last executing test programs: 5.208012328s ago: executing program 4 (id=1763): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a000902"], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 5.106168338s ago: executing program 4 (id=1769): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)='X', 0x1) 4.078537843s ago: executing program 4 (id=1777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xa6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80}, 0x8005) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r0, 0x1) 3.987960903s ago: executing program 2 (id=1779): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) gettid() connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) unshare(0x46060480) socket(0xa, 0x801, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) fsmount(r5, 0x0, 0x0) 2.756000448s ago: executing program 4 (id=1785): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 1.776802132s ago: executing program 4 (id=1788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000500)={0x2, {{0x2, 0x4e24, @multicast2}}}, 0x90) 1.776392982s ago: executing program 0 (id=1789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r2 = dup(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00') preadv(r3, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/207, 0xcf}, {0x0}, {&(0x7f0000000740)=""/66, 0x42}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000007c0)=""/133, 0x85}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x9, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000040)) write$FUSE_LSEEK(r2, 0x0, 0x0) 1.776294662s ago: executing program 2 (id=1790): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xfffffd8f, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) 1.705055673s ago: executing program 4 (id=1791): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad0000000000", 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) shutdown(r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.608017903s ago: executing program 2 (id=1793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, r2, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0xe, 0x1c, 0x64, 0x0, 0x1, 0x2, 0x0, @remote, @rand_addr=0x64010102}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 1.546306243s ago: executing program 2 (id=1794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 1.428069183s ago: executing program 0 (id=1796): mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2090b2, 0x0) 1.401474854s ago: executing program 3 (id=1798): openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) getpid() getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.356034234s ago: executing program 0 (id=1799): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x1}) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b5", 0x1}], 0x1}, 0x4041) 1.309365774s ago: executing program 0 (id=1800): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18, 0x20000040}}], 0x1, 0x0) 1.207929495s ago: executing program 3 (id=1802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="380003", 0x3) 1.018660606s ago: executing program 0 (id=1803): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xf}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 939.239035ms ago: executing program 3 (id=1804): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={0x0, 0xfffffdc0}) 357.380298ms ago: executing program 1 (id=1805): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x80108906, 0x0) 300.049108ms ago: executing program 1 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000020c00fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000"], 0x84}}, 0x0) 299.835998ms ago: executing program 1 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x5c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x82}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 299.641219ms ago: executing program 0 (id=1808): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="3810050000000500a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 279.537638ms ago: executing program 3 (id=1809): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 245.347179ms ago: executing program 2 (id=1810): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x2}) 203.836699ms ago: executing program 1 (id=1820): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001714"], 0x10}}, 0x0) 202.309169ms ago: executing program 3 (id=1811): shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3314) 141.556659ms ago: executing program 2 (id=1812): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 112.438999ms ago: executing program 1 (id=1813): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x265, 0x40000001, &(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x80000000, @private2, 0x80}, 0x80) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4046810}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)="ce433fe4cda74ddc5d9a55f9259307ba5ca59fc7466a0b28d21feca0f86039c8595d0e600e12b5dfe516793b085a86f0e359cefbb25abc71decd67df1ce33de0e9398fc5ab70cffea3c1f877cddabc5ddadb523293899b244ad73c1583e2ae78a5b2bc995733f97acb5886c81296c968ec693ad6de4e12e7f43dbe9b5e38fa3742a018f68f8ff273025476a7672aa4a93d0a6edd364cb4d33c2f84245ef2f853723a1617f3161fb307ed2c4f82", 0xad}, {&(0x7f0000000ac0)="489f77426edcdc5c03c8a9ee95634784a2af8a12a841007da0036151610d6f71161267abb04f8cef0704000006effa50e15da2a50ebcda5ac868b9e093eca44c4170ca594f08bc62f70735df93b0e5143147d6005283e6a0fbb0e3a975aefbaf9eba44372898fdbdf226b27b691c744c2ff9d3ef5d98e0fc151af56309d8d03dfe0e804974ad4c103ba9822dee70785386c772", 0x93}, {&(0x7f0000000300)="8d5bdd5a675b2213c692a51e0243a00fb922edacfef24e09ee1be5854afdfe9a4f503a94f87583a97216ae88143f7530e578fc0d506f557d5c0a39008302fc0fc13e8875212e1b5d15585db93af1acf82334f9e5a744a34655ad0d085c75074fdeb157c93a82a8", 0x67}, {&(0x7f0000000380)="0b99a9a7f5bf58ee1b96860c0ddb13a3fa99fe0e8434807c1daba82674558625ff7b3a90a82787aa943c4fb50758b154ca0207b0", 0x34}, {&(0x7f0000000c00)="d6d903e1f57f2557decf50d8eaa5049502ac8cb73c648dd5e36c12080dcfac01c31c472f29", 0x25}, {&(0x7f0000000880)="3e00e69c96d6beeab17f517d5c442248bd63b5f5e71fd5695ee6a37bc0a8e848c58e7a7966739a3e692815ff9ca4321a843dd8a02adea13f3b021c674482b58eae5bf0419a26d33cd8251186668ea1dcf042a4fed7cc39250e52d0ddd148b373fd010067333bf426e6a9343aa837c390ab282c0ae56ca73ebd1a7283e46738ba2764e957acb9e57ed5ffb6", 0x8b}, {&(0x7f0000000940)="5691b46728477dd9420eb72691f5626d5a1fa9423133e498d657efd7e3748f41be1d37231f5193f03c9bc4420439d32e6861b2bde147c2ada305d3538d32522e66a9a259407207e465df662b356fd6505987a94ed52b6da28d356f2c18b62769cb56bb38b07f0b2275bab3ee430019f894dce1", 0x73}], 0x7, &(0x7f0000000ec0)=[@iv={0x18}, @op={0x18}], 0x30, 0x4000041}], 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 71.201199ms ago: executing program 3 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d8c5ef2}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x38, 0xc, "d700e0783cd9b9e870af1cdc82a47291c1a4a0749ccea2d821c0067abed96d710d124bf4e20f57f297c6033df572b1165dec60df"}]}], {0x14}}, 0xf4}}, 0x800) 0s ago: executing program 1 (id=1815): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x48011, &(0x7f0000000040)={0x11, 0x4305, r1}, 0x14) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered forwarding state [ 48.531979][ T4031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.564892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.576074][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.578512][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.581165][ T961] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.582875][ T961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.600877][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.603451][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.606015][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.610575][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.612974][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.615414][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.621502][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.633283][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.635505][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.638153][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.649536][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.651632][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.656030][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.672107][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.674512][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.676737][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.681046][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.683195][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.684745][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.686774][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.698689][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.719425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.721777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.724400][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.725980][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.730141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.733045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.754761][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.756757][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.759951][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.762273][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.792557][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.795205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.802902][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.805251][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.841788][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.845507][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.847826][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.850152][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.852305][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.860388][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.874422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.876924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.886514][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.888383][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.895411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.923036][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.924871][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.926706][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.944415][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.963436][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.965941][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.975986][ T961] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.977710][ T961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.988938][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.994517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.006710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.009584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.012220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.014610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.045703][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.049733][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.051853][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.053966][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.056517][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.060091][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.062244][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.064343][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.067163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.069446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.071155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.075411][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.095938][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.099179][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.101321][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.102949][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.105183][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.111419][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.113715][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.116025][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.119015][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.120570][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.126344][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.135509][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.138195][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.140338][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.142754][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.144995][ T961] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.146560][ T961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.149608][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.151980][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.154446][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.156548][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.161482][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.163777][ T961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.166190][ T4025] device veth0_vlan entered promiscuous mode [ 49.174578][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.181121][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.183597][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.185934][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.187529][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.209322][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.212071][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.228817][ T4025] device veth1_vlan entered promiscuous mode [ 