last executing test programs: 13.153886059s ago: executing program 2 (id=1947): syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x200, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x4f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 11.412055194s ago: executing program 1 (id=1950): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf4f044, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r1, &(0x7f00000002c0)=""/183, 0xeb) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="18273f74ac0000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000000090000000000007010000f8ffffffffff000000000000b703000000000000850000000600000095", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = mq_open(&(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0, &(0x7f0000000480)={0x2, 0x4, 0x6, 0x1000}) mq_getsetattr(r5, &(0x7f0000000500)={0x4, 0x2, 0x2, 0x6}, &(0x7f0000000540)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) poll(&(0x7f0000000440)=[{r0, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 10.138142413s ago: executing program 1 (id=1953): unshare(0x22020600) socket(0x2, 0x80805, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 9.924211936s ago: executing program 0 (id=1955): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001f80)={0x2020}, 0x2020) 9.905449236s ago: executing program 0 (id=1956): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000002640)=0x200, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000936aaa605030000000000000000058300080900010073797a3100000000080005400000000708000340000000030800054000b361ddb5dcf4c365b20a4ace57dba67a5ed5d1288ba4707a42f219425de672642a554f3da0dbf8ad9df773e4e7a0f402aa2c67641bf575920f66093f5f1b587061165e36dc0ed4df03d9c57c4cefa806c1267dabc05d6f5c6f895157b70f3ecb62b1e87124cb55254a681f"], 0x38}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.771492523s ago: executing program 2 (id=1957): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r0, &(0x7f0000000080)='mounts\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4840) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) socket$kcm(0x2, 0xd, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x1898000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 8.751293463s ago: executing program 0 (id=1958): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.56812277s ago: executing program 0 (id=1959): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x1c, 0x820}, @val={0x2, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x2f, 0xfa7, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2, 0x5}, 0x2, {0x4, 0x7, 0x1, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d4327899e67566f565f3b6f39267f8c1581a1d8e5602fb9e8b83f6e62135bda4a2e2668dee614bc3d82d4cd01b4541722c422f05b5116e84f028cd53bbcfde9ae71d721f04b1bc50aadbf9f369386617c5d7ea8b4f643e92406b0a8b7ed306f46d7267b7b58fd7f498ddf2955dd47068"}}}}}, 0xfb5) 6.659090623s ago: executing program 0 (id=1961): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x802}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x3, @mcast2, 0x6}, @in6={0xa, 0x4e24, 0x3, @private0, 0x5}, @in={0x2, 0x4e23, @empty}], 0x48) 5.076170186s ago: executing program 1 (id=1963): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 4.912364539s ago: executing program 3 (id=1964): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 4.84028492s ago: executing program 1 (id=1965): read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020}, 0x2020) 4.628045493s ago: executing program 1 (id=1966): syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) openat$audio1(0xffffff9c, &(0x7f0000000240), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x200, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x4f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 4.235374089s ago: executing program 2 (id=1967): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000002640)=0x200, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000936aaa605030000000000000000058300080900010073797a3100000000080005400000000708000340000000030800054000b361ddb5dcf4c365b20a4ace57dba67a5ed5d1288ba4707a42f219425de672642a554f3da0dbf8ad9df773e4e7a0f402aa2c67641bf575920f66093f5f1b587061165e36dc0ed4df03d9c57c4cefa806c1267dabc05d6f5c6f895157b70f3ecb62b1e87124cb55254a681f"], 0x38}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.087214845s ago: executing program 2 (id=1968): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x3, 0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.848114348s ago: executing program 0 (id=1969): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x802}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) 2.73072046s ago: executing program 3 (id=1970): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x1c, 0x820}, @val={0x2, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x2f, 0xfa7, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2, 0x5}, 0x2, {0x4, 0x7, 0x1, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d4327899e67566f565f3b6f39267f8c1581a1d8e5602fb9e8b83f6e62135bda4a2e2668dee614bc3d82d4cd01b4541722c422f05b5116e84f028cd53bbcfde9ae71d721f04b1bc50aadbf9f369386617c5d7ea8b4f643e92406b0a8b7ed306f46d7267b7b58fd7f498ddf2955dd47068"}}}}}, 0xfb5) 2.458656274s ago: executing program 3 (id=1971): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf4f044, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r1, &(0x7f00000002c0)=""/183, 0xeb) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="18273f74ac0000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000000090000000000007010000f8ffffffffff000000000000b703000000000000850000000600000095", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = mq_open(&(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0, &(0x7f0000000480)={0x2, 0x4, 0x6, 0x1000}) mq_getsetattr(r5, &(0x7f0000000500)={0x4, 0x2, 0x2, 0x6}, &(0x7f0000000540)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) poll(&(0x7f0000000440)=[{r0, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 1.471819429s ago: executing program 2 (id=1972): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf4f044, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r1, &(0x7f00000002c0)=""/183, 0xeb) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="18273f74ac0000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000000090000000000007010000f8ffffffffff000000000000b703000000000000850000000600000095", @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = mq_open(&(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0, &(0x7f0000000480)={0x2, 0x4, 0x6, 0x1000}) mq_getsetattr(r5, &(0x7f0000000500)={0x4, 0x2, 0x2, 0x6}, &(0x7f0000000540)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00'}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) poll(&(0x7f0000000440)=[{r0, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 1.346273501s ago: executing program 3 (id=1973): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) 271.150896ms ago: executing program 2 (id=1974): read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020}, 0x2020) 173.663668ms ago: executing program 3 (id=1975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1.62035ms ago: executing program 3 (id=1976): r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000002640)=0x200, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000000936aaa605030000000000000000058300080900010073797a3100000000080005400000000708000340000000030800054000b361ddb5dcf4c365b20a4ace57dba67a5ed5d1288ba4707a42f219425de672642a554f3da0dbf8ad9df773e4e7a0f402aa2c67641bf575920f66093f5f1b587061165e36dc0ed4df03d9c57c4cefa806c1267dabc05d6f5c6f895157b70f3ecb62b1e87124cb55254a681f"], 0x38}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 0s ago: executing program 1 (id=1977): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x802}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x3, @mcast2, 0x6}, @in6={0xa, 0x4e24, 0x3, @private0, 0x5}, @in={0x2, 0x4e23, @empty}], 0x48) kernel console output (not intermixed with test programs): ] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.087480][ T786] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.191218][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.404814][ T786] usb 2-1: config 0 descriptor?? [ 160.425295][ T786] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 160.663380][ T5828] usb 2-1: USB disconnect, device number 2 [ 161.612153][ T6441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.619768][ T6441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.628527][ T6441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.637539][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 161.641033][ T6441] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.686783][ T6441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.802477][ T6451] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 161.931998][ T6454] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.181'. [ 162.590827][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.630913][ T5791] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.630995][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.710901][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.711608][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.997085][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.343607][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 167.479517][ T6500] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.195'. [ 167.506523][ T6501] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 167.515054][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 167.539566][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.953318][ T27] usb 3-1: config 0 has no interface number 0 [ 168.436032][ T27] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.471055][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.527395][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.592819][ T27] usb 3-1: config 0 descriptor?? [ 168.603013][ T27] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 168.623237][ T6501] bond0: (slave wlan1): Releasing backup interface [ 168.727434][ T6501] team0: Port device wlan1 added [ 168.805401][ T5828] usb 3-1: USB disconnect, device number 4 [ 173.230634][ T6540] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.206'. [ 174.447275][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 174.511629][ T5880] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.647356][ T6555] netlink: 'syz.2.210': attribute type 10 has an invalid length. [ 174.744398][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 174.772063][ T5880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.832611][ T5880] usb 1-1: config 0 has no interface number 0 [ 174.859497][ T5880] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.913054][ T5880] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.959540][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.041431][ T5880] usb 1-1: config 0 descriptor?? [ 175.181799][ T5880] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 175.320992][ T5828] usb 1-1: USB disconnect, device number 3 [ 177.219425][ T6575] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.218'. [ 180.250777][ T786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 180.491968][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 180.530873][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 180.556349][ T786] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.585530][ T786] usb 4-1: config 0 has no interface number 0 [ 180.592525][ T786] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.614324][ T786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.624396][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.683245][ T786] usb 4-1: config 0 descriptor?? [ 180.695867][ T6606] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 180.737844][ T786] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 180.916735][ T786] usb 4-1: USB disconnect, device number 8 [ 182.864081][ T6616] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.229'. [ 185.770855][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.990842][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 186.009195][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.040822][ T8] usb 4-1: config 0 has no interface number 0 [ 186.086967][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 186.137639][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.152392][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.398666][ T8] usb 4-1: config 0 descriptor?? [ 186.571490][ T8] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 187.062965][ T8] usb 4-1: USB disconnect, device number 9 [ 187.556845][ T6659] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.242'. [ 188.798938][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 189.072370][ T6670] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 191.917428][ T6700] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.254'. [ 192.070785][ T786] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.920827][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 192.964287][ T786] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.995833][ T786] usb 4-1: config 0 has no interface number 0 [ 193.013471][ T786] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.026339][ T786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 193.043816][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.077833][ T786] usb 4-1: config 0 descriptor?? [ 193.104947][ T786] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 193.326175][ T786] usb 4-1: USB disconnect, device number 10 [ 194.755231][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.762147][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.205999][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 195.370829][ T6731] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 196.141334][ T6737] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.266'. [ 197.858009][ T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 198.090918][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 198.101639][ T786] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.118217][ T786] usb 1-1: config 0 has no interface number 0 [ 198.155628][ T786] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.189971][ T786] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.218860][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.259453][ T786] usb 1-1: config 0 descriptor?? [ 198.328559][ T786] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 198.526878][ T786] usb 1-1: USB disconnect, device number 4 [ 200.129659][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 200.234881][ T6780] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.279'. [ 201.241756][ T6782] netlink: 'syz.3.280': attribute type 10 has an invalid length. [ 202.944108][ T5777] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.240848][ T5777] usb 4-1: Using ep0 maxpacket: 8 [ 203.253973][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.262444][ T5777] usb 4-1: config 0 has no interface number 