ 780.021200][T14355] syzkaller0: entered allmulticast mode [ 780.634681][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2949'. [ 780.732150][T12862] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 781.035721][T12862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.088347][T14369] binder: 14368:14369 ioctl 4018620d 0 returned -22 [ 781.167137][T12862] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 781.268752][T12862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 781.367533][T12862] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 781.382854][ T5819] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 781.462877][T12862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 781.478101][T12862] usb 3-1: Product: syz [ 781.482961][T12862] usb 3-1: Manufacturer: syz [ 781.487758][T12862] usb 3-1: SerialNumber: syz [ 781.500044][T12862] usb 3-1: config 0 descriptor?? [ 781.535396][T12862] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 781.550113][T12862] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 781.561404][T12862] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 781.589497][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 781.634302][ T5819] usb 1-1: not running at top speed; connect to a high speed hub [ 781.691321][ T5819] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 781.725361][ T5819] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 781.762048][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.775146][ T5819] usb 1-1: Product: syz [ 781.779617][ T5819] usb 1-1: Manufacturer: syz [ 781.800070][ T5819] usb 1-1: SerialNumber: syz [ 781.868257][T12862] usb 2-1: USB disconnect, device number 24 [ 782.048836][ T5819] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 782.067668][T14383] random: crng reseeded on system resumption [ 782.102500][ T5819] usb 1-1: USB disconnect, device number 37 [ 783.499152][ T5818] usb 3-1: USB disconnect, device number 42 [ 783.763316][T14418] binder: 14417:14418 ioctl 4018620d 0 returned -22 [ 784.088652][ T9292] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 784.294583][ T9292] usb 2-1: unable to get BOS descriptor or descriptor too short [ 784.315818][ T9292] usb 2-1: not running at top speed; connect to a high speed hub [ 784.345531][ T9292] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 784.388712][ T9292] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 784.408236][ T9292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.423188][ T9292] usb 2-1: Product: syz [ 784.432261][ T9292] usb 2-1: Manufacturer: syz [ 784.436936][ T9292] usb 2-1: SerialNumber: syz [ 784.702372][ T9292] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 784.728847][ T9292] usb 2-1: USB disconnect, device number 25 [ 784.752056][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 784.951985][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 784.968838][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 785.007200][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.019247][ T9] usb 1-1: config 0 descriptor?? [ 785.278355][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 785.335241][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 785.363243][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 785.371027][ T9] usb 1-1: media controller created [ 785.389387][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.506574][ T9] az6027: usb out operation failed. (-71) [ 785.532789][ T9] az6027: usb out operation failed. (-71) [ 785.557667][ T9] stb0899_attach: Driver disabled by Kconfig [ 785.570263][ T9] az6027: no front-end attached [ 785.570263][ T9] [ 785.590526][ T9] az6027: usb out operation failed. (-71) [ 785.609472][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 785.648303][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 785.709848][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 785.757851][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 785.815358][ T9] usb 1-1: USB disconnect, device number 38 [ 785.954982][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 786.559117][T14474] binder: 14471:14474 ioctl c0306201 0 returned -14 [ 786.872263][ T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 787.074665][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 787.092901][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 787.114300][ T9] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 787.140820][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 787.162141][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.170249][ T9] usb 3-1: Product: syz [ 787.175147][ T9] usb 3-1: Manufacturer: syz [ 787.179821][ T9] usb 3-1: SerialNumber: syz [ 787.402213][ T9] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 787.422770][ T9] usb 3-1: USB disconnect, device number 43 [ 788.005396][T14506] binder: 14505:14506 ioctl c0306201 0 returned -14 [ 788.282037][ T28] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 788.398039][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a43fc00: rx timeout, send abort [ 788.406707][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a43fc00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.539993][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 788.556175][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 788.574470][ T28] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 788.600530][ T28] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 788.622362][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.651273][ T28] usb 2-1: Product: syz [ 788.665615][ T28] usb 2-1: Manufacturer: syz [ 788.680424][ T28] usb 2-1: SerialNumber: syz [ 788.910818][ T28] qmi_wwan: probe of 2-1:251.0 failed with error -22 [ 788.955704][ T28] usb 2-1: USB disconnect, device number 26 [ 790.150820][T14543] binder: 14542:14543 ioctl c0306201 0 returned -14 [ 790.204865][T14546] syzkaller0: entered promiscuous mode [ 790.210674][T14546] syzkaller0: entered allmulticast mode [ 790.442466][T12862] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 790.642955][T12862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 790.670325][T12862] usb 1-1: not running at top speed; connect to a high speed hub [ 790.693218][T12862] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 790.707992][T12862] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 790.727564][T12862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.737843][T12862] usb 1-1: Product: syz [ 790.750660][T12862] usb 1-1: Manufacturer: syz [ 790.768026][T12862] usb 1-1: SerialNumber: syz [ 791.043650][T12862] qmi_wwan: probe of 1-1:251.0 failed with error -22 [ 791.084706][T12862] usb 1-1: USB disconnect, device number 39 [ 792.128363][T14562] syz.2.3027 (14562): drop_caches: 2 [ 792.155625][T14579] syzkaller0: entered promiscuous mode [ 792.161436][T14579] syzkaller0: entered allmulticast mode [ 792.392074][T12862] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 792.574941][T12862] usb 4-1: device descriptor read/64, error -71 [ 792.872278][T12862] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 793.042747][T12862] usb 4-1: device descriptor read/64, error -71 [ 793.102238][ T9292] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 793.172247][T12862] usb usb4-port1: attempt power cycle [ 793.329836][ T9292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 793.353734][ T9292] usb 3-1: not running at top speed; connect to a high speed hub [ 793.411200][ T9292] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 793.425348][ T9292] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 793.441825][ T9292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.450462][ T9292] usb 3-1: Product: syz [ 793.457868][ T9292] usb 3-1: Manufacturer: syz [ 793.463555][ T9292] usb 3-1: SerialNumber: syz [ 793.602209][T12862] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 793.652933][T12862] usb 4-1: device descriptor read/8, error -71 [ 793.684442][ T9292] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 793.708620][ T9292] usb 3-1: USB disconnect, device number 44 [ 793.932127][T12862] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 794.003229][T12862] usb 4-1: device descriptor read/8, error -71 [ 794.132323][T12862] usb usb4-port1: unable to enumerate USB device [ 796.032180][T11480] Bluetooth: hci2: command 0x0406 tx timeout [ 796.458846][T14607] syz.0.3047 (14607): drop_caches: 2 [ 797.542438][ T9292] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 797.699721][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3058'. [ 798.556308][ T9292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 798.572852][ T9292] usb 3-1: not running at top speed; connect to a high speed hub [ 798.632169][ T9292] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 798.655684][ T9292] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 798.678437][ T9292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.703006][ T9292] usb 3-1: Product: syz [ 798.718154][ T9292] usb 3-1: Manufacturer: syz [ 798.727819][ T9292] usb 3-1: SerialNumber: syz [ 798.960784][ T9292] qmi_wwan: probe of 3-1:251.0 failed with error -22 [ 798.990672][ T9292] usb 3-1: USB disconnect, device number 45 [ 799.380064][T14670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3067'. [ 799.714463][ T29] INFO: task udevd:5787 blocked for more than 144 seconds. [ 799.732937][ T29] Not tainted syzkaller #0 [ 799.738267][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.758328][ T29] task:udevd state:D stack:23048 pid:5787 ppid:5139 flags:0x00004006 [ 799.769801][ T29] Call Trace: [ 799.774681][ T29] [ 799.777907][ T29] __schedule+0x1553/0x45a0 [ 799.785431][ T29] ? asan.module_dtor+0x20/0x20 [ 799.790695][ T29] ? mark_lock+0x94/0x320 [ 800.474795][ T29] ? lock_chain_count+0x20/0x20 [ 800.479839][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 800.504306][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 800.510178][ T29] schedule+0xbd/0x170 [ 800.527816][ T29] io_schedule+0x80/0xd0 [ 800.537033][ T29] folio_wait_bit_common+0x714/0xfa0 [ 800.549747][ T29] ? folio_wait_bit+0x30/0x30 [ 800.573343][ T29] ? _compound_head+0x120/0x120 [ 800.585306][ T29] ? filemap_add_folio+0x192/0x3c0 [ 800.612938][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 800.655525][ T29] ? blkdev_writepage+0x30/0x30 [ 800.668827][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 800.685813][ T29] ? blkdev_writepage+0x30/0x30 [ 800.696473][ T29] read_part_sector+0xd2/0x340 [ 800.711507][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 800.736624][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 800.845543][ T29] ? put_partition+0x370/0x370 [ 800.862081][ T29] ? alloc_pages+0x4dc/0x740 [ 800.867041][ T29] bdev_disk_changed+0x740/0x1420 [ 800.892012][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 800.911285][ T29] ? iput+0x343/0x920 [ 800.927944][ T29] blkdev_get_whole+0x30d/0x390 [ 800.948197][ T29] blkdev_get_by_dev+0x279/0x600 [ 800.969483][ T29] blkdev_open+0x152/0x360 [ 800.980918][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 800.990959][ T29] do_dentry_open+0x8c6/0x1500 [ 800.997100][ T29] path_openat+0x27f1/0x3230 [ 801.001925][ T29] ? do_sys_openat2+0xda/0x1d0 [ 801.007100][ T29] ? verify_lock_unused+0x140/0x140 [ 801.017023][ T29] ? do_filp_open+0x430/0x430 [ 801.021998][ T29] ? __virt_addr_valid+0x18c/0x540 [ 801.027478][ T29] do_filp_open+0x1f5/0x430 [ 801.045835][ T29] ? vfs_tmpfile+0x490/0x490 [ 801.068402][ T29] ? _raw_spin_unlock+0x28/0x40 [ 801.090885][ T29] ? alloc_fd+0x58f/0x630 [ 801.112524][ T29] do_sys_openat2+0x134/0x1d0 [ 801.146165][ T29] ? do_sys_open+0xe0/0xe0 [ 801.157505][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 801.174540][ T29] ? lock_chain_count+0x20/0x20 [ 801.179676][ T29] __x64_sys_openat+0x139/0x160 [ 801.185156][ T29] do_syscall_64+0x55/0xa0 [ 801.190087][ T29] ? clear_bhb_loop+0x40/0x90 [ 801.195699][ T29] ? clear_bhb_loop+0x40/0x90 [ 801.200854][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.207466][ T29] RIP: 0033:0x7ffabf4a7407 [ 801.212796][ T29] RSP: 002b:00007ffe7e52c3a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 801.231601][ T29] RAX: ffffffffffffffda RBX: 00007ffabfc47880 RCX: 00007ffabf4a7407 [ 801.240397][ T29] RDX: 00000000000a0800 RSI: 000055f6b517c620 RDI: ffffffffffffff9c [ 801.249216][ T29] RBP: 000055f6b517b910 R08: 0000000000000000 R09: 0000000000000000 [ 801.258582][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f6b518fba0 [ 801.267231][ T29] R13: 000055f6b5193410 R14: 0000000000000000 R15: 000055f6b518fba0 [ 801.276213][ T29] [ 801.279536][ T29] [ 801.279536][ T29] Showing all locks held in the system: [ 801.288477][ T29] 2 locks held by kworker/u4:1/12: [ 801.295249][ T29] 1 lock held by khungtaskd/29: [ 801.300153][ T29] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 801.311141][ T29] 2 locks held by kworker/u4:2/34: [ 801.316923][ T29] #0: ffff88801eeaf538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 801.329178][ T29] #1: ffffc90000aafd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 801.342771][ T29] 2 locks held by getty/5532: [ 801.347616][ T29] #0: ffff8880318d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 801.361930][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 801.378939][ T29] 1 lock held by udevd/5787: [ 801.385122][ T29] #0: ffff8881417984c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 801.396155][ T29] 2 locks held by kworker/u4:5/13110: [ 801.401835][ T29] 1 lock held by syz.0.3068/14672: [ 801.408247][ T29] [ 801.410630][ T29] ============================================= [ 801.410630][ T29] [ 801.428336][ T29] NMI backtrace for cpu 1 [ 801.432826][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 801.441353][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 801.452147][ T29] Call Trace: [ 801.455582][ T29] [ 801.458735][ T29] dump_stack_lvl+0x18c/0x250 [ 801.463641][ T29] ? show_regs_print_info+0x20/0x20 [ 801.469024][ T29] ? load_image+0x400/0x400 [ 801.474330][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 801.480015][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 801.486480][ T29] ? _printk+0xde/0x130 [ 801.490853][ T29] ? load_image+0x400/0x400 [ 801.495406][ T29] ? load_image+0x400/0x400 [ 801.500129][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 801.506683][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 801.513154][ T29] watchdog+0xf3d/0xf80 [ 801.517543][ T29] ? watchdog+0x1e1/0xf80 [ 801.522216][ T29] kthread+0x2fa/0x390 [ 801.526358][ T29] ? hungtask_pm_notify+0x90/0x90 [ 801.531709][ T29] ? kthread_blkcg+0xd0/0xd0 [ 801.536429][ T29] ret_from_fork+0x48/0x80 [ 801.540973][ T29] ? kthread_blkcg+0xd0/0xd0 [ 801.545857][ T29] ret_from_fork_asm+0x11/0x20 [ 801.550919][ T29] [ 801.555827][ T29] Sending NMI from CPU 1 to CPUs 0: [ 801.561717][ C0] NMI backtrace for cpu 0 [ 801.561729][ C0] CPU: 0 PID: 13110 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 801.561746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 801.561755][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 801.561777][ C0] RIP: 0010:kasan_check_range+0x52/0x290 [ 801.561800][ C0] Code: f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 ff 01 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 <4d> 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d [ 801.561813][ C0] RSP: 0018:ffffc90003ae7928 EFLAGS: 00000096 [ 801.561825][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81682ab7 [ 801.561835][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8b02a8 [ 801.561845][ C0] RBP: ffffc90003ae7a80 R08: ffffffff8e8b02af R09: 000000000001ffff [ 801.561855][ C0] R10: dffffc0000000000 R11: fffffbfff1d16055 R12: 1ffff9200075cf38 [ 801.561866][ C0] R13: ffffffff8d176158 R14: 0000000000000000 R15: 1ffffffff1d16055 [ 801.561881][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 801.561894][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.561915][ C0] CR2: 00007ffb3e7bbd58 CR3: 0000000074849000 CR4: 00000000003506f0 [ 801.561931][ C0] Call Trace: [ 801.561937][ C0] [ 801.561947][ C0] lock_acquire+0xb7/0x420 [ 801.561970][ C0] ? read_lock_is_recursive+0x20/0x20 [ 801.561985][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 801.562003][ C0] ? read_lock_is_recursive+0x20/0x20 [ 801.562020][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 801.562039][ C0] ? kcov_remote_start+0x8f/0x7e0 [ 801.562057][ C0] _raw_spin_lock+0x2e/0x40 [ 801.562073][ C0] ? kcov_remote_start+0x109/0x7e0 [ 801.562089][ C0] kcov_remote_start+0x109/0x7e0 [ 801.562105][ C0] ? skb_dequeue+0x124/0x160 [ 801.562123][ C0] ieee80211_iface_work+0x1f8/0xc70 [ 801.562140][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.562159][ C0] cfg80211_wiphy_work+0x225/0x260 [ 801.562176][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 801.562195][ C0] process_scheduled_works+0xa5d/0x15d0 [ 801.562226][ C0] ? worker_attach_to_pool+0x380/0x380 [ 801.562246][ C0] ? assign_work+0x3d2/0x5d0 [ 801.562266][ C0] worker_thread+0xa55/0xfc0 [ 801.562283][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 801.562300][ C0] ? _raw_spin_unlock+0x40/0x40 [ 801.562325][ C0] kthread+0x2fa/0x390 [ 801.562338][ C0] ? pr_cont_work+0x560/0x560 [ 801.562356][ C0] ? kthread_blkcg+0xd0/0xd0 [ 801.562370][ C0] ret_from_fork+0x48/0x80 [ 801.562386][ C0] ? kthread_blkcg+0xd0/0xd0 [ 801.562400][ C0] ret_from_fork_asm+0x11/0x20 [ 801.562425][ C0] [ 801.861940][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 801.868887][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 801.876623][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 801.887234][ T29] Call Trace: [ 801.890544][ T29] [ 801.893499][ T29] dump_stack_lvl+0x18c/0x250 [ 801.898313][ T29] ? show_regs_print_info+0x20/0x20 [ 801.903636][ T29] ? load_image+0x400/0x400 [ 801.908376][ T29] panic+0x2dc/0x730 [ 801.912303][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 801.918012][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 801.922552][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 801.928229][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 801.934524][ T29] watchdog+0xf7c/0xf80 [ 801.938977][ T29] ? watchdog+0x1e1/0xf80 [ 801.943349][ T29] kthread+0x2fa/0x390 [ 801.947549][ T29] ? hungtask_pm_notify+0x90/0x90 [ 801.953263][ T29] ? kthread_blkcg+0xd0/0xd0 [ 801.958052][ T29] ret_from_fork+0x48/0x80 [ 801.962939][ T29] ? kthread_blkcg+0xd0/0xd0 [ 801.967652][ T29] ret_from_fork_asm+0x11/0x20 [ 801.972660][ T29] [ 801.976667][ T29] Kernel Offset: disabled [ 801.981019][ T29] Rebooting in 86400 seconds..