49.236907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.239364][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.241778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.244208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.248216][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.252584][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.275752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.278966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.281472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.283781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.286244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.296463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.300121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.304778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.330474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.332909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.335219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.339902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.346013][ T4031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.351354][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.363663][ T4033] device veth0_vlan entered promiscuous mode [ 49.365989][ T4025] device veth0_macvtap entered promiscuous mode [ 49.370790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.373064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.375448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.380367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.382745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.385186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.387833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.390349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.392528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.413759][ T4025] device veth1_macvtap entered promiscuous mode [ 49.429253][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.431552][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.433387][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.435238][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.442972][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.456130][ T4033] device veth1_vlan entered promiscuous mode [ 49.461947][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.464220][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.470112][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.473807][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.476190][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.482986][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.495410][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.498342][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.503929][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.511266][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.513548][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.516059][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.536452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.540557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.543821][ T4025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.545895][ T4025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.548393][ T4068] Bluetooth: hci1: command 0x041b tx timeout [ 49.549866][ T4068] Bluetooth: hci3: command 0x041b tx timeout [ 49.551744][ T4068] Bluetooth: hci2: command 0x041b tx timeout [ 49.553135][ T4068] Bluetooth: hci0: command 0x041b tx timeout [ 49.556200][ T4025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.559972][ T4025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.577487][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.591577][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.594172][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.602943][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.605382][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.620116][ T4033] device veth0_macvtap entered promiscuous mode [ 49.627179][ T4068] Bluetooth: hci4: command 0x041b tx timeout [ 49.657095][ T4033] device veth1_macvtap entered promiscuous mode [ 49.675508][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.679626][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.681933][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.684814][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.688739][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.690954][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.699390][ T4022] device veth0_vlan entered promiscuous mode [ 49.736620][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.740322][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.743652][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.746292][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.749555][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.751359][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.753810][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.771005][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.783174][ T4022] device veth1_vlan entered promiscuous mode [ 49.824326][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.826888][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.833410][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.848145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.850503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.852952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.855338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.860540][ T4033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.862724][ T4033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.864626][ T4033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.866607][ T4033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.881577][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.883344][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.894907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.899591][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.902177][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.923110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.925629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.929037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.931125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.948980][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.951789][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.955528][ T4031] device veth0_vlan entered promiscuous mode [ 49.975663][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.978626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.980821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.983083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.993087][ T4029] device veth0_vlan entered promiscuous mode [ 50.004695][ T4031] device veth1_vlan entered promiscuous mode [ 50.011040][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.012953][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.015947][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.019498][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.030732][ T4029] device veth1_vlan entered promiscuous mode [ 50.033462][ T4022] device veth0_macvtap entered promiscuous mode [ 50.081987][ T4022] device veth1_macvtap entered promiscuous mode [ 50.085690][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.093545][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.096020][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.105097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.109448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.111659][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.114144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.137181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.145000][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.157361][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.159245][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.183394][ T4031] device veth0_macvtap entered promiscuous mode [ 50.204622][ T4029] device veth0_macvtap entered promiscuous mode [ 50.213414][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.215910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.221352][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.228492][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.230320][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.252315][ T4031] device veth1_macvtap entered promiscuous mode [ 50.266879][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.271890][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.274274][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.276100][ T4101] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 50.276656][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.279110][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.283537][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.285751][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.290241][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.292836][ T26] audit: type=1326 audit(50.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4100 comm="syz.0.7" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x0 [ 50.293256][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.311770][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.314204][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.316425][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.324155][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.326338][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.330807][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.334480][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.350010][ T4029] device veth1_macvtap entered promiscuous mode [ 50.363989][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.366276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.368768][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.376924][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.379817][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.382157][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.393685][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.400295][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.403502][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.405849][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.427495][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.429950][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.432158][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.434481][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.444770][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.456768][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.459365][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.461728][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.464061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.470149][ T4031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.472145][ T4031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.474215][ T4031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.476364][ T4031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.490797][ T4106] udc-core: couldn't find an available UDC or it's busy [ 50.494900][ T4106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.498297][ T4106] udc-core: couldn't find an available UDC or it's busy [ 50.499213][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.499888][ T4106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.504781][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.509749][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.512624][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.514966][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.518551][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.520668][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.522937][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.526704][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.534384][ T4022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536319][ T4022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.539497][ T4022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.541481][ T4022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.546509][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.549493][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.560270][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.562576][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.564682][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.566929][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.569777][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.572079][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.574258][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.576577][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.581181][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.591061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.593619][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.615041][ T4029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.617646][ T4029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.619585][ T4029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.621675][ T4029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.736474][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.746660][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.766347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.793538][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.795465][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.803347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.822048][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.824068][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.835174][ T363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.837483][ T363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.841918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.844504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.862131][ T363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.863886][ T363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.866531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.902397][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.904204][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.906726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.234692][ T4068] Bluetooth: hci0: command 0x040f tx timeout [ 52.236285][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 52.242102][ T4068] Bluetooth: hci3: command 0x040f tx timeout [ 52.244478][ T4068] Bluetooth: hci1: command 0x040f tx