0 [ 203.269533][ T5777] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.284616][ T5777] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.294197][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.309119][ T5777] usb 4-1: config 0 descriptor?? [ 203.317210][ T5777] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 203.525298][ T5777] usb 4-1: USB disconnect, device number 11 [ 204.972635][ T6818] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.291'. [ 206.657069][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 206.991343][ T6838] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 209.569978][ T6861] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.302'. [ 210.042047][ T5880] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.431108][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 215.753912][ T6898] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 215.780789][ T5777] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.970900][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 215.980568][ T5777] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.000877][ T5777] usb 3-1: config 0 has no interface number 0 [ 216.037271][ T5777] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.058129][ T5777] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.082079][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.098736][ T5777] usb 3-1: config 0 descriptor?? [ 216.125964][ T5777] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 216.332244][ T5777] usb 3-1: USB disconnect, device number 6 [ 217.457904][ T6914] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.316'. [ 221.888949][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 221.970891][ T5828] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.054282][ T6948] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 222.210778][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 222.224892][ T5828] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.243441][ T5828] usb 3-1: config 0 has no interface number 0 [ 222.262299][ T5828] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.283313][ T5828] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.303222][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.324566][ T5828] usb 3-1: config 0 descriptor?? [ 222.337580][ T5828] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 222.541031][ T5828] usb 3-1: USB disconnect, device number 7 [ 223.053146][ T6957] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.330'. [ 229.640846][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.821255][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 229.854053][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.877881][ T23] usb 4-1: config 0 has no interface number 0 [ 229.921060][ T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.970804][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.133057][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.144622][ T23] usb 4-1: config 0 descriptor?? [ 230.157332][ T23] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 230.170966][ T5102] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 230.305705][ T7005] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 230.777047][ T5867] usb 4-1: USB disconnect, device number 12 [ 231.278639][ T7012] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.345'. [ 233.632922][ T7022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.646988][ T7022] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 233.697145][ T7022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.713135][ T7022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.719772][ T7022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.001722][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.724618][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.790810][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.797050][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.963031][ T7053] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.358'. [ 237.195414][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 237.203125][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.232720][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 237.390761][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 237.398287][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.423554][ T23] usb 3-1: config 0 has no interface number 0 [ 237.429738][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.489151][ T7062] netlink: 'syz.3.359': attribute type 10 has an invalid length. [ 237.497275][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 237.507599][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.519016][ T23] usb 3-1: config 0 descriptor?? [ 237.527765][ T23] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 237.729993][ T23] usb 3-1: USB disconnect, device number 8 [ 238.889946][ T7071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 238.901699][ T7071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.916453][ T7071] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 238.936829][ T7071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.944038][ T7071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.518490][ T7085] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.368'. [ 240.190869][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.990788][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 240.997036][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.003659][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.561425][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.781678][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 242.816642][ T5831] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.862099][ T5831] usb 2-1: config 0 has no interface number 0 [ 242.868347][ T5831] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.909353][ T5831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.919506][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.938176][ T5831] usb 2-1: config 0 descriptor?? [ 242.946829][ T5831] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 243.080830][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.300851][ T5880] usb 2-1: USB disconnect, device number 3 [ 243.746111][ T7111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.753940][ T7111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.760096][ T7111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 243.766609][ T7111] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 243.797422][ T7111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.964228][ T7121] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.380'. [ 244.080928][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 244.340934][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 244.414296][ T5867] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 244.490402][ T5867] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 244.598140][ T5867] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 244.733892][ T5867] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 244.980942][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.987159][ T5867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.005039][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 245.014945][ T5867] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 245.036077][ T5867] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 245.045093][ T5867] usb 3-1: Product: syz [ 245.049388][ T5867] usb 3-1: Manufacturer: syz [ 245.054646][ T5867] usb 3-1: SerialNumber: syz [ 245.093039][ T5867] usb 3-1: config 0 descriptor?? [ 245.162413][ T5867] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 245.266456][ T5867] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 245.288358][ T7132] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 245.571381][ T7133] loop6: detected capacity change from 0 to 524287999 [ 245.716821][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.726286][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.772484][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.781740][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.811552][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.064827][ T7138] netlink: 244 bytes leftover after parsing attributes in process `syz.2.377'. [ 246.087280][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.174310][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.183686][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.299294][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.308544][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.328932][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.338197][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.356354][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.365629][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.380920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.390167][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.417099][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.426381][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.435623][ T7133] ldm_validate_partition_table(): Disk read failed. [ 246.465350][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.474630][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.483138][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 246.492366][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.501887][ T7133] Dev loop6: unable to read RDB block 0 [ 246.510184][ T7133] loop6: unable to read partition table [ 246.528912][ T7133] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 246.596631][ T5831] usb 3-1: USB disconnect, device number 9 [ 246.720367][ T5831] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 248.112341][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.767345][ T7170] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.390'. [ 250.542787][ T7166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.601329][ T7166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 250.641871][ T7166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.648064][ T7166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.684846][ T7166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.980730][ T5831] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.200803][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 251.208041][ T5831] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.221549][ T5831] usb 4-1: config 0 has no interface number 0 [ 251.261845][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.292910][ T5831] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.329855][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.514598][ T5831] usb 4-1: config 0 descriptor?? [ 251.539705][ T5831] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 251.555374][ T5102] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 251.712870][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 251.723452][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.796696][ T5831] usb 4-1: USB disconnect, device number 13 [ 251.846475][ T7192] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 251.930965][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 251.945908][ T23] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 251.956272][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 251.968520][ T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 251.980200][ T23] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 251.993879][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 252.003918][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 252.013496][ T23] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 252.022239][ T23] usb 1-1: Product: syz [ 252.026748][ T23] usb 1-1: Manufacturer: syz [ 252.031768][ T23] usb 1-1: SerialNumber: syz [ 252.040468][ T23] usb 1-1: config 0 descriptor?? [ 252.058908][ T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 252.074914][ T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 252.704279][ T7194] loop6: detected capacity change from 0 to 524287999 [ 252.710934][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.751033][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 252.779254][ T7195] netlink: 244 bytes leftover after parsing attributes in process `syz.0.395'. [ 252.850370][ C0] blk_print_req_error: 9 callbacks suppressed [ 252.850409][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.865988][ C0] buffer_io_error: 8 callbacks suppressed [ 252.866023][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.904047][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.913382][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.934945][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.944269][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.962895][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 252.972131][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.993973][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.003345][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.031818][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.041068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.063029][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.072245][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.080768][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.089934][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.097836][ T7194] ldm_validate_partition_table(): Disk read failed. [ 253.191541][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.200829][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.225861][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.235137][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.247904][ T7194] Dev loop6: unable to read RDB block 0 [ 253.254878][ T7194] loop6: unable to read partition table [ 253.264260][ T7194] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 253.472973][ T5157] ldm_validate_partition_table(): Disk read failed. [ 253.486112][ T5157] Dev loop6: unable to read RDB block 0 [ 253.510130][ T5157] loop6: unable to read partition table [ 253.520305][ T23] usb 1-1: USB disconnect, device number 5 [ 253.543600][ T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 253.811997][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.666418][ T7205] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.400'. [ 257.269078][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.282527][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.163017][ T7219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.186656][ T7219] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.193466][ T7219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.199889][ T7219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.214999][ T7219] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.521223][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 258.801717][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 