timeout [ 52.246164][ T4013] Bluetooth: hci4: command 0x040f tx timeout [ 52.269109][ T4132] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.887474][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.951465][ T4182] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 53.100316][ T4192] udc-core: couldn't find an available UDC or it's busy [ 53.104263][ T4192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.124451][ T4196] udc-core: couldn't find an available UDC or it's busy [ 53.130957][ T4196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.247770][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.250388][ T13] usb 1-1: config 0 has no interfaces? [ 53.251685][ T13] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 53.255111][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.263412][ T13] usb 1-1: config 0 descriptor?? [ 53.509209][ T4013] usb 1-1: USB disconnect, device number 2 [ 54.325299][ T4068] Bluetooth: hci1: command 0x0419 tx timeout [ 54.370742][ T4068] Bluetooth: hci3: command 0x0419 tx timeout [ 54.431018][ T4068] Bluetooth: hci2: command 0x0419 tx timeout [ 55.055663][ T4236] udc-core: couldn't find an available UDC or it's busy [ 55.074904][ T4236] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.930724][ T4235] ipt_CLUSTERIP: Please specify destination IP [ 56.093742][ T4253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 56.249980][ T4262] udc-core: couldn't find an available UDC or it's busy [ 56.261554][ T4262] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.406197][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 56.536389][ T4281] device syzkaller0 entered promiscuous mode [ 56.678124][ T4228] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 56.682792][ T4228] Bluetooth: hci4: Injecting HCI hardware error event [ 56.687311][ T4023] Bluetooth: hci4: hardware error 0x00 [ 56.736465][ T4293] Zero length message leads to an empty skb [ 56.861061][ T4297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.87'. [ 57.257195][ T4012] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.282923][ T4318] udc-core: couldn't find an available UDC or it's busy [ 57.284569][ T4318] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.617247][ T4012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.619914][ T4012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.622055][ T4012] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 57.634776][ T4012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.640052][ T4012] usb 1-1: config 0 descriptor?? [ 57.995828][ T4369] udc-core: couldn't find an available UDC or it's busy [ 57.999821][ T4369] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.026657][ T4371] binder: 4370:4371 unknown command 1074553619 [ 58.029101][ T4371] binder: 4370:4371 ioctl c0306201 20000580 returned -22 [ 58.122284][ T4012] wacom 0003:056A:0331.0001: unknown main item tag 0x0 [ 58.124922][ T4012] wacom 0003:056A:0331.0001: unknown main item tag 0x0 [ 58.126524][ T4012] wacom 0003:056A:0331.0001: unknown main item tag 0x0 [ 58.133935][ T4012] wacom 0003:056A:0331.0001: unknown main item tag 0x0 [ 58.135571][ T4012] wacom 0003:056A:0331.0001: unknown main item tag 0x0 [ 58.153796][ T4012] wacom 0003:056A:0331.0001: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 59.338050][ T21] usb 1-1: USB disconnect, device number 3 [ 59.373906][ T4392] udc-core: couldn't find an available UDC or it's busy [ 59.386121][ T4392] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.604780][ T4399] binder: 4397:4399 tried to acquire reference to desc 0, got 1 instead [ 59.622244][ T4399] binder: 4397:4399 got transaction with out-of-order buffer fixup [ 59.635573][ T4399] binder: 4397:4399 transaction failed 29201/-22, size 120-24 line 3381 [ 59.647969][ T4228] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.703897][ T4404] udc-core: couldn't find an available UDC or it's busy [ 59.705560][ T4404] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.623235][ T4419] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.878181][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 60.951935][ T4442] udc-core: couldn't find an available UDC or it's busy [ 60.953664][ T4442] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.167246][ T4228] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 61.527416][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.530722][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.535146][ T4228] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 61.540083][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.557400][ T4228] usb 1-1: config 0 descriptor?? [ 62.044208][ T4228] hid_mf 0003:0079:1846.0002: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 62.047709][ T4228] hid_mf 0003:0079:1846.0002: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 62.246254][ T4228] usb 1-1: USB disconnect, device number 4 [ 62.561750][ T4477] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 62.577192][ T4477] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 67.173263][ T4518] sched: RT throttling activated [ 70.177782][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.179454][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.557888][ T4580] udc-core: couldn't find an available UDC or it's busy [ 70.559539][ T4580] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.123901][ T4023] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 71.126387][ T4023] CPU: 0 PID: 4023 Comm: kworker/u5:1 Not tainted 5.15.172-syzkaller #0 [ 71.128327][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 71.130565][ T4023] Workqueue: hci2 hci_rx_work [ 71.131683][ T4023] Call trace: [ 71.132453][ T4023] dump_backtrace+0x0/0x530 [ 71.133571][ T4023] show_stack+0x2c/0x3c [ 71.134563][ T4023] dump_stack_lvl+0x108/0x170 [ 71.135707][ T4023] dump_stack+0x1c/0x58 [ 71.136633][ T4023] sysfs_create_dir_ns+0x278/0x318 [ 71.137764][ T4023] kobject_add_internal+0x384/0x8f0 [ 71.138919][ T4023] kobject_add+0x14c/0x21c [ 71.139957][ T4023] device_add+0x400/0xef4 [ 71.140910][ T4023] hci_conn_add_sysfs+0xc4/0x1cc [ 71.142063][ T4023] le_conn_complete_evt+0x954/0x1228 [ 71.143232][ T4023] hci_le_meta_evt+0x234/0x31c0 [ 71.144371][ T4023] hci_event_packet+0xd34/0x12b4 [ 71.145556][ T4023] hci_rx_work+0x1c0/0x7c4 [ 71.146535][ T4023] process_one_work+0x790/0x11b8 [ 71.147661][ T4023] worker_thread+0x910/0x1034 [ 71.148670][ T4023] kthread+0x37c/0x45c [ 71.149583][ T4023] ret_from_fork+0x10/0x20 [ 71.152899][ T4023] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 71.155967][ T4023] Bluetooth: hci2: failed to register connection device [ 71.178269][ T4595] device wireguard0 entered promiscuous mode [ 72.249454][ T4614] capability: warning: `syz.0.182' uses deprecated v2 capabilities in a way that may be insecure [ 72.443546][ T4622] xt_nfacct: accounting object `syz0' does not exists [ 72.637722][ T4635] Cannot find add_set index 0 as target [ 73.447761][ T4647] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 73.946317][ T4680] udc-core: couldn't find an available UDC or it's busy [ 73.948526][ T4680] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.997058][ T4642] udc-core: couldn't find an available UDC or it's busy [ 73.999037][ T4642] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.003145][ T4639] ALSA: mixer_oss: invalid OSS volume 'DIIT' [ 75.075257][ T7] cfg80211: failed to load regulatory.db [ 75.274808][ T4723] netlink: 248 bytes leftover after parsing attributes in process `syz.3.216'. [ 75.284907][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 75.472307][ T26] audit: type=1326 audit(75.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.491498][ T26] audit: type=1326 audit(75.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=278 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.512321][ T26] audit: type=1326 audit(75.470:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.536631][ T26] audit: type=1326 audit(75.470:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=291 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.561933][ T26] audit: type=1326 audit(75.470:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.580404][ T26] audit: type=1326 audit(75.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.588181][ T26] audit: type=1326 audit(75.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.593428][ T26] audit: type=1326 audit(75.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 75.605965][ T26] audit: type=1326 audit(75.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.0.221" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 76.057074][ T4012] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.161736][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 77.136223][ T26] audit: type=1326 audit(77.100:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 77.194723][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 77.196828][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 77.200031][ T4012] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 77.202379][ T4012] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.205339][ T4012] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.212901][ T4012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.216651][ T4012] usb 1-1: config 0 descriptor?? [ 77.249104][ T4748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.269705][ T4012] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 78.198392][ T4779] sctp: failed to load transform for md5: -2 [ 78.723732][ T4812] netlink: 116 bytes leftover after parsing attributes in process `syz.4.248'. [ 79.206565][ T4828] udc-core: couldn't find an available UDC or it's busy [ 79.213556][ T4828] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.581339][ T4067] usb 1-1: USB disconnect, device number 5 [ 81.477199][ T4067] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.604399][ T4880] device batadv_slave_1 entered promiscuous mode [ 81.606700][ T4879] device batadv_slave_1 left promiscuous mode [ 81.794691][ T4886] udc-core: couldn't find an available UDC or it's busy [ 81.796357][ T4886] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.690603][ T4066] Bluetooth: hci1: command 0x0406 tx timeout [ 82.823586][ T4893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 82.887458][ T4067] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.890090][ T4067] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.893315][ T4067] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.902632][ T4067] usb 1-1: config 0 descriptor?? [ 82.914063][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 82.976260][ T4897] udc-core: couldn't find an available UDC or it's busy [ 82.980226][ T4897] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.181957][ T4899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.284'. [ 83.184161][ T4899] netlink: 43 bytes leftover after parsing attributes in process `syz.1.284'. [ 83.186452][ T4899] netlink: 'syz.1.284': attribute type 6 has an invalid length. [ 83.207808][ T4899] netlink: 43 bytes leftover after parsing attributes in process `syz.1.284'. [ 83.229436][ T4899] ptrace attach of "./syz-executor exec"[4903] was attempted by "./syz-executor exec"[4899] [ 83.232467][ T4899] binder: 4898:4899 tried to acquire reference to desc 0, got 1 instead [ 83.235464][ T4899] binder: 4898:4899 got new transaction with bad transaction stack, transaction 12 has target 4898:0 [ 83.239383][ T4899] binder: 4898:4899 transaction failed 29201/-71, size 0-0 line 2973 [ 83.253573][ T4067] usbhid 1-1:0.0: can't add hid device: -71 [ 83.255413][ T4067] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.259406][ T4067] usb 1-1: USB disconnect, device number 6 [ 83.274321][ T4904] netlink: 7 bytes leftover after parsing attributes in process `syz.0.285'. [ 83.282567][ T4904] netlink: 7 bytes leftover after parsing attributes in process `syz.0.285'. [ 83.285028][ T4904] netlink: 7 bytes leftover after parsing attributes in process `syz.0.285'. [ 83.294157][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 83.294167][ T26] audit: type=1326 audit(83.260:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 83.303535][ T26] audit: type=1326 audit(83.270:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=36 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 83.309127][ T4904] netlink: 7 bytes leftover after parsing attributes in process `syz.0.285'. [ 83.311548][ T4904] netlink: 7 bytes leftover after parsing attributes in process `syz.0.285'. [ 83.317364][ T26] audit: type=1326 audit(83.280:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4905 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 83.328351][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.343061][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.345043][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.350691][ T4904] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.371449][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.376505][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.380020][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.384843][ T4904] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.401037][ T4066] binder: send failed reply for transaction 12 to 4898:4899 [ 83.403311][ T4066] binder: undelivered TRANSACTION_COMPLETE [ 83.404781][ T4066] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.406149][ T4066] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.575507][ T4921] udc-core: couldn't find an available UDC or it's busy [ 83.579250][ T4921] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.670199][ T4930] udc-core: couldn't find an available UDC or it's busy [ 83.671999][ T4930] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.480098][ T4953] input: syz0 as /devices/virtual/input/input5 [ 84.606055][ T4959] udc-core: couldn't find an available UDC or it's busy [ 84.613188][ T4959] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.291063][ T4990] udc-core: couldn't find an available UDC or it's busy [ 85.296255][ T4990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.563707][ T4994] devpts: called with bogus options [ 86.161844][ T5013] device bridge1 entered promiscuous mode [ 87.182406][ T5025] device bond_slave_0 entered promiscuous mode [ 87.197515][ T5025] device bond_slave_0 left promiscuous mode [ 87.321471][ T5033] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.268336][ T5065] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.429541][ T4066] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 89.669614][ T4066] usb 1-1: Using ep0 maxpacket: 32 [ 89.947541][ T4066] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 89.949587][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.951366][ T4066] usb 1-1: Product: syz [ 89.952626][ T4066] usb 1-1: Manufacturer: syz [ 89.953730][ T4066] usb 1-1: SerialNumber: syz [ 89.958374][ T4066] usb 1-1: config 0 descriptor?? [ 89.999665][ T4066] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 90.106026][ T5095] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 91.077947][ T4066] gspca_ov534_9: reg_w failed -110 [ 92.047680][ T5114] udc-core: couldn't find an available UDC or it's busy [ 92.049280][ T5114] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.095502][ T5116] process 'syz.4.377' launched '/dev/fd/3' with NULL argv: empty string added [ 92.256911][ T5122] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.287147][ T4066] gspca_ov534_9: Unknown sensor 0000 [ 92.287212][ T4066] ov534_9: probe of 1-1:0.0 failed with error -22 [ 92.294505][ T4066] usb 1-1: USB disconnect, device number 7 [ 92.532518][ T5139] udc-core: couldn't find an available UDC or it's busy [ 92.534278][ T5139] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.817168][ T4066] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.109014][ T5157] bridge0: port 3(gretap0) entered blocking state [ 93.109089][ T5157] bridge0: port 3(gretap0) entered disabled state [ 93.157397][ T5157] device gretap0 entered promiscuous mode [ 93.181987][ T5157] bridge0: port 3(gretap0) entered blocking state [ 93.182129][ T5157] bridge0: port 3(gretap0) entered forwarding state [ 93.292621][ T5157] device gretap0 left promiscuous mode [ 93.307169][ T5157] bridge0: port 3(gretap0) entered disabled state [ 94.180251][ T4023] Bluetooth: hci3: link tx timeout [ 94.181617][ T4023] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.557098][ T4066] usb 1-1: Using ep0 maxpacket: 8 [ 95.547299][ T4066] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.550120][ T4066] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 95.567855][ T4066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.757786][ T4066] usb 1-1: config 0 descriptor?? [ 96.351047][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 96.377265][ T4066] usb 1-1: can't set config #0, error -71 [ 96.379884][ T4066] usb 1-1: USB disconnect, device number 8 [ 98.353336][ T5238] udc-core: couldn't find an available UDC or it's busy [ 98.354923][ T5238] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.406531][ T5241] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.741396][ T5252] tmpfs: Unknown parameter 'usrquota' [ 99.371394][ T144] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 100.769080][ T5275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.942989][ T5283] sctp: [Deprecated]: syz.1.446 (pid 5283) Use of int in maxseg socket option. [ 100.942989][ T5283] Use struct sctp_assoc_value instead [ 101.921853][ T5292] device team_slave_0 entered promiscuous mode [ 101.923425][ T5292] device team_slave_1 entered promiscuous mode [ 101.944536][ T5292] device team_slave_0 left promiscuous mode [ 101.946245][ T5292] device team_slave_1 left promiscuous mode [ 102.097115][ T5292] team0 (unregistering): Port device team_slave_0 removed [ 102.187774][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 102.863159][ T5310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.677711][ T5373] input: syz0 as /devices/virtual/input/input6 [ 104.793687][ T5380] udc-core: couldn't find an available UDC or it's busy [ 104.796488][ T5380] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.091447][ T5393] __nla_validate_parse: 59 callbacks suppressed [ 105.091463][ T5393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.490'. [ 105.124636][ T5393] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 105.369142][ T5401] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 105.400399][ T5402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.536092][ T5411] binder: 5408:5411 transaction failed 29189/-22, size 0-0 line 2917 [ 105.768145][ T4227] binder: undelivered TRANSACTION_ERROR: 29189 [ 106.604971][ T5423] udc-core: couldn't find an available UDC or it's busy [ 106.606601][ T5423] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 107.021693][ T5435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.175483][ T5441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 107.369097][ T5450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.515'. [ 108.649966][ T5467] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.707636][ T5473] udc-core: couldn't find an available UDC or it's busy [ 108.709222][ T5473] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.919501][ T5480] block nbd0: server does not support multiple connections per device. [ 108.922551][ T5480] block nbd0: shutting down sockets [ 108.959575][ T5484] binder: 5483:5484 Acquire 1 refcount change on invalid ref 131072 ret -22 [ 109.063774][ T5488] udc-core: couldn't find an available UDC or it's busy [ 109.065329][ T5488] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.066164][ T5490] input: syz1 as /devices/virtual/input/input7 [ 109.302698][ T5498] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 110.720926][ T5522] binder: binder_mmap: 5519 20ff3000-20fff000 bad vm_flags failed -1 [ 111.555310][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'. [ 111.571516][ T5542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.703147][ T26] audit: type=1326 audit(111.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 111.726015][ T26] audit: type=1326 audit(111.690:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 111.742278][ T26] audit: type=1326 audit(111.700:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5549 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 112.901771][ T5575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.922723][ T5576] udc-core: couldn't find an available UDC or it's busy [ 112.936062][ T5576] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.947183][ T4068] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.388901][ T5583] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 113.648029][ T5589] udc-core: couldn't find an available UDC or it's busy [ 113.649754][ T5589] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.664540][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 113.666522][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 113.788654][ T4068] usb 1-1: Using ep0 maxpacket: 16 [ 113.907461][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.910021][ T4068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.912164][ T4068] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 113.914157][ T4068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.928786][ T4068] usb 1-1: config 0 descriptor?? [ 114.161059][ T5603] udc-core: couldn't find an available UDC or it's busy [ 114.174586][ T5603] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.217832][ T5605] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.413363][ T4068] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0003/input/input8 [ 114.518087][ T4068] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 114.696458][ T5617] syz.1.583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.657582][ T4066] usb 1-1: reset high-speed USB device number 9 using dummy_hcd [ 115.926788][ T5635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'. [ 116.062622][ T5637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.323372][ T5643] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 116.352800][ T5645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.595'. [ 116.363000][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 116.570367][ T4065] usb 1-1: USB disconnect, device number 9 [ 116.596670][ T5654] udc-core: couldn't find an available UDC or it's busy [ 116.598426][ T5654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.532003][ T5671] udc-core: couldn't find an available UDC or it's busy [ 117.533631][ T5671] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.573276][ T5674] udc-core: couldn't find an available UDC or it's busy [ 117.575081][ T5674] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.619177][ T5695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.621799][ T5738] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.712512][ T5742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.633'. [ 122.726110][ T5742] netlink: 18 bytes leftover after parsing attributes in process `syz.2.633'. [ 122.735407][ T5742] netlink: 18 bytes leftover after parsing attributes in process `syz.2.633'. [ 122.797066][ T4065] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 122.815407][ T5748] netlink: 112 bytes leftover after parsing attributes in process `syz.4.636'. [ 123.825054][ T5764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.842428][ T5766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.643'. [ 123.996600][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 123.998312][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.002964][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 124.026350][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 124.027776][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.030530][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 124.039310][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 124.040964][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.043284][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 124.066925][ T5777] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 124.068548][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.083169][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 124.097488][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.100219][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.197356][ T4068] vhci_hcd: vhci_device speed not set [ 124.268006][ T4068] usb 10-1: new full-speed USB device number 2 using vhci_hcd [ 124.277424][ T4065] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 124.279381][ T4065] usb 1-1: can't read configurations, error -71 [ 124.371514][ T5804] udc-core: couldn't find an available UDC or it's busy [ 124.373095][ T5804] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.479985][ T144] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 124.482791][ T144] CPU: 1 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.172-syzkaller #0 [ 124.484640][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 124.486897][ T144] Workqueue: hci1 hci_rx_work [ 124.487976][ T144] Call trace: [ 124.488772][ T144] dump_backtrace+0x0/0x530 [ 124.489769][ T144] show_stack+0x2c/0x3c [ 124.490653][ T144] dump_stack_lvl+0x108/0x170 [ 124.491739][ T144] dump_stack+0x1c/0x58 [ 124.492658][ T144] sysfs_create_dir_ns+0x278/0x318 [ 124.493790][ T144] kobject_add_internal+0x384/0x8f0 [ 124.494954][ T144] kobject_add+0x14c/0x21c [ 124.496012][ T144] device_add+0x400/0xef4 [ 124.497022][ T144] hci_conn_add_sysfs+0xc4/0x1cc [ 124.498104][ T144] le_conn_complete_evt+0x954/0x1228 [ 124.499398][ T144] hci_le_meta_evt+0x234/0x31c0 [ 124.500460][ T144] hci_event_packet+0xd34/0x12b4 [ 124.501738][ T144] hci_rx_work+0x1c0/0x7c4 [ 124.502735][ T144] process_one_work+0x790/0x11b8 [ 124.503845][ T144] worker_thread+0x910/0x1034 [ 124.504923][ T144] kthread+0x37c/0x45c [ 124.505828][ T144] ret_from_fork+0x10/0x20 [ 124.510939][ T144] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.514578][ T144] Bluetooth: hci1: failed to register connection device [ 125.168086][ T5784] vhci_hcd: connection closed [ 125.203438][ T5790] vhci_hcd: connection closed [ 125.204668][ T5786] vhci_hcd: connection closed [ 125.206292][ T4790] vhci_hcd: stop threads [ 125.210226][ T4790] vhci_hcd: release socket [ 125.212952][ T4790] vhci_hcd: disconnect device [ 125.213668][ T5781] vhci_hcd: connection reset by peer [ 125.218718][ T4790] vhci_hcd: stop threads [ 125.219658][ T4790] vhci_hcd: release socket [ 125.224374][ T4790] vhci_hcd: disconnect device [ 125.251810][ T4790] vhci_hcd: stop threads [ 125.252865][ T4790] vhci_hcd: release socket [ 125.253877][ T4790] vhci_hcd: disconnect device [ 125.256506][ T4790] vhci_hcd: stop threads [ 125.271735][ T4790] vhci_hcd: release socket [ 125.272884][ T4790] vhci_hcd: disconnect device [ 126.194614][ T144] Bluetooth: hci3: link tx timeout [ 126.195840][ T144] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 126.201100][ T144] Bluetooth: hci3: link tx timeout [ 126.202320][ T144] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.223851][ T5822] syz.3.662 sent an empty control message without MSG_MORE. [ 126.388107][ T5831] bridge0: port 3(gretap0) entered blocking state [ 126.396916][ T5831] bridge0: port 3(gretap0) entered disabled state [ 126.416478][ T5831] device gretap0 entered promiscuous mode [ 127.113478][ T5846] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 128.273138][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 128.411323][ T5874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.387343][ T4068] vhci_hcd: vhci_device speed not set [ 129.451620][ T5898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 130.908020][ T5918] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.917482][ T4069] Bluetooth: hci1: command 0x0406 tx timeout [ 131.011780][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 131.069367][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.070894][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.514847][ T5944] netlink: 128 bytes leftover after parsing attributes in process `syz.2.706'. [ 131.562373][ T5942] netlink: 188 bytes leftover after parsing attributes in process `syz.4.703'. [ 131.728726][ T5949] udc-core: couldn't find an available UDC or it's busy [ 131.733219][ T5949] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.741364][ T5949] capability: warning: `syz.3.709' uses 32-bit capabilities (legacy support in use) [ 131.762200][ T5952] udc-core: couldn't find an available UDC or it's busy [ 131.763895][ T5952] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.221848][ T5966] udc-core: couldn't find an available UDC or it's busy [ 132.223516][ T5966] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.382740][ T5971] device syzkaller0 entered promiscuous mode [ 132.427113][ T5974] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.797703][ T5989] netlink: 220 bytes leftover after parsing attributes in process `syz.2.727'. [ 132.857460][ T5992] udc-core: couldn't find an available UDC or it's busy [ 132.859150][ T5992] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.917099][ T4069] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.177290][ T4069] usb 1-1: Using ep0 maxpacket: 16 [ 133.286663][ T6010] udc-core: couldn't find an available UDC or it's busy [ 133.292249][ T6010] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.317279][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.319860][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.321997][ T4069] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 133.324161][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.339277][ T4069] usb 1-1: config 0 descriptor?? [ 133.414637][ T6015] udc-core: couldn't find an available UDC or it's busy [ 133.416320][ T6015] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.511271][ T6027] udc-core: couldn't find an available UDC or it's busy [ 134.513029][ T6027] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.599625][ T4069] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0004/input/input9 [ 134.602762][ T6030] udc-core: couldn't find an available UDC or it's busy [ 134.604347][ T6030] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.628201][ T6032] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.688755][ T4069] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 135.300967][ T6038] kernel profiling enabled (shift: 17) [ 135.807034][ T4069] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 135.892783][ T6041] netlink: 'syz.1.749': attribute type 6 has an invalid length. [ 135.931452][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.751'. [ 135.959050][ T6045] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.961168][ T6045] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.963039][ T6045] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 135.976749][ T6045] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.046572][ T6051] binder: 6050:6051 tried to acquire reference to desc 0, got 1 instead [ 136.066345][ T6051] binder: 6050:6051 got transaction with invalid offsets ptr [ 136.095017][ T6051] binder: 6050:6051 transaction failed 29201/-22, size 120-24 line 3417 [ 136.110057][ T4065] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.798483][ T21] usb 1-1: USB disconnect, device number 12 [ 136.966879][ T6064] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.059767][ T6069] xt_CT: No such helper "pptp" [ 137.544173][ T6094] 9pnet: p9_errstr2errno: server reported unknown error @ [ 138.541129][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 138.786463][ T6115] netlink: 'syz.1.775': attribute type 10 has an invalid length. [ 139.042900][ T6115] infiniband syz1: set down [ 139.044448][ T6115] infiniband syz1: added team_slave_0 [ 139.155334][ T6115] RDS/IB: syz1: added [ 139.164866][ T6115] smc: adding ib device syz1 with port count 1 [ 139.166546][ T6115] smc: ib device syz1 port 1 has pnetid [ 139.713412][ T6133] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.238701][ T6142] udc-core: couldn't find an available UDC or it's busy [ 140.244767][ T6142] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.310430][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.314021][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.316792][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.462691][ T6150] udc-core: couldn't find an available UDC or it's busy [ 140.464527][ T6150] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.666238][ T6162] netlink: 300 bytes leftover after parsing attributes in process `syz.2.797'. [ 140.826697][ T6171] befs: (nbd1): No write support. Marking filesystem read-only [ 140.847750][ T149] block nbd1: Attempted send on invalid socket [ 140.851382][ T149] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.856582][ T6171] befs: (nbd1): unable to read superblock [ 141.474850][ T6187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.761034][ T6194] udc-core: couldn't find an available UDC or it's busy [ 141.771861][ T6194] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 141.792517][ T6195] netlink: 'syz.0.809': attribute type 33 has an invalid length. [ 141.798010][ T6195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.809'. [ 142.088686][ T6209] netlink: 87 bytes leftover after parsing attributes in process `syz.1.815'. [ 142.097118][ T4065] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 142.218937][ T6211] netlink: 80 bytes leftover after parsing attributes in process `syz.1.815'. [ 142.497985][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.501493][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.555414][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.610838][ T4065] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 142.685006][ T4065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.926759][ T4065] usb 1-1: config 0 descriptor?? [ 144.037924][ T6223] netlink: 'syz.1.818': attribute type 11 has an invalid length. [ 144.165750][ T4065] pantherlord 0003:0810:0002.0005: unknown main item tag 0x0 [ 144.173772][ T4065] pantherlord 0003:0810:0002.0005: item fetching failed at offset 6/7 [ 144.175936][ T4065] pantherlord 0003:0810:0002.0005: parse failed [ 144.194054][ T4065] pantherlord: probe of 0003:0810:0002.0005 failed with error -22 [ 144.463955][ T4065] usb 1-1: USB disconnect, device number 13 [ 144.594738][ T6240] udc-core: couldn't find an available UDC or it's busy [ 144.605045][ T6240] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 144.706379][ T6244] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.450059][ T6288] device wireguard0 entered promiscuous mode [ 147.057138][ T6299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 149.459459][ T6342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 149.605721][ T6353] tmpfs: Unknown parameter 'usrquota' [ 152.315246][ T6391] udc-core: couldn't find an available UDC or it's busy [ 152.316848][ T6391] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.743568][ T6400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.095983][ T6407] 9pnet: Insufficient options for proto=fd [ 153.117383][ T6411] udc-core: couldn't find an available UDC or it's busy [ 153.129410][ T6411] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.167184][ T4065] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 153.651034][ T6415] hub 6-0:1.0: USB hub found [ 153.655009][ T6415] hub 6-0:1.0: 8 ports detected [ 154.266346][ T6417] udc-core: couldn't find an available UDC or it's busy [ 154.268528][ T6417] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.317249][ T4065] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 154.333388][ T6421] udc-core: couldn't find an available UDC or it's busy [ 154.335725][ T6421] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.340906][ T6421] udc-core: couldn't find an available UDC or it's busy [ 154.342571][ T6421] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.537191][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.539275][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.541661][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.397232][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.399559][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.402733][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.487177][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.489398][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.491907][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.567302][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.569957][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.573940][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.647684][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.650674][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.653876][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.737313][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.739481][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.742248][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.817191][ T4065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 155.819380][ T4065] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 155.822701][ T4065] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.937212][ T4065] usb 1-1: unable to read config index 7 descriptor/all [ 155.939035][ T4065] usb 1-1: can't read configurations, error -71 [ 155.956499][ T6443] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.467207][ T6451] binder: 6450:6451 ioctl c0306201 0 returned -14 [ 156.469620][ T6451] binder: 6450:6451 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 156.472995][ T6451] binder: 6451 RLIMIT_NICE not set [ 156.524553][ T4066] binder: undelivered death notification, 0000000000000000 [ 156.646192][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.909'. [ 156.767133][ T6464] ebtables: ebtables: counters copy to user failed while replacing table [ 157.896198][ T6494] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.076278][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 158.095629][ T6508] netlink: 148 bytes leftover after parsing attributes in process `syz.0.930'. [ 158.136260][ T6510] binder: 6509:6510 tried to acquire reference to desc 0, got 1 instead [ 158.141052][ T6510] binder: 6509:6510 got transaction with invalid offset (92, min 0 max 120) or object. [ 158.143452][ T6510] binder: 6509:6510 transaction failed 29201/-22, size 120-24 line 3199 [ 158.166716][ T4228] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.672897][ T6525] netlink: 'syz.4.935': attribute type 10 has an invalid length. [ 158.674745][ T6525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.935'. [ 158.686981][ T6525] bridge0: port 4(veth0_vlan) entered blocking state [ 158.689082][ T6525] bridge0: port 4(veth0_vlan) entered disabled state [ 158.725991][ T6525] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 158.979312][ T4067] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.530258][ T6529] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 159.560002][ T6530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.707069][ T4067] usb 1-1: Using ep0 maxpacket: 8 [ 159.726060][ T6538] udc-core: couldn't find an available UDC or it's busy [ 159.735392][ T6538] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.844828][ T4067] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 159.847940][ T4067] usb 1-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.891812][ T6545] udc-core: couldn't find an available UDC or it's busy [ 159.893538][ T6545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 160.029202][ T4067] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 160.031344][ T4067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.033355][ T4067] usb 1-1: Product: syz [ 160.034361][ T4067] usb 1-1: Manufacturer: syz [ 160.041811][ T4067] usb 1-1: SerialNumber: syz [ 160.105371][ T4067] hso 1-1:6.0: Can't find BULK IN endpoint [ 160.310742][ T6551] udc-core: couldn't find an available UDC or it's busy [ 160.312285][ T6551] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 160.353791][ T4067] usb 1-1: USB disconnect, device number 16 [ 160.458990][ T6557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.109338][ T6624] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.242305][ T6634] udc-core: couldn't find an available UDC or it's busy [ 164.246453][ T6634] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 164.439868][ T6646] netlink: 'syz.2.986': attribute type 39 has an invalid length. [ 164.502884][ T6648] udc-core: couldn't find an available UDC or it's busy [ 164.504717][ T6648] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 164.775976][ T6650] binder: 6649:6650 context manager tried to acquire desc 0 [ 164.778253][ T6650] binder: 6649:6650 ioctl c0306201 200003c0 returned -22 [ 167.305110][ T6684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.003323][ T4065] Bluetooth: hci2: command 0x0406 tx timeout [ 170.651656][ T26] audit: type=1326 audit(170.400:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 170.657636][ T26] audit: type=1326 audit(170.400:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 170.664290][ T26] audit: type=1326 audit(170.610:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8091988c code=0x7ffc0000 [ 171.127235][ T26] audit: type=1326 audit(170.620:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff80915844 code=0x7ffc0000 [ 171.289712][ T6721] vhci_hcd vhci_hcd.0: failed to lookup sock [ 171.291577][ T26] audit: type=1326 audit(171.260:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff809159e0 code=0x7ffc0000 [ 171.296657][ T26] audit: type=1326 audit(171.260:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff80915c1c code=0x7ffc0000 [ 171.326153][ T26] audit: type=1326 audit(171.260:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 172.134805][ T26] audit: type=1326 audit(171.260:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 172.664247][ T6733] udc-core: couldn't find an available UDC or it's busy [ 172.687131][ T6733] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.719551][ T6736] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.333085][ T6747] binder: 6746:6747 got reply transaction with no transaction stack [ 173.333112][ T6747] binder: 6746:6747 transaction failed 29201/-71, size 0-0 line 2822 [ 173.333849][ T4065] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.839225][ T6764] udc-core: couldn't find an available UDC or it's busy [ 174.851397][ T6764] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.908261][ T6766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1029'. [ 175.070553][ T6772] ebtables: ebtables: counters copy to user failed while replacing table [ 176.280271][ T6767] netlink: 'syz.1.1026': attribute type 10 has an invalid length. [ 176.282140][ T6767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1026'. [ 176.285726][ T6767] bridge0: port 3(veth0_vlan) entered blocking state [ 176.287234][ T6767] bridge0: port 3(veth0_vlan) entered disabled state [ 176.290120][ T6767] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 176.301606][ T4066] Bluetooth: hci3: command 0x0405 tx timeout [ 177.484633][ T6778] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.486915][ T6778] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.488905][ T6778] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.491002][ T6778] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.659132][ T6787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.979030][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1046'. [ 182.685197][ T6828] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.350339][ T6840] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.352725][ T6840] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.354986][ T6840] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.357443][ T6840] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.578191][ T6839] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 184.580049][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'. [ 184.582592][ T6839] bridge0: port 3(veth0_vlan) entered blocking state [ 184.584060][ T6839] bridge0: port 3(veth0_vlan) entered disabled state [ 184.587023][ T6839] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 185.411931][ T6842] udc-core: couldn't find an available UDC or it's busy [ 185.433467][ T6842] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 187.024024][ T26] audit: type=1326 audit(186.890:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 187.060736][ T26] audit: type=1326 audit(186.890:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 187.730371][ T6855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 187.731947][ T6855] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.733834][ T6855] vhci_hcd vhci_hcd.0: Device attached [ 187.738043][ T6856] vhci_hcd: connection closed [ 187.739436][ T136] vhci_hcd: stop threads [ 187.741466][ T136] vhci_hcd: release socket [ 187.743377][ T136] vhci_hcd: disconnect device [ 187.752085][ T26] audit: type=1326 audit(186.980:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff7ee4488c code=0x7ffc0000 [ 187.777015][ T26] audit: type=1326 audit(186.980:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7ee40844 code=0x7ffc0000 [ 187.782320][ T26] audit: type=1326 audit(186.990:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7ee409e0 code=0x7ffc0000 [ 187.825257][ T26] audit: type=1326 audit(187.700:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff7ee40c1c code=0x7ffc0000 [ 187.847083][ T26] audit: type=1326 audit(187.700:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 187.860081][ T26] audit: type=1326 audit(187.700:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.2.1055" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 189.394690][ T6880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.687690][ T6900] udc-core: couldn't find an available UDC or it's busy [ 189.689368][ T6900] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 192.217083][ T26] audit: type=1326 audit(190.910:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 192.233555][ T26] audit: type=1326 audit(190.910:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 192.287113][ T26] audit: type=1326 audit(190.910:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9db2f88c code=0x7ffc0000 [ 192.292016][ T26] audit: type=1326 audit(190.910:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9db2b844 code=0x7ffc0000 [ 192.327566][ T6929] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.378704][ T26] audit: type=1326 audit(190.910:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9db2b9e0 code=0x7ffc0000 [ 192.457909][ T6935] udc-core: couldn't find an available UDC or it's busy [ 192.511863][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.513344][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.557640][ T6935] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 193.645764][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1082'. [ 193.868970][ T6955] bridge0: port 3(gretap0) entered blocking state [ 193.871340][ T6955] bridge0: port 3(gretap0) entered disabled state [ 193.880547][ T6955] device gretap0 entered promiscuous mode [ 193.884393][ T6955] bridge0: port 3(gretap0) entered blocking state [ 193.886036][ T6955] bridge0: port 3(gretap0) entered forwarding state [ 194.101336][ T6955] device gretap0 left promiscuous mode [ 194.104026][ T6955] bridge0: port 3(gretap0) entered disabled state [ 195.020105][ T4023] Bluetooth: hci3: link tx timeout [ 195.021293][ T4023] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 195.023028][ T4023] Bluetooth: hci3: link tx timeout [ 195.024215][ T4023] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.411755][ T6983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.964566][ T7005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.093713][ T7024] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.359922][ T7036] bridge0: port 3(gretap0) entered blocking state [ 201.361475][ T7036] bridge0: port 3(gretap0) entered disabled state [ 201.363673][ T7036] device gretap0 entered promiscuous mode [ 201.365748][ T7036] bridge0: port 3(gretap0) entered blocking state [ 201.367290][ T7036] bridge0: port 3(gretap0) entered forwarding state [ 201.373765][ T7036] device gretap0 left promiscuous mode [ 201.375088][ T7036] bridge0: port 3(gretap0) entered disabled state [ 203.068086][ T7041] udc-core: couldn't find an available UDC or it's busy [ 203.105015][ T7041] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.771934][ T7069] udc-core: couldn't find an available UDC or it's busy [ 206.804837][ T7069] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 209.042697][ T7086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.902625][ T7091] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1117'. [ 209.915580][ T7095] udc-core: couldn't find an available UDC or it's busy [ 209.924859][ T7095] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.137118][ T7098] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1117'. [ 213.660487][ T7122] bridge0: port 3(gretap0) entered blocking state [ 213.662087][ T7122] bridge0: port 3(gretap0) entered disabled state [ 213.664212][ T7122] device gretap0 entered promiscuous mode [ 213.665879][ T7122] bridge0: port 3(gretap0) entered blocking state [ 213.667385][ T7122] bridge0: port 3(gretap0) entered forwarding state [ 213.673780][ T7122] device gretap0 left promiscuous mode [ 213.675289][ T7122] bridge0: port 3(gretap0) entered disabled state [ 215.819388][ T7136] udc-core: couldn't find an available UDC or it's busy [ 215.821028][ T7136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 215.982401][ T7142] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1134'. [ 216.157645][ T7144] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1134'. [ 217.335012][ T7132] could not allocate digest TFM handle sha384-avx [ 218.462016][ T7165] udc-core: couldn't find an available UDC or it's busy [ 218.471494][ T7165] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 218.731747][ T7180] netlink: 87 bytes leftover after parsing attributes in process `syz.3.1148'. [ 218.969630][ T7182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.188484][ T7182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.322283][ T7182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.485030][ T7182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.680673][ T7182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.709367][ T7182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.740777][ T7182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.761507][ T7182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.094826][ T7231] udc-core: couldn't find an available UDC or it's busy [ 221.096429][ T7231] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 224.785619][ T7289] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 227.598129][ T26] audit: type=1326 audit(225.950:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.3.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 227.603096][ T26] audit: type=1326 audit(225.950:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.3.1192" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 227.976817][ T7320] devpts: called with bogus options [ 228.169156][ T7331] udc-core: couldn't find an available UDC or it's busy [ 228.170905][ T7331] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 229.202608][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 230.355159][ T4390] Bluetooth: hci5: Frame reassembly failed (-84) [ 230.561055][ T7369] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1219'. [ 233.158444][ T4228] Bluetooth: hci5: command 0x1003 tx timeout [ 233.159952][ T144] Bluetooth: hci5: sending frame failed (-49) [ 233.678321][ T7391] rdma_rxe: rxe_register_device failed with error -23 [ 233.681340][ T7391] rdma_rxe: failed to add team_slave_0 [ 235.227141][ T4066] Bluetooth: hci5: command 0x1001 tx timeout [ 235.228702][ T144] Bluetooth: hci5: sending frame failed (-49) [ 235.804980][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.808453][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.472199][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.508449][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.928858][ T7405] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.931041][ T7405] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.933155][ T7405] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.935255][ T7405] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.172647][ T7405] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.174847][ T7405] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.178073][ T7405] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.180117][ T7405] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 237.280490][ T7429] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.284864][ T7429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.307303][ T4068] Bluetooth: hci5: command 0x1009 tx timeout [ 238.485489][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 239.735575][ T7465] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1250'. [ 239.993178][ T7470] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1250'. [ 241.693488][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1252'. [ 241.695553][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1252'. [ 243.978246][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 244.675322][ T7524] udc-core: couldn't find an available UDC or it's busy [ 244.676898][ T7524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 245.407070][ T4069] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 245.808905][ T7589] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.811412][ T7589] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.813438][ T7589] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.815439][ T7589] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.837444][ T4069] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.839528][ T4069] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.057867][ T4069] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 246.066049][ T4069] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 246.111478][ T4069] usb 1-1: Manufacturer: syz [ 246.499746][ T4069] usb 1-1: config 0 descriptor?? [ 246.710686][ T4069] Registered IR keymap rc-hauppauge [ 246.816780][ T7606] binder: 7602:7606 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 246.867237][ T4069] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 246.871837][ T4069] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 246.874876][ T4069] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 247.328525][ T7627] udc-core: couldn't find an available UDC or it's busy [ 247.330291][ T7627] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 247.734504][ C1] igorplugusb 1-1:0.0: receive overflow, at least 22 lost [ 247.953996][ T4069] usb 1-1: USB disconnect, device number 17 [ 248.330775][ T7671] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 248.340186][ T7673] netlink: 'syz.4.1333': attribute type 10 has an invalid length. [ 248.405371][ T7673] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 251.355235][ T7713] udc-core: couldn't find an available UDC or it's busy [ 251.374674][ T7713] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 251.484588][ T7720] udc-core: couldn't find an available UDC or it's busy [ 251.486299][ T7720] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 251.506337][ T7720] tipc: Started in network mode [ 251.510144][ T7720] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 251.516866][ T7720] tipc: Enabling of bearer rejected, failed to enable media [ 252.600127][ T7737] udc-core: couldn't find an available UDC or it's busy [ 252.617211][ T7737] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.640861][ T7739] IPVS: Scheduler module ip_vs_noe not found [ 253.256834][ T7764] udc-core: couldn't find an available UDC or it's busy [ 253.265329][ T7764] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 253.570351][ T7785] netlink: 'syz.1.1381': attribute type 2 has an invalid length. [ 253.573479][ T7785] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1381'. [ 253.949170][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.950983][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.985891][ T7803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1384'. [ 254.988071][ T7803] tipc: Invalid UDP bearer configuration [ 254.988305][ T7803] tipc: Enabling of bearer rejected, failed to enable media [ 256.855451][ T7857] netlink: 'syz.3.1405': attribute type 2 has an invalid length. [ 256.857436][ T7857] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1405'. [ 258.523749][ T7870] udc-core: couldn't find an available UDC or it's busy [ 258.557105][ T7870] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.454188][ T7925] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 260.454213][ T7925] CIFS mount error: No usable UNC path provided in device string! [ 260.454213][ T7925] [ 260.454374][ T7925] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 261.715708][ T7955] udc-core: couldn't find an available UDC or it's busy [ 261.717364][ T7955] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.754642][ T7959] tipc: Started in network mode [ 261.755867][ T7959] tipc: Node identity fffffffe, cluster identity 4711 [ 261.770898][ T7959] tipc: Node number set to 4294967294 [ 261.856405][ T7964] device ip6tnl1 entered promiscuous mode [ 262.539463][ T7978] fuse: Unknown parameter 'group_i00000000000000000000' [ 262.642443][ T7982] udc-core: couldn't find an available UDC or it's busy [ 262.648035][ T7982] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 262.668320][ T7985] udc-core: couldn't find an available UDC or it's busy [ 262.669903][ T7985] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 263.554635][ T8000] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 263.967483][ T8017] udc-core: couldn't find an available UDC or it's busy [ 263.977851][ T8017] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 264.237579][ T8023] openvswitch: netlink: Message has 8 unknown bytes. [ 266.363456][ T8036] udc-core: couldn't find an available UDC or it's busy [ 266.365261][ T8036] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 267.466456][ T26] audit: type=1326 audit(267.430:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 267.473011][ T26] audit: type=1326 audit(267.440:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 267.480882][ T26] audit: type=1326 audit(267.450:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=424 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 267.491990][ T26] audit: type=1326 audit(267.450:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 267.517242][ T26] audit: type=1326 audit(267.450:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 267.554194][ T8057] udc-core: couldn't find an available UDC or it's busy [ 267.555980][ T8057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.551906][ T8080] udc-core: couldn't find an available UDC or it's busy [ 268.553765][ T8080] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.558089][ T8076] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1493'. [ 268.559161][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.562285][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.594178][ T8082] device bridge_slave_1 left promiscuous mode [ 268.597377][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.618946][ T8084] udc-core: couldn't find an available UDC or it's busy [ 268.620689][ T8084] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.629078][ T8082] device bridge_slave_0 left promiscuous mode [ 268.630644][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.648821][ T8087] sctp: [Deprecated]: syz.4.1500 (pid 8087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.648821][ T8087] Use struct sctp_sack_info instead [ 268.676582][ T8089] udc-core: couldn't find an available UDC or it's busy [ 268.678590][ T8089] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 268.917140][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 269.145725][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1506'. [ 269.177308][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 269.317505][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 269.507718][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 269.510883][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.516896][ T25] usb 1-1: Product: syz [ 269.548644][ T25] usb 1-1: Manufacturer: syz [ 269.563590][ T25] usb 1-1: SerialNumber: syz [ 269.756443][ T25] usb 1-1: config 0 descriptor?? [ 269.963323][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 270.038675][ T8106] binder: 8104:8106 tried to acquire reference to desc 0, got 1 instead [ 270.052934][ T8106] binder: 8104:8106 got transaction with out-of-order buffer fixup [ 270.060467][ T8106] binder: 8104:8106 transaction failed 29201/-22, size 96-24 line 3299 [ 270.079903][ T7080] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.259351][ T6989] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.063677][ T8131] udc-core: couldn't find an available UDC or it's busy [ 271.065204][ T8131] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 271.338192][ T8142] binder: 8141:8142 tried to acquire reference to desc 0, got 1 instead [ 271.341129][ T8142] binder: 8141:8142 ioctl c0306201 20000200 returned -11 [ 271.343465][ T4066] binder: release 8141:8142 transaction 44 out, still active [ 271.345648][ T4066] binder: undelivered TRANSACTION_COMPLETE [ 271.354407][ T7080] binder: send failed reply for transaction 44, target dead [ 271.577335][ T25] gspca_zc3xx: reg_w_i err -71 [ 271.980348][ T8160] udc-core: couldn't find an available UDC or it's busy [ 271.982125][ T8160] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 272.398608][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 272.421380][ T25] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 272.923546][ T4066] Bluetooth: hci5: command 0x1003 tx timeout [ 272.925301][ T144] Bluetooth: hci5: sending frame failed (-49) [ 272.998012][ T25] usb 1-1: USB disconnect, device number 18 [ 274.188888][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 274.382843][ T8189] udc-core: couldn't find an available UDC or it's busy [ 274.386332][ T8189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 274.574000][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'. [ 274.987175][ T4066] Bluetooth: hci5: command 0x1001 tx timeout [ 274.992354][ T144] Bluetooth: hci5: sending frame failed (-49) [ 275.332730][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 276.527342][ T25] usb 1-1: unable to read config index 0 descriptor/all [ 276.529127][ T25] usb 1-1: can't read configurations, error -71 [ 276.642457][ T8211] loop2: detected capacity change from 0 to 7 [ 276.668187][ T8211] Dev loop2: unable to read RDB block 7 [ 276.669741][ T8211] loop2: unable to read partition table [ 276.671150][ T8211] loop2: partition table beyond EOD, truncated [ 276.708988][ T8211] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 277.790694][ T4066] Bluetooth: hci5: command 0x1009 tx timeout [ 278.199767][ T26] audit: type=1326 audit(278.120:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 278.206762][ T26] audit: type=1326 audit(278.120:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 278.213895][ T26] audit: type=1326 audit(278.160:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff98d1888c code=0x7ffc0000 [ 278.353351][ T26] audit: type=1326 audit(278.160:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff98d14844 code=0x7ffc0000 [ 278.490203][ T8239] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 278.491804][ T8239] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.493868][ T8239] vhci_hcd vhci_hcd.0: Device attached [ 278.569767][ T26] audit: type=1326 audit(278.160:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff98d149e0 code=0x7ffc0000 [ 278.743508][ T8240] vhci_hcd: connection closed [ 278.756451][ T6989] vhci_hcd: stop threads [ 278.759193][ T6989] vhci_hcd: release socket [ 278.762889][ T6989] vhci_hcd: disconnect device [ 278.817646][ T4069] vhci_hcd: vhci_device speed not set [ 278.874724][ T26] audit: type=1326 audit(278.460:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff98d14c1c code=0x7ffc0000 [ 278.879981][ T26] audit: type=1326 audit(278.470:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 278.884837][ T26] audit: type=1326 audit(278.470:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.1559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d162a8 code=0x7ffc0000 [ 278.916564][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.567771][ T26] audit: type=1326 audit(280.510:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 281.131890][ T26] audit: type=1326 audit(280.510:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.0.1575" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 281.182684][ T8254] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 281.184137][ T8254] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 281.185877][ T8254] vhci_hcd vhci_hcd.0: Device attached [ 281.187819][ T8258] vhci_hcd: connection closed [ 281.189057][ T7057] vhci_hcd: stop threads [ 281.190991][ T7057] vhci_hcd: release socket [ 281.192021][ T7057] vhci_hcd: disconnect device [ 281.226014][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1568'. [ 281.233614][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1568'. [ 281.404005][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1568'. [ 281.406343][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1568'. [ 281.428266][ T8270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 281.429769][ T8270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 281.432821][ T8270] vhci_hcd vhci_hcd.0: Device attached [ 281.497476][ T8272] vhci_hcd: connection closed [ 281.505548][ T292] vhci_hcd: stop threads [ 281.509128][ T292] vhci_hcd: release socket [ 281.510152][ T292] vhci_hcd: disconnect device [ 284.467267][ T8303] udc-core: couldn't find an available UDC or it's busy [ 284.468900][ T8303] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 284.475274][ T8301] rdma_op 00000000d25016cd conn xmit_rdma 0000000000000000 [ 284.773802][ T26] audit: type=1326 audit(284.740:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 284.781193][ T26] audit: type=1326 audit(284.740:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 284.810119][ T8309] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 284.811725][ T8309] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.813466][ T8309] vhci_hcd vhci_hcd.0: Device attached [ 284.813513][ T26] audit: type=1326 audit(284.750:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9db2f88c code=0x7ffc0000 [ 284.843868][ T26] audit: type=1326 audit(284.750:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9db2b844 code=0x7ffc0000 [ 284.849123][ T26] audit: type=1326 audit(284.750:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9db2b9e0 code=0x7ffc0000 [ 284.854117][ T26] audit: type=1326 audit(284.780:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9db2bc1c code=0x7ffc0000 [ 284.859441][ T26] audit: type=1326 audit(284.780:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 284.863941][ T26] audit: type=1326 audit(284.780:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9db2d2a8 code=0x7ffc0000 [ 285.376062][ T8314] vhci_hcd: connection closed [ 285.444021][ T8336] udc-core: couldn't find an available UDC or it's busy [ 285.453020][ T8336] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 285.637258][ T4131] usb 10-1: new high-speed USB device number 3 using vhci_hcd [ 285.677858][ T292] vhci_hcd: stop threads [ 285.687730][ T292] vhci_hcd: release socket [ 285.689185][ T292] vhci_hcd: disconnect device [ 286.286033][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 286.318803][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 286.485765][ T8357] tmpfs: Unknown parameter 'usrquota' [ 286.676412][ T8359] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1600'. [ 286.679685][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1600'. [ 287.437769][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 287.439735][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1597'. [ 287.806679][ T8361] tipc: Started in network mode [ 287.807993][ T8361] tipc: Node identity ac1414aa, cluster identity 4711 [ 287.812603][ T8361] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.814683][ T8361] tipc: Enabled bearer , priority 10 [ 287.948646][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.097158][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.176868][ T8389] udc-core: couldn't find an available UDC or it's busy [ 288.186712][ T8389] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 288.255498][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.310155][ T26] audit: type=1326 audit(288.280:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 288.315530][ T26] audit: type=1326 audit(288.280:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.2.1610" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 288.322035][ T8391] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 288.323531][ T8391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.325531][ T8391] vhci_hcd vhci_hcd.0: Device attached [ 288.387193][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.406933][ T8398] udc-core: couldn't find an available UDC or it's busy [ 288.408743][ T8398] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 288.537072][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.677164][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.942709][ T8392] vhci_hcd: connection closed [ 288.968159][ T136] vhci_hcd: stop threads [ 288.970523][ T136] vhci_hcd: release socket [ 289.012670][ T136] vhci_hcd: disconnect device [ 289.192541][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 289.253818][ T4069] tipc: Node number set to 2886997162 [ 289.387190][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.388419][ T8408] binder: 8404:8408 got reply transaction with no transaction stack [ 289.390794][ T8408] binder: 8404:8408 transaction failed 29201/-71, size 0-0 line 2822 [ 289.395629][ T4228] binder: undelivered TRANSACTION_ERROR: 29201 [ 289.667134][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.683582][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 289.691178][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 290.134460][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1629'. [ 290.207100][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.730231][ T8453] udc-core: couldn't find an available UDC or it's busy [ 290.731809][ T8453] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 291.674523][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 291.674540][ T26] audit: type=1326 audit(290.910:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 291.694940][ T26] audit: type=1326 audit(290.910:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 291.721152][ T4131] vhci_hcd: vhci_device speed not set [ 291.740955][ T26] audit: type=1326 audit(290.910:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff94b9388c code=0x7ffc0000 [ 291.745983][ T26] audit: type=1326 audit(290.910:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff94b8f844 code=0x7ffc0000 [ 291.761294][ T26] audit: type=1326 audit(290.910:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff94b8f9e0 code=0x7ffc0000 [ 291.769799][ T8456] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 291.771211][ T8456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 291.773246][ T8456] vhci_hcd vhci_hcd.0: Device attached [ 291.778831][ T8459] vhci_hcd: connection closed [ 291.779119][ T4538] vhci_hcd: stop threads [ 291.781187][ T4538] vhci_hcd: release socket [ 291.782089][ T4538] vhci_hcd: disconnect device [ 291.783416][ T26] audit: type=1326 audit(291.740:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff94b8fc1c code=0x7ffc0000 [ 291.797489][ T26] audit: type=1326 