258.823109][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 258.837326][ T5831] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.846252][ T5831] usb 2-1: config 0 has no interface number 0 [ 258.852893][ T5831] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.863315][ T5831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.872809][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.884845][ T5831] usb 2-1: config 0 descriptor?? [ 258.894490][ T5831] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 258.975285][ T7235] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 259.103126][ T5831] usb 2-1: USB disconnect, device number 4 [ 259.550816][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.836938][ T7242] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.411'. [ 260.190821][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.270744][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.740762][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 260.947143][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 260.966991][ T23] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 261.130971][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 261.157023][ T23] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 261.168810][ T23] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 261.182518][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 261.192865][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 261.210699][ T23] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 261.230740][ T23] usb 2-1: Product: syz [ 261.235062][ T23] usb 2-1: Manufacturer: syz [ 261.249871][ T23] usb 2-1: SerialNumber: syz [ 261.287350][ T23] usb 2-1: config 0 descriptor?? [ 261.332386][ T23] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 261.345306][ T23] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 262.262194][ T7258] loop6: detected capacity change from 0 to 524287999 [ 262.426675][ T7259] netlink: 244 bytes leftover after parsing attributes in process `syz.1.410'. [ 262.719092][ C1] blk_print_req_error: 26 callbacks suppressed [ 262.719117][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.734574][ C1] buffer_io_error: 25 callbacks suppressed [ 262.734584][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.750986][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.767454][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.776664][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.800660][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.810107][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.820970][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.830187][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.838782][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.847992][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.880738][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.889947][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.942009][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.951320][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.960404][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.969591][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 262.992540][ T7258] ldm_validate_partition_table(): Disk read failed. [ 263.017370][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.026605][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 263.040785][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.050121][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 263.069516][ T7258] Dev loop6: unable to read RDB block 0 [ 263.111468][ T7258] loop6: unable to read partition table [ 263.128575][ T7258] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 263.207568][ T8] usb 2-1: USB disconnect, device number 5 [ 263.215079][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 264.680864][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 264.859033][ T7277] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.421'. [ 264.883398][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 265.646464][ T7269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.657118][ T7269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.666917][ T7269] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 265.687102][ T7269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.697495][ T7269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.808506][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.820938][ T8] usb 4-1: config 0 has no interface number 0 [ 265.869743][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.913790][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.931828][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.962947][ T8] usb 4-1: config 0 descriptor?? [ 265.973824][ T8] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 266.271748][ T5791] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 266.358679][ T6864] usb 4-1: USB disconnect, device number 14 [ 266.528515][ T7287] netlink: 'syz.2.423': attribute type 10 has an invalid length. [ 267.711437][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.717692][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.723925][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.920931][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 268.220732][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 268.238469][ T23] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 268.247201][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 268.268727][ T23] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 268.292314][ T23] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 268.337029][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.362439][ T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 268.402517][ T23] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 268.420887][ T23] usb 4-1: Product: syz [ 268.425897][ T23] usb 4-1: Manufacturer: syz [ 268.433315][ T23] usb 4-1: SerialNumber: syz [ 268.451666][ T23] usb 4-1: config 0 descriptor?? [ 268.460979][ T23] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 268.487625][ T23] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 269.095008][ T7305] loop6: detected capacity change from 0 to 524287999 [ 269.123641][ C1] blk_print_req_error: 9 callbacks suppressed [ 269.123658][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.138953][ C1] buffer_io_error: 8 callbacks suppressed [ 269.138962][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.236900][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.246217][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.304460][ T7308] netlink: 244 bytes leftover after parsing attributes in process `syz.3.427'. [ 269.531297][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.540462][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.619596][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.628923][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.680433][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.689792][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.791431][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.893523][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.902855][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 269.961790][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.971022][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.002795][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.012076][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.066406][ T7305] ldm_validate_partition_table(): Disk read failed. [ 270.081104][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.090283][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.108741][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.117985][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.134581][ T7305] Dev loop6: unable to read RDB block 0 [ 270.177693][ T7305] loop6: unable to read partition table [ 270.190991][ T7305] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 270.250798][ T23] usb 4-1: USB disconnect, device number 15 [ 270.262498][ T23] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 270.936837][ T7312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 270.958854][ T7312] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 270.986922][ T7312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.995074][ T7312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.031982][ T7312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.071548][ T7319] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.432'. [ 272.732164][ T5791] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.451324][ T5791] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.457404][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.460812][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.781139][ T5831] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 274.099607][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 274.105956][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 274.123767][ T5831] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.150978][ T5831] usb 3-1: config 0 has no interface number 0 [ 274.157190][ T5831] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.312888][ T7340] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 274.334509][ T5831] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.348095][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.381030][ T5831] usb 3-1: config 0 descriptor?? [ 274.447880][ T5831] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 274.723108][ T5831] usb 3-1: USB disconnect, device number 10 [ 274.750854][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.860762][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 275.050713][ T5828] usb 1-1: Using ep0 maxpacket: 32 [ 275.064004][ T5828] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 275.084211][ T5828] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 275.095510][ T5828] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 275.110960][ T5828] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 275.124544][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 275.133814][ T5828] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 275.146208][ T5828] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 275.164475][ T5828] usb 1-1: Product: syz [ 275.169924][ T5828] usb 1-1: Manufacturer: syz [ 275.175985][ T5828] usb 1-1: SerialNumber: syz [ 275.194033][ T5828] usb 1-1: config 0 descriptor?? [ 275.213372][ T5828] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 275.321404][ T5828] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 275.596442][ T7350] loop6: detected capacity change from 0 to 524287999 [ 275.658214][ T7351] netlink: 244 bytes leftover after parsing attributes in process `syz.0.443'. [ 275.840024][ C0] blk_print_req_error: 9 callbacks suppressed [ 275.840055][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.855627][ C0] buffer_io_error: 8 callbacks suppressed [ 275.855665][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 275.939936][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.949312][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.037577][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.046904][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.254346][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.263698][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.308716][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.318060][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.330712][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.339928][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.368441][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.377701][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.410240][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.419550][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.431304][ T7350] ldm_validate_partition_table(): Disk read failed. [ 276.453364][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.462596][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 276.500780][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.509989][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 277.275668][ T7350] Dev loop6: unable to read RDB block 0 [ 277.359727][ T7350] loop6: unable to read partition table [ 277.421180][ T7350] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 277.461228][ T6864] usb 1-1: USB disconnect, device number 6 [ 277.546083][ T7355] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.445'. [ 278.946895][ T6864] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 282.334482][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 282.380798][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 282.640488][ T7387] netlink: 'syz.2.454': attribute type 10 has an invalid length. [ 282.710535][ T7388] macsec0: entered promiscuous mode [ 282.729616][ T7388] macsec0: entered allmulticast mode [ 282.741567][ T7388] veth1_macvtap: entered allmulticast mode [ 282.750717][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 282.765116][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.782950][ T27] usb 2-1: config 0 has no interface number 0 [ 282.812125][ T27] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.879422][ T27] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.099605][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.188112][ T27] usb 2-1: config 0 descriptor?? [ 283.222379][ T7393] process 'syz.0.455' launched './file0' with NULL argv: empty string added [ 283.279812][ T27] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 283.505213][ T6864] usb 2-1: USB disconnect, device number 6 [ 285.226642][ T7404] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.458'. [ 287.470755][ T6864] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 287.774523][ T6864] usb 4-1: Using ep0 maxpacket: 8 [ 287.796956][ T6864] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.829836][ T6864] usb 4-1: config 0 has no interface number 0 [ 287.836140][ T6864] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.860383][ T6864] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.882057][ T6864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.974973][ T6864] usb 4-1: config 0 descriptor?? [ 288.036205][ T6864] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 288.303890][ T27] usb 4-1: USB disconnect, device number 16 [ 288.605183][ T7435] macsec0: entered promiscuous mode [ 288.612515][ T7435] macsec0: entered allmulticast mode [ 288.622174][ T7435] veth1_macvtap: entered allmulticast mode [ 289.566918][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 289.754201][ T7440] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 290.548669][ T7448] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.471'. [ 293.630872][ T5867] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 293.831236][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 293.844975][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.866683][ T5867] usb 1-1: config 0 has no interface number 0 [ 293.915569][ T5867] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.950296][ T5867] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 293.972549][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.987765][ T5867] usb 1-1: config 0 descriptor?? [ 294.008871][ T5867] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 294.212157][ T5867] usb 1-1: USB disconnect, device number 7 [ 295.910903][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 296.179560][ T7486] macsec0: entered promiscuous mode [ 296.187202][ T7486] macsec0: entered allmulticast mode [ 296.194068][ T7486] veth1_macvtap: entered allmulticast mode [ 296.201749][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.400728][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 296.419519][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.428201][ T27] usb 1-1: config 0 has no interface number 0 [ 296.435582][ T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.484318][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.508646][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.532249][ T7491] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.484'. [ 298.586626][ T27] usb 1-1: config 0 descriptor?? [ 299.225885][ T27] usb 1-1: can't set config #0, error -71 [ 299.267144][ T27] usb 1-1: USB disconnect, device number 8 [ 299.514804][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 299.707138][ T7498] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 300.600842][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.700720][ T5831] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 302.920888][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 302.998629][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 303.050326][ T7528] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.497'. [ 304.042221][ T5831] usb 1-1: config 0 has no interface number 0 [ 304.083944][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.172408][ T5831] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.220906][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.242747][ T5831] usb 1-1: config 0 descriptor?? [ 304.257013][ T5831] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 304.456691][ T5867] usb 1-1: USB disconnect, device number 9 [ 305.086246][ T7539] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.284487][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 309.576489][ T7556] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 310.382254][ T28] audit: type=1326 audit(1751916780.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.1.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc24858e929 code=0x0 [ 311.274324][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 311.591138][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 311.601176][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.609587][ T27] usb 1-1: config 0 has no interface number 0 [ 311.620717][ T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.665282][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.690760][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.714266][ T27] usb 1-1: config 0 descriptor?? [ 311.742925][ T27] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 311.963511][ T27] usb 1-1: USB disconnect, device number 10 [ 312.086615][ T7584] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.512'. [ 315.093092][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 315.282350][ T7612] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 315.307616][ T28] audit: type=1326 audit(1751916785.840:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.2.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95ed18e929 code=0x0 [ 316.328418][ T7622] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.522'. [ 317.060740][ T786] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.270968][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 317.284931][ T786] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.318353][ T786] usb 3-1: config 0 has no interface number 0 [ 317.331322][ T786] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.374132][ T786] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 317.434261][ T786] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 317.462650][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.490925][ T786] usb 3-1: config 0 descriptor?? [ 317.516746][ T786] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 317.633886][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.640361][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.710173][ T7625] iowarrior 3-1:0.1: Error -90 while submitting URB [ 317.722074][ T7625] iowarrior 3-1:0.1: Error -90 while submitting URB [ 317.778922][ T27] usb 3-1: USB disconnect, device number 11 [ 319.312335][ T7652] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.531'. [ 321.544936][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 321.914815][ T7667] netlink: 'syz.2.534': attribute type 10 has an invalid length. [ 322.210964][ T28] audit: type=1326 audit(1751916792.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.3.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92af78e929 code=0x0 [ 323.320872][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.520803][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 323.559027][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.577833][ T27] usb 1-1: config 0 has no interface number 0 [ 323.586929][ T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.601034][ T27] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.647968][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.667778][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.691252][ T27] usb 1-1: config 0 descriptor?? [ 323.709470][ T27] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 323.906925][ T7678] iowarrior 1-1:0.1: Error -90 while submitting URB [ 323.925891][ T7688] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.542'. [ 323.958494][ T7678] iowarrior 1-1:0.1: Error -90 while submitting URB [ 323.989153][ T27] usb 1-1: USB disconnect, device number 11 [ 324.888050][ T7696] macsec0: entered promiscuous mode [ 324.902117][ T7696] macsec0: entered allmulticast mode [ 324.960856][ T7696] veth1_macvtap: entered allmulticast mode [ 327.389343][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 327.493209][ T28] audit: type=1326 audit(1751916798.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.0.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc058e929 code=0x0 [ 327.566586][ T7717] netlink: 'syz.3.550': attribute type 10 has an invalid length. [ 328.341093][ T7722] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.551'. [ 328.925096][ T5831] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 329.140722][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 329.155276][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.246894][ T5831] usb 1-1: config 0 has no interface number 0 [ 329.276634][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.900684][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.910494][ T5831] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 330.000659][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.075516][ T5831] usb 1-1: config 0 descriptor?? [ 330.094644][ T5831] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 330.294315][ T7727] iowarrior 1-1:0.1: Error -90 while submitting URB [ 330.303101][ T7727] iowarrior 1-1:0.1: Error -90 while submitting URB [ 330.345012][ T27] usb 1-1: USB disconnect, device number 12 [ 331.630800][ T28] audit: type=1326 audit(1751916802.160:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.1.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc24858e929 code=0x0 [ 331.930913][ T7766] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.565'. [ 332.025174][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 333.220823][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 333.532052][ T7779] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 335.428281][ T7796] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.575'. [ 337.237284][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 337.449894][ T7826] netlink: 'syz.0.585': attribute type 10 has an invalid length. [ 338.345493][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 341.390107][ T7844] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.590'. [ 343.830682][ T5102] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 343.843577][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 345.565750][ T7875] netlink: 'syz.1.599': attribute type 10 has an invalid length. [ 345.769843][ T7871] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.601'. [ 348.410730][ T3062] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 348.610783][ T3062] usb 2-1: device descriptor read/64, error -71 [ 349.030749][ T3062] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 349.210749][ T3062] usb 2-1: device descriptor read/64, error -71 [ 349.331410][ T3062] usb usb2-port1: attempt power cycle [ 349.770716][ T3062] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 349.831840][ T3062] usb 2-1: device descriptor read/8, error -71 [ 350.088072][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 350.110811][ T3062] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 350.160200][ T3062] usb 2-1: device descriptor read/8, error -71 [ 350.314514][ T3062] usb usb2-port1: unable to enumerate USB device [ 350.516850][ T7912] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.612'. [ 350.639250][ T7913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 350.900361][ T5102] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 351.128683][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 351.302999][ T7923] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 354.801123][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 355.208275][ T7955] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.625'. [ 355.309999][ T5777] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 355.480342][ T5777] usb 1-1: device descriptor read/64, error -71 [ 355.970698][ T5777] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 356.336421][ T5777] usb 1-1: device descriptor read/64, error -71 [ 356.536532][ T5777] usb usb1-port1: attempt power cycle [ 356.548390][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 356.732402][ T7966] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 357.050862][ T5777] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 357.113570][ T5777] usb 1-1: device descriptor read/8, error -71 [ 357.396484][ T5777] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 357.600214][ T5777] usb 1-1: device descriptor read/8, error -71 [ 357.811642][ T5777] usb usb1-port1: unable to enumerate USB device [ 358.324750][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 359.125318][ T7993] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.635'. [ 359.449226][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 361.340400][ T5831] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 361.544769][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 361.590702][ T5831] usb 4-1: device descriptor read/64, error -71 [ 361.758076][ T8015] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 361.891266][ T5831] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 362.450997][ T5831] usb 4-1: device descriptor read/64, error -71 [ 362.581100][ T5831] usb usb4-port1: attempt power cycle [ 362.813024][ T8023] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.645'. [ 363.000754][ T5831] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 363.031315][ T5831] usb 4-1: device descriptor read/8, error -71 [ 363.300926][ T5831] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 363.332178][ T5831] usb 4-1: device descriptor read/8, error -71 [ 363.461102][ T5831] usb usb4-port1: unable to enumerate USB device [ 363.516052][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 365.268144][ T5102] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 366.373842][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 367.540877][ T8065] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 368.560857][ T3062] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 368.609644][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 368.932808][ T3062] usb 1-1: device descriptor read/64, error -71 [ 368.988821][ T8080] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.660'. [ 369.281102][ T3062] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 369.480882][ T3062] usb 1-1: device descriptor read/64, error -71 [ 369.852997][ T3062] usb usb1-port1: attempt power cycle [ 370.033821][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 370.389128][ T8103] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 370.491733][ T3062] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 370.536400][ T3062] usb 1-1: device descriptor read/8, error -71 [ 370.851629][ T3062] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 370.926970][ T3062] usb 1-1: device descriptor read/8, error -71 [ 371.080762][ T3062] usb usb1-port1: unable to enumerate USB device [ 371.420850][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 372.557817][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 373.610426][ T8135] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.676'. [ 374.010810][ T3062] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 374.170793][ T3062] usb 3-1: device descriptor read/64, error -71 [ 374.460849][ T3062] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 374.754585][ T3062] usb 3-1: device descriptor read/64, error -71 [ 374.890922][ T3062] usb usb3-port1: attempt power cycle [ 375.114089][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 375.409313][ T3062] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 375.417468][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 375.630182][ T3062] usb 3-1: device descriptor read/8, error -71 [ 375.747788][ T8159] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 376.095071][ T3062] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 376.161658][ T3062] usb 3-1: device descriptor read/8, error -71 [ 376.291829][ T3062] usb usb3-port1: unable to enumerate USB device [ 378.019790][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 378.034457][ T8181] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.688'. [ 379.100234][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.108142][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.210788][ T5777] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 380.410820][ T5777] usb 1-1: device descriptor read/64, error -71 [ 380.907960][ T5777] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 381.200423][ T5777] usb 1-1: device descriptor read/64, error -71 [ 381.356125][ T5777] usb usb1-port1: attempt power cycle [ 381.675476][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 381.828748][ T8219] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 382.000766][ T5777] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 382.053252][ T5777] usb 1-1: device descriptor read/8, error -71 [ 382.137875][ T5102] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 382.340698][ T5777] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 382.417174][ T8225] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.702'. [ 382.586830][ T5777] usb 1-1: device descriptor read/8, error -71 [ 382.711751][ T5777] usb usb1-port1: unable to enumerate USB device [ 383.531417][ T786] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 383.770685][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 384.238534][ T786] usb 1-1: config index 0 descriptor too short (expected 260, got 27) [ 384.250647][ T786] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 384.408619][ T786] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 385.462759][ T786] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.480746][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.757761][ T786] usb 1-1: string descriptor 0 read error: -71 [ 385.797760][ T786] usb 1-1: USB disconnect, device number 25 [ 386.890812][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 387.122915][ T8260] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 387.312544][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 387.347405][ T8264] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.714'. [ 388.708514][ T8273] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.725'. [ 389.750662][ T5828] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 390.030774][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 390.047977][ T5828] usb 1-1: config index 0 descriptor too short (expected 260, got 27) [ 390.076385][ T5828] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 390.111054][ T5828] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 390.297693][ T5828] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.317204][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.543919][ T5828] usb 1-1: string descriptor 0 read error: -71 [ 390.613034][ T5828] usb 1-1: USB disconnect, device number 26 [ 390.886865][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 391.225806][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 391.449352][ T8300] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 393.017637][ T8307] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.728'. [ 394.936511][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 394.994891][ T8332] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.737'. [ 395.150792][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 395.175655][ T8] usb 3-1: config index 0 descriptor too short (expected 260, got 27) [ 395.190707][ T8] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 395.204138][ T8] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 395.214918][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 395.226887][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.458203][ T8] usb 3-1: string descriptor 0 read error: -71 [ 395.489707][ T8] usb 3-1: USB disconnect, device number 16 [ 395.923608][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 397.568714][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 397.726144][ T8355] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 400.770736][ T5828] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 400.790524][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 400.990808][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 401.002436][ T5828] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.013162][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.056726][ T5828] usb 3-1: config 0 has no interface number 0 [ 401.090654][ T5828] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 401.124375][ T5828] usb 3-1: config 0 interface 1 has no altsetting 0 [ 401.144628][ T5828] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 401.167807][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.197469][ T5828] usb 3-1: config 0 descriptor?? [ 401.222021][ T5828] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 401.243152][ T8381] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.751'. [ 401.424138][ T5828] usb 3-1: USB disconnect, device number 17 [ 404.310736][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 404.569176][ T8406] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 405.559665][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 406.256772][ T8423] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.764'. [ 407.306413][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 407.502229][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 407.573121][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.590000][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.687516][ T8] usb 3-1: config 0 has no interface number 0 [ 407.748506][ T8] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.773084][ T8] usb 3-1: config 0 interface 1 has no altsetting 0 [ 407.784449][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 407.794772][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.815163][ T8] usb 3-1: config 0 descriptor?? [ 407.823503][ T8] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 408.047906][ T5831] usb 3-1: USB disconnect, device number 18 [ 408.873767][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 409.273011][ T8449] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.773'. [ 409.653009][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 410.482387][ T8462] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 413.023480][ T8480] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.782'. [ 413.138531][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 413.161546][ T27] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 413.470932][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 413.969643][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 414.005922][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.032563][ T27] usb 4-1: config 0 has no interface number 0 [ 414.039040][ T27] usb 4-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 414.053978][ T27] usb 4-1: config 0 interface 1 has no altsetting 0 [ 414.061284][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 414.071149][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.111133][ T27] usb 4-1: config 0 descriptor?? [ 414.131589][ T27] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 414.322586][ T786] usb 4-1: USB disconnect, device number 21 [ 415.624424][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 415.818292][ T8499] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 416.365464][ T8505] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.791'. [ 417.076329][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 419.338759][ T5777] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 419.530808][ T5777] usb 4-1: Using ep0 maxpacket: 8 [ 419.546312][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.716797][ T5777] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.733374][ T5777] usb 4-1: config 0 has no interface number 0 [ 419.740198][ T5777] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.785577][ T5777] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 419.797300][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.811805][ T5777] usb 4-1: config 0 descriptor?? [ 419.843204][ T5777] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 420.074924][ T786] usb 4-1: USB disconnect, device number 22 [ 420.539954][ T8538] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.802'. [ 420.917883][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 421.675014][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 421.877709][ T8557] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 424.940669][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 425.370801][ T786] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 425.660844][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 425.680007][ T786] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.733012][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.780196][ T786] usb 2-1: config 0 has no interface number 0 [ 425.911315][ T786] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 425.940966][ T786] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.951016][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.017551][ T786] usb 2-1: config 0 descriptor?? [ 426.033029][ T786] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 426.243953][ T5880] usb 2-1: USB disconnect, device number 11 [ 427.204700][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 427.437915][ T8601] netlink: 'syz.2.822': attribute type 10 has an invalid length. [ 429.119612][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 430.772272][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 430.911006][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 431.129341][ T8630] netlink: 'syz.3.832': attribute type 10 has an invalid length. [ 431.180738][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 431.199891][ T786] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.249376][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.273928][ T786] usb 2-1: config 0 has no interface number 0 [ 431.297016][ T786] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.346151][ T786] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.375281][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.429254][ T786] usb 2-1: config 0 descriptor?? [ 431.493968][ T786] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 431.697089][ T786] usb 2-1: USB disconnect, device number 12 [ 433.172389][ T5102] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 436.135070][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 436.390773][ T5880] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 436.588146][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 436.670818][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 436.736737][ T5880] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.746058][ T5880] usb 3-1: config 0 has no interface number 0 [ 436.760310][ T5880] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.790861][ T8670] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 436.817276][ T5880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.853937][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.898312][ T5880] usb 3-1: config 0 descriptor?? [ 436.958399][ T5880] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 437.678168][ T786] usb 3-1: USB disconnect, device number 19 [ 440.270107][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 440.514317][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.521041][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.590845][ T5777] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 441.820660][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 441.886507][ T5777] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.906400][ T5777] usb 3-1: config 0 has no interface number 0 [ 441.921688][ T5777] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.094513][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 442.124596][ T5777] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 442.160364][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.207846][ T5777] usb 3-1: config 0 descriptor?? [ 442.224831][ T5777] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 442.439530][ T5777] usb 3-1: USB disconnect, device number 20 [ 444.258449][ T5102] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 447.556175][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 447.600650][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 447.755602][ T28] audit: type=1800 audit(1751916918.290:7): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.879" name="bus" dev="overlay" ino=1210 res=0 errno=0 [ 447.792803][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 447.808550][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 447.817982][ T8] usb 1-1: config 0 has no interface number 0 [ 447.838452][ T8] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.894066][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 447.939451][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.501487][ T8] usb 1-1: config 0 descriptor?? [ 448.530322][ T8] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 448.789703][ T5102] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 448.949848][ T8] usb 1-1: USB disconnect, device number 27 [ 452.016403][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 454.624650][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 457.990719][ T23] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 458.170730][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 458.182684][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 458.210654][ T23] usb 1-1: config 0 has no interface number 0 [ 458.217128][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 458.265294][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 458.295172][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.335765][ T23] usb 1-1: config 0 descriptor?? [ 458.356915][ T23] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 458.569846][ T23] usb 1-1: USB disconnect, device number 28 [ 458.858007][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 463.736191][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 464.095127][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 464.327717][ T8876] Zero length message leads to an empty skb [ 464.482022][ T5828] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 464.690812][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 464.926955][ T5828] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.958780][ T5828] usb 2-1: config 0 has no interface number 0 [ 464.977755][ T5828] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 465.027927][ T5828] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 465.054132][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.132406][ T5828] usb 2-1: config 0 descriptor?? [ 465.140230][ T5828] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 465.346317][ T5777] usb 2-1: USB disconnect, device number 13 [ 467.299819][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 471.027632][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 471.090706][ T786] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 471.292063][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 471.450335][ T786] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 472.230639][ T786] usb 4-1: config 0 has no interface number 0 [ 472.237185][ T786] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 472.351215][ T786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 472.380670][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.409934][ T786] usb 4-1: config 0 descriptor?? [ 472.425027][ T786] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 472.432549][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 472.638085][ T5880] usb 4-1: USB disconnect, device number 23 [ 477.546510][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 477.924930][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 478.040704][ T5777] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 478.380752][ T5777] usb 2-1: Using ep0 maxpacket: 8 [ 478.389104][ T5777] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.400147][ T5777] usb 2-1: config 0 has no interface number 0 [ 478.431730][ T5777] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.454657][ T5777] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 478.473651][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.521564][ T5777] usb 2-1: config 0 descriptor?? [ 478.550424][ T5777] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 478.768038][ T27] usb 2-1: USB disconnect, device number 14 [ 482.514478][ T5102] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 483.667648][ T5828] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 484.250843][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 484.297107][ T5828] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 484.307409][ T5828] usb 4-1: config 0 has no interface number 0 [ 484.320889][ T5828] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.334777][ T5828] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 484.346466][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.519293][ T5828] usb 4-1: config 0 descriptor?? [ 484.601643][ T5828] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 484.811658][ T5880] usb 4-1: USB disconnect, device number 24 [ 485.154530][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 486.376110][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 488.718878][ T9065] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.968'. [ 490.405921][ T5880] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 490.760612][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 490.779989][ T5880] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.805033][ T5880] usb 3-1: config 0 has no interface number 0 [ 490.830747][ T5880] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.871415][ T5880] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 490.901987][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.962340][ T5880] usb 3-1: config 0 descriptor?? [ 491.004028][ T5880] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 491.126763][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 491.290166][ T5880] usb 3-1: USB disconnect, device number 21 [ 491.317283][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 494.631817][ T9104] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.981'. [ 495.801948][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 496.712960][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 496.916523][ T5102] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 496.990777][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 497.056075][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.183200][ T23] usb 1-1: config 0 has no interface number 0 [ 497.282390][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.335217][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 497.349208][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.361805][ T23] usb 1-1: config 0 descriptor?? [ 497.374076][ T23] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 497.608199][ T23] usb 1-1: USB disconnect, device number 29 [ 499.289431][ T9145] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.994'. [ 500.365783][ T5102] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 501.930800][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 501.965860][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.972460][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.180747][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 502.217666][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 502.240959][ T8] usb 4-1: config 0 has no interface number 0 [ 502.260691][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.290676][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 502.310352][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.481051][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 502.497101][ T8] usb 4-1: config 0 descriptor?? [ 502.521351][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 502.752200][ T9176] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1004'. [ 502.893603][ T8] usb 4-1: USB disconnect, device number 25 [ 505.340882][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 507.025059][ T9215] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1015'. [ 507.090659][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 507.840641][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 507.861705][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.870484][ T8] usb 1-1: config 0 has no interface number 0 [ 507.877092][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.891412][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 507.900759][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.911245][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 507.963025][ T8] usb 1-1: config 0 descriptor?? [ 507.973470][ T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 508.270863][ T8] usb 1-1: USB disconnect, device number 30 [ 509.111229][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 511.079331][ T9249] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1026'. [ 511.973429][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 515.368629][ T9287] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1038'. [ 516.433533][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 516.455905][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 517.814898][ T9302] vlan1: entered promiscuous mode [ 517.820121][ T9302] vlan1: entered allmulticast mode [ 517.870657][ T9302] veth0_vlan: entered allmulticast mode [ 519.708728][ T9322] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1049'. [ 520.471069][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 520.950060][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 524.177827][ T9355] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1059'. [ 525.050021][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 525.382051][ T9364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1062'. [ 525.391361][ T9364] netlink: 'syz.2.1062': attribute type 7 has an invalid length. [ 525.441025][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 525.537301][ T9364] ip6gretap0: entered promiscuous mode [ 525.615997][ T9364] syz_tun: entered promiscuous mode [ 527.963843][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 528.003224][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 528.308091][ T9393] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1072'. [ 531.591983][ T9414] netlink: 'syz.2.1074': attribute type 1 has an invalid length. [ 534.101479][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 534.397417][ T9432] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1082'. [ 538.021633][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 541.591941][ T5102] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 541.918160][ T9474] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1095'. [ 543.607932][ T9479] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 547.591674][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 547.856730][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 548.099732][ T9520] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1107'. [ 549.567354][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 549.609925][ T9525] hsr_slave_0: left promiscuous mode [ 549.633164][ T9525] hsr_slave_1: left promiscuous mode [ 551.117691][ T9543] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 552.916393][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 553.072437][ T9552] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1117'. [ 557.354594][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 560.569181][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 560.707696][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 561.243166][ T9596] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1129'. [ 563.268416][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 563.433313][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.439730][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.549468][ T9624] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 567.622516][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 567.890573][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 568.252554][ T9649] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1140'. [ 569.224953][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 569.255697][ T9651] hsr_slave_0: left promiscuous mode [ 569.307404][ T9651] hsr_slave_1: left promiscuous mode [ 573.174167][ T5102] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 573.696019][ T9695] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1151'. [ 575.495714][ T9696] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 576.227426][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 576.915638][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 579.134358][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 579.547921][ T9735] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1161'. [ 582.247140][ T28] audit: type=1326 audit(1751917052.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.0.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc058e929 code=0x0 [ 582.976716][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 586.097756][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 586.267807][ T9786] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1174'. [ 588.551967][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 588.876849][ T9812] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1184'. [ 591.668840][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 593.283140][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 593.837609][ T9847] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1193'. [ 595.141236][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 595.283331][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 597.874385][ T9879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 598.000719][ T9889] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1205'. [ 598.045431][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 600.546651][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 602.827785][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 603.472346][ T9930] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1220'. [ 603.852248][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1219'. [ 606.139438][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 606.877814][ T9960] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1230'. [ 608.609383][ T5102] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 608.873373][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 609.898632][ T5102] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 610.389067][ T9991] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1239'. [ 611.954396][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'. [ 612.867456][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 613.279790][ T9988] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 613.539420][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 614.309760][T10027] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1251'. [ 619.249105][T10046] comedi comedi2: s526: a I/O base address must be specified [ 619.958968][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 620.023552][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 620.558498][T10062] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1263'. [ 621.747584][ T9988] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 623.505626][ T9988] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 624.549932][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 624.745381][T10097] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1274'. [ 624.845482][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.851967][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.864788][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 626.295152][ T9988] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 629.667722][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'. [ 630.269786][T10146] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1288'. [ 631.727269][ T9988] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 632.594027][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 632.863147][T10168] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1302'. [ 634.895448][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 635.246113][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 637.081447][T10209] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1306'. [ 642.182928][ T9988] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 642.259444][ T28] audit: type=1326 audit(1751917112.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10222 comm="syz.0.1310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc058e929 code=0x0 [ 642.771860][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 643.255135][T10240] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1317'. [ 645.814746][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 646.757004][T10272] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1328'. [ 648.362001][ T9988] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 649.231323][ T28] audit: type=1326 audit(1751917119.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10277 comm="syz.2.