audit(291.740:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 291.805703][ T26] audit: type=1326 audit(291.740:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8445 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b912a8 code=0x7ffc0000 [ 293.377782][ T8477] __nla_validate_parse: 1 callbacks suppressed [ 293.377796][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1647'. [ 294.307361][ C1] net_ratelimit: 2 callbacks suppressed [ 294.307376][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 294.359095][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1650'. [ 294.361303][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1650'. [ 294.574203][ T8487] netlink: 'syz.2.1651': attribute type 2 has an invalid length. [ 294.587145][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1650'. [ 294.589224][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1650'. [ 294.957346][ T26] audit: type=1326 audit(294.920:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 294.974954][ T26] audit: type=1326 audit(294.920:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff809172a8 code=0x7ffc0000 [ 294.996748][ T8507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 294.998181][ T8507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 295.000023][ T8507] vhci_hcd vhci_hcd.0: Device attached [ 295.267193][ T4068] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 295.387267][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 295.504852][ T8510] vhci_hcd: connection reset by peer [ 295.509469][ T136] vhci_hcd: stop threads [ 295.510593][ T136] vhci_hcd: release socket [ 295.512516][ T136] vhci_hcd: disconnect device [ 295.577325][ T4228] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 295.937312][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.939859][ T4228] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.077269][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.079902][ T4228] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.163498][ T4228] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.165900][ T4228] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.217746][ T8539] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1668'. [ 296.427141][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.467234][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.507689][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.617864][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 298.617879][ T26] audit: type=1326 audit(297.150:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 298.624009][ T26] audit: type=1326 audit(297.150:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ee422a8 code=0x7ffc0000 [ 298.638575][ T4066] Bluetooth: hci3: command 0x0405 tx timeout [ 298.677216][ T4228] usb 1-1: string descriptor 0 read error: -71 [ 298.678667][ T4228] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 298.680851][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.683387][ T26] audit: type=1326 audit(297.150:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff7ee4488c code=0x7ffc0000 [ 298.684809][ T4228] usb 1-1: config 0 descriptor?? [ 298.699997][ T26] audit: type=1326 audit(297.150:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7ee40844 code=0x7ffc0000 [ 298.745978][ T26] audit: type=1326 audit(297.150:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7ee409e0 code=0x7ffc0000 [ 298.857806][ T4228] usb 1-1: can't set config #0, error -71 [ 298.861465][ T4228] usb 1-1: USB disconnect, device number 21 [ 298.997836][ T8574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1676'. [ 299.001789][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 299.547112][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.587086][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.073696][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1697'. [ 301.107117][ T4068] vhci_hcd: vhci_device speed not set [ 301.627122][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 301.713442][ T8654] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1705'. [ 301.721649][ T8653] udc-core: couldn't find an available UDC or it's busy [ 301.723524][ T8653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 302.667120][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 302.851871][ T8663] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1711'. [ 303.164922][ T8673] udc-core: couldn't find an available UDC or it's busy [ 303.166702][ T8673] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.249446][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 303.330823][ T8678] device bond2 entered promiscuous mode [ 303.344522][ T8678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.348046][ T8681] udc-core: couldn't find an available UDC or it's busy [ 303.349634][ T8681] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.707142][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.747105][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 304.890293][ T8711] netlink: 'syz.2.1728': attribute type 32 has an invalid length. [ 305.787187][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 306.007642][ T8727] udc-core: couldn't find an available UDC or it's busy [ 306.014756][ T8727] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 306.827096][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 307.763961][ T8756] netlink: 'syz.4.1743': attribute type 4 has an invalid length. [ 307.867113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 308.411754][ T8786] 9pnet: p9_errstr2errno: server reported unknown error @ [ 308.561859][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 308.907134][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 309.947124][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.618675][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1772'. [ 310.987114][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.027117][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.067113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 313.318794][ T8877] netlink: 'syz.2.1794': attribute type 4 has an invalid length. [ 314.107177][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.448936][ T8908] netlink: 'syz.1.1807': attribute type 1 has an invalid length. [ 314.450944][ T8908] netlink: 'syz.1.1807': attribute type 2 has an invalid length. [ 314.506461][ T8913] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 314.703207][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1814'. [ 314.779814][ T8933] [ 314.780428][ T8933] ====================================================== [ 314.782145][ T8933] WARNING: possible circular locking dependency detected [ 314.783939][ T8933] 5.15.172-syzkaller #0 Not tainted [ 314.785107][ T8933] ------------------------------------------------------ [ 314.786695][ T8933] syz.2.1812/8933 is trying to acquire lock: [ 314.787998][ T8933] ffff0000c1c94c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 314.790532][ T8933] [ 314.790532][ T8933] but task is already holding lock: [ 314.792313][ T8933] ffff800016e77228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 314.794526][ T8933] [ 314.794526][ T8933] which lock already depends on the new lock. [ 314.794526][ T8933] [ 314.797003][ T8933] [ 314.797003][ T8933] the existing dependency chain (in reverse order) is: [ 314.799136][ T8933] [ 314.799136][ T8933] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 314.800912][ T8933] __mutex_lock_common+0x194/0x2154 [ 314.802282][ T8933] mutex_lock_nested+0xa4/0xf8 [ 314.803482][ T8933] rfkill_register+0x44/0x7a4 [ 314.804696][ T8933] hci_register_dev+0x3e0/0x880 [ 314.806073][ T8933] vhci_create_device+0x2c4/0x568 [ 314.807454][ T8933] vhci_write+0x318/0x3b8 [ 314.808611][ T8933] vfs_write+0x884/0xb44 [ 314.809754][ T8933] ksys_write+0x15c/0x26c [ 314.810886][ T8933] __arm64_sys_write+0x7c/0x90 [ 314.812121][ T8933] invoke_syscall+0x98/0x2b8 [ 314.813283][ T8933] el0_svc_common+0x138/0x258 [ 314.814560][ T8933] do_el0_svc+0x58/0x14c [ 314.815594][ T8933] el0_svc+0x7c/0x1f0 [ 314.816636][ T8933] el0t_64_sync_handler+0x84/0xe4 [ 314.817893][ T8933] el0t_64_sync+0x1a0/0x1a4 [ 314.819005][ T8933] [ 314.819005][ T8933] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 314.820994][ T8933] __mutex_lock_common+0x194/0x2154 [ 314.822349][ T8933] mutex_lock_nested+0xa4/0xf8 [ 314.823544][ T8933] vhci_send_frame+0x8c/0x10c [ 314.824722][ T8933] hci_send_frame+0x194/0x2f0 [ 314.825863][ T8933] hci_tx_work+0x9ac/0x16cc [ 314.827012][ T8933] process_one_work+0x790/0x11b8 [ 314.828250][ T8933] worker_thread+0x910/0x1034 [ 314.829501][ T8933] kthread+0x37c/0x45c [ 314.830567][ T8933] ret_from_fork+0x10/0x20 [ 314.831729][ T8933] [ 314.831729][ T8933] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 314.833898][ T8933] __flush_work+0xf8/0x1c0 [ 314.835044][ T8933] flush_work+0x24/0x38 [ 314.836064][ T8933] hci_dev_do_close+0x16c/0x1060 [ 314.837370][ T8933] hci_error_reset+0xec/0x2b8 [ 314.838566][ T8933] process_one_work+0x790/0x11b8 [ 314.839824][ T8933] worker_thread+0x910/0x1034 [ 314.841065][ T8933] kthread+0x37c/0x45c [ 314.842140][ T8933] ret_from_fork+0x10/0x20 [ 314.843206][ T8933] [ 314.843206][ T8933] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 314.844985][ T8933] __mutex_lock_common+0x194/0x2154 [ 314.846321][ T8933] mutex_lock_nested+0xa4/0xf8 [ 314.847543][ T8933] bg_scan_update+0x9c/0x470 [ 314.848711][ T8933] process_one_work+0x790/0x11b8 [ 314.850069][ T8933] worker_thread+0x910/0x1034 [ 314.851237][ T8933] kthread+0x37c/0x45c [ 314.852273][ T8933] ret_from_fork+0x10/0x20 [ 314.853390][ T8933] [ 314.853390][ T8933] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 314.855731][ T8933] __lock_acquire+0x32d4/0x7638 [ 314.856939][ T8933] lock_acquire+0x240/0x77c [ 314.858110][ T8933] __flush_work+0xf8/0x1c0 [ 314.859265][ T8933] __cancel_work_timer+0x3ec/0x548 [ 314.860545][ T8933] cancel_work_sync+0x24/0x38 [ 314.861787][ T8933] hci_request_cancel_all+0xcc/0x2d0 [ 314.863103][ T8933] hci_dev_do_close+0x54/0x1060 [ 314.864328][ T8933] hci_rfkill_set_block+0xdc/0x1d0 [ 314.865529][ T8933] rfkill_set_block+0x18c/0x37c [ 314.866764][ T8933] rfkill_fop_write+0x594/0x750 [ 314.867994][ T8933] vfs_write+0x280/0xb44 [ 314.869060][ T8933] ksys_write+0x15c/0x26c [ 314.870123][ T8933] __arm64_sys_write+0x7c/0x90 [ 314.871301][ T8933] invoke_syscall+0x98/0x2b8 [ 314.872426][ T8933] el0_svc_common+0x138/0x258 [ 314.873592][ T8933] do_el0_svc+0x58/0x14c [ 314.874675][ T8933] el0_svc+0x7c/0x1f0 [ 314.875766][ T8933] el0t_64_sync_handler+0x84/0xe4 [ 314.877088][ T8933] el0t_64_sync+0x1a0/0x1a4 [ 314.878253][ T8933] [ 314.878253][ T8933] other info that might help us debug this: [ 314.878253][ T8933] [ 314.880580][ T8933] Chain exists of: [ 314.880580][ T8933] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 314.880580][ T8933] [ 314.884161][ T8933] Possible unsafe locking scenario: [ 314.884161][ T8933] [ 314.885876][ T8933] CPU0 CPU1 [ 314.887114][ T8933] ---- ---- [ 314.888392][ T8933] lock(rfkill_global_mutex); [ 314.889563][ T8933] lock(&data->open_mutex); [ 314.891280][ T8933] lock(rfkill_global_mutex); [ 314.892915][ T8933] lock((work_completion)(&hdev->bg_scan_update)); [ 314.894311][ T8933] [ 314.894311][ T8933] *** DEADLOCK *** [ 314.894311][ T8933] [ 314.896190][ T8933] 1 lock held by syz.2.1812/8933: [ 314.897316][ T8933] #0: ffff800016e77228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 314.899696][ T8933] [ 314.899696][ T8933] stack backtrace: [ 314.901051][ T8933] CPU: 0 PID: 8933 Comm: syz.2.1812 Not tainted 5.15.172-syzkaller #0 [ 314.902926][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 314.905182][ T8933] Call trace: [ 314.905923][ T8933] dump_backtrace+0x0/0x530 [ 314.906949][ T8933] show_stack+0x2c/0x3c [ 314.907886][ T8933] dump_stack_lvl+0x108/0x170 [ 314.909032][ T8933] dump_stack+0x1c/0x58 [ 314.910018][ T8933] print_circular_bug+0x150/0x1b8 [ 314.911145][ T8933] check_noncircular+0x2cc/0x378 [ 314.912288][ T8933] __lock_acquire+0x32d4/0x7638 [ 314.913327][ T8933] lock_acquire+0x240/0x77c [ 314.914348][ T8933] __flush_work+0xf8/0x1c0 [ 314.915402][ T8933] __cancel_work_timer+0x3ec/0x548 [ 314.916619][ T8933] cancel_work_sync+0x24/0x38 [ 314.917729][ T8933] hci_request_cancel_all+0xcc/0x2d0 [ 314.918894][ T8933] hci_dev_do_close+0x54/0x1060 [ 314.920059][ T8933] hci_rfkill_set_block+0xdc/0x1d0 [ 314.921273][ T8933] rfkill_set_block+0x18c/0x37c [ 314.922537][ T8933] rfkill_fop_write+0x594/0x750 [ 314.923575][ T8933] vfs_write+0x280/0xb44 [ 314.924610][ T8933] ksys_write+0x15c/0x26c [ 314.925562][ T8933] __arm64_sys_write+0x7c/0x90 [ 314.926593][ T8933] invoke_syscall+0x98/0x2b8 [ 314.927593][ T8933] el0_svc_common+0x138/0x258 [ 314.928608][ T8933] do_el0_svc+0x58/0x14c [ 314.929462][ T8933] el0_svc+0x7c/0x1f0 [ 314.930394][ T8933] el0t_64_sync_handler+0x84/0xe4 [ 314.931509][ T8933] el0t_64_sync+0x1a0/0x1a4 [ 314.935568][ T4131] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 315.147113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 315.387866][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.389465][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.399401][ T4131] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.401872][ T4131] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.404037][ T4131] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.405538][ T4131] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 315.408738][ T4131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.412096][ T4131] usb 1-1: config 0 descriptor?? [ 315.888409][ T4131] kovaplus 0003:1E7D:2D50.0006: bogus close delimiter [ 315.890397][ T4131] kovaplus 0003:1E7D:2D50.0006: item 0 0 2 10 parsing failed [ 315.892453][ T4131] kovaplus 0003:1E7D:2D50.0006: parse failed [ 315.893840][ T4131] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -22 [ 316.091280][ T4064] usb 1-1: USB disconnect, device number 22 [ 316.187092][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 317.227082][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 318.267091][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 319.317090][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 320.347089][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 321.387078][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 322.437086][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 323.467113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.507176][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available