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ed18e929 code=0x7fc00000 [ 649.337657][T10289] 9pnet_fd: Insufficient options for proto=fd [ 649.426437][T10293] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1337'. [ 655.563724][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 655.884640][T10324] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1346'. [ 659.408371][T10356] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1355'. [ 663.680142][T10400] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1370'. [ 665.856169][T10411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 667.442721][T10433] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1381'. [ 668.857807][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 668.879067][T10434] bridge_slave_1: left allmulticast mode [ 668.885305][T10434] bridge_slave_1: left promiscuous mode [ 668.894717][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.922240][T10434] bridge_slave_0: left allmulticast mode [ 669.028961][T10434] bridge_slave_0: left promiscuous mode [ 669.069954][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.586326][T10465] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1391'. [ 673.936017][T10497] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1400'. [ 676.932091][T10523] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1410'. [ 679.093478][T10541] ======================================================= [ 679.093478][T10541] WARNING: The mand mount option has been deprecated and [ 679.093478][T10541] and is ignored by this kernel. Remove the mand [ 679.093478][T10541] option from the mount to silence this warning. [ 679.093478][T10541] ======================================================= [ 682.201265][T10555] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 682.208907][T10555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.285987][T10560] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1420'. [ 682.907934][T10555] vhci_hcd vhci_hcd.0: Device attached [ 683.377158][T10568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 683.791838][T10562] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 683.798497][T10562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 683.832473][T10555] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 683.839110][T10555] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 683.862174][T10568] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 683.868814][T10568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 683.883182][ T27] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 683.919657][T10562] vhci_hcd vhci_hcd.0: Device attached [ 683.941928][T10568] vhci_hcd vhci_hcd.0: Device attached [ 683.951782][T10568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 683.973108][T10562] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(17) [ 683.979830][T10562] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 684.012075][T10568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 684.066783][T10555] vhci_hcd vhci_hcd.0: Device attached [ 684.076347][T10562] vhci_hcd vhci_hcd.0: Device attached [ 684.122521][T10555] vhci_hcd vhci_hcd.0: port 0 already used [ 684.258498][T10564] vhci_hcd: connection closed [ 684.259094][T10571] vhci_hcd: connection closed [ 684.264271][T10575] vhci_hcd: connection closed [ 684.279818][ T48] vhci_hcd: stop threads [ 684.290201][T10557] vhci_hcd: connection reset by peer [ 684.310194][ T48] vhci_hcd: release socket [ 684.336961][T10578] vhci_hcd: connection closed [ 684.346566][ T48] vhci_hcd: disconnect device [ 684.368400][ T48] vhci_hcd: stop threads [ 684.385037][ T48] vhci_hcd: release socket [ 684.406932][ T48] vhci_hcd: disconnect device [ 684.435575][ T48] vhci_hcd: stop threads [ 684.446708][ T48] vhci_hcd: release socket [ 684.460007][ T48] vhci_hcd: disconnect device [ 684.477647][ T48] vhci_hcd: stop threads [ 684.486455][ T48] vhci_hcd: release socket [ 684.491275][ T48] vhci_hcd: disconnect device [ 684.505549][ T48] vhci_hcd: stop threads [ 684.550615][ T48] vhci_hcd: release socket [ 684.565499][ T48] vhci_hcd: disconnect device [ 686.160682][T10606] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 686.281108][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.287565][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.938794][T10609] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1432'. [ 689.001065][ T27] vhci_hcd: vhci_device speed not set [ 689.101412][T10633] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 689.107987][T10633] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 689.118468][T10633] vhci_hcd vhci_hcd.0: Device attached [ 689.219914][T10637] netlink: 'syz.0.1441': attribute type 10 has an invalid length. [ 689.380585][ T5828] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 689.397301][T10637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.407340][T10637] team0: Port device bond0 added [ 689.650039][T10646] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1444'. [ 691.550779][ T9988] Bluetooth: hci2: command 0x0c1a tx timeout [ 694.113982][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 694.202330][T10678] vlan2: entered promiscuous mode [ 694.207450][T10678] hsr_slave_1: entered promiscuous mode [ 694.285679][T10678] vlan2: entered allmulticast mode [ 694.351709][T10678] hsr_slave_1: entered allmulticast mode [ 694.498644][T10685] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1455'. [ 694.758336][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 695.826467][ T9988] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 697.158604][T10713] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1465'. [ 699.080921][ T9988] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 699.666970][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 699.706557][T10738] vlan2: entered promiscuous mode [ 699.713858][T10738] hsr_slave_1: entered promiscuous mode [ 699.722472][T10738] vlan2: entered allmulticast mode [ 699.727948][T10738] hsr_slave_1: entered allmulticast mode [ 699.892036][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 702.964730][T10758] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1478'. [ 703.738448][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 704.161734][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 704.486377][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 704.579071][T10778] vlan2: entered promiscuous mode [ 704.598559][T10778] hsr_slave_1: entered promiscuous mode [ 704.627306][T10778] vlan2: entered allmulticast mode [ 704.704248][T10778] hsr_slave_1: entered allmulticast mode [ 704.784591][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 709.143813][T10807] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1491'. [ 710.683815][ T9988] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 711.203679][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 711.212323][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'. [ 711.237398][T10824] vlan2: entered promiscuous mode [ 711.243133][T10824] hsr_slave_1: entered promiscuous mode [ 711.290247][T10824] vlan2: entered allmulticast mode [ 711.357069][T10824] hsr_slave_1: entered allmulticast mode [ 711.819033][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'. [ 713.158259][T10848] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1505'. [ 714.847374][T10859] syz.3.1509[10859]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 717.225576][ T28] audit: type=1800 audit(1751917187.760:11): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1510" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 717.226074][T10870] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 717.256343][T10870] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 717.266200][T10870] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 717.373188][T10870] syz.3.1510 (10870) used greatest stack depth: 19016 bytes left [ 718.385623][ T9988] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 718.698332][T10887] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1519'. [ 724.353037][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 724.615450][T10930] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1528'. [ 728.192025][T10945] syz.1.1533 (10945) used greatest stack depth: 16968 bytes left [ 728.528228][ T9988] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 728.842739][T10962] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1539'. [ 735.109791][T10991] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1548'. [ 737.034634][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 739.203254][T11024] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1558'. [ 740.827130][ T9988] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 742.645032][T11055] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1567'. [ 743.340660][ T50] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 746.583045][ T28] audit: type=1326 audit(1751917217.090:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.3.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af78e929 code=0x7fc00000 [ 746.968024][T11095] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1578'. [ 747.714684][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.736567][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.827039][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 752.716925][T11143] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1591'. [ 753.900670][ T9988] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 756.825948][T11180] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1603'. [ 757.463402][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 757.808516][T11196] kvm: user requested TSC rate below hardware speed [ 762.501989][ T5880] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 762.981808][T11231] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1615'. [ 763.631895][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 763.651174][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 763.658798][ T5880] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 763.671716][ T5880] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 763.680192][ T5880] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 763.689558][ T5880] usb 4-1: config 250 has no interface number 0 [ 763.696785][ T5880] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 763.708597][ T5880] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 763.900810][ T5880] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.935938][ T5880] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 763.960584][ T5880] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 764.065839][ T5880] usb 4-1: config 250 interface 228 has no altsetting 0 [ 764.094289][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 764.173327][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 764.204623][ T5880] usb 4-1: Product: syz [ 764.218551][ T5880] usb 4-1: SerialNumber: syz [ 764.228556][ T5880] hub 4-1:250.228: bad descriptor, ignoring hub [ 764.234993][ T5880] hub: probe of 4-1:250.228 failed with error -5 [ 764.432966][ T5880] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 764.813671][ T5880] usb 4-1: USB disconnect, device number 26 [ 764.830554][ T5880] usblp0: removed [ 764.888239][T11251] kvm: user requested TSC rate below hardware speed [ 765.320521][ T5880] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 767.750558][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 767.787879][ T5880] usb 4-1: device descriptor read/all, error -71 [ 768.659802][T11274] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1625'. [ 770.160991][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 771.730812][T11287] [ 771.741395][T11287] loop4: detected capacity change from 0 to 524255231 [ 771.766761][ C0] blk_print_req_error: 9 callbacks suppressed [ 771.766777][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.782124][ C0] buffer_io_error: 8 callbacks suppressed [ 771.782136][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.813872][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.823106][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.831525][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.840706][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.852021][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.861243][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.870859][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.880038][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.900739][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.910112][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.918315][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.927501][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.949167][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.958374][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.966311][T11259] ldm_validate_partition_table(): Disk read failed. [ 771.976484][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 771.985720][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 771.993863][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 772.003161][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 772.021327][T11259] Dev loop4: unable to read RDB block 0 [ 772.050198][T11259] loop4: unable to read partition table [ 772.120328][T11287] ldm_validate_partition_table(): Disk read failed. [ 772.128911][T11287] Dev loop4: unable to read RDB block 0 [ 772.207676][T11287] loop4: unable to read partition table [ 772.220000][T11287] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 773.824881][T11306] kvm: user requested TSC rate below hardware speed [ 776.458678][T11315] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1635'. [ 777.361131][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 780.795193][T11353] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1647'. [ 781.972424][T11356] [ 781.973300][T11356] loop4: detected capacity change from 0 to 524255231 [ 782.051532][ C0] blk_print_req_error: 26 callbacks suppressed [ 782.051552][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.067007][ C0] buffer_io_error: 25 callbacks suppressed [ 782.067018][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.106920][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.116259][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.126748][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.135999][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.150484][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.159713][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.170013][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.179224][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.193440][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.202664][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.212273][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.221487][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.233912][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.243131][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.251300][T11356] ldm_validate_partition_table(): Disk read failed. [ 782.260723][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.269912][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.281790][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 782.291003][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 782.304140][T11356] Dev loop4: unable to read RDB block 0 [ 782.312853][T11356] loop4: unable to read partition table [ 782.318930][T11356] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 783.081819][T11382] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1657'. [ 786.038512][T11405] [ 786.043038][T11405] loop4: detected capacity change from 0 to 524255231 [ 786.135880][T11405] ldm_validate_partition_table(): Disk read failed. [ 786.237104][T11405] Dev loop4: unable to read RDB block 0 [ 786.253181][T11405] loop4: unable to read partition table [ 786.284623][T11405] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 787.134462][T11418] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1668'. [ 789.673474][T11436] kvm: user requested TSC rate below hardware speed [ 791.635050][T11451] [ 791.640793][T11451] loop4: detected capacity change from 0 to 524255231 [ 791.695730][ C1] blk_print_req_error: 28 callbacks suppressed [ 791.695748][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.711333][ C1] buffer_io_error: 26 callbacks suppressed [ 791.711344][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.761154][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.770351][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.789664][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.798922][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.808222][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.817526][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.828684][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.838027][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.890704][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.899999][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.911812][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.921270][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.930221][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.939535][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 791.947571][T11451] ldm_validate_partition_table(): Disk read failed. [ 792.017728][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 792.027057][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 792.097399][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 792.106837][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 792.203181][T11451] Dev loop4: unable to read RDB block 0 [ 792.236756][T11451] loop4: unable to read partition table [ 792.243214][T11451] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 792.633280][T11463] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1680'. [ 795.179459][T11482] kvm: user requested TSC rate below hardware speed [ 796.372949][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 796.604715][T11491] dummy0: entered promiscuous mode [ 796.610320][T11491] macvtap1: entered promiscuous mode [ 796.636907][T11491] macvtap1: entered allmulticast mode [ 796.652841][T11491] dummy0: entered allmulticast mode [ 796.720842][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 796.791540][T11495] dummy0: left allmulticast mode [ 796.804731][T11495] dummy0: left promiscuous mode [ 797.319410][T11501] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1693'. [ 801.013622][T11537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.029278][T11537] batadv_slave_0: entered promiscuous mode [ 801.398398][T11542] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1705'. [ 805.052451][T11572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.062846][T11572] batadv_slave_0: entered promiscuous mode [ 806.220248][T11583] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1716'. [ 809.156161][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.162863][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.028432][T11626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.041244][T11626] batadv_slave_0: entered promiscuous mode [ 811.748457][T11635] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1729'. [ 816.071806][T11674] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1740'. [ 822.906680][T11728] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1753'. [ 827.478865][T11782] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1767'. [ 831.721832][T11815] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1777'. [ 834.092567][T11831] vivid-001: kernel_thread() failed [ 837.098994][T11856] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1788'. [ 838.104155][T11859] kvm: user requested TSC rate below hardware speed [ 842.656814][T11900] kvm: user requested TSC rate below hardware speed [ 842.710870][T11904] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1799'. [ 848.697380][T11955] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1813'. [ 852.963211][T11995] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1825'. [ 857.908744][T12037] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1836'. [ 860.288774][T12056] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1847'. [ 865.286048][T12097] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1853'. [ 869.763419][T12128] vivid-005: kernel_thread() failed [ 870.184177][T12136] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1864'. [ 871.059017][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.065536][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.383480][T12157] vivid-007: kernel_thread() failed [ 875.223179][T12176] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1876'. [ 877.413034][T12193] vivid-001: kernel_thread() failed [ 879.775384][ T9988] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 879.921755][T12221] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1887'. [ 881.019927][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 885.428346][T12256] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 885.506059][T12260] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1898'. [ 887.094244][T12256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.026341][T12259] vlan2: entered allmulticast mode [ 889.197166][T12259] veth1: entered allmulticast mode [ 889.224685][T12259] bond1: (slave vlan2): making interface the new active one [ 889.262753][T12259] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 893.838562][T12317] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1911'. [ 894.689589][T12328] loop6: detected capacity change from 0 to 2098 [ 894.884159][ C0] blk_print_req_error: 9 callbacks suppressed [ 894.884180][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 894.899555][ C0] buffer_io_error: 8 callbacks suppressed [ 894.899570][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.020626][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.030073][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.038784][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.048077][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.057504][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.066926][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.075895][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.085184][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.095624][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.105048][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.159690][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.169119][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.180418][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.189898][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.205481][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.214865][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.222945][T12328] ldm_validate_partition_table(): Disk read failed. [ 895.230474][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 895.239852][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 895.288773][T12328] Dev loop6: unable to read RDB block 0 [ 895.301940][T12328] loop6: unable to read partition table [ 895.309332][T12328] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 899.667843][T12359] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.852520][T12365] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1924'. [ 906.733144][T12403] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.1936'. [ 909.636980][T12427] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1945'. [ 911.514387][T12436] vivid-007: kernel_thread() failed [ 913.861787][T12459] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1956'. [ 919.694143][T12498] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1967'. [ 923.817802][T12525] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.1976'. [ 924.350648][ T29] INFO: task kworker/1:4:5828 blocked for more than 144 seconds. [ 924.358514][ T29] Not tainted 6.6.96-syzkaller #0 [ 924.837428][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 924.862080][ T29] task:kworker/1:4 state:D stack:22728 pid:5828 ppid:2 flags:0x00004000 [ 924.875361][ T29] Workqueue: usb_hub_wq hub_event [ 924.882059][ T29] Call Trace: [ 924.888840][ T29] [ 924.894958][ T29] __schedule+0x14e2/0x4580 [ 924.901462][ T29] ? asan.module_dtor+0x20/0x20 [ 924.907602][ T29] ? kick_pool+0x320/0x420 [ 924.922383][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.976851][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 924.983431][ T29] schedule+0xbd/0x170 [ 924.989837][ T29] usb_kill_urb+0x1c6/0x2f0 [ 925.018629][ T29] ? usb_unlink_urb+0xa0/0xa0 [ 925.023602][ T29] ? wake_bit_function+0x200/0x200 [ 925.028894][ T29] usb_start_wait_urb+0x18d/0x4b0 [ 925.034393][ T29] ? usb_api_blocking_completion+0xb0/0xb0 [ 925.040732][ T29] usb_control_msg+0x233/0x3e0 [ 925.045777][ T29] hub_port_init+0xbf3/0x2760 [ 925.050963][ T29] hub_event+0x2513/0x49c0 [ 925.055697][ T29] ? led_work+0x720/0x720 [ 925.060226][ T29] ? read_lock_is_recursive+0x20/0x20 [ 925.066116][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 925.071709][ T29] ? process_scheduled_works+0x957/0x15b0 [ 925.077752][ T29] ? process_scheduled_works+0x957/0x15b0 [ 925.083887][ T29] process_scheduled_works+0xa45/0x15b0 [ 925.089835][ T29] ? assign_work+0x400/0x400 [ 925.094772][ T29] ? assign_work+0x39e/0x400 [ 925.099716][ T29] worker_thread+0xa55/0xfc0 [ 925.104557][ T29] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 925.110767][ T29] ? _raw_spin_unlock+0x40/0x40 [ 925.115995][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 925.140790][ T29] kthread+0x2fa/0x390 [ 925.145015][ T29] ? pr_cont_work+0x560/0x560 [ 925.149818][ T29] ? kthread_blkcg+0xd0/0xd0 [ 925.246731][ T29] ret_from_fork+0x48/0x80 [ 925.258885][ T29] ? kthread_blkcg+0xd0/0xd0 [ 925.302922][ T29] ret_from_fork_asm+0x11/0x20 [ 925.318397][ T29] [ 925.331014][ T29] [ 925.331014][ T29] Showing all locks held in the system: [ 925.341413][ T29] 1 lock held by khungtaskd/29: [ 925.346429][ T29] #0: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 925.363157][ T29] 2 locks held by getty/5550: [ 925.369084][ T29] #0: ffff88802dce30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 925.398040][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 925.416250][ T29] 1 lock held by syz-executor/5786: [ 925.424981][ T29] 5 locks held by kworker/1:4/5828: [ 925.443795][ T29] #0: ffff8880196b7d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 925.465866][ T29] #1: ffffc900047efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 925.489690][ T29] #2: ffff888025c2a190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x49c0 [ 925.510684][ T29] #3: ffff888025c2e508 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x21a1/0x49c0 [ 925.547313][ T29] #4: ffff8880257f7868 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x21c9/0x49c0 [ 925.557455][ T29] 1 lock held by syz.1.1977/12527: [ 925.566072][ T29] 3 locks held by syz-executor/12531: [ 925.571808][ T29] [ 925.574177][ T29] ============================================= [ 925.574177][ T29] [ 925.587681][ T29] NMI backtrace for cpu 1 [ 925.592045][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.96-syzkaller #0 [ 925.599873][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.609930][ T29] Call Trace: [ 925.613219][ T29] [ 925.616153][ T29] dump_stack_lvl+0x16c/0x230 [ 925.620849][ T29] ? show_regs_print_info+0x20/0x20 [ 925.626078][ T29] ? load_image+0x3b0/0x3b0 [ 925.630618][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 925.635571][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 925.641742][ T29] ? _printk+0xd0/0x110 [ 925.645924][ T29] ? load_image+0x3b0/0x3b0 [ 925.650465][ T29] ? load_image+0x3b0/0x3b0 [ 925.654985][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 925.661077][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 925.667071][ T29] watchdog+0xf41/0xf80 [ 925.671235][ T29] ? watchdog+0x1e1/0xf80 [ 925.675574][ T29] kthread+0x2fa/0x390 [ 925.679647][ T29] ? hungtask_pm_notify+0x90/0x90 [ 925.684683][ T29] ? kthread_blkcg+0xd0/0xd0 [ 925.689275][ T29] ret_from_fork+0x48/0x80 [ 925.693724][ T29] ? kthread_blkcg+0xd0/0xd0 [ 925.698318][ T29] ret_from_fork_asm+0x11/0x20 [ 925.703097][ T29] [ 925.708517][ T29] Sending NMI from CPU 1 to CPUs 0: [ 925.713898][ C0] NMI backtrace for cpu 0 [ 925.713920][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.96-syzkaller #0 [ 925.713937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.713947][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 925.713970][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 bf 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 925.713985][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 925.713999][ C0] RAX: 34fcaf02bc583100 RBX: ffffffff81618a7b RCX: 34fcaf02bc583100 [ 925.714012][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6d00 [ 925.714024][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 925.714037][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a7fa8 [ 925.714049][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 925.714061][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 925.714074][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.714086][ C0] CR2: 00007f95ed1b66c0 CR3: 0000000076bde000 CR4: 00000000003506f0 [ 925.714100][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 925.714110][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 925.714120][ C0] Call Trace: [ 925.714126][ C0] [ 925.714132][ C0] default_idle+0x13/0x20 [ 925.714149][ C0] default_idle_call+0x6c/0xa0 [ 925.714168][ C0] do_idle+0x1eb/0x510 [ 925.714190][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 925.714210][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 925.714238][ C0] cpu_startup_entry+0x43/0x60 [ 925.714257][ C0] rest_init+0x2e2/0x300 [ 925.714275][ C0] ? time_init+0x40/0x40 [ 925.714300][ C0] arch_call_rest_init+0xe/0x10 [ 925.714317][ C0] start_kernel+0x459/0x4e0 [ 925.714335][ C0] x86_64_start_reservations+0x2a/0x30 [ 925.714360][ C0] x86_64_start_kernel+0x60/0x60 [ 925.714384][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 925.714415][ C0] [ 925.930442][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 925.937415][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.96-syzkaller #0 [ 925.945249][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.955354][ T29] Call Trace: [ 925.958656][ T29] [ 925.961636][ T29] dump_stack_lvl+0x16c/0x230 [ 925.966357][ T29] ? show_regs_print_info+0x20/0x20 [ 925.971592][ T29] ? load_image+0x3b0/0x3b0 [ 925.976157][ T29] panic+0x2c0/0x710 [ 925.980081][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 925.985756][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 925.990300][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 925.996508][ T29] watchdog+0xf80/0xf80 [ 926.000707][ T29] ? watchdog+0x1e1/0xf80 [ 926.005100][ T29] kthread+0x2fa/0x390 [ 926.009200][ T29] ? hungtask_pm_notify+0x90/0x90 [ 926.014262][ T29] ? kthread_blkcg+0xd0/0xd0 [ 926.018879][ T29] ret_from_fork+0x48/0x80 [ 926.023326][ T29] ? kthread_blkcg+0xd0/0xd0 [ 926.027951][ T29] ret_from_fork_asm+0x11/0x20 [ 926.032762][ T29] [ 926.036134][ T29] Kernel Offset: disabled [ 926.040473][ T29] Rebooting in 86400 seconds..